last executing test programs: 3m25.236254412s ago: executing program 2 (id=1215): r0 = socket$inet(0xa, 0x801, 0x84) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r3) accept$inet(r0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, &(0x7f00000003c0)=0x10) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="8dd6ec830264a0c70b3dae2b8920fc6883c90087ce5caa7875b8e5eb8d8d433dd035082b4a11d295", @ANYRES16=r4, @ANYBLOB="010029bd7000fedbdf250200000008000100", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r6, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x68, r6, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x17}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x401}, @NL80211_ATTR_NOACK_MAP={0xffffffffffffff8d, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x38}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x400}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0xc000) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="414601", @ANYRES8], 0x4) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, 0x0) listen(r0, 0xffffffff) 3m24.961842858s ago: executing program 2 (id=1220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8}]}}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0xfffffffffffffec6, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001240)={0x24, 0x0, 0xb, 0x101, 0x0, 0x0, {0x1}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) socket$netlink(0x10, 0x3, 0x13) 3m24.555980386s ago: executing program 2 (id=1225): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1b0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000002780)=[{{&(0x7f0000000fc0)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x863c}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000001000)="c0fc56c561296a", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f00000014c0)="591a", 0x2}], 0x1}}], 0x2, 0x20040060) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x7, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0xa}, 0x90) 3m24.309426944s ago: executing program 2 (id=1230): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x700}]}}]}, 0x48}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0x28, 0x46, 0x0, &(0x7f0000000000)) r4 = socket$netlink(0x10, 0x3, 0x12) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r4) 3m23.992909224s ago: executing program 2 (id=1235): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14}]}}]}, 0x44}}, 0x0) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e22, 0x4c1bf541, @dev={0xfe, 0x80, '\x00', 0x31}, 0x5}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x40200, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000640)=[{&(0x7f0000000180)="580000001500c5d427323b470c45b45602067fffffff81004e22030d00ff0028925a01000100eaa57b000900800a0efffeff2ef1020000ffe203f03adcac4b74fffffffffffeffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r4) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x158, r5, 0x4, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x158}, 0x1, 0x0, 0x0, 0x40000}, 0x40080c0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="18000000001f3ae4dd35f436d239", 0xe}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8004) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000003200)={'ip6tnl0\x00', &(0x7f0000003180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, @empty, @empty, 0x0, 0x0, 0x1}}) 3m23.873364322s ago: executing program 2 (id=1237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000400)={'syztnl2\x00', r5, 0x700, 0x700, 0x80, 0xb, {{0x2d, 0x4, 0x3, 0x6, 0xb4, 0x67, 0x0, 0x3, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@end, @ssrr={0x89, 0xf, 0xc, [@dev={0xac, 0x14, 0x14, 0xb}, @local, @remote]}, @noop, @timestamp_prespec={0x44, 0x44, 0x20, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@empty, 0x7}, {@broadcast, 0x5}, {@private=0xa010100, 0x5}, {@broadcast, 0x5}, {@loopback, 0x2}, {@remote, 0xffffffff}, {@multicast2, 0x6}]}, @timestamp_addr={0x44, 0x3c, 0xf3, 0x1, 0x6, [{@rand_addr=0x64010102, 0x4}, {@multicast1, 0xfffffffe}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x67}, {@remote, 0x9}, {@loopback, 0x2}, {@broadcast, 0x13}, {@multicast2, 0x5}]}, @ssrr={0x89, 0x7, 0xac, [@local]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}}}) recvfrom$packet(r1, &(0x7f0000000240)=""/230, 0xe6, 0x10020, &(0x7f0000000340)={0x11, 0x8, r6, 0x1, 0x9, 0x6, @multicast}, 0x14) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000058c0)=@newtfilter={0x38, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r5, {0x9}, {0xffff}, {0x10, 0xbe5ac0276352ba80}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x40) (async) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r7 = socket(0x2a, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}, {0x0, 0x0, 0x4}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14004880}, 0x2000d8d0) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000aff020000000000000000010000000900010073797a310000000040000000030a010200000000005a9584520000000900030073797a310000000014000480080002400000000008000140000000050900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000004000480140000001100010000000000000000000000000a"], 0xb8}}, 0x0) 3m8.817099205s ago: executing program 32 (id=1237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000400)={'syztnl2\x00', r5, 0x700, 0x700, 0x80, 0xb, {{0x2d, 0x4, 0x3, 0x6, 0xb4, 0x67, 0x0, 0x3, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@end, @ssrr={0x89, 0xf, 0xc, [@dev={0xac, 0x14, 0x14, 0xb}, @local, @remote]}, @noop, @timestamp_prespec={0x44, 0x44, 0x20, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@empty, 0x7}, {@broadcast, 0x5}, {@private=0xa010100, 0x5}, {@broadcast, 0x5}, {@loopback, 0x2}, {@remote, 0xffffffff}, {@multicast2, 0x6}]}, @timestamp_addr={0x44, 0x3c, 0xf3, 0x1, 0x6, [{@rand_addr=0x64010102, 0x4}, {@multicast1, 0xfffffffe}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x67}, {@remote, 0x9}, {@loopback, 0x2}, {@broadcast, 0x13}, {@multicast2, 0x5}]}, @ssrr={0x89, 0x7, 0xac, [@local]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}}}) recvfrom$packet(r1, &(0x7f0000000240)=""/230, 0xe6, 0x10020, &(0x7f0000000340)={0x11, 0x8, r6, 0x1, 0x9, 0x6, @multicast}, 0x14) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000058c0)=@newtfilter={0x38, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r5, {0x9}, {0xffff}, {0x10, 0xbe5ac0276352ba80}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x40) (async) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r7 = socket(0x2a, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}, {0x0, 0x0, 0x4}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14004880}, 0x2000d8d0) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000aff020000000000000000010000000900010073797a310000000040000000030a010200000000005a9584520000000900030073797a310000000014000480080002400000000008000140000000050900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000004000480140000001100010000000000000000000000000a"], 0xb8}}, 0x0) 2m36.641996315s ago: executing program 4 (id=1825): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1}, {{@in6=@mcast1, 0x0, 0x6c}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0x23c}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async) close(0x4) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000100000000000a54000000060a090400000000020000000900010073797a30000000000900020073797a3200000000f524bdaa240001800a00010071756575650000001400028006000140000800000600024000000000140000001100010000000000000000000000000a00000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20040815}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x31}}}}, [@NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="579bcf398b06005d32aa6077a886a74df3d0fcf02f399c1a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="24cf4713299967bd15bf44cad1f4d266b29e2a4135a412b2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7282cdb224050171ea757aea781d4160e9223cc0312d38d6"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5f3b5d542091777612684837dbc0ec47ea67acb692453dd2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5bd58c80a1143827"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="0d46293065a44d78d964d634403ac727"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="204183f74d05c885801d03a2488d3fd4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="32c5877eef25cfd5a4dd14ad07749005"}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b27375be03440892"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "00e200"}]}]}, 0x104}}, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 2m36.476224607s ago: executing program 4 (id=1826): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000002000876154694933d200000000125e64a35a1f65000001adfc2bd67b04d3001713e4bad12c872081d7391f30ccb9881f0fc0dcd37ddf9037d51cff66833eff40bf55ea"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m36.291614641s ago: executing program 4 (id=1829): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) socket(0x2d, 0x2, 0x0) (async) r1 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0xd4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, 0x6, 0x80}, &(0x7f0000000200)=0x90) r3 = socket(0x2b, 0x80801, 0x1) shutdown(r3, 0x1) (async) shutdown(r3, 0x1) r4 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0x20, 0x8, [0x0, 0x0, 0x2a10, 0xc, 0x5, 0x0, 0x0, 0xffffffff]}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f0000000600), 0x4) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, 0xfffffffffffffffe, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r6}, &(0x7f00000004c0), &(0x7f0000000500)=r5}, 0x20) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r4) (async) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r4) sendmsg$inet_sctp(r1, &(0x7f00000002c0)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x10, @loopback, 0x9}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="220458535b5c0b4393bbf7588d9035e228c1143a1db71b4595da07124ed16280114600971a8d3c48d8ccf181a39d4313c026cbd32d9f", 0x36}], 0x1, &(0x7f0000000240)=[@init={0x18, 0x84, 0x0, {0xe, 0xfffe, 0xf5e, 0x4}}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @init={0x18, 0x84, 0x0, {0xfff, 0x4, 0x8c3, 0x1}}, @init={0x18, 0x84, 0x0, {0x1ff, 0x51, 0x600, 0x4}}, @sndinfo={0x20, 0x84, 0x2, {0xd, 0x200, 0xfffff001, 0x100, r2}}], 0x80, 0x4008804}, 0xc1) (async) sendmsg$inet_sctp(r1, &(0x7f00000002c0)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x10, @loopback, 0x9}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="220458535b5c0b4393bbf7588d9035e228c1143a1db71b4595da07124ed16280114600971a8d3c48d8ccf181a39d4313c026cbd32d9f", 0x36}], 0x1, &(0x7f0000000240)=[@init={0x18, 0x84, 0x0, {0xe, 0xfffe, 0xf5e, 0x4}}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @init={0x18, 0x84, 0x0, {0xfff, 0x4, 0x8c3, 0x1}}, @init={0x18, 0x84, 0x0, {0x1ff, 0x51, 0x600, 0x4}}, @sndinfo={0x20, 0x84, 0x2, {0xd, 0x200, 0xfffff001, 0x100, r2}}], 0x80, 0x4008804}, 0xc1) connect$qrtr(r1, &(0x7f0000000300)={0x2a, 0xffffffffffffffff, 0x4001}, 0xc) sendmmsg$inet_sctp(r1, &(0x7f0000000000), 0x0, 0x28000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x6}]}, 0x28}}, 0x0) 2m35.989086079s ago: executing program 4 (id=1831): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x4d}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x27}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) 2m35.66329052s ago: executing program 4 (id=1837): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x3c, 0x32, 0x20, 0x70bd24, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socketpair(0x10, 0x5, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000100)=""/77, &(0x7f0000000040)=0x4d) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r5 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f00000002c0)) socket$packet(0x11, 0xa, 0x300) (async) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001"], 0x7a) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x20000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x2, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x300, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x1, 0xb}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040f0}, 0x0) (rerun: 64) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$inet6(0xa, 0x3, 0x8000000003c) 2m34.784554203s ago: executing program 4 (id=1850): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 2m19.722822338s ago: executing program 33 (id=1850): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 2.352813161s ago: executing program 0 (id=3701): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x28, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@getchain={0x34, 0x66, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x9, 0xf}, {0xfff3, 0x2}, {0x4, 0xe}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x800}]}, 0x34}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4003, 0xfffffe00, {0x0, 0x0, 0x0, r8, {0x8}, {0x6}, {0x1, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4003, 0xfffffe00, {0x0, 0x0, 0x0, r8, {0x8}, {0x6}, {0x1, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) sendmsg$nl_xfrm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe88000000000000000000000013e8bf4e9954892e2528f713000001fcf121f3200000000000000000000001000107144e230005000000003a00000011ff2677ecd5af0495f734b9998a076657ac6ee01fc671cb3a23468e2a52db76b94fbc875eed8570d42877735769b945b3ea4c63ed9cce5430840b8d07956ec3ff72373babe5cae0174d5130901bcce046d80306565b24c7acc3e9f70a3b1af0b148b5c15829dd21ed2f97e7c76a8a5d94a2b53c2e6be08ff375990c2f7c5e1e9caaaa1548827fdd08d26e7b165cf56c502dd8a44f9266f6eff551b1f474e2e15df6cc23b86f22f0cc32c536af16136ec6a4de5d93d79e9dab56de00578f147f6b40bdfc634c9845a67ee6d48a79d52d2a39890e8ddfe1aa4d25c8d9b0aca1eacba456eecff70084d4ea13456614143527a6b29b39f978eec428d8ec75ad8ebcaff57c1fd5b025955f364561b57a6d76ef40ebdff0f46f954e2c9a45b053ed39d6644792eec03ff3524078889bb3faa4614aee697bca3c76297944c03eb953fb3cf306fadb13ca6304b820f9d41a1e00"/421, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a"], 0x38}}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a"], 0x38}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) (async) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r13, 0x58, &(0x7f00000002c0)}, 0x10) 1.837575799s ago: executing program 0 (id=3707): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 1.680407099s ago: executing program 0 (id=3709): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000180)='wg2\x00', 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x6, r2, 0x2, r0}, 0x10) 1.576821892s ago: executing program 3 (id=3710): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000180)=@ethtool_rxnfc={0x29, 0x7, 0x5, {0x10, @sctp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x14}, @multicast2, 0x4e23, 0x4e23, 0xb}, {0x0, @random="11e508bee0e3", 0x9, 0x8, [0x4, 0xffffff90]}, @usr_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x100, 0x14, 0x1, 0x9}, {0x0, @random="204a59a02eaa", 0x6, 0x8, [0x4, 0x7ff]}, 0xfffffffffffffffc, 0x2}}}) socket$tipc(0x1e, 0x2, 0x0) 1.554877192s ago: executing program 0 (id=3711): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x142, 0x142, 0x4, [@int={0xc, 0x0, 0x0, 0x1, 0x0, 0x1f, 0x0, 0x79, 0x3}, @typedef={0xa, 0x0, 0x0, 0x8, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0xfffffffc}}, @enum64={0x8, 0xa, 0x0, 0x13, 0x0, 0x5, [{0x8, 0x80, 0x4}, {0x6, 0x1800, 0x4}, {0xf, 0x1, 0x6f2de5f}, {0x5, 0x7, 0x3}, {0x4, 0x10001, 0x8}, {0xc, 0x1, 0x9}, {0x10, 0x8, 0x100}, {0x6, 0x2, 0x47d8}, {0x1, 0x65e4e82f, 0x5}, {0x10, 0x2, 0x3fd}]}, @datasec={0x4, 0x8, 0x0, 0xf, 0x2, [{0x1, 0x9, 0x7ff}, {0x1, 0x2, 0x2}, {0x5, 0x5, 0xb}, {0x2, 0x2000007, 0x2}, {0x4, 0x7f, 0x2}, {0x5, 0x1, 0x1}, {0x3, 0x40, 0x5}, {0x4, 0x2, 0x3ff}], "97fc"}, @enum={0x7, 0x2, 0x0, 0x6, 0x4, [{0xd}, {0x8, 0x2}]}]}, {0x0, [0x30, 0x0]}}, &(0x7f0000000180)=""/92, 0x160, 0x5c, 0x1, 0x8, 0x10000}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x1e, &(0x7f0000000840)={0x16, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffedc, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DREG={0x8, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x9, '\x00', 0x0, @sk_msg, r0}, 0x94) 1.41519146s ago: executing program 6 (id=3715): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xf}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x101, 0x0, 0x7, 0x7, 0xfffffff0, 0xa, 0x12, 0x11, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008881}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xb}, {0x7, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/pid_for_children\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215e8000) (async) r3 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000240)=0x7db7, 0x4) (async) sendto$inet(r3, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x0, &(0x7f0000000040)={0x2, 0xffff, @dev}, 0x10) (async) socket(0x840000000002, 0x3, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x4, @link_local, 'lo\x00'}}, 0x1e) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008001}, 0x24004880) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000a000008000400100640f40700b3fac8ef0000"], 0x30}}, 0x0) 1.385058163s ago: executing program 5 (id=3716): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000077c0)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x10}}, @TCA_FW_MASK={0x8, 0x5, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0xfffffffffffffebd, &(0x7f00000000c0)={&(0x7f0000000440)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x8010) 1.295741624s ago: executing program 3 (id=3717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x170b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xb, 0xb}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x10, 0x7, 0x3d58, 0x1, 0x1, 0x3}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x170b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xb, 0xb}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x10, 0x7, 0x3d58, 0x1, 0x1, 0x3}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x3, 0x12}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x3, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000340), &(0x7f0000000080)=@tcp, 0x1}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200)=0xffffffffffffffff, 0x12) sendfile(r8, r7, 0x0, 0xbdc4) (async) sendfile(r8, r7, 0x0, 0xbdc4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) (async) r10 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r10) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r12, &(0x7f0000000000)={0x30000011}) close(r13) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)={0x158, r11, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x62}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5088}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1400}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000042}, 0x24048005) sendmsg$DEVLINK_CMD_PORT_GET(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r9, 0x1, 0x70bd2d, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}}, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_GET(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r9, 0x1, 0x70bd2d, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x17c, r9, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x11}, 0x240080c4) (async) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x17c, r9, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x11}, 0x240080c4) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000020000100ecc2000000000000020020000000000100000000140003006c6f0000000000000000000000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x88000) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.280346227s ago: executing program 0 (id=3718): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000022004106"], 0x1c}], 0x1}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_EVENT={0x8, 0x2c, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.277674647s ago: executing program 6 (id=3719): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r0, 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000280)=0x1, 0x4) (async, rerun: 64) sendmsg$802154_dgram(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20040001}, 0x20004080) (async, rerun: 64) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000040)=0x1, 0x4) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) (async) recvmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000500)=@x25, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/31, 0xdacca170ed1d3557}, {&(0x7f0000000740)=""/184}, {&(0x7f0000000580)=""/128}, {&(0x7f0000000800)=""/123}], 0x0, &(0x7f0000000880)=""/108}}], 0x542, 0x0, 0x0) 1.226057835s ago: executing program 1 (id=3720): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000040)=0x28) ioctl$FIOCLEX(r0, 0x5451) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x22, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1c0, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x7}, @alu={0x4, 0x1, 0x4, 0x8, 0x6, 0x50}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x3}, @map_idx_val={0x18, 0xe, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @ldst={0x1, 0x1, 0xa5291bcc6c68b0ea, 0x3, 0x4, 0xfffffffffffffff0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xb, 0xf9c9, 0x101}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x4114050, r1, 0x9a94a000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={r0, 0x7, 0x0, 0xe}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000003c0)={0x0, 0x0, {}, {0x0, @struct, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000007c0)={0x0, 0x8000000000000000, 0x248b, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000bc0)={0x0, 0x8, 0x0, [0x8643, 0x62f1, 0xb3, 0x5, 0x5], [0x65e2, 0x1, 0x3, 0x4, 0x2c, 0x1, 0xf370, 0x1, 0x6, 0x2, 0x3, 0x101, 0x1c45, 0x6, 0x3, 0xb, 0x3ff, 0x3, 0x6, 0x3, 0x4, 0x1, 0x8ac8, 0xd, 0x0, 0x8000000000000001, 0x6, 0x0, 0x5, 0xd, 0xfff, 0x3, 0x1, 0x6, 0x5, 0x8, 0x3, 0x6, 0xca69, 0x91, 0x7, 0x7ff, 0x8, 0xca2, 0x0, 0x94ec, 0x7fff, 0x200, 0x7, 0x9, 0x7, 0x5, 0x7fff, 0x2, 0x1, 0xfffffffffffffffd, 0x802, 0x6d9f, 0x8, 0x8001, 0xffffffff80000001, 0xfffffffffffffffb, 0x8, 0x8, 0x10001, 0x3, 0x8, 0x1, 0x1, 0xff, 0x5, 0x4, 0xd06, 0x81, 0x6, 0x7, 0x0, 0x2, 0x200, 0x9, 0xbc08, 0x7, 0xf, 0x8, 0xb9f0, 0x9, 0x81, 0x2, 0x7, 0x3, 0x2a72, 0x0, 0x5a1, 0x4, 0x40, 0xffff, 0x1, 0x8, 0xc6c, 0x401, 0x6, 0x7f, 0x2f1, 0x4, 0x8777, 0x6, 0x7deee0b3, 0x7fffffff, 0x0, 0x1, 0xa00000000000, 0x80000001, 0x4257, 0x993f, 0x500000, 0xa1f9, 0x6, 0x6, 0x8, 0xa, 0x4]}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000001000)={0x8, 0x0, {0xc, @struct={0x9294, 0x10}, r3, 0x329, 0x11, 0xffffffffffffff18, 0x200, 0x0, 0x21, @struct={0xd2, 0x40}, 0x7ff, 0xffffffff, [0x9, 0x3, 0xf, 0x3, 0x3, 0x4]}, {0x8, @struct={0x1, 0x50b}, r4, 0x8, 0x10, 0x7, 0xff, 0x80000000, 0x409, @usage, 0x7, 0x1b4a, [0x7, 0x5, 0x9, 0x4, 0x0, 0x3]}, {0x60c, @usage=0x1, r5, 0x5, 0x0, 0x35, 0x2, 0x9, 0x81, @usage=0x40, 0x8, 0x545, [0x100000001, 0x4b83, 0xc, 0xfffffffffffffffc, 0x1, 0x5]}, {0xffff, 0xfffffffffffffffb, 0x8}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001500)={@fallback=r2, 0x20, 0x0, 0x4, &(0x7f0000001400)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001480)=[0x0], &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x12, &(0x7f0000001580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x80, 0xc, 0x8, 0x5, 0x6}]}, &(0x7f0000001640)='syzkaller\x00', 0xb, 0x90, &(0x7f0000001680)=""/144, 0x41100, 0xa, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001740)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001780)=[r2, r2, r2], &(0x7f00000017c0)=[{0x3, 0x3, 0x6, 0xc}, {0x1, 0x3, 0x6}, {0x0, 0x3, 0xf, 0xc}, {0x2, 0x2, 0x6, 0x8}, {0x4, 0x2, 0xd, 0xa}], 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001540)={@fallback=r1, r2, 0x1d, 0x1, r1, @void, @value=r8, @void, @void, r7}, 0x20) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000002d00)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000002d40)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@private}}, &(0x7f0000002e40)=0xe8) r11 = getgid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000002e80)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002ec0)={{{@in6=@private2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000002fc0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003000)={0x0, 0x0, 0x0}, &(0x7f0000003040)=0xc) r15 = getpid() getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000003080)={{{@in6=@private0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f0000003180)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000031c0)={0x0, 0x0, 0x0}, &(0x7f0000003200)=0xc) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000003240)=0x0) r19 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000003280)={{{@in6=@private0, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000003380)=0xe8) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000033c0)={0x0, 0x0, 0x0}, &(0x7f0000003400)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000003a80)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private1}}, &(0x7f0000003b80)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003bc0)={0x0, 0x0, 0x0}, &(0x7f0000003c00)=0xc) r24 = gettid() sendmmsg$unix(r2, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001900)="ddb5f36bc1bf55ea645b74b4cc9f3a9288612293a7b13a277ebb7d16d4224cfdf7d2d1e6bc0fdecd12861afb550a91d8ccec67c21c465e7eb0ac86e4b425a28c19fa2b74f4910a26e68afa588b07fd86d5dc85a423d15882be82b21a6d69cc59dac3cf1cc7a6c958ec30f6286092ad4667fe61243caf08d25a81c1b88f4d7744af31dcc96440997758737024037563a5ecb42e777a293ded978b522635fabeb7339e0dc59fdf641c14ab83eb3dd8b9b6b38004b6ba", 0xb5}, {&(0x7f00000019c0)="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", 0x1000}, {&(0x7f00000029c0)="ff31ffcebab579848645b61f09adde63ca0f651d5e8cb60503feb66592daaed5ca9fc8c37944e97d7d5ce09f0e87a3efe5db55f7c4fae164c2e9aef635b8fb4d07ee32d6e0b6c246f03926f658103f40ba49543ab8b71375fe6e3a54b1a1ddc3602b2b4fe3e7432bb0f1d332585864112ee228f460467f1227630a8d5161b0a8ff13366b739aa9e7b75c859e0c7990067a977845dbb677f6f934895784e9f3cdf40a5dcd1effe5e92bea3e4f1e46e73cad7a1320899f587ed430869b9c3641185343bf4a21694368851f7db392fe56c6cd5a16156e67487d1e1680cdb54c53b6876d48dbd2d9efb65b13d60677", 0xed}, {&(0x7f0000002ac0)="d532382e771a781b4ab2c9b27757acb89cf6008e4f3f829c9546bed5f7256dd9cee5", 0x22}, {&(0x7f0000002b00)="03e398f4d3b240b7dddecfd3bc4972d82e89e30ed6524712249876dd1e1079cb717e902e9ba54592206fe1749ff8b2b906e45531e7b774e5e3da3f1045dce559bc1bc32db7b8a197db5f6ecfee72a2dc273d600a77648c31bfaca197e67273cd54f7088514625305eb65f47aea888a30fa645ae69016c022723cfd837f993f1a564689d042e092bdadea2342860fe4c0b895bf26ddeb50477a5d9c132401e0fb90fa7bb7d23f10637165bf831fbdc6191729f29ae22550ae6cc201a1", 0xbc}, {&(0x7f0000002bc0)="d4baba249c91f48b5bf4fc675e97c0399fd6d03ad4e474bd569cb935ff7014b860697712c90c83154ef178dac8718da2b2a6b339c9b3fa6d6e1aca689757a2dd2adb06efe854dbad711aa7ee5f5ba6bc2dde7a3c732a560bbe4a1ea7f02d88096b827a773474a821a53cff4b7281a860e1f9cd400755e0daa263cd4bf2166435e79ad991b1373e4119e9d0da710f13979ad241a209e3d6c14f753f2a7e350cd02f932d405fc1dcf767e09476415faa", 0xaf}], 0x6, &(0x7f0000003440)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r18, 0xee01, r19}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r20, r21}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x100, 0x40800}}, {{&(0x7f0000003540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003940)=[{&(0x7f00000035c0)="df399df0d835390b92ec645c9ec7d6a53ab24239bf4742bfcfdf0a83cebdfd7e2936441771f310e06d6592e9ee5c9841ae16a6b0900872b462b5edafef103dfd0ebc9c5486d6f3a75aad837304e77ed2403c39c4b2c10a753c18bf13c0f5b14511a2aa2e6bfebf6a8fa0fd0366b0d53d9206767d0192e01d04f26361a82f3f0c08b010ebf4b02f7ec8b14ea81147001629f269", 0x93}, {&(0x7f0000003680)="02e20e20c912d91427460b4d63c62e93decced3e7572fcb7b2c1e4d1d0907b5920c2b21d7d500e7523fa66fcbcae16bade5fccc7e2d8bed5363f6fd113677930abafbfd3ae2b1b4ac9f33eb2ba6f2a764f55f1e44ea95e977c664ffe6a352dfa1ac74c3c2256002ecedf9c6035", 0x6d}, {&(0x7f0000003700)="aaaec53de846532ce9f1a0b068301d1994fae88a5344f01508354f266bf90b34aca87240bab35e1a8dcd5f76bb57769836a568b9deb0a832494d97280c834dc8cb6aed9b57ea9c947cd4bed65770821a0453daf79fa9b1c3afbd47250379815d2e957bd381879754965e592fae4358bc5464da05535c1828c5acc9ec50f51f7314034e06f74f5c1f2e16e9a4a027b8be1f8dbac0589813bf875c545daaae16fe6a0a3fb07bff40ff6902d7238f6eebb6fd2e1b85", 0xb4}, {&(0x7f00000037c0)="1a630964a8183dd4076886ca1fc9453084bd996b7b20320aaf0ed256d71ff4d964ea6f48c9b46ea14ebbb62ae034e88af0c873a45e2d14844269205c48169dc5c8d9700c0373d36d9cd18ad482a3a91a9fee0e6e6dfbb3ebac2966d253dd168c6612b19985ae21a859304503d7a6539b62aa590fc583a1400b45b554b8d1063dad055750faca25bf06a631aed4e8320d78bb11e8465e1e2418b74603beb05a5559275c0e5bc6", 0xa6}, {&(0x7f0000003880)="2697403e533d708768ea6f895ec2c0c31cfe748657504494d3c0949e471f36689dc1c96def41b9b16974c26f9ce1fd922776b83bb5e75f991d3cd285f826fdac657a3b3d345d7f9192c7988e215d702074a723fec43cf5f2457ba48251fb6daa218ccf198848d67b57f60fdb261ad0b5256c792d8072756f91c6497c6715e23a2ed784a480313cda7b1361b18d0fdca431cad6f3f20dfcb137d3c007255ba8630e575ed2bb1354778abd41dc94ef2d8d5e84a852d2b21e3d9a550a", 0xbb}], 0x5, 0x0, 0x0, 0x8054}}, {{&(0x7f00000039c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003a40), 0x0, &(0x7f0000003e00)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r22, r23}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {r24}}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, r1, r0, r2, r6]}}], 0xa0, 0x80}}, {{&(0x7f0000003ec0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000040c0)=[{&(0x7f0000003f40)="a30e47ae707b52f3330d65b40ff650761112a6912adc40f7622eb881ee65591a68f6951429a372980336dcd706d12b5d26c17d9c62ce4ea90500d632ee4b371a8e760d0932cf4d998db266d8fa4739deb9f182b0bc7fb13f26f9762a2058c98f", 0x60}, {&(0x7f0000003fc0)="64a275117a45884feac7c56ed2b382fc3698d06102916a99f0e44dba98353d7a7fbae6c7e71ea7fdd2cd7e947cc3753c22c047103577637029b32d0175b5c45e9fbbda63d92b102f14e747faee1802610effd3c26a7baba3387c37da5a9c366799407fc518576d8919bf624c5fc866d89d2a75d2f5cbf0644de53df173fc125583d86981642f53da0fea907e41cdd7b45b71af2758dc76afe058ff6411a1cc397d0226cc3abd26838acf5e9269d1c482eed16f3f8ee82552e05991484be3bc333260436589cddd86ae91c98b74ea1e1b028d5624e50d73c7a3218238404061ef5420074e7fe5e07cea939fd847f732a8d7e0", 0xf2}], 0x2, 0x0, 0x0, 0x4c800}}], 0x4, 0x800) 1.061441545s ago: executing program 0 (id=3721): r0 = socket(0x10, 0x803, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000380)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x0, 0x2}, 0x1c) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r5) sendmsg$alg(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x840}, 0x4040880) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002740)=@newchain={0x12a0, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xe}, {0x9, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x40c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x6, 0xffffffc0, 0x0, 0x5, 0x48d5, 0x6, 0x8, 0x8, 0x6, 0xd, 0x8, 0x933, 0x6, 0x1, 0x7, 0x1, 0x872, 0xbf, 0x0, 0x145, 0xfffffffa, 0x2, 0x8, 0x6000000, 0x9, 0xd, 0xc64, 0x3, 0x1c000, 0x2, 0x3, 0x9, 0x8, 0x5, 0x0, 0x8ec, 0x6, 0x6, 0x2, 0x2, 0x4, 0x8, 0x2, 0xbda, 0x7fff, 0x8db, 0xcb56, 0x0, 0x4, 0xb1a, 0x1, 0x8, 0xfd77, 0x1, 0x4, 0xd8fd, 0x80000001, 0x5, 0x8, 0x2, 0x7ff, 0x3, 0x32a, 0x1, 0x8, 0xc, 0x1, 0x5, 0x0, 0x2, 0x2, 0x5, 0x0, 0x1, 0x4, 0xc0, 0xd, 0x2c, 0xe, 0x2, 0x2, 0xe109, 0x80000001, 0x5e, 0xfffffffb, 0x297, 0x3, 0x81, 0x6ee, 0xce8, 0x7fffffff, 0x7, 0xd, 0x42e, 0x9, 0x8, 0x3, 0x8, 0xfffffffc, 0x5, 0x6, 0x3, 0x5, 0x6, 0xd7d8, 0x35, 0x1, 0x8, 0x6, 0x81, 0xb4, 0x80000001, 0x1, 0x3ff, 0xffff33f7, 0x4, 0x6, 0x10000000, 0x5, 0x9, 0x5, 0x7, 0x7, 0x0, 0x52e, 0x5, 0x8, 0x0, 0x0, 0x1, 0x4, 0x4, 0x1, 0x9, 0x1, 0x5, 0x6, 0x8000, 0x10000, 0x4, 0xffff2237, 0x3, 0x400010, 0xe, 0x5, 0x2, 0x8, 0x7, 0x67e, 0x7, 0x200, 0x6, 0x4, 0x5, 0x9, 0x5, 0x39, 0xe71, 0x6, 0x3, 0x9, 0x2, 0x7, 0xf34, 0xb, 0x0, 0x400, 0x7ef4, 0xa, 0x265, 0x80000001, 0x8, 0x48, 0x7, 0x5, 0x46d, 0x8f, 0x8, 0x7, 0x7, 0x8, 0x8, 0x1, 0x6, 0xdb25, 0xb41c, 0x0, 0x5, 0x4, 0x1, 0x9, 0xe, 0x9, 0x1, 0xd5, 0x4, 0x3, 0x9, 0x2, 0x5, 0x4, 0xf1a, 0x7, 0x2, 0x95, 0x5, 0x993, 0x9, 0xe, 0x7, 0x91, 0x4, 0x400, 0x1, 0x1, 0x3, 0x4, 0x1, 0x2, 0x8001, 0x819, 0xb, 0x8, 0x800, 0x7f, 0x9, 0x2, 0x1, 0x0, 0xffffffff, 0x1, 0x2, 0x1, 0x0, 0x0, 0x9, 0x6, 0x2, 0x2, 0x2, 0x1b328f44, 0x4, 0x6, 0x9, 0x1, 0x0, 0x8, 0x1, 0x3, 0xfffffde0, 0x7, 0x4, 0x6, 0x80000001, 0x7]}]}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0xe58, 0x2, [@TCA_CGROUP_ACT={0xe54, 0x1, [@m_pedit={0xe50, 0x1b, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4, 0x7, 0x6, 0x4, 0x8000000}, 0x9}, [{0x40, 0x9, 0x5, 0x1, 0x0, 0x2}, {0xffffff5c, 0x7, 0x0, 0x8, 0x9, 0x8}, {0x100, 0x100, 0x80, 0xbbd3, 0x0, 0x6}, {0x3, 0x7, 0x252, 0x5, 0x1ff}, {0x9, 0x7, 0xfff, 0x2, 0xd, 0xfffffffe}, {0x9, 0x9, 0x9, 0x9, 0x1, 0x3}, {0xd2, 0x0, 0x5, 0x10000, 0x7, 0x6}, {0xfffffff8, 0x2, 0x100, 0x3, 0x8, 0x1}, {0xffffff98, 0x40, 0x8, 0x5, 0x40, 0x4}, {0x9, 0xe, 0x7f, 0x2, 0x10007b, 0x4}, {0xeb9d, 0x31d, 0x2, 0x31, 0x85a5, 0x9}, {0x0, 0x5, 0x31547498, 0x6, 0x2, 0x9}, {0x400, 0xfffff4ad, 0x9, 0x52, 0x419d, 0x3}, {0x5, 0xac8, 0x9, 0x116, 0x80000000, 0x2}, {0x4, 0x2, 0x4, 0x400, 0x101, 0x68571a57}, {0xffffffbb, 0x4, 0x401, 0x642d495a, 0x5, 0x4}, {0x0, 0x6, 0x5, 0x40, 0x7, 0x6}, {0x1, 0xfff, 0x2, 0x6, 0x2, 0xffffffff}, {0x0, 0x3, 0x10000, 0x6d}, {0xf, 0xd, 0x6, 0x7, 0x40, 0x381}, {0x80000001, 0x800, 0x6, 0x40d, 0x8, 0x2}, {0x944, 0x7, 0xfffffffc, 0x401, 0x6, 0x3}, {0x1, 0x0, 0x918, 0xfffffffd, 0x80, 0x200}, {0x9, 0x40, 0xb40, 0x800, 0x4, 0xf}, {0x784, 0x0, 0x42, 0x14d, 0x8c}, {0x8001, 0x6, 0xfffffff3, 0xfffffe00, 0x3, 0x1}, {0x1000, 0x4, 0xffff, 0xffffffff, 0x5, 0x4}, {0x1, 0x9, 0x5d5b, 0x40, 0x4, 0xb765}, {0x7, 0x3, 0x4, 0x4, 0x100, 0x1}, {0x1, 0x5dc, 0x800, 0x1b0, 0xfffffff8, 0x3d2d}, {0x2, 0x8, 0x5, 0x2, 0xb, 0xa8}, {0xc0, 0x22f63e74, 0x9, 0x4, 0xf, 0x6e}, {0x2c89, 0x2, 0x101, 0x5, 0x30, 0x7}, {0x0, 0x0, 0x80, 0x2, 0x61e9, 0x2}, {0x8, 0xffff, 0x8, 0x5, 0x7, 0x4}, {0x7, 0x9, 0x71, 0x3, 0x2, 0x7}, {0x800, 0x8, 0x6, 0x3, 0x1, 0x4}, {0xcf9, 0x4, 0xaad, 0xb0, 0x1, 0xedfb}, {0x7, 0x8, 0x5, 0x7f, 0x6, 0x4}, {0xe, 0x3, 0xf, 0x6061faa0, 0x8, 0x3fe0000}, {0x80000000, 0xdbf3, 0x80000001, 0x1000, 0x2, 0x9}, {0x2, 0x2, 0x7, 0x7, 0xfffffffa, 0x8}, {0x4, 0x7fff, 0x8, 0x101, 0x3, 0x6}, {0x0, 0x7f800000, 0x75, 0x2, 0x3e9, 0x3}, {0x9, 0x1, 0x7, 0x6, 0x5, 0x190b}, {0xe, 0x1000, 0x2, 0x6, 0x3, 0xd5}, {0x8, 0x75, 0x7ff, 0x7398, 0x6, 0x10001}, {0xfffffff7, 0x4, 0xfffffff9, 0x4997, 0x7fffffff, 0x200}, {0x4, 0x101, 0x7f, 0x401, 0x9, 0x7f}, {0x1, 0xf, 0xe, 0x2, 0x8, 0xe410}, {0x7, 0xe, 0x101, 0x400, 0x8907, 0xa04}, {0x2, 0x1, 0xc, 0xc, 0x3, 0x9}, {0x5, 0x0, 0x4, 0x1, 0x80000001, 0x3}, {0xa98f, 0x4, 0x9, 0x800, 0xd3, 0x3}, {0x9, 0x0, 0x6, 0x9, 0xd9, 0x7af7}, {0x5, 0x6, 0x2d8, 0x2, 0xefc, 0x80000001}, {0x10c, 0x3, 0x2978, 0x8, 0x8, 0x4}, {0x8, 0x8, 0x3, 0x3, 0xffff7fff, 0x1}, {0x0, 0x80, 0x5, 0x0, 0x4, 0x8}, {0xfffffffc, 0xfff, 0x6, 0xe, 0x7fff, 0xb11}, {0x7d7, 0x5, 0x7, 0x6, 0xb, 0xfffffffb}, {0x9, 0x800000, 0xfffffffd, 0x6, 0x5, 0x6}, {0x9, 0x0, 0x7, 0x7fff, 0x40, 0x5eb}, {0x10001, 0x1ff, 0x0, 0x4, 0x6, 0xafe5}, {0x7ff, 0xffffffff, 0x7fffffff, 0x3, 0xfffffffc, 0x4}, {0xfff, 0x100, 0x81, 0x8001, 0xa066, 0x1ff}, {0x3ff, 0x236, 0x5, 0x7fffffff, 0x4, 0x7ff}, {0x3, 0xc57d, 0x33400000, 0x1, 0x2, 0xfffffffa}, {0x8, 0xffff, 0x10, 0x101, 0x844, 0x28}, {0x0, 0x8, 0x1, 0x6, 0x7, 0x5}, {0x200000, 0x1, 0x6, 0xbc, 0xa4e, 0x7}, {0x1, 0x10, 0xa, 0x6, 0x3, 0x3}, {0x5, 0x3, 0x7ff, 0x5, 0x82bf, 0x1}, {0xe75, 0xfffffff8, 0x5, 0x0, 0x8, 0x9}, {0x0, 0x2, 0x5, 0xf522, 0x1a23, 0x29}, {0x6, 0xd9b4, 0x1, 0x3, 0x5, 0x10001}, {0x80, 0xc1b0, 0x80000001, 0x2, 0xffffffff, 0x80000000}, {0x10001, 0x5, 0x5fc, 0x1176a235, 0x6, 0x2fd9}, {0xbd, 0xff, 0x101, 0x0, 0x6, 0x37f}, {0x4, 0x3fb, 0x60d31cf6, 0x7, 0x7ff, 0x38000000}, {0x6, 0x7, 0x1, 0x7, 0x4}, {0x8, 0x5f2d, 0x4000000, 0x6, 0xd, 0x1}, {0xf6, 0x1, 0x5, 0x200, 0x4, 0x4}, {0x0, 0x3fffc0, 0x6, 0xc, 0x5fcd, 0xef3}, {0x0, 0x9, 0x0, 0x54, 0x12, 0x94}, {0x0, 0x0, 0x5, 0x80000000, 0x9, 0xf545}, {0x0, 0x80000000, 0x1000, 0x0, 0x6}, {0x7f, 0x0, 0x9, 0x0, 0x5}, {0x200, 0x3, 0x5, 0x4, 0x0, 0xd}, {0x685, 0x787, 0xd, 0x4, 0x4, 0x3}, {0xd33b, 0x0, 0x7, 0x1, 0x4, 0xc0}, {0x1, 0x8000, 0xfffffff1, 0x7ff, 0xbab, 0xb9}, {0xb, 0x4, 0x7e2d03df, 0x9, 0x0, 0x5}, {0x0, 0x1, 0x5, 0x176, 0x6, 0x7}, {0x4, 0x2879f55c, 0x7, 0x3, 0x3, 0x739}, {0x800, 0x79a, 0x3, 0xffff7fff, 0x8, 0x5}, {0x5, 0x6, 0x1, 0x80000001, 0xfff}, {0xb000, 0x0, 0x1ff, 0x4, 0x3, 0x9}, {0x4, 0x1aca, 0x2, 0xb1, 0x5, 0x5}, {0x1bb, 0x40, 0x8, 0x9, 0x80000001, 0x800}, {0x5, 0x81, 0x3a5, 0xe6, 0x2, 0xbd9}, {0x27d, 0x87, 0x6, 0x3, 0x1, 0x42}, {0x7f, 0x4, 0xffff, 0x8000, 0x0, 0x1}, {0x0, 0xc, 0x8, 0x4, 0x7, 0x466}, {0x7, 0x176, 0x40, 0x2, 0x76, 0x9}, {0x9, 0xb204099, 0x800, 0x8000, 0x9, 0x6}, {0xb, 0x40, 0x101, 0x1, 0x4, 0x3}, {0xa, 0x1, 0x7, 0x0, 0xfffffdaa, 0x1}, {0x5, 0x5, 0x6, 0xffffffff, 0xd5b, 0x3}, {0x0, 0x80, 0x7ff, 0xd, 0x5, 0x2}, {0xfffffff0, 0x2, 0x7, 0x3, 0x2, 0x7fffffff}, {0x2003, 0x400, 0x3, 0x8, 0xfffffffb, 0x6}, {0x58c2, 0x4, 0x26, 0xffffffff, 0x9, 0x7}, {0x2, 0x7, 0x436, 0x8, 0x7, 0x6}, {0x800, 0xff07, 0xffffffb4, 0x5, 0x963, 0x2}, {0x2, 0x6, 0x8, 0xc, 0x80000001, 0x4}, {0x3, 0x2, 0xfffffffb, 0x8, 0x6, 0x140}, {0x2, 0x5, 0x10001, 0x8, 0x2, 0x2}, {0x6, 0x5239, 0x6, 0x974f, 0x4, 0x2}, {0xff, 0x9, 0x10, 0x800, 0x2, 0x8000}, {0x7, 0x8, 0x0, 0x7fff, 0x7f5f, 0x4}, {0x1000, 0x6, 0xfffffffc, 0x5, 0x3, 0x81}, {0x0, 0xe196, 0x4, 0x800, 0x1, 0x94}, {0x80000001, 0x217021e6, 0x2702ff34, 0x9b40, 0x3}, {0x57cf8ce0, 0x2, 0x76, 0x80000000, 0xe, 0x7}, {0x4, 0xfffffff6, 0x2, 0x1000, 0x1ff, 0x2}, {0x8, 0x9, 0x6, 0x4316, 0x6, 0x7}, {0x6, 0x7, 0x7, 0x2, 0x1, 0x8}], [{0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x2}, {0x3}, {0xf9923793e02d7db6}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x3}, {0x3}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x3}, {}, {0x5, 0xe1835468be4c3e98}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x9a9242c1bef3e2b4}, {0x2, 0x1}, {0x2}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x12a0}, 0x1, 0x0, 0x0, 0x4004880}, 0x44000) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000280001"], 0xb8}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="78120000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="08000300000000001400020062617461647630000000000000000000080003000200000008000100", @ANYRES32=r2, @ANYBLOB="4000018008000100", @ANYRES32=r2, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="140002006c6f00000000000000000000000000005000018008000300010000000800030001000000080003000300000014000200776730000000000000000000000000000800030002000000080003000100000008000300030000000800030000000000"], 0x1278}, 0x1, 0x0, 0x0, 0x80}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xab}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x701, {0x0, 0x0, 0x0, 0x0, 0x40220, 0x1006}, [@IFLA_PHYS_PORT_ID={0x24, 0x22, "d4fd8cb6000697000000000000000868c3eaacd4f56946269f6f0ed05cd35092"}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 996.052201ms ago: executing program 6 (id=3722): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x164, r1, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x150, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39197e3f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2d01}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26cb84ca}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ac2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d58f8f0}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x138f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19cdd38d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e7cdb2d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x843f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf4ae}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a771771}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x522ac82b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2b0d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e8c}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7eec8d0b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb092}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a01ac05}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x691bd8fc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76be6cce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9801}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x427}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d5f1c85}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2241}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b07}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5763b4c8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe6b}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4b7c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc2ac}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9574}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31526bcc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e2867f9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x70c3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d5ce50c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb771}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8105}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa66b}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e0c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27ba17c0}]}, {0x4}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x488c4}, 0x44) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000280)={0x2, 0x5, "1b8993", 0x1, 0x7}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000300)={0xffffffffffffffff, 0x7f, 0x53, 0x5c}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1001002}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40804}, 0x41000) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000440)=""/225, &(0x7f0000000540)=0xe1) r4 = epoll_create1(0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000580)={0x40000008}) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000680)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000006c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000700)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r6, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008881}, 0x8041) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000000940)={r5, &(0x7f0000000840)='wpan1\x00', 0x183880, &(0x7f0000000880)={@align=0x38, {0xffff, 0x4, 0x6, 0x58}}, 0x80000001, &(0x7f00000008c0), &(0x7f0000000900)=0x10001}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000980)={0x0, 0x80000000}, &(0x7f00000009c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000000a00)={r11, 0x4}, &(0x7f0000000a40)=0x8) epoll_pwait(r10, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x1, &(0x7f0000000b00)={[0x5]}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r10) connect$unix(r10, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000c00)={r12, 0x51, "76e8d779dc25cdaf21a6efc3fb1047c52c13255af6bbb5d7b685e2317a1315d6d7e44c68d235dff79e401488f14a10716e512678372b8491d0c79b798a255dfe55a2dd71e3fd2e41452b8d26d70374ef33"}, &(0x7f0000000c80)=0x59) r13 = accept4$phonet_pipe(r2, 0x0, &(0x7f0000000cc0), 0x0) ioctl$sock_SIOCBRDELBR(r13, 0x89a1, &(0x7f0000000d00)='macvtap0\x00') ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000d80)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, r6, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044804}, 0x0) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r2) sendmsg$NL80211_CMD_SET_MAC_ACL(r13, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x48, r15, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xd7, 0x39}}}}, [@NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x40016) 994.254578ms ago: executing program 1 (id=3723): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x9) setsockopt$inet6_tcp_int(r3, 0x6, 0x1b, &(0x7f0000000000)=0x3f, 0x4) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000080), 0x10) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r5, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x21}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040014}, 0x20004084) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f0000000340)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000040)={0x4}, 0x1) 921.41016ms ago: executing program 5 (id=3724): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="050003000000000071119700000000008510000002000000850000000000000095003300000000009851a505c749000042c4d13c98f62ecc110f6e372e722e53e287de763ec41c65859cca031b4af8fcb1c0"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff00000000711064000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x8080, 0x7, 0x855c, 0x4, {{0x15, 0x4, 0x1, 0x4, 0x54, 0x65, 0x0, 0x9, 0x4, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x13}, {[@timestamp={0x44, 0x1c, 0xc2, 0x0, 0x2, [0x1, 0x7ff, 0x6, 0x10001, 0x219, 0xd]}, @ssrr={0x89, 0x7, 0x81, [@empty]}, @end, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0xc1, [@broadcast, @multicast2]}, @rr={0x7, 0xb, 0x6c, [@loopback, @private=0xa010101]}]}}}}}) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340100001300000229bd7000ffdbdf252900056f4e204e2009000000070000000200000084050000ff0100004e0c00000500000000000000", @ANYRES32=r2, @ANYBLOB="010400000c0000006efe0000050000000400010074000100d348a8e7e5f4609881a5b8045173613e49a01211249647bf806da6be6dc0ec7596ccb6676b4c3918c29da26b3fc584a6ec424dd6c5966098c0c1b1f15e6b30296dfdb3a4815a71cc81dc6b9d89997d19e45e8fcdbb0331d477366a4a167d7991092936fd6937ca4727a05ead418b574970000100f88458114cf8e7c07a4dc57fa08106e4fb206418b4c814343609bba2ac98d8f61a3d6692abd68d300304de2db6a429b3fd03091d22ade3d7d09dfce26d075fcd33544f1b806534d2f49829271d851ef7a5f4b26f3bedb372b67b149d2971b6b9127d9aa01484128c7427082d"], 0x134}, 0x1, 0x0, 0x0, 0x8000}, 0x40020) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="24010000160001"], 0x124}}, 0x0) 847.515277ms ago: executing program 3 (id=3725): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x46, 0x0, 0x9}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x29, 0x1ff, 0x6, 0xb0e6, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x800, 0x1, 0x6, 'netbios-ns\x00', 'syz0\x00', {0x8}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x4}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x40, 0x10, 0x1, 'syz0\x00', 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x5a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0xf, &(0x7f00000000c0)="ef24e8b405e15b4b9c7893a9c031ab6d6a805af54f84eda3035e5cce095af23b0f4944e6aa89ebed3d1cf85447a15d8e938f682dfdc4158125b1f24927067bbeef9873713fc23cc478a0ed1f1408cb2cf45c5c821eba66a7d6fc54bc28a6996a614084d14d86a37ed8c51b77e5bd97736ecd7440dcb97f067f7dd5fd828ce2c3131b66b7580f05ec875d0b91c87ae151484e8f8d9b2b2bfb0a1823e3624ea93ec15184caa24e3adab55f1fa043356aec5325c8875ed629ad18807210434e83948d9976b12221600a9ccc65f5ccdd6843af457e") sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x1, @none, 0x9}, 0xe) 680.953017ms ago: executing program 1 (id=3726): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000849bb6c24558d62f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000849bb6c24558d62f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000bf080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 679.965747ms ago: executing program 5 (id=3727): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000050000000800020000000000080003000000e4"], 0x24}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000200)=0x6) r5 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x6a, 0x2, 0x20000000, 0x3) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3, 0x4, 0xffffff27, 0x7}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000000) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @loopback, 0x4}, 0x1c) recvmsg$unix(0xffffffffffffffff, 0x0, 0x4020) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f00000014c0)="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") r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000001340)={0x0, 0xffffffc7, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="c40000001900f3fe0000000000000000fe8000000000000000000000000000bbac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000fcffffffffffffff00000000b86b6e0000000000000000000c0008"], 0xc4}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a000000000000000000000005000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a010102000000000000000000000000fe8000000000000000000000000000aa010016"], 0xd0}}, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_INFO(r9, 0x0, 0x481, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x7ffeedc0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=@newqdisc={0xdc, 0x24, 0x300, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xa, 0xc}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x1, 0xf795, 0x5, 0x0, 0x947, 0x8, 0x3}}, {0xa, 0x2, [0x101, 0x5, 0x3]}}, {{0x1c, 0x1, {0x7, 0x1, 0x6, 0x1, 0x0, 0x9987, 0x3, 0x2}}, {0x8, 0x2, [0x4, 0x7]}}, {{0x1c, 0x1, {0x7, 0xbb, 0x100, 0x9, 0xaa26be2d296ed866, 0x8, 0x7, 0x5}}, {0xe, 0x2, [0xfad, 0x8, 0xc, 0x2, 0xff]}}, {{0x1c, 0x1, {0x40, 0x9, 0x7, 0x3, 0x2, 0x1000, 0xfffffffb, 0x5}}, {0xe, 0x2, [0x8, 0xffff, 0x7, 0x6, 0x7fff]}}]}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x2a, 0x2, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000000e1408003c000000d92bd4ea12c9f5000008000100"/39], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40001) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@deltaction={0x34, 0x31, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x820, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x60000813) socket$netlink(0x10, 0x3, 0x0) 630.070327ms ago: executing program 6 (id=3728): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x5, 0x7}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x2, 0x3, 0x3, 0xdf08, 0x40, 0x6, 0x2, 0x4, 0x5, 0x3, 0x1, 0x60a1, 0x27, 0x280, 0x401]}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={r1, 0x6}, 0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)=@in={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000200)="e26cc881b53bd5fa889668e0b262f95e699006b49aab9aac934c5ddecf1f2a80f174e228d4165a9caad3d613c7042450bca42cc84e25e89492deaf30537508dd08e0680bae3d58c690161ae957d7417cd50858c816fadf6288c209797a90508b262b6a4ab68935a497a2b4ed4dbb66f1f6f9878a64eaa2e155b8f87708d55a16c5a33f3f07b517527096e55630c8895132bba0b1683b957b057bbac47a4c2ff3986f60b1f7c6694ed4861b3e37ed0d", 0xaf}, {&(0x7f00000002c0)="05a1665f2f432090c42e7a657a853a615b82604fd02cce4dd49432806246a12581efdb82d6a72d0ebf26fade8ef19f471732841281c50214ff5f5915dbb502282ba3b473d6d09399d565e26799e7ada63ff247fee22d3c498cf9c5fccc5069faaa6614e2866df2c0556c0139bef9b0a1d3ed8a3c6a23622d8fadd617263d7f8eccb3b13520710c5e3e77a7b1c2c719e6c045db0285e960cec37a2c0046ea34b3eef9fbe29ff5e47960db4b7c79b9a2f1355ea2912ab2120f69c14f", 0xbb}], 0x2, 0x0, 0x0, 0x40844}, 0x40050) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000540)={r1, 0x1, 0xffffff59, 0x400}, &(0x7f0000000580)=0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000400)=@in6={0xa, 0x4e24, 0x1, @empty, 0x200}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000440)="140429c5a9e927032e7808e5f7446f8eac1839c7af50f9e18413b3e2de7f988e05e91cfa0dd80156b94dd05a73c497864ad455d23638f69e8debeca9ac18a7815ddca1b07e88156234bc578b29fa14a4eba50965633c5c72a26db8ac6647d872b2cf8eaf04feec372c408f49b82df1367142ae108d061ba326b6dfd0b503c12e80d33674d7936527337e89565c6e79198fe8b2a373b2", 0x96}], 0x1, &(0x7f00000005c0)=[@dstaddrv6={0x20, 0x84, 0x8, @private0}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x8201, 0xd, 0x9, r3}}, @init={0x18, 0x84, 0x0, {0x0, 0x0, 0x1, 0x9}}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0x1, 0x1, 0x1, 0x4, 0x3ff, 0xa10, 0x81, r1}}, @authinfo={0x18, 0x84, 0x6, {0xa52e}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x4}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x6419, 0x4, 0x200, 0x1, 0x3a, 0x2, 0x2, r1}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}], 0x118, 0x88c4}, 0x20000000) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0xa1, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x50) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0x0, 0x9}, 0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b40)={'ip_vti0\x00', &(0x7f0000000a80)={'sit0\x00', 0x0, 0x8000, 0x7800, 0x8000, 0xffffffff, {{0x27, 0x4, 0x1, 0x1, 0x9c, 0x68, 0x0, 0x8, 0x29, 0x0, @multicast1, @broadcast, {[@timestamp={0x44, 0x20, 0xdc, 0x0, 0x8, [0x101, 0x7, 0x5, 0x6e9, 0x100, 0x0, 0x9]}, @ra={0x94, 0x4}, @generic={0x7, 0x12, "3d29f70b5972a6f9964945ea8b08703b"}, @timestamp_prespec={0x44, 0x4c, 0xc5, 0x3, 0x3, [{@multicast1, 0x1}, {@rand_addr=0x64010102, 0x6}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0xf}, 0xffff}, {@remote, 0x1}, {@multicast2, 0x3}, {@loopback, 0x1ff}, {@broadcast, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffbff}]}, @ra={0x94, 0x4}, @noop]}}}}}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000b80)={r2, 0x80000, 0x5, 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x29, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000980)='syzkaller\x00', 0x6, 0xad, &(0x7f00000009c0)=""/173, 0x41100, 0x20, '\x00', r6, 0x25, r7, 0x8, &(0x7f0000000bc0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x1, 0xf, 0x8, 0xf}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000c40)=[{0x2, 0x3, 0x7, 0x9}, {0x4, 0x5, 0x4, 0x7}], 0x10, 0xab}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f0000000d40), &(0x7f0000000d80)=0x8) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r11, 0x84, 0x6b, &(0x7f0000000dc0), 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00), r12) ioctl$SIOCGETSGCNT(r7, 0x89e1, &(0x7f0000000e40)={@remote, @multicast1}) r13 = accept4$rose(r10, &(0x7f0000000e80)=@short={0xb, @remote, @netrom, 0x1, @rose}, &(0x7f0000000ec0)=0x1c, 0x80000) bind$rose(r13, &(0x7f0000000f00)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @bcast}, 0x1c) r14 = socket$kcm(0x29, 0x5, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r8, 0xc038586c, &(0x7f0000001040)={r9, &(0x7f0000000f40)='sit0\x00', 0x222a40, &(0x7f0000000f80)={@align=0x100, {0x3, 0x6, 0x3, 0x1f351ad2}}, 0x66000000, &(0x7f0000000fc0)={@_ha_fsid}, &(0x7f0000001000)=0xf3dc}) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000001180)={r14, &(0x7f0000001080)='-&\x00', 0x0, &(0x7f00000010c0)={@_ha_fsid={[0x100, 0x3]}, {0x81, 0x73fa, 0x2, 0xb6}}, 0x9, &(0x7f0000001100)={@_ha_fsid}, &(0x7f0000001140)=0x2}) ioctl$SIOCSIFHWADDR(r15, 0x8924, &(0x7f00000011c0)={'veth1_to_hsr\x00', @broadcast}) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000001200)={r3, 0x6, 0x2, [0x0, 0x904]}, 0xc) 586.944231ms ago: executing program 3 (id=3729): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=r7, @ANYBLOB="10001d800c0000800600050059000000"], 0x2c}}, 0x0) 512.158571ms ago: executing program 5 (id=3730): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@empty, @in6=@dev}}, {{@in6=@private0}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0x137) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0x137) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3f}, @in6=@empty, 0x4e20, 0x0, 0x4e22, 0x8, 0x2, 0x20, 0x0, 0x5c, 0x0, r2}, {0x1, 0x8000, 0x8, 0xe0e, 0xfffffffffffffffc, 0x0, 0x2, 0x4}, {0x6, 0x101, 0x8, 0x3}, 0x10, 0x6e6bbd, 0x1, 0x0, 0x1, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0xc}, 0x4d5, 0x32}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3501, 0x2, 0x2, 0x6, 0x4, 0x3, 0x2}}, 0xe8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = socket$inet(0x2, 0x80000, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r3) (async) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r3) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xabafe95137e73af6}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010102}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010102}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4c881) (async) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xabafe95137e73af6}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010102}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010102}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4c881) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000400007070000000000000000037c000004009c80060001"], 0x20}, 0x1, 0x0, 0x0, 0x4048090}, 0xc000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000000)={0x2, 'ip6erspan0\x00', {0xec}, 0x48d}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x94}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x94}]}, 0x10) 504.365819ms ago: executing program 1 (id=3731): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x2ff, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x40000000001}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xb8}}, 0x0) 494.339985ms ago: executing program 6 (id=3732): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x4, 0xc, 0x0, 0x0}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0x4}, 0x6) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@restrict={0x5, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x30, 0x61, 0x0, 0x0, 0x30, 0x0, 0x2e, 0x30, 0x2e]}}, &(0x7f0000000100)=""/12, 0x2f, 0xc, 0x1, 0x200, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000e505000004000000ff01000000000400", @ANYRES32=r5, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0100000002000000040000000e00"/28], 0x50) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000080)=0x6, 0x4) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x20000000, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x3, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) (async) close(r7) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 356.410565ms ago: executing program 3 (id=3733): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f1100000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000400488014000180100010800400058005000300000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24}, 0x24}}, 0x20044810) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@getaddr={0x14, 0x16, 0x400, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x44021) recvmmsg(r3, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200), 0x1f}}], 0x2, 0x40010000, 0x0) 355.393746ms ago: executing program 1 (id=3734): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xbc, 0x8, 0x8, 0x8000, 0x8}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x400, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x4c}}, 0x44890) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xbc, 0x8, 0x8, 0x8000, 0x8}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x400, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x4c}}, 0x44890) (async) 209.851941ms ago: executing program 6 (id=3735): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="030000000400005093fc72db355319fb000400003ad21dc02144ba31179f58346c496cbd384bf59d27cc9f20b1d7e3cf0c0a007b5d1f8c00f2a0bac70587e84e5991a0c4d0f23709f3c74e843b00ca0f095250b8f621d8410037a944f0455aa51d45191f4d078f59b3f2924adaab2bd517e25f1f066a513a38752cea8f37cf", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="03000000020000000300"/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000000800010002081000418e00000004fcff", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r4, 0x7ff, 0x1, 0x7fffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYRES64=r0], 0x0, 0x77d, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 157.692101ms ago: executing program 3 (id=3736): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0xf0, 0x12, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x87, 0x0, 0xee00}, {@in6=@private1, 0x5d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {0xffffffff}, 0x70bd2c, 0x34fd, 0x2, 0x0, 0x0, 0x50}}, 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 89.119574ms ago: executing program 5 (id=3737): syz_init_net_socket$rose(0xb, 0x5, 0x0) 86.889849ms ago: executing program 1 (id=3738): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x50) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="140000f9899babe03e0025000100000000000000"], 0x14}], 0x1}, 0x0) 0s ago: executing program 5 (id=3739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c0002800800034000000016080001"], 0x110}}, 0x40040) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x1b, 0x5, 0x6d0, 0x0, 0x4a0, 0xffffffff, 0x4a0, 0x1e8, 0x600, 0x600, 0xffffffff, 0x600, 0x600, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x12, 0x0, 0x3}}}, {{@ipv6={@private0, @loopback, [0xff000000, 0xffffffff, 0xff000000], [0xffffffff, 0xffffff00, 0xffffff00, 0xffffffff], 'veth1_to_team\x00', 'dvmrp1\x00', {}, {0xff}, 0x2b, 0x3, 0x4, 0x35}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x10, 0x6bd521e9d5960986, 0x0, [0x7, 0xa, 0x400, 0x1000, 0x1, 0x6, 0x1, 0xfffe, 0x8, 0x6, 0x7, 0x1, 0x2, 0xbc6, 0x5], 0xa}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x1000, 0x454}}}, {{@uncond, 0x0, 0x270, 0x2b8, 0x0, {}, [@common=@rt={{0x138}, {0xffffffff, [0x5, 0x3], 0x37b8, 0x4, 0x4, [@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @remote, @mcast1, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}], 0x2}}, @common=@srh1={{0x90}, {0x1, 0x40, 0xcb, 0x1, 0x3, @mcast2, @dev={0xfe, 0x80, '\x00', 0x2d}, @dev={0xfe, 0x80, '\x00', 0x1d}, [0xffffffff, 0xa77b9eb750aa55be, 0xffffff00, 0xff], [0xff, 0x0, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffffff, 0xff000000], 0x2c03, 0x75}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv4=@dev={0xac, 0x14, 0x14, 0x1e}, @icmp_id=0x67, @gre_key=0x1ff}}}, {{@uncond, 0x0, 0xf0, 0x160, 0x0, {}, [@common=@hbh={{0x48}, {0x7, 0x2, 0x1, [0xfff, 0x6c52, 0x1, 0x5, 0x5, 0x400, 0x5, 0x8, 0xc, 0x7, 0xc, 0x401, 0x7, 0x2, 0xe8, 0x40], 0x9}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xe0, 0x0, 0x9, 0x0, 0x0, "92487c6ae503c61f53197ce37a51654a11c8662d9340cd631f70a0bf533538d970f9863abfea1401e5b26e4d4a2389a2302399798459162f67df88a2742e036c"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x730) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) kernel console output (not intermixed with test programs): an up link [ 231.320794][T12333] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:f878:caff:fecf:4646 error=-28 [ 231.723309][T12357] __nla_validate_parse: 9 callbacks suppressed [ 231.723327][T12357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1825'. [ 231.938471][T12333] infiniband syz0: set down [ 231.943581][T12333] infiniband syz0: added bond0 [ 232.050275][T12333] RDS/IB: syz0: added [ 232.060151][T12365] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1828'. [ 232.074673][T12333] smc: adding ib device syz0 with port count 1 [ 232.087378][T12333] smc: ib device syz0 port 1 has no pnetid [ 232.233328][T12377] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1830'. [ 232.481857][T12386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1834'. [ 232.504921][T12386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1834'. [ 232.647531][T12398] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1836'. [ 232.700705][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1837'. [ 232.747509][T12397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1837'. [ 232.805874][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1837'. [ 232.850729][T12397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1837'. [ 233.172886][T12422] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 233.513206][T12445] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 234.102322][T12482] validate_nla: 4 callbacks suppressed [ 234.102354][T12482] netlink: 'syz.3.1857': attribute type 39 has an invalid length. [ 234.462336][T12498] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 234.484379][T12498] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 234.525540][T12503] netlink: 'syz.5.1862': attribute type 13 has an invalid length. [ 234.907652][T12520] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 234.917586][ T5876] IPVS: starting estimator thread 0... [ 235.020567][T12521] IPVS: using max 28 ests per chain, 67200 per kthread [ 235.375998][T12536] ip6tnl0: Caught tx_queue_len zero misconfig [ 235.898563][T12559] netlink: 'syz.0.1876': attribute type 3 has an invalid length. [ 236.656468][T12584] xt_TCPMSS: Only works on TCP SYN packets [ 236.694754][T12584] netlink: 'syz.5.1883': attribute type 9 has an invalid length. [ 236.726297][T12584] netlink: 'syz.5.1883': attribute type 11 has an invalid length. [ 236.736418][T12584] netlink: 'syz.5.1883': attribute type 12 has an invalid length. [ 236.759531][T12584] __nla_validate_parse: 12 callbacks suppressed [ 236.759549][T12584] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.1883'. [ 236.894863][T12597] netlink: 'syz.1.1885': attribute type 1 has an invalid length. [ 236.919701][T12597] netlink: 'syz.1.1885': attribute type 4 has an invalid length. [ 236.930828][T12597] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1885'. [ 237.083221][T12604] openvswitch: netlink: IP tunnel dst address not specified [ 237.140544][T12608] netlink: 'syz.1.1890': attribute type 4 has an invalid length. [ 237.158154][T12608] netlink: 'syz.1.1890': attribute type 4 has an invalid length. [ 237.336348][T12613] bond2: entered promiscuous mode [ 237.342066][T12613] 8021q: adding VLAN 0 to HW filter on device bond2 [ 237.462909][T12613] 8021q: adding VLAN 0 to HW filter on device bond2 [ 237.486028][T12613] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 237.502815][T12628] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 237.536430][T12613] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 237.563019][T12613] bond2: (slave vti0): making interface the new active one [ 237.576170][T12613] vti0: entered promiscuous mode [ 237.584341][T12613] bond2: (slave vti0): Enslaving as an active interface with an up link [ 237.784373][T12639] lo: Caught tx_queue_len zero misconfig [ 238.176425][T12662] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1904'. [ 238.208098][T12662] sctp: [Deprecated]: syz.5.1904 (pid 12662) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.208098][T12662] Use struct sctp_sack_info instead [ 238.339009][T12670] syzkaller1: entered promiscuous mode [ 238.348563][T12670] syzkaller1: entered allmulticast mode [ 238.369790][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1907'. [ 238.386450][T12670] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1907'. [ 238.413846][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1907'. [ 238.423664][T12670] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1907'. [ 238.425076][T12674] Cannot find add_set index 1 as target [ 238.442876][T12674] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1909'. [ 238.578119][T12677] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.590116][T12677] bridge_slave_1: left allmulticast mode [ 238.600433][T12677] bridge_slave_1: left promiscuous mode [ 238.610217][T12677] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.755794][T12685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.766029][T12685] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.782710][T12685] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.813350][T12686] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1914'. [ 238.854403][ T8339] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 238.864236][ T8339] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 238.884706][ T8339] bond0: now running without any active interface! [ 238.945108][ T8335] bond7: (slave macvlan2): link status definitely down, disabling slave [ 238.957122][ T8335] bond7: now running without any active interface! [ 239.316454][T12715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1921'. [ 239.577712][T12723] validate_nla: 5 callbacks suppressed [ 239.577732][T12723] netlink: 'syz.1.1924': attribute type 12 has an invalid length. [ 239.614693][T12723] netlink: 'syz.1.1924': attribute type 11 has an invalid length. [ 240.045549][T12757] x_tables: duplicate underflow at hook 1 [ 240.192698][T12763] netlink: 'syz.1.1937': attribute type 9 has an invalid length. [ 240.200809][T12763] netlink: 'syz.1.1937': attribute type 11 has an invalid length. [ 240.210508][T12763] netlink: 'syz.1.1937': attribute type 12 has an invalid length. [ 240.403444][ T1801] block nbd1: Possible stuck request ffff8880265a0000: control (read@0,1024B). Runtime 30 seconds [ 240.415850][ T1801] block nbd1: Possible stuck request ffff8880265a0200: control (read@1024,1024B). Runtime 30 seconds [ 240.429310][ T1801] block nbd1: Possible stuck request ffff8880265a0400: control (read@2048,1024B). Runtime 30 seconds [ 240.441231][ T1801] block nbd1: Possible stuck request ffff8880265a0600: control (read@3072,1024B). Runtime 30 seconds [ 240.739151][T12803] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 241.032516][T12829] netlink: 'syz.0.1954': attribute type 1 has an invalid length. [ 241.186313][T12835] macvtap2: entered promiscuous mode [ 241.198382][T12835] macvtap2: entered allmulticast mode [ 241.211948][T12835] veth1_vlan: entered allmulticast mode [ 241.243153][T12836] macvtap3: entered promiscuous mode [ 241.249056][T12836] macvtap3: entered allmulticast mode [ 241.266394][T12835] macvtap4: entered promiscuous mode [ 241.272679][T12835] macvtap4: entered allmulticast mode [ 241.361838][T12835] macvtap4: entered promiscuous mode [ 241.370560][T12835] macvtap4: entered allmulticast mode [ 241.441314][T12835] macvtap4: entered promiscuous mode [ 241.446828][T12835] macvtap4: entered allmulticast mode [ 241.474071][T12845] netlink: 'syz.5.1960': attribute type 3 has an invalid length. [ 241.482289][T12845] netlink: 'syz.5.1960': attribute type 3 has an invalid length. [ 241.543050][T12835] macvtap4: entered promiscuous mode [ 241.558710][T12835] macvtap4: entered allmulticast mode [ 241.662294][T12835] macvtap4: entered promiscuous mode [ 241.667755][T12835] macvtap4: entered allmulticast mode [ 241.721059][T12848] openvswitch: netlink: Missing key (keys=40, expected=100) [ 241.736682][T12835] macvtap4: entered promiscuous mode [ 241.742265][T12835] macvtap4: entered allmulticast mode [ 241.817614][T12835] macvtap4: entered promiscuous mode [ 241.823117][T12835] macvtap4: entered allmulticast mode [ 241.889763][T12835] macvtap4: entered promiscuous mode [ 241.895406][T12835] macvtap4: entered allmulticast mode [ 241.997021][T12835] macvtap4: entered promiscuous mode [ 242.006729][T12835] macvtap4: entered allmulticast mode [ 242.219405][T12866] __nla_validate_parse: 56 callbacks suppressed [ 242.219429][T12866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1968'. [ 242.267419][T12866] openvswitch: netlink: IP tunnel dst address not specified [ 242.563982][T12889] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1975'. [ 242.649314][T12894] netlink: 'syz.0.1976': attribute type 10 has an invalid length. [ 242.659044][T12894] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1976'. [ 242.899054][T12906] xt_hashlimit: size too large, truncated to 1048576 [ 242.996366][T12908] : renamed from vxcan1 (while UP) [ 243.071953][T12914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1981'. [ 243.101126][T12917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1981'. [ 243.321683][T12929] syzkaller0: entered promiscuous mode [ 243.336174][T12929] syzkaller0: entered allmulticast mode [ 243.578684][T12941] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 243.852658][T12950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1988'. [ 244.147094][T12974] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1996'. [ 244.158059][T12974] tipc: Invalid UDP bearer configuration [ 244.158115][T12974] tipc: Enabling of bearer rejected, failed to enable media [ 244.259148][T12981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 244.322830][T12981] bridge0: entered promiscuous mode [ 244.328577][T12981] macsec1: entered promiscuous mode [ 244.368485][T12986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1999'. [ 244.378071][T12981] macsec1: entered allmulticast mode [ 244.389054][T12981] bridge0: entered allmulticast mode [ 244.413915][T12986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1999'. [ 244.429254][T12981] bridge0: port 2(macsec1) entered blocking state [ 244.450930][T12981] bridge0: port 2(macsec1) entered disabled state [ 244.476443][T12981] bridge0: left allmulticast mode [ 244.483747][T12981] bridge0: left promiscuous mode [ 244.519050][T12990] netlink: 'syz.3.1997': attribute type 29 has an invalid length. [ 245.429692][T13036] xfrm1: entered promiscuous mode [ 245.435717][T13036] xfrm1: entered allmulticast mode [ 245.588029][ T5829] Bluetooth: hci5: link tx timeout [ 245.594805][ T5829] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 245.684849][T13050] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000 [ 245.696843][ T5829] Bluetooth: hci5: link tx timeout [ 245.703367][ T5829] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 246.201193][ T8329] nci: nci_rx_work: unknown MT 0x7 [ 246.236463][T13088] syzkaller0: entered promiscuous mode [ 246.242277][T13088] syzkaller0: entered allmulticast mode [ 246.251785][T13088] netlink: zone id is out of range [ 246.256938][T13088] netlink: zone id is out of range [ 246.300615][T13088] netlink: zone id is out of range [ 246.313725][T13088] netlink: zone id is out of range [ 246.323662][T13088] netlink: zone id is out of range [ 246.329171][T13088] netlink: zone id is out of range [ 246.371846][T13088] netlink: zone id is out of range [ 246.379477][T13088] netlink: zone id is out of range [ 246.386763][T13088] netlink: zone id is out of range [ 246.540657][ T5829] Bluetooth: hci5: link tx timeout [ 246.546754][ T5829] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 246.956963][T13125] IPv6: NLM_F_CREATE should be specified when creating new route [ 247.214624][ T5829] Bluetooth: hci5: link tx timeout [ 247.219843][ T5829] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 247.670636][ T5829] Bluetooth: hci5: command 0x041b tx timeout [ 248.639279][ T5829] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 248.649108][ T5829] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 248.658051][ T5829] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 248.668110][ T5829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 248.675895][ T5829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 248.985626][T13140] chnl_net:caif_netlink_parms(): no params data found [ 249.040249][T13074] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 249.160818][T13140] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.201954][T13140] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.209287][T13140] bridge_slave_0: entered allmulticast mode [ 249.260141][T13140] bridge_slave_0: entered promiscuous mode [ 249.281683][T13154] net_ratelimit: 44 callbacks suppressed [ 249.281702][T13154] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 249.287176][T13140] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.332082][T13140] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.339420][T13140] bridge_slave_1: entered allmulticast mode [ 249.380121][T13140] bridge_slave_1: entered promiscuous mode [ 249.453995][T13167] __nla_validate_parse: 11 callbacks suppressed [ 249.454013][T13167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2031'. [ 249.515686][T13140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.625561][T13140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.821257][T13140] team0: Port device team_slave_0 added [ 249.849903][T13140] team0: Port device team_slave_1 added [ 249.919757][T13140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.937273][T13140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.976866][T13194] validate_nla: 6 callbacks suppressed [ 249.976885][T13194] netlink: 'syz.5.2038': attribute type 39 has an invalid length. [ 250.014835][T13140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.086274][T13140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.095198][T13140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.123357][T13140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.187745][T13202] ip6gretap1: entered promiscuous mode [ 250.194333][T13202] ip6gretap1: entered allmulticast mode [ 250.390220][T13140] hsr_slave_0: entered promiscuous mode [ 250.422800][T13140] hsr_slave_1: entered promiscuous mode [ 250.436014][T13140] debugfs: 'hsr0' already exists in 'hsr' [ 250.451271][T13140] Cannot create hsr debugfs directory [ 250.720301][ T5834] Bluetooth: hci6: command tx timeout [ 250.779569][T13227] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2046'. [ 250.820878][T13227] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2046'. [ 250.840901][T13226] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2046'. [ 250.967469][T13238] netlink: 'syz.1.2047': attribute type 1 has an invalid length. [ 251.010680][T13238] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2047'. [ 251.019706][T13238] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2047'. [ 251.084495][T13238] netlink: 'syz.1.2047': attribute type 1 has an invalid length. [ 251.104102][T13238] netlink: 'syz.1.2047': attribute type 8 has an invalid length. [ 251.115007][T13238] netlink: 606 bytes leftover after parsing attributes in process `syz.1.2047'. [ 251.367444][T13140] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 251.378200][T13252] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2053'. [ 251.407392][T13140] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 251.495328][T13140] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 251.529163][T13140] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 251.841028][T13140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.933149][T13140] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.956567][T13288] xt_TCPMSS: Only works on TCP SYN packets [ 251.975756][ T8337] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.983015][ T8337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.030431][ T8337] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.037659][ T8337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.106613][T13294] IPVS: length: 23 != 8 [ 252.207155][T13303] veth0: entered promiscuous mode [ 252.294967][T13301] veth0: left promiscuous mode [ 252.573462][T13318] sctp: [Deprecated]: syz.5.2069 (pid 13318) Use of int in max_burst socket option. [ 252.573462][T13318] Use struct sctp_assoc_value instead [ 252.791250][ T5834] Bluetooth: hci6: command tx timeout [ 252.821084][T13140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.967967][T13339] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2073'. [ 253.154754][T13344] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2074'. [ 253.487460][T13140] veth0_vlan: entered promiscuous mode [ 253.528018][T13140] veth1_vlan: entered promiscuous mode [ 253.587821][T13363] syzkaller0: entered allmulticast mode [ 253.673232][T13140] veth0_macvtap: entered promiscuous mode [ 253.732308][T13140] veth1_macvtap: entered promiscuous mode [ 253.783919][T13140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.848045][T13140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.897898][ T8335] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.944590][ T8335] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.989950][ T8335] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.004047][T13383] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 254.018899][ T8335] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.032548][T13385] netlink: 'syz.3.2086': attribute type 11 has an invalid length. [ 254.202074][ T8337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.209968][ T8337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.344865][ T8335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.361291][ T8335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.441322][T13413] IPVS: set_ctl: invalid protocol: 1 100.1.1.2:20004 [ 254.671631][T13424] __nla_validate_parse: 5 callbacks suppressed [ 254.671651][T13424] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2097'. [ 254.871059][ T5834] Bluetooth: hci6: command tx timeout [ 255.117974][T13450] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 255.334440][T13468] netlink: 'syz.0.2110': attribute type 61 has an invalid length. [ 255.380630][T13462] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2108'. [ 255.546728][T13478] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2113'. [ 255.656799][ T5931] IPVS: starting estimator thread 0... [ 255.756170][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.771350][T13488] IPVS: using max 25 ests per chain, 60000 per kthread [ 256.093375][T13510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2121'. [ 256.103052][T13510] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 256.236519][T13518] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2123'. [ 256.537540][T13536] netlink: 'syz.1.2128': attribute type 25 has an invalid length. [ 256.561953][T13536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2128'. [ 256.576847][T13536] netlink: 'syz.1.2128': attribute type 25 has an invalid length. [ 256.603026][T13536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2128'. [ 256.626533][T13540] netlink: 'syz.1.2128': attribute type 12 has an invalid length. [ 256.647297][T13536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2128'. [ 256.666838][T13542] netlink: 'syz.3.2129': attribute type 10 has an invalid length. [ 256.703009][T13542] .: left allmulticast mode [ 256.710265][T13542] .: left promiscuous mode [ 256.749994][T13542] bridge0: port 2(.) entered disabled state [ 256.797792][T13542] bond0: (slave .): Enslaving as an active interface with an up link [ 256.951170][ T5834] Bluetooth: hci6: command tx timeout [ 256.996585][T13553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.052130][T13553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.140910][T13562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2135'. [ 257.209013][T13569] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 257.262635][T13562] team1: entered promiscuous mode [ 257.267737][T13562] team1: entered allmulticast mode [ 257.315488][T13573] xt_CT: You must specify a L4 protocol and not use inversions on it [ 257.342672][T13569] bond6 (unregistering): Released all slaves [ 257.401149][T13573] tipc: Started in network mode [ 257.406076][T13573] tipc: Node identity fc01, cluster identity 4711 [ 257.414592][T13573] tipc: Enabling of bearer rejected, failed to enable media [ 257.434347][T13577] tipc: Enabling of bearer rejected, failed to enable media [ 257.516143][T13581] netlink: 'syz.1.2141': attribute type 1 has an invalid length. [ 257.646706][T13581] bond8: entered promiscuous mode [ 257.681703][T13581] bond8: entered allmulticast mode [ 257.702131][T13581] 8021q: adding VLAN 0 to HW filter on device bond8 [ 257.786946][T13582] macvlan3: entered promiscuous mode [ 257.800825][T13582] macvlan3: entered allmulticast mode [ 257.820223][T13582] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 257.866063][T13588] geneve2: entered promiscuous mode [ 257.871590][T13588] geneve2: entered allmulticast mode [ 257.882832][T13599] tipc: Enabled bearer , priority 10 [ 257.890784][ T8329] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 257.900073][ T8329] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 257.940701][ T8335] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 257.974157][ T8335] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 258.064025][T13603] veth1_to_bond: entered promiscuous mode [ 258.083081][T13603] veth1_to_bond: entered allmulticast mode [ 258.102100][T13608] netlink: 'syz.1.2148': attribute type 2 has an invalid length. [ 258.124230][T13609] netlink: 'syz.1.2148': attribute type 2 has an invalid length. [ 258.224025][T13613] sctp: [Deprecated]: syz.1.2149 (pid 13613) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.224025][T13613] Use struct sctp_sack_info instead [ 258.332558][T13617] netlink: 'syz.3.2150': attribute type 1 has an invalid length. [ 258.412066][T13620] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2151'. [ 258.516788][T13622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.681778][T13629] tc_dump_action: action bad kind [ 258.821059][T13633] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 259.000506][ T5904] tipc: Node number set to 4227923968 [ 259.124667][T13647] xt_CT: You must specify a L4 protocol and not use inversions on it [ 259.784035][T13683] netlink: 'syz.0.2166': attribute type 4 has an invalid length. [ 259.828103][T13690] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 259.920957][T13687] tc_dump_action: action bad kind [ 259.957149][T13691] veth5: entered allmulticast mode [ 260.092764][ T5834] block nbd2: Receive control failed (result -32) [ 260.378385][T13700] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 260.487474][T13700] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 260.574874][T13706] bond6: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 260.587344][T13706] bond6 (unregistering): Released all slaves [ 260.698543][T13710] bond1 (unregistering): Released all slaves [ 260.983411][T13723] IPv6: NLM_F_REPLACE set, but no existing node found! [ 261.178136][T13734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.644682][T13747] __nla_validate_parse: 4 callbacks suppressed [ 261.644707][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2186'. [ 261.648497][T13749] validate_nla: 1 callbacks suppressed [ 261.648541][T13749] netlink: 'syz.0.2187': attribute type 21 has an invalid length. [ 261.675980][T13749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2187'. [ 261.696002][T13749] netlink: 'syz.0.2187': attribute type 21 has an invalid length. [ 261.702342][ T8335] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.705378][T13749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2187'. [ 261.723862][T13750] netlink: 'syz.6.2186': attribute type 1 has an invalid length. [ 261.746081][ T8335] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.835872][T13750] 8021q: adding VLAN 0 to HW filter on device bond1 [ 261.856913][T13754] IPVS: set_ctl: invalid protocol: 1 10.1.1.1:20003 [ 261.874631][ T8335] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.976829][T13752] bond1: (slave geneve2): making interface the new active one [ 262.010149][T13752] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 262.026510][ T8335] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.185836][T13761] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2191'. [ 262.247381][T13761] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2191'. [ 262.261470][T13763] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2192'. [ 262.514964][T13776] netlink: 'syz.1.2193': attribute type 2 has an invalid length. [ 262.578388][T13779] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2196'. [ 262.862135][T13792] netlink: 560 bytes leftover after parsing attributes in process `syz.6.2198'. [ 262.999019][T13794] netlink: 'syz.5.2199': attribute type 11 has an invalid length. [ 263.014895][T13794] netlink: 'syz.5.2199': attribute type 4 has an invalid length. [ 263.035706][T13794] netlink: 199768 bytes leftover after parsing attributes in process `syz.5.2199'. [ 263.166033][T13798] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 263.173358][T13798] IPv6: NLM_F_CREATE should be set when creating new route [ 263.206434][T13798] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2199'. [ 263.644748][T13820] C: renamed from lo [ 263.667684][T13820] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 263.714929][T13816] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 263.717527][T13822] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 263.722770][T13816] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 263.738923][T13816] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 263.746678][T13816] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 263.754415][T13816] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 263.762151][T13816] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 263.769855][T13816] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 263.777606][T13816] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 263.798148][T13820] vlan1: entered promiscuous mode [ 263.804839][T13820] geneve1: entered promiscuous mode [ 263.810609][T13820] vlan1: entered allmulticast mode [ 263.816324][T13820] geneve1: entered allmulticast mode [ 264.936893][T13871] netlink: 'syz.1.2222': attribute type 1 has an invalid length. [ 265.175364][T13878] nbd: must specify a size in bytes for the device [ 265.265423][T13878] nbd: couldn't find a device at index 0 [ 265.987543][ T30] audit: type=1800 audit(1771608774.677:4): pid=13912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2233" name="memory.events" dev="tmpfs" ino=849 res=0 errno=0 [ 266.119031][ T30] audit: type=1804 audit(1771608774.767:5): pid=13913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2233" name="/newroot/164/memory.events" dev="tmpfs" ino=849 res=1 errno=0 [ 266.173143][T13911] netlink: 'syz.0.2232': attribute type 4 has an invalid length. [ 267.208416][T13960] __nla_validate_parse: 8 callbacks suppressed [ 267.208436][T13960] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2245'. [ 267.252293][T13960] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2245'. [ 267.280859][T13959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2244'. [ 267.343424][T13966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2246'. [ 267.782496][T13992] netlink: 'syz.5.2252': attribute type 1 has an invalid length. [ 267.853049][T13999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2256'. [ 268.129755][T14010] "syz.0.2259" (14010) uses obsolete ecb(arc4) skcipher [ 268.310696][ T5834] Bluetooth: hci6: command tx timeout [ 268.587742][T14033] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2265'. [ 268.599737][T14033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2265'. [ 268.625864][T14033] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 268.636119][T14033] team0: Port device batadv1 added [ 268.859409][T14042] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2268'. [ 269.391026][T14065] netlink: 'syz.1.2272': attribute type 10 has an invalid length. [ 269.448620][T14065] bridge_slave_1: left allmulticast mode [ 269.482244][T14065] bridge_slave_1: left promiscuous mode [ 269.520744][T14065] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.560321][T14065] bridge_slave_1: entered promiscuous mode [ 269.573149][T14086] netlink: 'syz.6.2276': attribute type 1 has an invalid length. [ 269.601090][T14065] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 269.610454][T14086] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2276'. [ 269.640960][ T8335] net_ratelimit: 3257 callbacks suppressed [ 269.640981][ T8335] bond7: (slave macvlan2): failed to get link speed/duplex [ 269.770855][ T8335] bond7: (slave macvlan2): failed to get link speed/duplex [ 269.853672][T14097] tipc: Enabled bearer , priority 0 [ 269.862867][T14097] syzkaller0: entered promiscuous mode [ 269.868558][T14097] syzkaller0: entered allmulticast mode [ 269.878664][T14097] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 269.955834][T14097] veth0_virt_wifi: mtu less than device minimum [ 269.994101][T14095] tipc: Resetting bearer [ 270.063040][T14095] tipc: Disabling bearer [ 270.131708][ T8335] bond7: (slave macvlan2): failed to get link speed/duplex [ 270.290627][ T8325] bond7: (slave macvlan2): failed to get link speed/duplex [ 270.325829][T14111] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 270.410816][ T8335] bond7: (slave macvlan2): failed to get link speed/duplex [ 270.476560][ T1801] block nbd1: Possible stuck request ffff8880265a0000: control (read@0,1024B). Runtime 60 seconds [ 270.490500][ T1801] block nbd1: Possible stuck request ffff8880265a0200: control (read@1024,1024B). Runtime 60 seconds [ 270.501738][ T1801] block nbd1: Possible stuck request ffff8880265a0400: control (read@2048,1024B). Runtime 60 seconds [ 270.512883][ T1801] block nbd1: Possible stuck request ffff8880265a0600: control (read@3072,1024B). Runtime 60 seconds [ 270.531555][ T8335] bond7: (slave macvlan2): failed to get link speed/duplex [ 270.682004][ T8337] bond7: (slave macvlan2): failed to get link speed/duplex [ 270.786436][T14122] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2292'. [ 270.841096][ T8325] bond7: (slave macvlan2): failed to get link speed/duplex [ 271.052628][ T8325] bond7: (slave macvlan2): failed to get link speed/duplex [ 271.718605][T14154] netlink: 'syz.6.2304': attribute type 1 has an invalid length. [ 271.777104][T14154] workqueue: Failed to create a rescuer kthread for wq "phy2-mac-cmds": -EINTR [ 272.657506][T14200] netlink: 'syz.5.2316': attribute type 1 has an invalid length. [ 272.838980][T14198] __nla_validate_parse: 14 callbacks suppressed [ 272.839002][T14198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2315'. [ 272.897584][T14212] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2320'. [ 272.918761][T14213] xt_l2tp: v2 sid > 0xffff: 1114112 [ 272.924870][T14212] xt_l2tp: v2 sid > 0xffff: 1114112 [ 272.995732][T14215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2318'. [ 273.194495][T14229] netlink: 288 bytes leftover after parsing attributes in process `syz.5.2323'. [ 273.292751][T14234] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 273.313571][T14234] syzkaller1: linktype set to 823 [ 273.507747][T14249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2329'. [ 273.526536][T14249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2329'. [ 273.818251][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2334'. [ 273.965506][T14276] netlink: 'syz.3.2336': attribute type 1 has an invalid length. [ 273.996681][T14276] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2336'. [ 274.042797][T14276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2336'. [ 274.252170][T14298] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2343'. [ 274.674927][ T8329] net_ratelimit: 25 callbacks suppressed [ 274.674949][ T8329] bond7: (slave macvlan2): failed to get link speed/duplex [ 274.785266][T14333] x_tables: ip6_tables: ipcomp match: only valid for protocol 108 [ 274.820543][ T8339] bond7: (slave macvlan2): failed to get link speed/duplex [ 274.857094][T14336] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 274.946216][ T8331] bond7: (slave macvlan2): failed to get link speed/duplex [ 275.080485][ T8331] bond7: (slave macvlan2): failed to get link speed/duplex [ 275.201314][ T8329] bond7: (slave macvlan2): failed to get link speed/duplex [ 275.356346][ T8335] bond7: (slave macvlan2): failed to get link speed/duplex [ 275.482030][ T8335] bond7: (slave macvlan2): failed to get link speed/duplex [ 275.611089][ T8329] bond7: (slave macvlan2): failed to get link speed/duplex [ 275.730570][ T8331] bond7: (slave macvlan2): failed to get link speed/duplex [ 275.850536][ T8335] bond7: (slave macvlan2): failed to get link speed/duplex [ 276.735116][T14441] Bluetooth: MGMT ver 1.23 [ 276.739643][T14441] Bluetooth: hci1: too big key_count value 32778 [ 277.244689][T14467] x_tables: duplicate underflow at hook 3 [ 277.894719][T14483] TCP: TCP_TX_DELAY enabled [ 278.310753][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 278.335737][T14490] __nla_validate_parse: 6 callbacks suppressed [ 278.335756][T14490] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2399'. [ 278.420660][T14490] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2399'. [ 278.462731][T14490] gretap0: entered promiscuous mode [ 278.486052][T14490] gretap0: left promiscuous mode [ 278.546491][T14494] netlink: 'syz.3.2400': attribute type 2 has an invalid length. [ 278.580929][T14494] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2400'. [ 279.146232][T14522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.670318][T14536] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20002 [ 279.703002][ T8331] net_ratelimit: 26 callbacks suppressed [ 279.703026][ T8331] bond7: (slave macvlan2): failed to get link speed/duplex [ 279.725162][T14536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2412'. [ 279.900554][ T8335] bond7: (slave macvlan2): failed to get link speed/duplex [ 280.012827][ T49] bond7: (slave macvlan2): failed to get link speed/duplex [ 280.069476][T14551] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2415'. [ 280.140501][ T8331] bond7: (slave macvlan2): failed to get link speed/duplex [ 280.274670][ T8335] bond7: (slave macvlan2): failed to get link speed/duplex [ 280.440604][ T49] bond7: (slave macvlan2): failed to get link speed/duplex [ 280.599830][T14577] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2424'. [ 280.708474][T14572] bond7: option lp_interval: invalid value (0) [ 280.722497][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.731464][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.757311][T14572] bond7: option lp_interval: allowed values 1 - 2147483647 [ 280.792413][T14572] bond7 (unregistering): Released all slaves [ 280.875900][T14582] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2425'. [ 280.957482][ T8325] bond7: (slave macvlan2): failed to get link speed/duplex [ 281.039748][T14585] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2427'. [ 281.051259][T14585] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2427'. [ 281.063093][T14585] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2427'. [ 281.081962][ T8325] bond7: (slave macvlan2): failed to get link speed/duplex [ 281.138851][T14590] Cannot find add_set index 65532 as target [ 281.658414][T14602] bond3: option xmit_hash_policy: invalid value (64) [ 281.667888][T14602] bond3 (unregistering): Released all slaves [ 282.443323][T14644] netlink: 'syz.3.2447': attribute type 1 has an invalid length. [ 282.481518][T14643] netlink: 'syz.1.2445': attribute type 64 has an invalid length. [ 282.582905][T14644] bond7: entered promiscuous mode [ 282.609940][T14644] 8021q: adding VLAN 0 to HW filter on device bond7 [ 283.252933][T14680] netlink: 'syz.1.2457': attribute type 1 has an invalid length. [ 283.461968][T14680] bond10: entered promiscuous mode [ 283.467527][T14680] 8021q: adding VLAN 0 to HW filter on device bond10 [ 283.615546][T14692] 8021q: adding VLAN 0 to HW filter on device bond10 [ 283.642497][T14692] bond10: (slave vti0): The slave device specified does not support setting the MAC address [ 283.676253][T14692] bond10: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 283.714823][T14692] bond10: (slave vti0): making interface the new active one [ 283.733779][T14692] vti0: entered promiscuous mode [ 283.748267][T14692] bond10: (slave vti0): Enslaving as an active interface with an up link [ 284.207373][T14714] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 284.213392][T14714] syzkaller1: Linktype set failed because interface is up [ 284.239943][T14714] __nla_validate_parse: 10 callbacks suppressed [ 284.239980][T14714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2464'. [ 284.255910][ T5904] syzkaller1: tun_net_xmit 90 [ 284.763158][ T8337] net_ratelimit: 39 callbacks suppressed [ 284.763179][ T8337] bond7: (slave macvlan2): failed to get link speed/duplex [ 284.810904][ T8331] tipc: Subscription rejected, illegal request [ 284.920878][ T8331] bond7: (slave macvlan2): failed to get link speed/duplex [ 285.034404][ T8331] bond7: (slave macvlan2): failed to get link speed/duplex [ 285.053077][T14752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2476'. [ 285.170544][ T8331] bond7: (slave macvlan2): failed to get link speed/duplex [ 285.340266][T14768] netlink: 'syz.3.2480': attribute type 1 has an invalid length. [ 285.348371][ T8331] bond7: (slave macvlan2): failed to get link speed/duplex [ 285.377908][T14770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2481'. [ 285.418420][T14770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2481'. [ 285.537130][T14768] 8021q: adding VLAN 0 to HW filter on device bond8 [ 285.578164][T14767] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 285.611919][T14780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2482'. [ 285.642929][T14774] bond8: (slave gretap2): making interface the new active one [ 285.662957][T14774] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 285.720686][ T8337] bond7: (slave macvlan2): failed to get link speed/duplex [ 285.846558][ T8331] bond7: (slave macvlan2): failed to get link speed/duplex [ 285.894183][T14787] netlink: 45 bytes leftover after parsing attributes in process `syz.3.2484'. [ 285.970908][ T8325] bond7: (slave macvlan2): failed to get link speed/duplex [ 286.102734][ T8325] bond7: (slave macvlan2): failed to get link speed/duplex [ 286.278202][T14802] netlink: 'syz.1.2490': attribute type 9 has an invalid length. [ 286.388944][T14808] netlink: 'syz.1.2490': attribute type 9 has an invalid length. [ 286.498235][T14807] bond9: option miimon: invalid value (18446744073709551585) [ 286.519194][T14807] bond9: option miimon: allowed values 0 - 2147483647 [ 286.574366][T14807] bond9 (unregistering): Released all slaves [ 286.591719][T14814] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2492'. [ 287.025011][T14825] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2494'. [ 287.167254][T14796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2486'. [ 287.253729][T14790] erspan0: entered promiscuous mode [ 287.259426][T14790] erspan0: entered allmulticast mode [ 287.428395][T14836] x_tables: duplicate underflow at hook 3 [ 287.724267][T14845] netlink: 'syz.1.2504': attribute type 1 has an invalid length. [ 287.864651][T14845] bond12: entered promiscuous mode [ 287.898613][T14845] 8021q: adding VLAN 0 to HW filter on device bond12 [ 288.001809][T14849] bond12: (slave bridge6): making interface the new active one [ 288.030495][T14849] bridge6: entered promiscuous mode [ 288.062273][T14849] bond12: (slave bridge6): Enslaving as an active interface with an up link [ 288.134222][T14850] bond12: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 288.189093][T14850] bond12: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 288.295814][T14857] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 288.539185][T14880] tc_dump_action: action bad kind [ 288.640966][T14882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2514'. [ 289.069700][T14901] x9: renamed from bridge_slave_0 (while UP) [ 289.105997][T14903] netlink: 'syz.5.2521': attribute type 1 has an invalid length. [ 289.486453][T14916] __nla_validate_parse: 7 callbacks suppressed [ 289.486474][T14916] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2525'. [ 289.736702][T14927] syzkaller1: entered promiscuous mode [ 289.743060][T14927] syzkaller1: entered allmulticast mode [ 289.810804][ T8331] net_ratelimit: 27 callbacks suppressed [ 289.810826][ T8331] bond7: (slave macvlan2): failed to get link speed/duplex [ 289.981134][ T49] bond7: (slave macvlan2): failed to get link speed/duplex [ 290.028460][T14934] netlink: 'syz.5.2530': attribute type 11 has an invalid length. [ 290.073157][T14934] netlink: 'syz.5.2530': attribute type 11 has an invalid length. [ 290.132793][T14934] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2530'. [ 290.172361][ T49] bond7: (slave macvlan2): failed to get link speed/duplex [ 290.234201][T14940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2532'. [ 290.320553][ T8331] bond7: (slave macvlan2): failed to get link speed/duplex [ 290.510719][ T8325] bond7: (slave macvlan2): failed to get link speed/duplex [ 290.740663][ T8325] bond7: (slave macvlan2): failed to get link speed/duplex [ 290.872199][ T8325] bond7: (slave macvlan2): failed to get link speed/duplex [ 290.950807][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.990972][T14958] netlink: 'syz.6.2538': attribute type 21 has an invalid length. [ 291.015735][T14958] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2538'. [ 291.033887][ T49] bond7: (slave macvlan2): failed to get link speed/duplex [ 291.156017][T14969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2539'. [ 291.170932][T14961] team_slave_1: entered promiscuous mode [ 291.205689][T14961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2537'. [ 291.320544][ T8325] bond7: (slave macvlan2): failed to get link speed/duplex [ 291.549931][T14969] syzkaller0: entered promiscuous mode [ 291.555942][T14969] syzkaller0: entered allmulticast mode [ 291.674214][T14999] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2544'. [ 293.734677][T15032] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2551'. [ 293.820308][T15035] Cannot find set identified by id 0 to match [ 293.833235][T15039] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2553'. [ 293.931675][T15039] veth1: entered allmulticast mode [ 294.078234][T15044] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.104913][T15058] syzkaller1: entered promiscuous mode [ 294.110692][T15058] syzkaller1: entered allmulticast mode [ 294.118488][T15059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2558'. [ 294.235855][T15064] netlink: 'syz.0.2559': attribute type 1 has an invalid length. [ 294.573489][T15092] netlink: 'syz.1.2562': attribute type 5 has an invalid length. [ 294.591839][ T8335] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 294.620717][T15092] netlink: 'syz.1.2562': attribute type 5 has an invalid length. [ 294.644304][T15092] netlink: 'syz.1.2562': attribute type 10 has an invalid length. [ 294.673806][T15092] netlink: 'syz.1.2562': attribute type 3 has an invalid length. [ 294.850580][ T8337] net_ratelimit: 12 callbacks suppressed [ 294.850603][ T8337] bond7: (slave macvlan2): failed to get link speed/duplex [ 294.877609][T15103] netlink: 'syz.5.2567': attribute type 1 has an invalid length. [ 294.927694][T15103] netlink: 'syz.5.2567': attribute type 3 has an invalid length. [ 294.968420][T15103] __nla_validate_parse: 1 callbacks suppressed [ 294.968438][T15103] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2567'. [ 295.010514][ T8329] bond7: (slave macvlan2): failed to get link speed/duplex [ 295.053334][T15103] NCSI netlink: No device for ifindex 813332851 [ 295.141108][ T8329] bond7: (slave macvlan2): failed to get link speed/duplex [ 295.272399][ T49] bond7: (slave macvlan2): failed to get link speed/duplex [ 295.344850][T15134] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2576'. [ 295.383345][T15137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2575'. [ 295.420015][T15136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2575'. [ 295.424691][ T8329] bond7: (slave macvlan2): failed to get link speed/duplex [ 295.477471][T15137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2575'. [ 295.562413][T15150] netlink: 'syz.6.2579': attribute type 1 has an invalid length. [ 295.665980][T15155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2580'. [ 295.717447][T15153] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 295.776962][T15153] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 295.807858][T15153] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 295.933633][T15155] 8021q: adding VLAN 0 to HW filter on device bond6 [ 295.974213][T15150] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 296.038530][T15150] bond2: (slave vcan1): making interface the new active one [ 296.061965][T15150] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 296.062105][T15171] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2582'. [ 296.101258][ T49] bond7: (slave macvlan2): failed to get link speed/duplex [ 296.179792][T15173] sctp: [Deprecated]: syz.3.2583 (pid 15173) Use of int in max_burst socket option deprecated. [ 296.179792][T15173] Use struct sctp_assoc_value instead [ 296.233134][ T49] bond7: (slave macvlan2): failed to get link speed/duplex [ 296.291747][T15178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.313214][T15181] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 296.323157][T15181] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2585'. [ 296.343858][T15178] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2586'. [ 296.368501][T15181] vlan1: entered allmulticast mode [ 296.378418][T15181] gretap0: entered allmulticast mode [ 296.410679][ T49] bond7: (slave macvlan2): failed to get link speed/duplex [ 296.549870][T15190] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 296.577738][T15195] netlink: 'syz.3.2591': attribute type 21 has an invalid length. [ 296.615064][T15187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2587'. [ 296.674683][T15195] bond10: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 296.745501][T15195] bond10 (unregistering): Released all slaves [ 297.403639][T15235] netlink: 'syz.0.2604': attribute type 2 has an invalid length. [ 297.544922][T15242] vlan2: entered promiscuous mode [ 297.560611][T15242] geneve1: entered promiscuous mode [ 297.574574][T15242] vlan2: entered allmulticast mode [ 297.946618][T15263] gretap0: entered promiscuous mode [ 298.843519][T15307] macvtap1: entered promiscuous mode [ 298.849137][T15307] macvtap1: entered allmulticast mode [ 298.855111][T15307] veth1_vlan: entered allmulticast mode [ 298.872796][T15309] macvtap2: entered promiscuous mode [ 298.879001][T15309] macvtap2: entered allmulticast mode [ 299.242618][T15325] bond13: entered promiscuous mode [ 299.277775][T15328] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.312413][T15328] bridge_slave_1: left allmulticast mode [ 299.320782][T15328] bridge_slave_1: left promiscuous mode [ 299.340794][T15328] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.345277][T15341] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 299.368545][T15328] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 299.391767][T15327] macvlan3: entered promiscuous mode [ 299.398030][T15327] macvlan3: entered allmulticast mode [ 299.405073][T15327] bond13: (slave macvlan3): Opening slave failed [ 299.853554][T15367] syzkaller0: entered promiscuous mode [ 299.859085][T15367] syzkaller0: entered allmulticast mode [ 299.912210][ T8331] net_ratelimit: 23 callbacks suppressed [ 299.912233][ T8331] bond7: (slave macvlan2): failed to get link speed/duplex [ 300.036586][T15388] xt_policy: output policy not valid in PREROUTING and INPUT [ 300.126885][T15392] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.141038][ T8329] bond7: (slave macvlan2): failed to get link speed/duplex [ 300.238262][T15401] __nla_validate_parse: 19 callbacks suppressed [ 300.238515][T15401] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2655'. [ 300.256429][T15401] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2655'. [ 300.270505][ T8335] bond7: (slave macvlan2): failed to get link speed/duplex [ 300.302067][T15401] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2655'. [ 300.343122][T15406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2657'. [ 300.378600][T15406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2657'. [ 300.392099][ T8329] bond7: (slave macvlan2): failed to get link speed/duplex [ 300.435432][T15410] validate_nla: 5 callbacks suppressed [ 300.435452][T15410] netlink: 'syz.1.2658': attribute type 62 has an invalid length. [ 300.458289][T15410] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.518279][T15410] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.538862][T15417] lo: entered promiscuous mode [ 300.560168][ T1801] block nbd1: Possible stuck request ffff8880265a0000: control (read@0,1024B). Runtime 90 seconds [ 300.572060][ T1801] block nbd1: Possible stuck request ffff8880265a0200: control (read@1024,1024B). Runtime 90 seconds [ 300.583161][ T1801] block nbd1: Possible stuck request ffff8880265a0400: control (read@2048,1024B). Runtime 90 seconds [ 300.594525][ T1801] block nbd1: Possible stuck request ffff8880265a0600: control (read@3072,1024B). Runtime 90 seconds [ 300.612241][T15417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 300.630841][ T8335] bond7: (slave macvlan2): failed to get link speed/duplex [ 300.675084][T15410] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.740269][T15379] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 300.750453][ T8335] bond7: (slave macvlan2): failed to get link speed/duplex [ 300.796298][T15410] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.862698][ T8331] bond7: (slave macvlan2): failed to get link speed/duplex [ 300.881785][T15430] syz_tun: entered allmulticast mode [ 300.899369][T15431] dvmrp8: entered allmulticast mode [ 300.915609][T15432] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 301.009921][T15440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2665'. [ 301.061825][T15440] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2665'. [ 301.078814][T15428] syzkaller0: entered promiscuous mode [ 301.085070][T15428] syzkaller0: entered allmulticast mode [ 301.096001][T15431] syz_tun: left allmulticast mode [ 301.113900][ T8331] bond7: (slave macvlan2): failed to get link speed/duplex [ 301.150140][ T8329] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.171753][ T5834] Bluetooth: hci5: link tx timeout [ 301.177100][ T5834] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 301.282066][T15444] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2666'. [ 302.674420][ T49] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.689824][ T49] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.736770][ T8339] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.857301][T15465] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 302.892058][T15465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.893635][T15469] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2674'. [ 302.935695][T15465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.957234][T15469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2674'. [ 303.150693][T15486] netlink: 'syz.1.2678': attribute type 1 has an invalid length. [ 303.158509][T15486] netlink: 'syz.1.2678': attribute type 1 has an invalid length. [ 303.190720][ T5829] Bluetooth: hci5: command 0x041b tx timeout [ 303.696464][T15515] sctp: [Deprecated]: syz.6.2686 (pid 15515) Use of int in max_burst socket option. [ 303.696464][T15515] Use struct sctp_assoc_value instead [ 304.537047][T15537] netlink: 'syz.6.2690': attribute type 1 has an invalid length. [ 305.158107][T15538] bond3: entered promiscuous mode [ 305.175400][T15538] bond3: entered allmulticast mode [ 305.204325][T15538] 8021q: adding VLAN 0 to HW filter on device bond3 [ 305.266075][T15539] bridge1: entered promiscuous mode [ 305.276082][T15539] bridge1: entered allmulticast mode [ 305.283066][ T8325] net_ratelimit: 3 callbacks suppressed [ 305.283084][ T8325] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 305.304809][T15539] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 305.397990][T15540] bridge2: entered promiscuous mode [ 305.405092][T15540] bridge2: entered allmulticast mode [ 305.411387][T15540] bond3: (slave bridge2): Enslaving as a backup interface with a down link [ 305.443296][ T8325] bond7: (slave macvlan2): failed to get link speed/duplex [ 305.465078][T15559] x_tables: duplicate underflow at hook 1 [ 305.465248][ T8335] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 305.571360][ T8325] bond7: (slave macvlan2): failed to get link speed/duplex [ 305.680578][ T8329] bond7: (slave macvlan2): failed to get link speed/duplex [ 305.790505][ T8339] bond7: (slave macvlan2): failed to get link speed/duplex [ 305.957605][T15578] veth0_macvtap: left allmulticast mode [ 305.978585][T15578] veth1_vlan: left allmulticast mode [ 305.997326][ T8325] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.009674][ T8325] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.019855][ T8325] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.029721][ T8325] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.622794][T15519] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 307.264480][T15650] netlink: 'syz.1.2711': attribute type 2 has an invalid length. [ 307.297155][T15650] netlink: 119 bytes leftover after parsing attributes in process `syz.1.2711'. [ 307.842519][T15677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.853255][T15684] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2722'. [ 308.332205][T15713] netlink: 'syz.3.2727': attribute type 83 has an invalid length. [ 308.538117][T15726] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.2732'. [ 308.822122][T15732] netlink: 'syz.1.2733': attribute type 4 has an invalid length. [ 308.881170][T15737] netlink: 'syz.1.2733': attribute type 4 has an invalid length. [ 308.914165][T15738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2735'. [ 309.095873][T15738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2735'. [ 309.121330][T15746] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2736'. [ 309.140781][T15738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2735'. [ 309.285634][T15754] tipc: Enabling of bearer rejected, failed to enable media [ 309.507492][T15762] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2742'. [ 309.522950][T15760] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2741'. [ 309.529541][T15766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2743'. [ 309.560254][T15762] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.583864][T15769] netlink: 'syz.6.2744': attribute type 21 has an invalid length. [ 309.622566][T15766] x_tables: duplicate underflow at hook 1 [ 309.860576][T15789] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 309.936304][T15785] batman_adv: batadv0: Adding interface: dummy0 [ 309.945403][T15785] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.020772][T15785] batman_adv: batadv0: Interface activated: dummy0 [ 310.258184][T15810] netlink: 'syz.0.2754': attribute type 21 has an invalid length. [ 310.866493][T15842] netlink: 'syz.5.2762': attribute type 13 has an invalid length. [ 310.880696][T15842] netlink: 'syz.5.2762': attribute type 58 has an invalid length. [ 311.124846][T15862] syzkaller1: entered promiscuous mode [ 311.131235][T15862] syzkaller1: entered allmulticast mode [ 311.170173][T15862] syzkaller0: entered promiscuous mode [ 311.176680][T15862] syzkaller0: entered allmulticast mode [ 311.360669][T15867] netlink: 'syz.6.2768': attribute type 29 has an invalid length. [ 311.422563][T15867] : renamed from bond0 (while UP) [ 311.549918][T15874] x_tables: duplicate underflow at hook 3 [ 311.789422][T15886] netlink: 'syz.6.2773': attribute type 1 has an invalid length. [ 311.815703][T15883] tipc: Enabling of bearer rejected, failed to enable media [ 311.846867][T15886] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 312.093686][T15902] syzkaller0: entered promiscuous mode [ 312.119411][T15902] syzkaller0: entered allmulticast mode [ 312.412219][T15915] __nla_validate_parse: 6 callbacks suppressed [ 312.412242][T15915] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.2781'. [ 312.669176][T15928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2785'. [ 312.720746][T15927] tipc: Enabling of bearer rejected, already enabled [ 312.958722][T15942] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2786'. [ 312.975609][T15936] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2787'. [ 313.023550][T15936] netlink: 'syz.1.2787': attribute type 10 has an invalid length. [ 313.057052][T15936] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2787'. [ 313.243384][T15950] bond0: option packets_per_slave: invalid value (18446744073709551615) [ 313.253428][T15950] bond0: option packets_per_slave: allowed values 0 - 65535 [ 313.267941][T15950] bond0 (unregistering): Released all slaves [ 313.292626][T15956] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2792'. [ 313.609389][T15973] netlink: 'syz.6.2793': attribute type 1 has an invalid length. [ 313.614989][T15972] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2795'. [ 313.741627][T15982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2796'. [ 313.773872][T15973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.068579][T15995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2800'. [ 314.158980][T16002] nbd: must specify a size in bytes for the device [ 314.184482][T15995] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2800'. [ 314.593202][T16021] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 315.279795][T16070] netlink: 'syz.1.2818': attribute type 1 has an invalid length. [ 315.310549][T16070] netlink: 'syz.1.2818': attribute type 4 has an invalid length. [ 315.965486][T16105] nbd: couldn't find device at index 0 [ 315.982512][T16104] : entered promiscuous mode [ 316.249770][T16120] bond14: entered promiscuous mode [ 316.256533][T16120] bond14: entered allmulticast mode [ 316.266103][T16120] 8021q: adding VLAN 0 to HW filter on device bond14 [ 316.305228][T16120] netlink: 'syz.1.2832': attribute type 61 has an invalid length. [ 316.515461][T16125] netlink: 'syz.5.2834': attribute type 2 has an invalid length. [ 316.746288][T16148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.216855][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.668584][T16198] netlink: 'syz.5.2859': attribute type 10 has an invalid length. [ 317.709258][T16198] __nla_validate_parse: 19 callbacks suppressed [ 317.709280][T16198] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2859'. [ 317.771838][T16208] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2862'. [ 318.074452][T16215] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2867'. [ 318.136236][ T5829] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 318.145980][ T5829] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 318.155212][ T5829] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 318.171228][ T5829] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 318.180804][ T5829] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 318.505005][T16227] netlink: 'syz.6.2870': attribute type 1 has an invalid length. [ 318.525010][T16227] netlink: 228 bytes leftover after parsing attributes in process `syz.6.2870'. [ 318.544963][T16227] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2870'. [ 319.252024][T16251] sctp: [Deprecated]: syz.6.2875 (pid 16251) Use of int in maxseg socket option. [ 319.252024][T16251] Use struct sctp_assoc_value instead [ 319.509011][T16218] chnl_net:caif_netlink_parms(): no params data found [ 319.587393][T16259] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2878'. [ 319.776718][T16268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2879'. [ 319.901212][T16218] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.932034][T16218] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.939380][T16218] bridge_slave_0: entered allmulticast mode [ 319.963321][T16218] bridge_slave_0: entered promiscuous mode [ 319.994879][T16218] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.002619][T16218] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.020870][T16218] bridge_slave_1: entered allmulticast mode [ 320.034977][T16218] bridge_slave_1: entered promiscuous mode [ 320.086721][T16277] syzkaller0: entered promiscuous mode [ 320.093269][T16277] syzkaller0: entered allmulticast mode [ 320.134640][T16277] netlink: 'syz.6.2882': attribute type 5 has an invalid length. [ 320.151706][T16218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.175400][T16218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.232751][ T5829] Bluetooth: hci7: command tx timeout [ 320.366712][T16285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2885'. [ 320.376524][T16285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2885'. [ 320.386599][T16283] C: renamed from lo (while UP) [ 320.393590][T16283] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 320.433266][T16218] team0: Port device team_slave_0 added [ 320.445807][T16286] netlink: 'syz.0.2885': attribute type 11 has an invalid length. [ 320.470832][T16286] netlink: 'syz.0.2885': attribute type 11 has an invalid length. [ 320.488838][T16286] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2885'. [ 320.498254][T16218] team0: Port device team_slave_1 added [ 320.701916][T16218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.730669][T16218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.776770][T16218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.838693][T16218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.875553][T16218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.924564][T16218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.074299][T16218] hsr_slave_0: entered promiscuous mode [ 321.081549][T16218] hsr_slave_1: entered promiscuous mode [ 321.088181][T16218] debugfs: 'hsr0' already exists in 'hsr' [ 321.094128][T16218] Cannot create hsr debugfs directory [ 321.347438][T16307] bond8 (unregistering): Released all slaves [ 322.210802][T16344] : entered promiscuous mode [ 322.274089][T16350] syzkaller0: entered promiscuous mode [ 322.279639][T16350] syzkaller0: entered allmulticast mode [ 322.324986][ T5829] Bluetooth: hci7: command tx timeout [ 322.692241][T16218] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 322.716146][T16218] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 322.735443][T16218] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 322.765194][T16218] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 322.907389][T16384] __nla_validate_parse: 3 callbacks suppressed [ 322.907411][T16384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2911'. [ 323.105814][T16396] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2913'. [ 323.257486][T16218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.311265][T16218] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.347680][ T8339] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.354930][ T8339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.385374][ T8339] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.392633][ T8339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.568894][T16417] syzkaller0: entered promiscuous mode [ 323.602162][T16417] syzkaller0: entered allmulticast mode [ 323.706226][T16423] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2920'. [ 323.890090][T16218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.970238][T16218] veth0_vlan: entered promiscuous mode [ 323.985881][T16218] veth1_vlan: entered promiscuous mode [ 324.146372][T16218] veth0_macvtap: entered promiscuous mode [ 324.178362][T16218] veth1_macvtap: entered promiscuous mode [ 324.301746][T16218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.339535][T16444] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2926'. [ 324.368770][T16218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.391033][ T5829] Bluetooth: hci7: command tx timeout [ 324.488269][ T8331] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.508392][ T8331] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.529948][ T8331] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.542289][T16454] netlink: 'syz.3.2929': attribute type 21 has an invalid length. [ 324.579609][T16454] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2929'. [ 324.596960][ T8331] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.884143][T16473] tc_dump_action: action bad kind [ 324.926091][ T8331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.944119][ T8331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.042277][ T8325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.043095][T16478] syzkaller0: entered promiscuous mode [ 325.052688][ T8325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.099319][T16478] syzkaller0: entered allmulticast mode [ 325.172043][T16488] erspan0: entered promiscuous mode [ 325.216856][T16495] netlink: 'syz.6.2939': attribute type 11 has an invalid length. [ 325.301063][T16497] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2863'. [ 325.329268][T16497] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2863'. [ 325.398205][T16495] bridge0: port 3(gretap0) entered blocking state [ 325.421777][T16495] bridge0: port 3(gretap0) entered disabled state [ 325.463883][T16495] gretap0: entered promiscuous mode [ 325.491720][T16495] bridge0: port 3(gretap0) entered blocking state [ 325.498427][T16495] bridge0: port 3(gretap0) entered forwarding state [ 325.712033][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 325.722255][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 325.745612][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 325.747534][T16509] netlink: 'syz.1.2942': attribute type 21 has an invalid length. [ 325.768971][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 325.777407][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 325.889795][T16515] openvswitch: netlink: Key type 250 is out of range max 32 [ 325.925095][T16509] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 325.973280][T16518] netlink: 'syz.6.2943': attribute type 4 has an invalid length. [ 326.001120][T16509] bond1 (unregistering): Released all slaves [ 326.028298][T16511] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2942'. [ 326.038452][T16511] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2942'. [ 326.049910][T16511] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2942'. [ 326.071987][T16517] team0: Caught tx_queue_len zero misconfig [ 326.195594][T16521] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 326.471041][ T5829] Bluetooth: hci7: command tx timeout [ 326.715628][T16545] syzkaller0: entered promiscuous mode [ 326.722345][T16545] syzkaller0: entered allmulticast mode [ 326.945019][T16506] chnl_net:caif_netlink_parms(): no params data found [ 327.123357][T16506] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.131561][T16506] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.139236][T16506] bridge_slave_0: entered allmulticast mode [ 327.147838][T16506] bridge_slave_0: entered promiscuous mode [ 327.158974][T16506] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.166335][T16506] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.174521][T16506] bridge_slave_1: entered allmulticast mode [ 327.183922][T16506] bridge_slave_1: entered promiscuous mode [ 327.235287][T16506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.248401][T16506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.293239][T16506] team0: Port device team_slave_0 added [ 327.302618][T16506] team0: Port device team_slave_1 added [ 327.423018][T16506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.430056][T16506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.474513][T16506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.490775][T16506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.497909][T16506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.544751][T16506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.639254][T16506] hsr_slave_0: entered promiscuous mode [ 327.653918][T16506] hsr_slave_1: entered promiscuous mode [ 327.673243][T16506] debugfs: 'hsr0' already exists in 'hsr' [ 327.679072][T16506] Cannot create hsr debugfs directory [ 327.831092][ T5829] Bluetooth: hci2: command tx timeout [ 327.964731][T16597] syzkaller0: entered promiscuous mode [ 327.970278][T16597] syzkaller0: entered allmulticast mode [ 328.064620][T16506] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.079516][T16506] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.167092][T16506] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.190765][T16506] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.275966][T16506] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.286921][T16506] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.377350][T16506] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.391603][T16506] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.862559][T16506] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 328.896523][T16506] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 328.913899][T16506] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 328.928090][T16506] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 328.991811][T16629] __nla_validate_parse: 4 callbacks suppressed [ 328.991832][T16629] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2972'. [ 329.007470][T16629] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2972'. [ 329.176825][T16640] syzkaller0: entered promiscuous mode [ 329.193887][T16640] syzkaller0: entered allmulticast mode [ 329.332248][T16644] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2978'. [ 329.336355][T16506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.354352][T16644] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2978'. [ 329.388924][T16506] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.421252][ T8339] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.428501][ T8339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.518824][ T8339] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.526100][ T8339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.599333][T16506] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 329.610047][T16506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.726620][T16661] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 329.766706][T16661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2982'. [ 329.778510][T16665] netlink: 'syz.5.2983': attribute type 4 has an invalid length. [ 329.789683][T16661] openvswitch: netlink: Unknown nsh attribute 0 [ 329.910607][ T5834] Bluetooth: hci2: command tx timeout [ 330.084889][T16506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.153818][T16680] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2986'. [ 330.174425][T16506] veth0_vlan: entered promiscuous mode [ 330.206259][T16506] veth1_vlan: entered promiscuous mode [ 330.206308][T16680] netlink: 'syz.5.2986': attribute type 2 has an invalid length. [ 330.233558][T16680] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2986'. [ 330.271236][T16506] veth0_macvtap: entered promiscuous mode [ 330.284000][T16506] veth1_macvtap: entered promiscuous mode [ 330.323539][T16506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.349936][T16506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.394221][ T8325] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.407918][ T8325] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.421129][ T8325] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.430953][ T8325] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.443457][T16686] openvswitch: netlink: Key 2 has unexpected len 8 expected 4 [ 330.584159][ T8331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.612060][ T8331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.633644][ T1801] block nbd1: Possible stuck request ffff8880265a0000: control (read@0,1024B). Runtime 120 seconds [ 330.646313][ T1801] block nbd1: Possible stuck request ffff8880265a0200: control (read@1024,1024B). Runtime 120 seconds [ 330.661419][ T1801] block nbd1: Possible stuck request ffff8880265a0400: control (read@2048,1024B). Runtime 120 seconds [ 330.672589][ T1801] block nbd1: Possible stuck request ffff8880265a0600: control (read@3072,1024B). Runtime 120 seconds [ 330.749570][ T8325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.780590][ T8325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.854859][T16694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2990'. [ 330.932457][T16702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2990'. [ 331.224469][T16711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.237148][T16714] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2997'. [ 331.296674][T16716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.429576][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 331.443121][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 331.451723][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 331.464898][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 331.482556][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 331.991097][ T5834] Bluetooth: hci2: command 0x040f tx timeout [ 332.141467][T16746] xt_hashlimit: size too large, truncated to 1048576 [ 333.355818][T16721] chnl_net:caif_netlink_parms(): no params data found [ 333.431574][T16803] openvswitch: netlink: Flow actions attr not present in new flow. [ 333.535179][T16805] tipc: Started in network mode [ 333.540122][T16805] tipc: Node identity 0ec10f390e53, cluster identity 4711 [ 333.558429][T16805] tipc: Enabled bearer , priority 0 [ 333.567420][T16807] sctp: [Deprecated]: syz.1.3018 (pid 16807) Use of int in maxseg socket option. [ 333.567420][T16807] Use struct sctp_assoc_value instead [ 333.593040][ T5834] Bluetooth: hci3: command tx timeout [ 333.609928][T16805] sctp: [Deprecated]: syz.1.3018 (pid 16805) Use of int in maxseg socket option. [ 333.609928][T16805] Use struct sctp_assoc_value instead [ 333.637655][T16807] syzkaller0: entered promiscuous mode [ 333.644023][T16807] syzkaller0: entered allmulticast mode [ 333.692484][T16805] tipc: Resetting bearer [ 333.826517][T16824] syzkaller0: entered promiscuous mode [ 333.834698][T16824] syzkaller0: entered allmulticast mode [ 333.856039][T16721] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.873699][T16721] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.886722][T16721] bridge_slave_0: entered allmulticast mode [ 333.895326][T16721] bridge_slave_0: entered promiscuous mode [ 333.903609][T16804] tipc: Resetting bearer [ 333.954858][T16804] tipc: Disabling bearer [ 333.975051][T16721] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.982619][T16721] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.990005][T16721] bridge_slave_1: entered allmulticast mode [ 333.999613][T16721] bridge_slave_1: entered promiscuous mode [ 334.005973][ T8329] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x1a [ 334.077421][T16721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.080981][ T5834] Bluetooth: hci2: command 0x040f tx timeout [ 334.157095][T16721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.217478][T16721] team0: Port device team_slave_0 added [ 334.227485][T16721] team0: Port device team_slave_1 added [ 334.272970][T16721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.282355][T16842] __nla_validate_parse: 6 callbacks suppressed [ 334.282376][T16842] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3028'. [ 334.301628][T16721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.328867][T16721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.349318][T16721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.356859][T16721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.383504][T16721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.446904][T16847] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3030'. [ 334.477380][T16847] xt_nat: multiple ranges no longer supported [ 334.575606][T16845] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.583412][T16845] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.674600][T16845] bridge_slave_0: left allmulticast mode [ 334.680803][T16845] bridge_slave_0: left promiscuous mode [ 334.686732][T16845] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.715608][T16845] bridge_slave_1: left allmulticast mode [ 334.723537][T16845] bridge_slave_1: left promiscuous mode [ 334.729440][T16845] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.748786][T16845] bond0: (slave bond_slave_0): Releasing backup interface [ 334.777218][T16845] bond0: (slave bond_slave_1): Releasing backup interface [ 334.804315][T16845] team0: Port device team_slave_0 removed [ 334.820897][T16845] team0: Port device team_slave_1 removed [ 334.835028][T16845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.846796][T16845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.888942][T16845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.904630][T16845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.939275][T16845] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 335.021103][T16858] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 335.090146][T16721] hsr_slave_0: entered promiscuous mode [ 335.098875][T16721] hsr_slave_1: entered promiscuous mode [ 335.119120][T16721] debugfs: 'hsr0' already exists in 'hsr' [ 335.133441][T16721] Cannot create hsr debugfs directory [ 335.142911][T16858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3035'. [ 335.444149][T16876] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 335.492761][T16877] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 335.670996][ T5834] Bluetooth: hci3: command tx timeout [ 335.772237][T16721] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.785240][T16721] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.798108][T16721] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 335.949769][T16721] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.960968][T16721] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.972508][T16721] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 336.127018][T16721] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.139775][T16721] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.151032][ T5834] Bluetooth: hci2: command 0x040f tx timeout [ 336.160024][T16721] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 336.305241][T16721] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.330940][T16721] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.349921][T16721] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 336.371857][T16906] veth0: Caught tx_queue_len zero misconfig [ 336.378055][T16907] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3051'. [ 336.725608][T16721] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 336.948923][T16933] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3058'. [ 336.998970][T16721] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 337.026550][T16936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3059'. [ 337.054934][T16721] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 337.174869][T16721] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 337.286575][T16956] netlink: 'syz.6.3061': attribute type 1 has an invalid length. [ 337.320766][T16956] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3061'. [ 337.379509][T16965] netlink: 'syz.3.3064': attribute type 39 has an invalid length. [ 337.500288][T16967] netlink: 'syz.1.3065': attribute type 9 has an invalid length. [ 337.570993][T16968] syzkaller1: entered promiscuous mode [ 337.580609][T16968] syzkaller1: entered allmulticast mode [ 337.682543][T16977] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3066'. [ 337.750519][ T5834] Bluetooth: hci3: command tx timeout [ 337.768189][T16979] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3067'. [ 337.861201][T16987] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3070'. [ 337.932923][T16987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.017463][T16987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.110936][T16721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.168211][T16721] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.215839][ T8337] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.223094][ T8337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.276071][ T8337] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.283432][ T8337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.477582][T17023] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 338.524065][T17025] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 338.619735][T17029] netlink: 'syz.1.3079': attribute type 39 has an invalid length. [ 338.675693][T17031] netlink: 'syz.1.3079': attribute type 1 has an invalid length. [ 338.781472][T17035] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 338.807984][T17035] bond1: (slave bridge2): Enslaving as a backup interface with a down link [ 338.846853][T17038] vlan0: entered promiscuous mode [ 338.861853][T17038] bridge0: entered promiscuous mode [ 338.937477][T16721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.024855][T17042] netlink: 'syz.6.3083': attribute type 4 has an invalid length. [ 339.088966][T16721] veth0_vlan: entered promiscuous mode [ 339.110260][T16721] veth1_vlan: entered promiscuous mode [ 339.177062][T17010] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 339.212701][T16721] veth0_macvtap: entered promiscuous mode [ 339.264579][T17051] erspan0: entered promiscuous mode [ 339.278270][T17051] erspan0: entered allmulticast mode [ 339.300122][T16721] veth1_macvtap: entered promiscuous mode [ 339.400149][T16721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.437537][T16721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.479487][ T8325] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.488648][ T8325] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.539152][ T8325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.553706][ T8325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.717835][T17074] xt_hashlimit: size too large, truncated to 1048576 [ 339.776279][ T8331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.784205][T17072] atomic_op ffff88804e941198 conn xmit_atomic 0000000000000000 [ 339.803464][ T8331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.831875][ T5834] Bluetooth: hci3: command tx timeout [ 339.970665][ T8325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.981691][ T8325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.189677][T17086] syzkaller0: entered promiscuous mode [ 340.204697][T17086] syzkaller0: entered allmulticast mode [ 340.376085][T17097] netlink: 'syz.0.3100': attribute type 21 has an invalid length. [ 340.406842][T17097] __nla_validate_parse: 36 callbacks suppressed [ 340.406865][T17097] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3100'. [ 340.646777][T17110] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3105'. [ 340.721880][T17113] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3106'. [ 340.816220][T17121] syzkaller0: entered promiscuous mode [ 340.830533][T17121] syzkaller0: entered allmulticast mode [ 341.361494][T17159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.533557][T17162] netlink: 'syz.5.3122': attribute type 2 has an invalid length. [ 341.543412][T17162] netlink: 'syz.5.3122': attribute type 1 has an invalid length. [ 341.692947][T17171] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3125'. [ 341.719731][T17174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3126'. [ 341.772239][T17171] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3125'. [ 341.790805][T17177] syzkaller0: entered promiscuous mode [ 341.796345][T17177] syzkaller0: entered allmulticast mode [ 341.822154][T17177] tipc: Started in network mode [ 341.832009][T17177] tipc: Node identity 128afb38e3fc, cluster identity 4711 [ 341.852048][T17177] tipc: Enabled bearer , priority 0 [ 341.941029][T17176] tipc: Resetting bearer [ 341.983181][T17191] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3127'. [ 342.021819][T17176] tipc: Disabling bearer [ 342.243965][T17200] bond4: (slave bond_slave_1): Device is not our slave [ 342.257064][T17200] bond4: option active_slave: invalid value (bond_slave_1) [ 342.271421][T17200] bond4 (unregistering): Released all slaves [ 342.317977][T17207] netem: change failed [ 342.359297][T17210] pim6reg: entered allmulticast mode [ 342.380247][T17210] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3137'. [ 342.416973][T17210] pim6reg: left allmulticast mode [ 342.675061][T17223] netlink: 'syz.1.3141': attribute type 21 has an invalid length. [ 342.683191][T17221] netlink: 'syz.1.3141': attribute type 21 has an invalid length. [ 342.691480][T17221] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3141'. [ 342.702902][T17223] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3141'. [ 342.715530][T17227] netlink: 'syz.6.3143': attribute type 4 has an invalid length. [ 342.719074][T17221] netlink: 'syz.1.3141': attribute type 4 has an invalid length. [ 342.750015][T17221] netlink: 'syz.1.3141': attribute type 5 has an invalid length. [ 342.772098][T17223] netlink: 'syz.1.3141': attribute type 4 has an invalid length. [ 342.779966][T17223] netlink: 'syz.1.3141': attribute type 5 has an invalid length. [ 342.842559][T17238] netlink: 'syz.3.3145': attribute type 3 has an invalid length. [ 342.951796][T17242] netlink: 'syz.1.3148': attribute type 83 has an invalid length. [ 342.990633][T17247] netlink: 'syz.6.3147': attribute type 10 has an invalid length. [ 343.015076][T17247] veth0_macvtap: left promiscuous mode [ 343.125266][T17253] IPVS: set_ctl: invalid protocol: 43 172.20.20.13:20000 [ 343.540700][T17268] block nbd3: server does not support multiple connections per device. [ 343.552687][T17268] block nbd3: shutting down sockets [ 343.708238][T17277] Bluetooth: MGMT ver 1.23 [ 344.023244][T17293] syzkaller1: entered promiscuous mode [ 344.028787][T17293] syzkaller1: entered allmulticast mode [ 344.178556][T17304] nftables ruleset with unbound chain [ 344.656174][T17325] vxcan1 speed is unknown, defaulting to 1000 [ 344.672246][T17325] vxcan1 speed is unknown, defaulting to 1000 [ 344.693536][T17325] vxcan1 speed is unknown, defaulting to 1000 [ 345.271342][T17357] netlink: zone id is out of range [ 345.289935][T17357] netlink: del zone limit has 4 unknown bytes [ 345.388336][T17325] infiniband syz2: set active [ 345.393819][T17325] infiniband syz2: added vxcan1 [ 345.467377][ T980] vxcan1 speed is unknown, defaulting to 1000 [ 345.546611][T17325] RDS/IB: syz2: added [ 345.568816][T17325] smc: adding ib device syz2 with port count 1 [ 345.620861][T17325] smc: ib device syz2 port 1 has no pnetid [ 345.635934][T14165] vxcan1 speed is unknown, defaulting to 1000 [ 345.667101][T17325] vxcan1 speed is unknown, defaulting to 1000 [ 345.703800][T17375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.202068][T17364] vxcan1 speed is unknown, defaulting to 1000 [ 346.671710][T17325] vxcan1 speed is unknown, defaulting to 1000 [ 346.703489][T17414] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 347.034504][T17417] bond1: option mode: invalid value (133) [ 347.070036][T17417] bond1 (unregistering): Released all slaves [ 347.275153][T17430] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 347.284005][T17325] vxcan1 speed is unknown, defaulting to 1000 [ 347.289433][T17429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.473534][T17436] __nla_validate_parse: 14 callbacks suppressed [ 347.473557][T17436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3212'. [ 347.497406][T17436] geneve2: entered promiscuous mode [ 347.634545][T17325] vxcan1 speed is unknown, defaulting to 1000 [ 347.901371][T17325] vxcan1 speed is unknown, defaulting to 1000 [ 348.163704][T17459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3218'. [ 348.246254][T17464] validate_nla: 7 callbacks suppressed [ 348.246274][T17464] netlink: 'syz.1.3218': attribute type 3 has an invalid length. [ 348.270017][T17464] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3218'. [ 348.289204][T17325] vxcan1 speed is unknown, defaulting to 1000 [ 348.585156][T17325] vxcan1 speed is unknown, defaulting to 1000 [ 348.852055][T17479] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3223'. [ 348.913121][T17325] vxcan1 speed is unknown, defaulting to 1000 [ 348.977354][T17481] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3224'. [ 348.991685][T17481] syzkaller0: entered promiscuous mode [ 348.997594][T17481] syzkaller0: entered allmulticast mode [ 349.166284][T17325] vxcan1 speed is unknown, defaulting to 1000 [ 349.334156][T17325] vxcan1 speed is unknown, defaulting to 1000 [ 350.123818][T17500] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3229'. [ 350.601808][T17444] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 350.823289][T17514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3233'. [ 350.823953][T17515] netlink: 120 bytes leftover after parsing attributes in process `syz.5.3235'. [ 351.144438][T17537] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3242'. [ 351.158472][T17537] netlink: 'syz.5.3242': attribute type 2 has an invalid length. [ 351.404092][T17552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3244'. [ 351.610065][T17562] xt_hashlimit: size too large, truncated to 1048576 [ 352.096822][T17590] netlink: 'syz.3.3249': attribute type 1 has an invalid length. [ 352.159005][T17590] netlink: 'syz.3.3249': attribute type 3 has an invalid length. [ 352.187073][T17590] NCSI netlink: No device for ifindex 813332851 [ 352.542675][T17617] xt_TPROXY: Can be used only with -p tcp or -p udp [ 352.627004][T17620] x_tables: duplicate underflow at hook 2 [ 352.642595][T17620] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 353.047554][T17653] netlink: 'syz.1.3268': attribute type 1 has an invalid length. [ 353.390887][T17674] __nla_validate_parse: 25 callbacks suppressed [ 353.390909][T17674] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3274'. [ 353.938989][T17694] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3280'. [ 354.037877][T17696] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3281'. [ 354.114638][T17698] sock: sock_set_timeout: `syz.5.3283' (pid 17698) tries to set negative timeout [ 354.137275][T17703] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 354.159552][T17703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3282'. [ 354.186861][T17703] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3282'. [ 354.434209][T17720] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3285'. [ 354.446917][T17714] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3286'. [ 354.508597][T17725] netlink: 'syz.1.3285': attribute type 11 has an invalid length. [ 354.516936][T17725] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3285'. [ 355.052983][T17755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3295'. [ 355.067542][T17755] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.082534][T17755] bridge_slave_0 (unregistering): left allmulticast mode [ 355.089641][T17755] bridge_slave_0 (unregistering): left promiscuous mode [ 355.097975][T17755] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.109659][T17756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.347245][T17766] syzkaller0: entered promiscuous mode [ 355.354127][T17766] syzkaller0: entered allmulticast mode [ 355.480298][T17773] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3300'. [ 355.602177][T17777] openvswitch: netlink: Flow actions attr not present in new flow. [ 356.044388][T17798] nbd: device at index 3 is going down [ 356.052935][T17798] netlink: 'syz.3.3306': attribute type 1 has an invalid length. [ 356.079097][T17798] netlink: 'syz.3.3306': attribute type 2 has an invalid length. [ 356.118194][T17798] netlink: 'syz.3.3306': attribute type 1 has an invalid length. [ 356.333445][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 356.626514][T17831] netlink: 'syz.5.3315': attribute type 2 has an invalid length. [ 356.969459][T17850] netlink: 'syz.1.3319': attribute type 9 has an invalid length. [ 357.005708][T17850] netlink: 'syz.1.3319': attribute type 11 has an invalid length. [ 357.033345][T17850] netlink: 'syz.1.3319': attribute type 12 has an invalid length. [ 357.041277][T17857] netlink: 'syz.6.3321': attribute type 1 has an invalid length. [ 357.936859][T17913] openvswitch: netlink: IP tunnel dst address not specified [ 358.073656][T17923] IPVS: Unknown mcast interface: vcan0 [ 358.183674][T17926] openvswitch: netlink: Key type 31 is not supported [ 358.244451][T17923] bridge3: entered promiscuous mode [ 358.250945][T17929] netlink: 'syz.6.3342': attribute type 21 has an invalid length. [ 358.274439][T17923] bridge3: entered allmulticast mode [ 358.749799][T17953] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 358.786860][T17918] vxcan1 speed is unknown, defaulting to 1000 [ 359.153045][T17970] __nla_validate_parse: 16 callbacks suppressed [ 359.153067][T17970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3352'. [ 359.283715][T17972] sctp: [Deprecated]: syz.0.3353 (pid 17972) Use of int in maxseg socket option. [ 359.283715][T17972] Use struct sctp_assoc_value instead [ 359.444487][T17980] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3355'. [ 359.822554][T17992] sch_fq: defrate 0 ignored. [ 360.000249][T17992] sch_fq: defrate 0 ignored. [ 360.060892][T17992] sch_fq: defrate 0 ignored. [ 360.111607][T17992] sch_fq: defrate 0 ignored. [ 360.174295][T18016] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3364'. [ 360.205096][T17992] sch_fq: defrate 0 ignored. [ 360.213425][T17992] sch_fq: defrate 0 ignored. [ 360.247957][T17992] sch_fq: defrate 0 ignored. [ 360.270534][T17992] sch_fq: defrate 0 ignored. [ 360.309856][T17992] sch_fq: defrate 0 ignored. [ 360.327675][T17992] sch_fq: defrate 0 ignored. [ 360.534041][T18035] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3370'. [ 360.712837][ T1801] block nbd1: Possible stuck request ffff8880265a0000: control (read@0,1024B). Runtime 150 seconds [ 360.727452][ T1801] block nbd1: Possible stuck request ffff8880265a0200: control (read@1024,1024B). Runtime 150 seconds [ 360.744566][ T1801] block nbd1: Possible stuck request ffff8880265a0400: control (read@2048,1024B). Runtime 150 seconds [ 360.755734][ T1801] block nbd1: Possible stuck request ffff8880265a0600: control (read@3072,1024B). Runtime 150 seconds [ 360.880068][T18043] can: request_module (can-proto-0) failed. [ 361.188182][T18061] netlink: 'syz.5.3379': attribute type 10 has an invalid length. [ 361.467083][T18082] xt_hashlimit: max too large, truncated to 1048576 [ 361.641166][T18096] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3386'. [ 361.692861][T18096] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 361.702723][T18099] netlink: 'syz.5.3387': attribute type 1 has an invalid length. [ 361.711322][T18096] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 361.729735][T18099] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 361.749238][T18102] xt_hashlimit: size too large, truncated to 1048576 [ 361.944343][T18115] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3390'. [ 361.957022][T18115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.976429][T18115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.076387][T18109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.164430][ T5934] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x1 [ 362.180782][ T5934] hid-generic 0005:0C49:1012.0001: ignoring exceeding usage max [ 362.182050][T18121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3391'. [ 362.192244][ T5934] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x4 [ 362.207238][ T5934] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x5 [ 362.215411][ T5934] hid-generic 0005:0C49:1012.0001: reserved main item tag 0xd [ 362.240745][ T5934] hid-generic 0005:0C49:1012.0001: item fetching failed at offset 31/106 [ 362.249971][ T5934] hid-generic 0005:0C49:1012.0001: probe with driver hid-generic failed with error -22 [ 362.264006][T18124] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3392'. [ 362.381164][T18131] IPVS: sync thread started: state = MASTER, mcast_ifn = xfrm0, syncid = 2, id = 0 [ 362.931843][T18157] netlink: 'syz.0.3400': attribute type 10 has an invalid length. [ 362.992639][T18157] team0: Device veth1_macvtap failed to register rx_handler [ 363.069388][T18160] netlink: 'syz.6.3401': attribute type 10 has an invalid length. [ 363.085774][T18160] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.114573][T18160] bridge_slave_1: left allmulticast mode [ 363.122454][T18166] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3403'. [ 363.131507][T18160] bridge_slave_1: left promiscuous mode [ 363.144038][T18160] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.183180][T18160] : (slave bridge_slave_1): Enslaving as an active interface with an up link [ 363.258394][T18170] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3404'. [ 363.381558][T18172] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 363.510794][ T5829] Bluetooth: hci3: command 0x0405 tx timeout [ 364.369946][T18217] syzkaller0: entered promiscuous mode [ 364.376871][T18217] syzkaller0: entered allmulticast mode [ 364.472553][T18217] __nla_validate_parse: 3 callbacks suppressed [ 364.472573][T18217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3419'. [ 364.532498][T18217] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3419'. [ 364.661675][T18219] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.715671][T18232] netlink: 'syz.3.3423': attribute type 2 has an invalid length. [ 364.724293][T18232] netlink: 119 bytes leftover after parsing attributes in process `syz.3.3423'. [ 364.769648][T18234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3424'. [ 364.846751][T18219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.865652][T18219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.058196][T18217] geneve2: entered promiscuous mode [ 365.063727][T18217] geneve2: entered allmulticast mode [ 365.074304][T18244] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3423'. [ 365.087176][T18228] mac80211_hwsim hwsim24 : renamed from wlan1 (while UP) [ 365.142024][T14165] vxcan1 speed is unknown, defaulting to 1000 [ 365.148184][T14165] syz2: Port: 1 Link DOWN [ 365.157576][ T5876] vxcan1 speed is unknown, defaulting to 1000 [ 365.263543][T18241] bridge3: port 1(veth3) entered blocking state [ 365.278789][T18241] bridge3: port 1(veth3) entered disabled state [ 365.287282][T18241] veth3: entered allmulticast mode [ 365.297594][T18241] veth3: entered promiscuous mode [ 365.352646][T18248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3426'. [ 365.677295][T18270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3428'. [ 367.035682][T18248] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 367.057510][T18260] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 367.069832][T18266] bridge6: entered promiscuous mode [ 367.121162][T18266] bridge6: entered allmulticast mode [ 367.160791][T18277] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3432'. [ 367.486023][T18298] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3439'. [ 367.605816][T18304] ip6t_srh: unknown srh match flags 4000 [ 367.688843][T18310] ipt_REJECT: TCP_RESET invalid for non-tcp [ 367.695259][T18309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3444'. [ 367.736128][T18309] batadv1: entered allmulticast mode [ 367.743124][T18309] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 367.756109][T18310] syzkaller0: entered promiscuous mode [ 367.767044][T18310] syzkaller0: entered allmulticast mode [ 368.192468][T18333] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 368.264822][T18340] netlink: 'syz.6.3452': attribute type 21 has an invalid length. [ 368.385940][T18340] bond6: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 368.454382][T18340] bond6 (unregistering): Released all slaves [ 368.598312][T18357] netlink: 'syz.5.3458': attribute type 8 has an invalid length. [ 368.614992][T18357] bond0: entered promiscuous mode [ 368.620127][T18357] bond_slave_0: entered promiscuous mode [ 368.626635][T18357] bond_slave_1: entered promiscuous mode [ 368.633750][T18357] bridge_slave_1: entered promiscuous mode [ 368.639863][T18357] mac80211_hwsim hwsim24 : entered promiscuous mode [ 368.652292][T18357] gretap0: entered promiscuous mode [ 368.723797][T18357] bond0: left promiscuous mode [ 368.744139][T18357] bond_slave_0: left promiscuous mode [ 368.749807][T18357] bond_slave_1: left promiscuous mode [ 368.758707][T18357] bridge_slave_1: left promiscuous mode [ 368.764788][T18357] mac80211_hwsim hwsim24 : left promiscuous mode [ 368.800894][T18357] gretap0: left promiscuous mode [ 369.127265][T18383] vlan2: entered promiscuous mode [ 369.137434][T18383] vlan2: entered allmulticast mode [ 369.144325][T18383] hsr_slave_1: entered allmulticast mode [ 369.457890][T18407] veth1_macvtap: left promiscuous mode [ 369.463708][T18407] macsec0: entered promiscuous mode [ 369.469807][T18407] macsec0: entered allmulticast mode [ 369.483898][T18407] veth1_macvtap: entered promiscuous mode [ 369.489787][T18407] veth1_macvtap: entered allmulticast mode [ 369.497976][T18407] macsec0: left promiscuous mode [ 369.505148][T18407] macsec0: left allmulticast mode [ 369.510521][T18407] veth1_macvtap: left allmulticast mode [ 369.932679][T18426] __nla_validate_parse: 4 callbacks suppressed [ 369.932695][T18426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3476'. [ 370.006972][T18429] openvswitch: netlink: IP tunnel TTL not specified. [ 370.203058][T18440] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3482'. [ 370.280076][T18445] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3483'. [ 370.496443][T18462] netlink: 'syz.1.3484': attribute type 1 has an invalid length. [ 370.504470][T18462] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3484'. [ 370.778722][T18477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3492'. [ 371.195267][T18502] gretap0: left promiscuous mode [ 371.201637][T18502] bridge0: port 3(gretap0) entered disabled state [ 371.241888][T18502] x9: left allmulticast mode [ 371.257335][T18502] x9: left promiscuous mode [ 371.274629][T18502] bridge0: port 1(1x9) entered disabled state [ 371.290281][T18502] : (slave bridge_slave_1): Releasing backup interface [ 371.316803][T18502] : (slave bond_slave_0): Releasing backup interface [ 371.338818][T18502] : (slave bond_slave_1): Releasing backup interface [ 371.402072][T18502] team0: Port device team_slave_0 removed [ 371.444294][T18502] team0: Port device team_slave_1 removed [ 371.457842][T18502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.467849][T18502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.480142][T18502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.487841][T18502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.500041][T18502] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 371.545217][ T980] syz1: Port: 1 Link DOWN [ 371.737104][T18520] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3503'. [ 371.755488][T18522] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3503'. [ 371.780806][T18520] 8021q: VLANs not supported on ip6gre0 [ 371.803917][T18522] 8021q: VLANs not supported on ip6gre0 [ 371.961827][T18535] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3507'. [ 372.100161][T18538] tipc: Enabled bearer , priority 0 [ 372.112993][T18538] tipc: Resetting bearer [ 372.119926][T18538] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3508'. [ 372.148999][T18537] tipc: Disabling bearer [ 372.194412][T18546] netlink: 'syz.6.3512': attribute type 1 has an invalid length. [ 372.205190][T18546] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3512'. [ 372.363962][T18550] syzkaller0: entered promiscuous mode [ 372.369510][T18550] syzkaller0: entered allmulticast mode [ 372.573382][T18563] tap0: tun_chr_ioctl cmd 1074025676 [ 372.578811][T18563] tap0: owner set to 0 [ 372.661328][T18568] syzkaller0: entered promiscuous mode [ 372.677990][T18568] syzkaller0: entered allmulticast mode [ 372.713707][T18568] tipc: Enabled bearer , priority 0 [ 372.731812][T18567] IPVS: Error connecting to the multicast addr [ 372.879402][T18580] mac80211_hwsim hwsim30 syzkaller0: left promiscuous mode [ 372.888923][T18580] mac80211_hwsim hwsim30 syzkaller0: left allmulticast mode [ 373.060296][T18586] bond6: entered promiscuous mode [ 373.066079][T18586] bond6: entered allmulticast mode [ 373.083825][T18586] 8021q: adding VLAN 0 to HW filter on device bond6 [ 373.126405][T18592] x_tables: unsorted underflow at hook 4 [ 373.187984][T18593] bond7: entered promiscuous mode [ 373.276372][T18593] bond7: entered allmulticast mode [ 373.314156][T18593] 8021q: adding VLAN 0 to HW filter on device bond7 [ 373.344407][T18607] netlink: 'syz.0.3527': attribute type 29 has an invalid length. [ 373.398017][T18559] tipc: Resetting bearer [ 373.446017][T18559] tipc: Disabling bearer [ 373.461355][T18608] netlink: 'syz.0.3527': attribute type 29 has an invalid length. [ 373.467692][T18614] nfacct_mt_checkentry: 55 callbacks suppressed [ 373.467738][T18614] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 373.597517][T18621] openvswitch: netlink: IP tunnel dst address not specified [ 373.658900][T18625] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 373.935853][T18641] openvswitch: netlink: IP tunnel dst address not specified [ 373.982300][T18642] netlink: 'syz.3.3540': attribute type 4 has an invalid length. [ 374.398489][T18672] vcan0: entered allmulticast mode [ 374.613265][T18692] netlink: 'syz.1.3552': attribute type 1 has an invalid length. [ 374.627114][T18692] netlink: 'syz.1.3552': attribute type 1 has an invalid length. [ 374.641079][T18695] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 374.672128][T18700] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 374.775893][T18702] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 375.282025][T18731] __nla_validate_parse: 5 callbacks suppressed [ 375.282045][T18731] netlink: 240 bytes leftover after parsing attributes in process `syz.6.3561'. [ 375.375087][T18735] xt_bpf: check failed: parse error [ 375.502525][T18737] SET target dimension over the limit! [ 375.568131][T18737] tipc: Enabled bearer , priority 0 [ 375.694211][T18737] tipc: Resetting bearer [ 375.874891][T18750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3567'. [ 376.006884][T18758] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3570'. [ 376.074634][T18762] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3571'. [ 376.179863][T18770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3574'. [ 376.212701][T18767] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3574'. [ 376.224379][T18770] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3574'. [ 376.271078][T18776] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3575'. [ 376.287077][T18767] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3574'. [ 376.297301][T18775] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3576'. [ 376.776351][T18799] netlink: 'syz.5.3584': attribute type 1 has an invalid length. [ 376.814354][T18806] IPv6: NLM_F_REPLACE set, but no existing node found! [ 376.952177][T18811] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 377.003071][T18811] syzkaller0: entered promiscuous mode [ 377.008780][T18811] syzkaller0: entered allmulticast mode [ 377.068466][ T8339] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.135145][ T8339] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.157322][T18823] netlink: 'syz.1.3590': attribute type 21 has an invalid length. [ 377.165493][ T8339] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.165544][ T8339] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.268167][T18826] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 377.354858][T18833] netlink: 'syz.5.3594': attribute type 2 has an invalid length. [ 377.402576][T18836] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 377.533291][T18839] netlink: 'syz.6.3596': attribute type 11 has an invalid length. [ 377.553962][T18839] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 377.564624][T18839] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 377.877532][T18852] vcan0 (unregistering): left allmulticast mode [ 378.059564][T18865] erspan0: entered allmulticast mode [ 378.824603][T18899] smc: removing ib device syz2 [ 378.836241][T18900] netlink: 'syz.6.3617': attribute type 29 has an invalid length. [ 378.851035][T18900] netlink: 'syz.6.3617': attribute type 29 has an invalid length. [ 379.755137][T18923] syz.5.3624 uses old SIOCAX25GETINFO [ 380.102454][T18944] bond0: invalid ARP target 0.0.0.0 specified for addition [ 380.115243][T18944] bond0: option arp_ip_target: invalid value (0) [ 380.625608][T18949] syzkaller1: entered promiscuous mode [ 380.667748][T18949] syzkaller1: entered allmulticast mode [ 380.705249][T18962] netlink: 'syz.6.3635': attribute type 1 has an invalid length. [ 382.174201][T19021] __nla_validate_parse: 17 callbacks suppressed [ 382.174224][T19021] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3648'. [ 382.346306][T19026] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3649'. [ 382.691192][T19046] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3656'. [ 382.891624][T19051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3657'. [ 382.927234][T19051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3657'. [ 382.970493][ T8329] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.982031][T19051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3657'. [ 383.003717][ T8329] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.017149][T19051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3657'. [ 383.187399][ T8343] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.221328][ T8343] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.256124][T19060] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode [ 383.612169][T19065] netlink: 'syz.6.3662': attribute type 1 has an invalid length. [ 383.629645][T19065] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3662'. [ 383.646733][T19065] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3662'. [ 383.657325][T19065] netlink: 658 bytes leftover after parsing attributes in process `syz.6.3662'. [ 383.881843][T19092] syzkaller0: entered promiscuous mode [ 383.888089][T19092] syzkaller0: entered allmulticast mode [ 384.023689][T19100] openvswitch: netlink: IP tunnel TTL not specified. [ 384.185915][T19114] syzkaller0: entered promiscuous mode [ 384.192096][T19114] syzkaller0: entered allmulticast mode [ 384.570804][T19138] netlink: 'syz.0.3677': attribute type 1 has an invalid length. [ 384.599926][T19138] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 384.869882][T19165] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 385.125188][T19177] netlink: 'syz.6.3688': attribute type 1 has an invalid length. [ 385.204831][T19177] bond8: entered promiscuous mode [ 385.213652][T19177] 8021q: adding VLAN 0 to HW filter on device bond8 [ 385.235613][T19178] netlink: 'syz.3.3687': attribute type 1 has an invalid length. [ 385.276547][T19177] bond8: (slave bridge6): making interface the new active one [ 385.284996][T19177] bridge6: entered promiscuous mode [ 385.292701][T19177] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 385.392365][T19187] netlink: 'syz.5.3691': attribute type 1 has an invalid length. [ 385.663466][T19202] openvswitch: netlink: Key type 31 is not supported [ 385.737092][T19204] netlink: 'syz.6.3697': attribute type 6 has an invalid length. [ 385.745549][T19204] netlink: 'syz.6.3697': attribute type 5 has an invalid length. [ 385.932702][T19214] netlink: 'syz.5.3700': attribute type 1 has an invalid length. [ 386.043278][T19216] bond4: (slave vxcan2): The slave device specified does not support setting the MAC address [ 386.072194][T19216] bond4: (slave vxcan2): Setting fail_over_mac to active for active-backup mode [ 386.090082][T19216] bond4: (slave vxcan2): making interface the new active one [ 386.155514][T19216] bond4: (slave vxcan2): Enslaving as an active interface with an up link [ 386.531000][T19240] 8021q: adding VLAN 0 to HW filter on device bond3 [ 386.612964][T19246] 8021q: adding VLAN 0 to HW filter on device bond4 [ 387.299633][T19296] __nla_validate_parse: 16 callbacks suppressed [ 387.299656][T19296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3723'. [ 387.446978][T19305] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3724'. [ 387.479711][T19306] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3721'. [ 387.506653][T19309] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 387.926566][T19333] openvswitch: netlink: IP tunnel dst address not specified [ 388.235171][ T31] INFO: task syz.4.1850:12447 blocked for more than 143 seconds. [ 388.270510][ T31] Not tainted syzkaller #0 [ 388.276715][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 388.312584][ T31] task:syz.4.1850 state:D stack:25688 pid:12447 tgid:12446 ppid:5836 task_flags:0x400140 flags:0x00080002 [ 388.334126][ T31] Call Trace: [ 388.343224][T19350] syzkaller0: entered promiscuous mode [ 388.358626][T19350] syzkaller0: entered allmulticast mode [ 388.364869][ T31] [ 388.368207][ T31] __schedule+0x1585/0x5340 [ 388.375401][ T31] ? __pfx___schedule+0x10/0x10 [ 388.380845][ T31] ? schedule+0x90/0x360 [ 388.388175][T19353] x_tables: duplicate underflow at hook 1 [ 388.390435][ T31] schedule+0x164/0x360 [ 388.403016][ T31] schedule_preempt_disabled+0x13/0x30 [ 388.409970][ T31] __mutex_lock+0x7fe/0x1300 [ 388.416084][ T31] ? __mutex_lock+0x5ac/0x1300 [ 388.446064][ T31] ? nfsd_nl_threads_set_doit+0x2c4/0xa30 [ 388.459115][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 388.471940][ T31] ? net_generic+0x1e/0x240 [ 388.482431][ T31] ? net_generic+0x1e/0x240 [ 388.493602][ T31] nfsd_nl_threads_set_doit+0x2c4/0xa30 [ 388.501979][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 388.507883][ T31] ? __asan_memcpy+0x40/0x70 [ 388.513200][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 388.522188][ T31] ? bpf_lsm_capable+0x9/0x20 [ 388.527196][ T31] ? security_capable+0x7e/0x2c0 [ 388.540961][ T31] genl_rcv_msg+0x61c/0x7a0 [ 388.545970][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 388.551880][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 388.558488][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 388.564259][ T31] netlink_rcv_skb+0x232/0x4b0 [ 388.569454][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 388.574978][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 388.580620][ T31] ? down_read+0x272/0x2e0 [ 388.585960][ T31] ? genl_rcv+0xd/0x40 [ 388.590338][ T31] genl_rcv+0x28/0x40 [ 388.594631][ T31] netlink_unicast+0x80f/0x9b0 [ 388.599676][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 388.606350][ T31] ? netlink_sendmsg+0x650/0xb40 [ 388.611783][ T31] ? skb_put+0x11b/0x210 [ 388.616233][ T31] netlink_sendmsg+0x813/0xb40 [ 388.622426][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.627823][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 388.635268][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 388.640775][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.647375][ T31] ____sys_sendmsg+0xa68/0xad0 [ 388.652787][ T31] ? futex_unqueue+0x211/0x240 [ 388.658121][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.664045][ T31] ? import_iovec+0x73/0xa0 [ 388.668637][ T31] ___sys_sendmsg+0x2a5/0x360 [ 388.673524][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.678808][ T31] ? futex_wait+0x29a/0x380 [ 388.683511][ T31] ? __fget_files+0x2a/0x420 [ 388.688178][ T31] ? __fget_files+0x3a0/0x420 [ 388.693394][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 388.698410][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 388.704095][ T31] ? rcu_is_watching+0x15/0xb0 [ 388.708966][ T31] do_syscall_64+0x14d/0xf80 [ 388.713924][ T31] ? trace_irq_disable+0x3b/0x150 [ 388.721678][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.728036][ T31] ? clear_bhb_loop+0x40/0x90 [ 388.733181][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.739676][ T31] RIP: 0033:0x7f305e99c629 [ 388.744798][ T31] RSP: 002b:00007f305f856028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.755542][ T31] RAX: ffffffffffffffda RBX: 00007f305ec15fa0 RCX: 00007f305e99c629 [ 388.764726][ T31] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 0000000000000009 [ 388.772840][ T31] RBP: 00007f305ea32b39 R08: 0000000000000000 R09: 0000000000000000 [ 388.781466][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.789471][ T31] R13: 00007f305ec16038 R14: 00007f305ec15fa0 R15: 00007fff048f56d8 [ 388.798277][ T31] [ 388.856643][ T31] [ 388.856643][ T31] Showing all locks held in the system: [ 388.880816][ T31] 1 lock held by khungtaskd/31: [ 388.891289][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 388.916287][ T31] 4 locks held by udevd/5190: [ 388.921552][ T31] 2 locks held by getty/5581: [ 388.927528][ T31] #0: ffff8880362f10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 388.937945][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 388.948966][ T31] 3 locks held by kworker/u9:6/5834: [ 388.955245][ T31] #0: ffff88807823c948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 388.985950][ T31] #1: ffffc90004827c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 389.013637][ T31] #2: ffff88807b0f0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 389.038720][ T31] 1 lock held by udevd/5838: [ 389.060490][ T31] #0: ffff888026524358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 389.070269][ T31] 2 locks held by syz.2.1237/10243: [ 389.077800][ T31] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 389.091714][ T31] #1: ffffffff8ea86928 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 389.103445][ T31] 2 locks held by syz.4.1850/12447: [ 389.108822][ T31] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 389.119108][ T31] #1: ffffffff8ea86928 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2c4/0xa30 [ 389.130688][ T31] 3 locks held by kworker/u8:25/19081: [ 389.136527][ T31] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 389.149166][ T31] #1: ffffc9000473fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 389.160943][ T31] #2: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 389.170685][ T31] 2 locks held by syz.1.3738/19348: [ 389.176184][ T31] #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 389.185701][ T31] #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 389.199342][ T31] [ 389.202768][ T31] ============================================= [ 389.202768][ T31] [ 389.219293][ T31] NMI backtrace for cpu 1 [ 389.219331][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 389.219356][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 389.219369][ T31] Call Trace: [ 389.219378][ T31] [ 389.219387][ T31] dump_stack_lvl+0xe8/0x150 [ 389.219420][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 389.219444][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 389.219472][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 389.219500][ T31] sys_info+0x135/0x170 [ 389.219519][ T31] watchdog+0xfd9/0x1030 [ 389.219555][ T31] ? watchdog+0x21a/0x1030 [ 389.219591][ T31] kthread+0x388/0x470 [ 389.219611][ T31] ? __pfx_watchdog+0x10/0x10 [ 389.219639][ T31] ? __pfx_kthread+0x10/0x10 [ 389.219659][ T31] ret_from_fork+0x51e/0xb90 [ 389.219689][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 389.219714][ T31] ? __switch_to+0xc7d/0x1450 [ 389.219742][ T31] ? __pfx_kthread+0x10/0x10 [ 389.219762][ T31] ret_from_fork_asm+0x1a/0x30 [ 389.219810][ T31] [ 389.219819][ T31] Sending NMI from CPU 1 to CPUs 0: [ 389.352813][ C0] NMI backtrace for cpu 0 [ 389.352833][ C0] CPU: 0 UID: 0 PID: 8343 Comm: kworker/u8:20 Not tainted syzkaller #0 PREEMPT(full) [ 389.352854][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 389.352867][ C0] Workqueue: bat_events batadv_tt_purge [ 389.352895][ C0] RIP: 0010:__lock_acquire+0x1/0x2cf0 [ 389.352921][ C0] Code: 89 de ba 08 00 00 00 b9 0a 00 00 00 5b e9 d7 55 00 00 5b e9 81 7a 0e 0a cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 41 55 41 54 53 48 81 ec e8 00 00 00 65 48 8b 05 57 21 [ 389.352936][ C0] RSP: 0018:ffffc9001bff7920 EFLAGS: 00000006 [ 389.352951][ C0] RAX: 0000000000000000 RBX: 0000000000000246 RCX: 0000000000000000 [ 389.352962][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880783958d8 [ 389.352973][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 389.352982][ C0] R10: dffffc0000000000 R11: fffffbfff2022e57 R12: 0000000000000000 [ 389.352994][ C0] R13: ffff8880783958d8 R14: 0000000000000000 R15: 0000000000000001 [ 389.353006][ C0] FS: 0000000000000000(0000) GS:ffff888125466000(0000) knlGS:0000000000000000 [ 389.353027][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 389.353038][ C0] CR2: 00007f6a7f5e6158 CR3: 0000000075ebc000 CR4: 00000000003526f0 [ 389.353054][ C0] Call Trace: [ 389.353061][ C0] [ 389.353069][ C0] lock_acquire+0xf0/0x2e0 [ 389.353090][ C0] ? batadv_tt_local_purge+0x10a/0x340 [ 389.353111][ C0] ? batadv_tt_local_purge+0x2a7/0x340 [ 389.353133][ C0] ? batadv_tt_local_purge+0x10a/0x340 [ 389.353153][ C0] _raw_spin_lock_bh+0x36/0x50 [ 389.353176][ C0] ? batadv_tt_local_purge+0x10a/0x340 [ 389.353196][ C0] batadv_tt_local_purge+0x10a/0x340 [ 389.353222][ C0] batadv_tt_purge+0x35/0x9e0 [ 389.353245][ C0] ? process_scheduled_works+0xa25/0x1830 [ 389.353267][ C0] ? process_scheduled_works+0xa25/0x1830 [ 389.353289][ C0] process_scheduled_works+0xb02/0x1830 [ 389.353324][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 389.353349][ C0] ? assign_work+0x3d5/0x5e0 [ 389.353372][ C0] worker_thread+0xa50/0xfc0 [ 389.353408][ C0] kthread+0x388/0x470 [ 389.353424][ C0] ? __pfx_worker_thread+0x10/0x10 [ 389.353449][ C0] ? __pfx_kthread+0x10/0x10 [ 389.353465][ C0] ret_from_fork+0x51e/0xb90 [ 389.353489][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 389.353509][ C0] ? __switch_to+0xc7d/0x1450 [ 389.353529][ C0] ? __pfx_kthread+0x10/0x10 [ 389.353545][ C0] ret_from_fork_asm+0x1a/0x30 [ 389.353578][ C0] [ 389.613352][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 389.622155][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 389.631478][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 389.641652][ T31] Call Trace: [ 389.644967][ T31] [ 389.647942][ T31] vpanic+0x56c/0xa60 [ 389.652187][ T31] ? __pfx___schedule+0x10/0x10 [ 389.657252][ T31] ? __pfx_vpanic+0x10/0x10 [ 389.661996][ T31] ? __pfx_console_unlock+0x10/0x10 [ 389.667533][ T31] panic+0xc5/0xd0 [ 389.671318][ T31] ? __pfx_panic+0x10/0x10 [ 389.675804][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 389.681406][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 389.687714][ T31] watchdog+0x1023/0x1030 [ 389.692144][ T31] ? watchdog+0x21a/0x1030 [ 389.696880][ T31] kthread+0x388/0x470 [ 389.701077][ T31] ? __pfx_watchdog+0x10/0x10 [ 389.705790][ T31] ? __pfx_kthread+0x10/0x10 [ 389.710510][ T31] ret_from_fork+0x51e/0xb90 [ 389.715258][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 389.720650][ T31] ? __switch_to+0xc7d/0x1450 [ 389.725692][ T31] ? __pfx_kthread+0x10/0x10 [ 389.730527][ T31] ret_from_fork_asm+0x1a/0x30 [ 389.735809][ T31] [ 389.739813][ T31] Kernel Offset: disabled [ 389.744323][ T31] Rebooting in 86400 seconds..