last executing test programs: 1m30.94379607s ago: executing program 4 (id=2872): unshare(0x2c020400) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3c, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x703d26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a18}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xbf, 0x4}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) sendmmsg$inet6(r4, &(0x7f0000001bc0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0xf}, 0x6}, 0x1c, &(0x7f00000015c0)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="2d8ca65b999538a91c197b2d389d8ec77b35737a94f8167a53201920ffa60854a4adeb3c5d0ea830e9e96a5bc222467f5942df4f0fdb8404f74b8c5b067f80", 0x3f}, {&(0x7f0000001500)="d7bfeb5d3ec98c71daeae592d0e0cc2fe02173bb9ecbb1ea103b628f24b29e7831694ea01a1908ec4c7b61ab5d7870a95dc28db6f214a56cae9c6d55bb053c74818539add3ea7620e350061942edd5cd7b8b0528e7c202b10316c8e608e02e22388513bbeb490095529d5054b847cdc56a8769edf9f646c8be14951a3bd17ae8ce2c897d535c7e90e9c1df9d38ee874b656afd1892e905862ed5ef033853d0", 0x9f}], 0x3, &(0x7f0000001600)=[@pktinfo={{0x24, 0x29, 0x32, {@private0}}}, @dstopts_2292={{0xd0, 0x29, 0x4, {0x4, 0x16, '\x00', [@pad1, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xffffffff}, @calipso={0x7, 0x30, {0x0, 0xa, 0x5, 0x5, [0xffffffffffffff7f, 0x3, 0x4, 0x5, 0x9]}}, @generic={0x8, 0x64, "3fd22abf1a19bf728a992a398c62054ec7f9d3965e25a8be567581b35a4167a47bf3bb45c27cd177427c4f40c47b3b402e89c4cb4e07aa17f7ac9cdcf1d4c0d750e595e8dea76714e1481650e82eb168baff297dd320001a39fed66c2d08e6d43d2c7c27"}, @jumbo={0xc2, 0x4, 0x400}, @enc_lim={0x4, 0x1, 0x25}]}}}, @dstopts={{0x50, 0x29, 0x37, {0xd8, 0x6, '\x00', [@enc_lim={0x4, 0x1, 0xc5}, @ra={0x5, 0x2, 0xb}, @pad1, @calipso={0x7, 0x28, {0x2, 0x8, 0x8, 0x5, [0x5, 0x4, 0x8ef0, 0xffffffffffffffff]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xe9}}, @dstopts={{0x100, 0x29, 0x37, {0x2f, 0x1c, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0xe, 0x4, [0x9, 0x4, 0x8d8e, 0xffffffffffffffff, 0xc]}}, @generic={0x2, 0xa5, "0cfdff93b50871c0e42dd25cd6d455be97ba8da56f1a02d64e534106b1369b192ee4bac1de012bcf915ea401c78c008eae96a20d5ab5dbfddd240fd4c1f0b56e060af785b43e103356a8dce4e46f0651204c5149c82e32ce8081ce7f53396a895b61a2592f383e8dedbef7750a2f26809a91f17643ecf4431207b8ed018e56d84d7de5982f70171359764bc5df3702f28d0d647aecf950d2713dbfa1737063d71df968752c"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra, @enc_lim={0x4, 0x1, 0x9f}]}}}], 0x260}}, {{&(0x7f0000001880)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1ff}, 0x1c, &(0x7f0000001900)=[{&(0x7f00000018c0)="7488dc42ede6441242f90d05491374b9124becda69471a20bcc727472d8dc7514375570554123d8b5a8471a664da13dba48590e4b15ac5de60ce91", 0x3b}], 0x1, &(0x7f0000001940)=[@pktinfo={{0x24, 0x29, 0x32, {@local, r6}}}, @flowinfo={{0x14, 0x29, 0xb, 0xd9}}, @dstopts={{0x58, 0x29, 0x37, {0x2f, 0x7, '\x00', [@ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0xfff9}, @calipso={0x7, 0x28, {0x3, 0x8, 0xe3, 0xffff, [0x6, 0x3, 0x0, 0x8]}}, @ra={0x5, 0x2, 0x5}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x21, 0x0, '\x00', [@ra={0x5, 0x2, 0xa}]}}}, @hopopts_2292={{0xc0, 0x29, 0x36, {0x0, 0x14, '\x00', [@ra={0x5, 0x2, 0xfa9a}, @enc_lim={0x4, 0x1, 0xa}, @generic={0x5, 0x91, "6688129755feae539e9bbc67751821b067aad46eea44665e5c034ea88d6f762899a9ef657923d9227a2da045280a9193addc68cf4f5037a977397de339d8da057cbc5d8aab57166f6402c4a740a8f5e1d17e0fd6e236295d21e503f48ce0ef1574b6e14dbab2a1a8dac23d1faa10ee2c3cc9791f79747a99adbe97769ece5f832c7593ef845b17a46e20f397b5c739904c"}, @pad1, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hopopts_2292={{0x98, 0x29, 0x36, {0x33, 0xf, '\x00', [@ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @ra={0x5, 0x2, 0xca09}, @calipso={0x7, 0x38, {0x2, 0xc, 0xf0, 0x40, [0x3, 0x4, 0x2, 0x10, 0x4, 0xe8ee]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x5, 0xe, [0x1ff]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xd889}}, @flowinfo={{0x14, 0x29, 0xb, 0x7fffffff}}, @flowinfo={{0x14, 0x29, 0xb, 0x785}}], 0x258}}], 0x2, 0x24004010) close(r3) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1, 0x2}, 0x15) 1m30.538948411s ago: executing program 4 (id=2877): r0 = socket$inet(0x2, 0x2, 0x1) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='ip6tnl0\x00'}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000080)="4c237487bf1dc0b43c4460", 0xb}, {0x0}], 0x2}}], 0x2, 0x2004000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0400000000000000000000000000000003000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000380)=""/73}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0d000000190001002cbd7000fbcbdf240a202000000000020024000008001e000600040014000500fe8800000000000000000000000001013b6998b1be439b668e5ea670e77e6f8ec01779e8598faea1a878e76f698058a42dc314303ff6086b75f40b300a0fd1119ba669b4c89d48048efd6bbe552eaf26d847e8164cfd5aff9eecceeedcda8d69387428315c8d6ec4650bb3bde2d3bd765705471ba3c314ac190708ec69ceeb01a1d02495fecc903be72006af997f90749e33"], 0x38}}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002000)={{0x14, 0x10, 0x4}, [@NFT_MSG_DELSET={0x484, 0xb, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DESC={0x44c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xc8, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x322}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf909}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc6a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_CONCAT={0x70, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x93}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7e1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_CONCAT={0x1f8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf40000}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9ae1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff22}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x621}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7a8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xae}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffc00}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff52}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x96b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x34}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffc01}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_CONCAT={0x10c, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x77b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5dd8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd92b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb85}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x86}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xaf}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x96}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3b9df41b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x389}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x786}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x101}]}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6fbc}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x570}, 0x1, 0x0, 0x0, 0x4800}, 0x2404c004) recvmsg(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000340)=""/207, 0xcf}], 0x1, 0x0, 0xffffffffffffff74}, 0x20060) getsockopt$bt_hci(r9, 0x0, 0x3, &(0x7f0000000fc0)=""/4096, &(0x7f0000001fc0)=0x1000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000037000000000a20000000000a01030000000000000000010000010900010073797a310000000034000000030a01020000000000000000010000000900010073797a310000000008000540fffffffc0400f67f08000b"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000201030000000000000000000a1000040c0019800800020001000000180002"], 0x38}, 0x1, 0x0, 0x0, 0x44008000}, 0x40008d2) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="0a000000010001", 0x7) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x70bd40, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x71516}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xdc6a}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) 1m29.728597572s ago: executing program 4 (id=2887): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) unshare(0x2c020400) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x80, r2}, 0x38) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x38}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000024c0), r3) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1f, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002075682500000000002020207b1af8ff00000000bfa10000000000000701000009ffffffb702000000000000b7030000010400008500000004000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, r5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="1808000000000000000000004000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000b5090100000000009500000000000000b509000002000000639a04fe00000000b509000000000000c39a00fee1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0097664f064d80d73800000000000000b7050000080000004608f0ff76000000bf980000000000005608000000786adb4ebc36c44ae8ebd30000008500000007000000b7000000000000059500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r3, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fedbdf251e00000008000400ffffffff08000100", @ANYBLOB="1c"], 0x34}, 0x1, 0x0, 0x0, 0xcacbc4add21c9368}, 0x4040000) 1m29.580169717s ago: executing program 4 (id=2891): openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r6, @ANYBLOB="0500060001000000050007a1a1ffffff05000300df00000008000200", @ANYRES64=r4], 0x68}}, 0x0) 1m29.343756625s ago: executing program 4 (id=2894): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x4008800}}], 0x1, 0x8010) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491710d000000", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3c) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x20048040, &(0x7f00000001c0)={0x11, 0x4b71d3d28a13ff44, r6, 0x1, 0x26, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) unshare(0x24020400) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff0200000000000021389f95f8be8184d6d30000000000000001a80016ea1f000840032e5f54c92011148ed08734843cb12b000008036008fab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100ba1c00000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000680bb9ad809d5e1cace81b341", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) 1m28.137439175s ago: executing program 4 (id=2908): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x8000}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x1000}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_devices(r2, 0x0, 0x2, 0x0) write$cgroup_devices(r4, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001200326a03030000001b000000000000000010002b0005000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2800000aaaaaaaaaaaa08060601910006040009aaaaaaaaaaaa22a15142aaaaaaaaaa2b890c3a87"], 0x0) close(r1) 1m12.746495281s ago: executing program 32 (id=2908): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x8000}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x1000}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_devices(r2, 0x0, 0x2, 0x0) write$cgroup_devices(r4, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001200326a03030000001b000000000000000010002b0005000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2800000aaaaaaaaaaaa08060601910006040009aaaaaaaaaaaa22a15142aaaaaaaaaa2b890c3a87"], 0x0) close(r1) 5.403217543s ago: executing program 5 (id=3725): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000140)={0x33}, 0x8) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1e0101", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00('], 0x50, 0x7ffffff7}}], 0x1, 0xc050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x9, &(0x7f0000000700)=ANY=[@ANYBLOB="18080000d0ff0000000000000000000018000000", @ANYRES32, @ANYBLOB="00000000000000006608ffff00000000180000000000000000000000fcffff008520"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) r3 = getgid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={r2, 0xffffffffffffffff, r3}, 0xc) 5.076057463s ago: executing program 5 (id=3727): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000040)=0x3) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) socket(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x52, &(0x7f0000000400)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x1c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x1, 0x8, 0x6}}}}}}, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0x24, 0x4) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) listen(r3, 0x2) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) r7 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r7, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 4.755629206s ago: executing program 5 (id=3733): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000400)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x3}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000020000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96}, 0x28) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000d600000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @empty}, &(0x7f0000000040)=0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r3, r4, 0x25, 0x17, @void}, 0x10) 4.392755619s ago: executing program 5 (id=3737): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) (async) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x4}, 0x10) (async) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'xfrm0\x00', &(0x7f0000000300)=@ethtool_perm_addr}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r3, r3, 0x3a, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) r4 = socket$kcm(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf250100000014000200776732000000000000000000000000002400030000000000000000000000000000000000000000000000000000000000000000000006088030000080080003000700000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff48000080200004000a004e220000000120010000000000000000000000000001fa14000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39222c01008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c1400040002004e22ac1414aa00000000000000000800030004000000200004000a004e2300000005fe88000000000000000000000000010100100000060005000121000098000980940000800600010002000000080002007f0000010500030000000000060001000a00000014000200200100000000000000000000000000000500030002000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000200000008000200e000000205000300030000000600010002000000080002007f0000010500030003000000200004000a004e220000000dff020000000000000000000000000001020000000800030002000000c4000080240002007dc2e1ed365e02e2513ddefadb5de99be4d95fbf6f0b98b29ab06005070592c8200004000a004e2300010001ff0200000000000000000000000000010000000024000200a38ae58757ed082bbaf191266cd5eb3c1344d5c85f7027ed57243ad50f65917924000100000000000000000000000000000000000000000000000000000000000000000024000200d480776c593a9340566d58a953561005070bd09967d97ee699d5643ffb8edcd2080009800400008008000a"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x40001) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x51) (async) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x51) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x1, @mcast2}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)='\x00\x00', 0x2}, {&(0x7f0000001440)="43e3", 0x2}], 0x2, 0x0, 0x0, 0x900}, 0x60) (async) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x1, @mcast2}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)='\x00\x00', 0x2}, {&(0x7f0000001440)="43e3", 0x2}], 0x2, 0x0, 0x0, 0x900}, 0x60) r8 = accept4$unix(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000340)=0x6e, 0x800) recvmsg$unix(r8, &(0x7f0000004300)={&(0x7f0000000380), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000400)=""/25, 0x19}, {&(0x7f0000000440)=""/221, 0xdd}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/226, 0xe2}, {&(0x7f0000003140)=""/127, 0x7f}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x7, &(0x7f0000004240)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x12141) 2.507584541s ago: executing program 1 (id=3751): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x350, 0xffffffff, 0x0, 0x0, 0x1d8, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'ip6gretap0\x00', {0xf63}}}}, {{@ip={@rand_addr=0x64010102, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r1, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/247, 0xf7}, {&(0x7f0000002340)=""/166, 0xa6}], 0x4, &(0x7f0000002440)=""/167, 0xa7}, 0x50c8fd13738e417b) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@newtaction={0x5c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x9, 0x10000000, 0x4, 0x2c33}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x78, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x34, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x800}]}}}, {0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x20050800) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000500)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b953800000000030006000000000002000000000000000009000000000000020001000000000000000afcff000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf2531"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x1000000}, 0x0) bind$unix(r8, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r8, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFBRDADDR(r10, 0x891a, &(0x7f0000000240)={'ipvlan1\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) accept4$unix(r8, 0x0, 0x0, 0x80800) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000640)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 2.181258864s ago: executing program 2 (id=3754): socket(0x11, 0x5, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000280)={@local, @private0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000c40)=[{&(0x7f00000005c0)="0dadbf924f9fc19ec80e40d97dadc731131b02f64dffff000015b607366fbc13fa78695937a697dcb5362a00531c9df7557dc57e48781c9337a9f811ed7efeea992f99d0194b90b9ce44e4116b3661dd6565d9d3adac6c49a703615e21b491009135f7fb98c3b45a335b5458fecfc62dc70ebe758a68967943e528e5aa3483e635fd195c7b54fdfae77b5b1385021143bc485a4555aefaa50a", 0x99}, {&(0x7f00000008c0)="a7053cac5c4d278a80344b2db27a358f6e9206ed7c958225364e89a4302fcbe761daba92bb25f36ea80faf37fe849cc5c56f02000000ce1626ed42d35aec5e2d83711c3d637b4505e95b498634daefc5787da0c72e0c2c2826aa757e5cc3d66acdd8f325a8434f6f0b273fe13966a5465ca5db0dad6fcd738939e01d35fd2f20b16fa33c6e50b6d23327124106472c664252aa9376947c1241ea687eefdc6323448f2f98613a22a09e2501d68d094c3446280a018f", 0xb5}, {&(0x7f0000001100)="a6", 0x1}, {&(0x7f0000000580)='F', 0x1}], 0x4, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00'}) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00'}) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0xffffffffffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000001100010400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc020000000000000000000000000000140003006970766c616e3000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000080)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601e8ff0000000000000000000000057aa910e4000000"], 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)={0x58, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r6, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x4004) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) recvmmsg(r7, &(0x7f0000006100)=[{{0x0, 0xff74, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/98, 0x62}], 0x1, &(0x7f0000000300)=""/106, 0x6a}, 0x100}, {{0x0, 0x0, &(0x7f0000001f40), 0x1}, 0xa}], 0x2, 0x22300, 0x0) 2.064184314s ago: executing program 3 (id=3755): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newtaction={0x48, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}, [{0x4}, {0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x1d, {0x3, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000d0}, 0x0) socket$netlink(0x10, 0x3, 0x14) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r1) unshare(0x8040480) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0xffffff1f, 0x2, 0x81, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x50}}, 0x40002) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x114, 0x14, 0x8, 0x70bd27, 0x25dfdbfb, {0x3, 0x2e}, [@INET_DIAG_REQ_BYTECODE={0xa, 0x1, "29db53b12bd4"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "99f14b310f922e59c52a7d5811569c19191eb57664af3cc7055878bfd7854d4d1e29c829197455964474fbc6dce47a28380702db29e67dde85c2240a96cfd1dd83ad27ab42e1e72338a829bec7f26d0bd905afacdb876c88dff512ee83f2668de51fe48d4078712cd3f9e5950675740b1f3d74aa99b63c2c8e66c51be7e4463d0839184b60ae50279d95e512b60b864b63351eade3712876fdc82bd253557a077055d5116fc639beb882c57100ea04a3a89737620631e058a64784cbddcf5b5a349f98bc8a5c050435bdc98292b7dda714c445b8da81377882f25a0c24ea37ca435d22e8651c38540c4936a42ff4"}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000}, 0x48084) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0xa, 0x16, 0xb3, 0x40}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x17, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff7fffff}, @ldst={0x2, 0x3, 0x2, 0xa, 0x2, 0xfffffffffffffff0, 0xfffffffffffffffb}, @alu={0x4, 0x0, 0x9, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) 2.021212487s ago: executing program 3 (id=3756): socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x5, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) (async) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe004000000000000800040001000000", 0x24) (async) unshare(0x28000600) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000050000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYRES16=r2], 0x10) 1.839867885s ago: executing program 3 (id=3758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000840)="932c7c6e56fe8958b4c8175ddbec9cba", 0x10}], 0x1}}], 0x1, 0x40040) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1000}, 0xffffffffffffff22) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xf, 0x0, &(0x7f0000000240)="7993ff011900000000a63b00008f20", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) pselect6(0x40, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x3ff}, &(0x7f0000000000)={0x1f, 0x0, 0x8, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000280)="64586891ce3d4fc299d20bc445", 0xd4c0, r2, 0x4}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xd, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000300000000000000e43f000018110000f08c4cc4a8b48aead85c5a3aedcd3c3e1252916013a879bb1a1d09f436f026a7b7e84fb3990685eae5550372707f77", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6, r2}, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000ff0000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdffffff000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="401b34009f0605ff000000ee3100"/33, @ANYRES32=0x0, @ANYBLOB="2080000000000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r8, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x840) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="4000000018bd0ec1774f9a7a1a17ab05bfbda79032fb3fcdf4c97044d436086d1e5bf00cacd29b28d36e0db88a9f6e7d47889deb78bb64843b201eadad764c93711dfc5017fbf44482d9b1c64e27bdd1a6ee3d11bad54c169d4b9b22060fe70ac3c87e38806434e00bde61eb718ec49b46a2751853830912e732984e", @ANYRES16=0x0, @ANYBLOB="080028bd7000ffdbdf250200000008000700ac1414aa08000800ac1e0101080002000300000014000500fc000000000000000000000000000001"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="400000001400b59500000000000000000a380000", @ANYRES32=0x0, @ANYBLOB="14000100000000000000000000000002000000011400dcd4ca7f1e0e9163000000000010e081786086e51e74fb9c964675c49400000101"], 0x40}}, 0x0) socket(0x10, 0x803, 0x0) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000380)={0x5, "9b2bfd996c0be5abb43cb3b0dbe99f3a7926b4b8e032ee19cb719817a88a825ea1816942b4e9322bc95288a463141e5ac63db6b8a145be31b7616743ed728bb8f3bae936e132cf4d5bf66ad646ff4ccef51ec743af93382a56162bbefd23448915341fcaf41f1d0862316ab3dd7d1de6f02814ca5f5c03d29189749fef86a658"}) 1.585673677s ago: executing program 0 (id=3761): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="040044800800c800e00000027a01f380a2b4c1dbd4f221c0a1fd468ca63ae97de147e5bc2d0313377dc17591b491acf18312bee324decf810970090c77ec4ca173b12577aeb13c354245be77050365697b3b4707060c00045e46d612b09c487d7c9c94f778c0"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x5, 0x8, [@enum64={0x6, 0x1, 0x0, 0x13, 0x0, 0x4}, @struct={0xf, 0x6, 0x0, 0x4, 0x0, 0x3, [{0x0, 0x5, 0xaf7}, {0x5, 0x2, 0x97}, {0x1, 0x1, 0x3}, {0x4, 0x0, 0x7fffffff}, {0x6, 0x0, 0x6}, {0xa, 0x2, 0x10000}]}]}}, &(0x7f0000003340)=""/5, 0x8c, 0x5, 0x1, 0x6abb}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xffff, 0x1ff}}]}}]}, 0x48}}, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async, rerun: 64) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000001980)=""/4099, 0x1003}, {&(0x7f0000000180)=""/178, 0xb2}], 0x2) (async, rerun: 64) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000040)=0x1000) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000005ff070000000000000300000d"], &(0x7f0000000f40)=""/4089, 0x4a, 0xff9, 0x1, 0x32e}, 0x28) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000007ffffffe05000c000100000008000a00", @ANYRES32=r3], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r3, 0x25, 0x14, @void}, 0x10) 1.584223619s ago: executing program 1 (id=3762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x11) splice(r0, 0xfffffffffffffffe, r1, 0x0, 0x8, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) 1.383895485s ago: executing program 1 (id=3763): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000104000000080000030000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="811068000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100}, 0x94) (async) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000180)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000b0ff0000000000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000600009500000000000000b7020000000000007b9af8ff00000000d509000013ffffff7baaf0ff00000000bf9720000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b7000002000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x11, r2, 0x3cd30000) (async) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="06000000000000000a004e0700ffffdaff02000000000000000000000000000172000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000040000000a004e23000000ff20010000000000000000000000000000fe0f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000010000000000000000000000000000000000000000000000000000002100000000000000000000000000000000000000000000000a004e2000008000fc02000000000000000000000000000105a1412260d97c040b0000000000000000000000000000000000000000000000000000000000000000000000000000000000002de6fe00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000001fffc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000009fe880000000000000000000000000101d600"/650], 0x90) (async) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000800)={0x2, 0x4e24, @broadcast}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0}, 0x94) (async) r4 = socket$pptp(0x18, 0x1, 0x2) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0x3) (async, rerun: 64) bind$pptp(r4, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @local}}, 0x1e) (rerun: 64) connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r0, &(0x7f00000003c0)="e1ca456e207e36142b358e3d5356888902051c2f80951a481a6e649964cf99d504e7a4883826c61ec9ef380c4561191db44e22a41d8ed07e9d9aa0c1468186d17938001ae7966013e7ba4e8605b4dd4861b4e4612467d3ba16fade77e8fde96e9f13936c72db5b2f7c0a5b9c00842ee2eed1123e5aae7d0211d736e1ca0602d39a34159f6332f42f4754f7781aaf6e1c7b93954770b60a7b10cdd92265620805b2b34d0d6d08d749a8a5d9c343596720ff2b4b9abd3a3751eb", &(0x7f0000000480)=""/74, 0x4}, 0x20) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000340)=0x1) (async, rerun: 32) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000780)=""/210, 0xd2}], 0x1, 0x0, 0x0, 0x4404}, 0x48840) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async, rerun: 64) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r7, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/13, 0xc}], 0x100000000000004b, 0x4, 0xfffffffe) (async) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e24, @broadcast}, 0x10) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000040)="3c75c2015e8724b5a4c586f2ae924b277f0403ec773eab27570e28988217c9b056", 0x21) ioctl$BTRFS_IOC_ENCODED_WRITE(r5, 0x40809440, &(0x7f0000004840)={0x0, 0x0, 0x80000000, 0x0, 0x8, 0x2, 0x4, 0x7, 0x6}) 1.325539788s ago: executing program 1 (id=3764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000002020500000000000000000002000005240002800c000280040001003a00000014000180080001000000000008000200"], 0x38}, 0x1, 0x0, 0x0, 0x21fc4162903678c6}, 0x8880) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x3ee3a0bb753ce0b, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20044040) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000200)={0x64b, 0x8, '\x00', 0x1, &(0x7f00000001c0)=[0x0]}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x88}, [@generic={0x91, 0x1, 0x1, 0x68}]}, &(0x7f0000000c40)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001140)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000700)={0x2, 0x2, @start={r4, 0x1, "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", "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"}, [0x0, 0x3, 0x3, 0x2, 0x2, 0xb859, 0x8, 0x5, 0x4, 0x5, 0x6, 0x3, 0x86, 0x0, 0x8, 0x37, 0x0, 0x5, 0x8, 0x3, 0x80000000, 0x0, 0x8, 0x9, 0xccfb, 0x6, 0xa8f3, 0x0, 0x100000001, 0x6, 0x0, 0xff, 0x3, 0x0, 0x9081, 0x400, 0x6, 0x7e, 0x3, 0x5, 0x40, 0xfffffffffffffffc, 0x100000001, 0x10000000, 0x5, 0x3, 0xd, 0x6375, 0x9, 0x4, 0x6f39, 0xfffffffffffffc00, 0x6, 0x7, 0x3, 0x7, 0x4, 0x3, 0x5, 0x6, 0x7, 0xe93, 0x100000000, 0xffffffffffffff9b]}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f0000000200)={0x64b, 0x10, '\x00', 0x1, &(0x7f00000001c0)=[0x0, 0x0]}) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x88}}, &(0x7f0000000c40)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r6, 0x4048587b, &(0x7f0000002ec0)={{r5, 0x0, 0x240001, &(0x7f0000000040)={@align=0x100, {0x5f94, 0xbd8d, 0x8, 0x6}}, 0x6, 0x0, &(0x7f00000000c0)=0x22f5}, 0x1, &(0x7f0000002e80)=[{0x2, 0xe3b, &(0x7f0000002dc0)=':\x00', 0x0, 0x0, 0x20}]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="008400000000040014001a80100004800c000180"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.293154513s ago: executing program 5 (id=3765): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0xa, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r2) (async) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4) sendto$unix(r3, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0xfffffffffffffffc, 0x0, 0x8, 0x9, 0x400, 0x5, 0x4, 0x80, 0x80000000, 0x2, 0x75, 0x1}}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0xfffffffffffffffc, 0x0, 0x8, 0x9, 0x400, 0x5, 0x4, 0x80, 0x80000000, 0x2, 0x75, 0x1}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r5, @ANYRES32=0x0, @ANYBLOB="2110000003000001080006000000000000000000ec62ce0fc356a10d1cdee5a63edfec05f270169587da3c4de48fd9c40f668e"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002000)=@bpf_ext={0x1c, 0x12, &(0x7f00000005c0)=ANY=[@ANYBLOB="18290000", @ANYRES32, @ANYBLOB="000000000f340000852000000500000018170000", @ANYRES32, @ANYBLOB="0000000000000000185300000d00000000000000000000001851010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ff0000b7030000ff00000085000000060000000964fbffff000000"], &(0x7f0000000680)='GPL\x00', 0x8, 0x1000, &(0x7f0000000b80)=""/4096, 0x0, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001d40)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000001d80)={0x4, 0x3, 0xfc, 0x8}, 0x10, 0x12f8b, 0xffffffffffffffff, 0x9, &(0x7f0000001f00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001f40)=[{0x4, 0x2, 0x8, 0xb}, {0x4, 0x4, 0x0, 0x8}, {0x1, 0x1, 0x8, 0x9}, {0x1, 0x5, 0x10, 0xa}, {0x5, 0x5, 0x3, 0xc}, {0x1, 0x2, 0xb, 0x9}, {0x2, 0x4, 0x6, 0x2}, {0x4, 0x5, 0x7, 0xc}, {0x4, 0x5, 0x7, 0x5}], 0x10, 0x401}, 0x94) connect$inet(r7, &(0x7f0000000480)={0x2, 0x20, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r7, 0x0, 0x13, &(0x7f0000000140)=0x2, 0x4) (async) setsockopt$inet_int(r7, 0x0, 0x13, &(0x7f0000000140)=0x2, 0x4) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000f702010100000000000000000500ab930800044000005932280002800600034000010000060003400005000004000180080001000a010100080002"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000f702010100000000000000000500ab930800044000005932280002800600034000010000060003400005000004000180080001000a010100080002"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306800c00"], 0x13a0}, 0x1, 0x0, 0x0, 0x20000044}, 0xc000) setsockopt$inet_int(r7, 0x0, 0x17, 0x0, 0x0) socketpair(0x29, 0x4, 0x17d, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r9, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000000d14100029bd7000ffdbdf250800b0685b3e0003000000080001000200000008003e00040000000800010002000000080003000200000008003e00040000000800030002"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r9, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000000d14100029bd7000ffdbdf250800b0685b3e0003000000080001000200000008003e00040000000800010002000000080003000200000008003e00040000000800030002"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 1.290950504s ago: executing program 3 (id=3766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x26020480) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000050000000800000040"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-010d \x00'}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0xfff, 0x0, r2, 0x4, '\x00', 0x0, r3, 0x4, 0x3, 0x5}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, r1}, 0x38) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) 1.193947433s ago: executing program 2 (id=3767): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4a, 0x800000, 0x8, 0x9}) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) (rerun: 64) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000240)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000600)=0xfffffffffffffffa, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6e, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x8, &(0x7f0000000080)=0x4, 0x4) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf250c00000098000380080002000002000086000400d700981b00eb2e2466b3b726c12bfffe5f916f1716088a9129f9d2da6226169a994f49a227f189a859257dea7e53a46afb0f8effa4689efe631ffa5f5e03709c02ea2a233f6d2c07c3b6380fe7fa974a76dfc428dc644c22478cb94c83217b43614bd2be0f49c39ca3837272a44013a9140e1a515b99535bf6e26edb53433ca6a1ae000004000100180001801400020076657468305f746f5f62617461647600f833cc07ee2aa2ca3e981fad0c4b89a42f9297a4b66db88aac246a0e8c4f9d4c4791d942bfc60179"], 0xc4}, 0x1, 0x0, 0x0, 0x881}, 0x8000) (async) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) unshare(0x2c020400) (async) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x840) (async) write$nci(r7, &(0x7f0000000a80)=ANY=[@ANYBLOB="62e7"], 0x11) socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r11, &(0x7f00000001c0)={0x11, 0x17, r12, 0x1, 0x7, 0x6, @local}, 0x14) getsockname$packet(r11, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) 1.131908921s ago: executing program 0 (id=3768): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @local}, 0x83, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='syzkaller0\x00', 0x9, 0x9, 0x4}) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) (async) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000002880)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2f8, 0x2e8, 0x2e8, 0x2f8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0xffffff00, 0xffffff00, 0xffffff00], [0xffffffff, 0x0, 0xff, 0xff], 'veth0\x00', 'veth1_to_batadv\x00', {}, {}, 0x1d, 0x7, 0xe, 0x2}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x81, 0x8, 0xe, 'syz1\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x4, 0x0, 0x0, 'syz1\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bind$alg(r5, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) r7 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000000240)=0xffffff81, 0x4) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x175c}, 0x1, 0x0, 0x0, 0x4044084}, 0x1dc8b08251aa3334) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r8) (async) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) (async) connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1.103508936s ago: executing program 3 (id=3769): socket$unix(0x1, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000640)=[@in6={0xa, 0x4e23, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={r1, 0x4, "1fe473a8"}, &(0x7f0000000700)=0xc) r2 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r2, &(0x7f0000000040)="d93937f5a4264335cdef726eb393eb56a2ec451dc4ecb1f447fac3129349ab1be7bb6772192b174c3443191a0c2a997d70b6cc8cbbb600796b48b39e808cd5f73f2c20ad2db514ded8a28b9cfcdfc11c1f7a8c44330a1db2c47a58a96f2b41f27ad6ed51f2e8dc8ae1f3116f11fc10710b926e7906be81a1749e9713a65f214e28fa14dca5d1ee203643176e4de37cd60b9f4d28ec3753ca01c9120519bf5b1b1a3be60c32b4453d9895eeb7a9a5d1ef0b7fc0aa8f4f3f50205bf5a16619a70224821ffd8348e85b7339c33738d64b6fc7", 0xd1, 0x4, &(0x7f0000000200)={0x23, 0x46, 0x6, 0xc5}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r3}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280), &(0x7f0000000300)=0x4) listen(r5, 0x0) sendmmsg$inet6(r5, &(0x7f0000008c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004810) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r7}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r9}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r13, r12}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r4) socket$nl_netfilter(0x10, 0x3, 0xc) 1.045117942s ago: executing program 1 (id=3770): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x140, r1, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x610ce1de}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70f422a3}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xd8, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8f52}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c40392c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x64b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3a4a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfdc3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfa07}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70e30a7c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1767c9ff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe82d}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ab1}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4df47f24}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf7da}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e280133}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8b25}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x292c0f86}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a2e773}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e2d81fc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76dc9bbe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7e69}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fe3f2e9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d55}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x440f889a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6412c544}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4432}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x4004000}, 0xc000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000280)={@private0, 0x0}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@getnexthop={0x4c, 0x6a, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NHA_GROUPS={0x4}, @NHA_ID={0x8}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r2}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r3}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000085}, 0xb530a3845ef17b9d) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000580)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r5, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, r6, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004080}, 0x15) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000700)={"5e224c6f84ad2643c8c1dfdd5d3f6161", 0x0, 0x0, {0x3, 0xffff35d3}, {0x86, 0xff}, 0x8, [0x3, 0x5, 0x3, 0x80000000, 0x9, 0xff, 0x3, 0x6, 0x40, 0x2, 0x7fffffff, 0x6, 0x8, 0x6, 0x901, 0x4]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000880)={{r4}, r11, 0x14, @inherit={0x58, &(0x7f0000000800)={0x1, 0x2, 0x14ac, 0x7fffffff, {0x0, 0x4, 0x6, 0x3, 0x9a5}, [0x0, 0x7fffffff]}}, @name="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"}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)=@bridge_newvlan={0x60, 0x70, 0x118, 0x70bd26, 0x25dfdbff, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x18, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x23, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x20040080) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_GET(r13, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x38, 0x1409, 0x1, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r14 = accept$inet(0xffffffffffffffff, &(0x7f0000001ac0)={0x2, 0x0, @dev}, &(0x7f0000001b00)=0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r14, 0x0, 0x487, &(0x7f0000001b40)={{0x2, @multicast1, 0x4e20, 0x1, 'lblc\x00', 0x29, 0x31, 0x13}, {@multicast1, 0x4e21, 0x3, 0x0, 0x1000, 0x10000}}, 0x44) r15 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$sock(r15, &(0x7f0000002100)={&(0x7f0000001bc0)=@isdn={0x22, 0x4, 0x82, 0x5, 0x5}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001c40)="9ef4f65aa53e30d6098858bf2f83f2e2638c17e35b7f4754eda14b581695419efa5c8d9392871a73cb493130a6641a5858b370875e71b10e4df609a7a4501f6b1987a0630bbe93952ff18e5156c0a81e7c94e30c6c9bf48a033d65ae3bcd551b5ae2bbbfbf5d9dc0754330287d6c66b52b42978c39e987bf89a52d8f3d3505d46b354b6b8b71203015de854b4883e6da1540f2629674eabe3730f3e36cc813c681f07388f573", 0xa6}, {&(0x7f0000001d00)="fb9dae630c8e7a8d2322b800d4eaf843aa038bfd107e13694007a17261cc13fd9e7596cda9aa63d98207bc12732f9aa5c3d821c408326cdfbf179dfa8141d7055c76af07e0e398ed1794dcdbdb0487fcf37d08ddd98a458326f9f077c9ee85996f1300a5bd8f27e551398c6057", 0x6d}, {&(0x7f0000001d80)="d02d5fa6de0841a671fc716754bf65862ef8c44ddbac8306a5f15841e355766408fb9931b3ec14f7038debf237ec82e015e8651ed77520cf0b916e3b20a5a1228bb2e18ea86a3677144570f58dc6ec8789602d8ceca43ca0d9646a49fb8f256a827f8a5ecd94ef2284ceab1bde35a01270ab91ad9ec9c70ea4522787446e6a0d7e5d9d21d5985b8ab60f6cf5768339466d410717e2d510be8651c292c5044ee00e86ac9a00cc09251f5a385b30ac9255de740e33663140acbaaff4f8c572bf8f4e7a112be266cbfd4d748aa5d112ed77727c144df20ce6a0200d492b4c63c9bb1e716a3d659ead37", 0xe8}, {&(0x7f0000001e80)="8148dd982aef378fc0665b86621acbcfa9c0ee2b9ba8f13916335b87f50362d7a704cb2cc195cdbd1e5a0a4e237d32ba8d13ca9b10cd5321c45e80346df6ce4237f53a7fd6ced7edc2d610bb0bbe7e9c7ddb741d79f97004eb307e1314c66636ad6cf7af297b4ae264808acdc28ef7a0f03de2b48ed3e176c3cd8a9f982d6cf6f1646f5a6e9cb326ef7926eca2920c2d1dcded82971b184fe1cd0ae34eaf075de51bd99e5c9bcfb45dcaf314ef6dc37c08", 0xb1}, {&(0x7f0000001f40)="76ab1b7dd46cfe30f27a461020308679911036041901b6f74cbdab9421e2f03637836db243383b9d75f7253b6619f6879e159ac39512bc7b0bf0af0bfe8f8f4a1d6b55e8dc61b88dd614a903bc9fd1d0c459ccd476cce02bd159b76b856c4121432d7b349f3e79c5c669bb3d3076d4ebc9103ebee2c1973409fcc0744ad69f70f099b692c550", 0x86}], 0x5, &(0x7f0000002080)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x248f3669}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x60}, 0x40) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f00000027c0)={{r4, &(0x7f0000002140)='\x00', 0x101080, &(0x7f0000002180)={@_ha_fsid={[0x9]}, {0xd, 0x13, 0x7}}, 0x1, &(0x7f00000021c0)={@_ha_fsid}, &(0x7f0000002200)=0x7}, 0x6, &(0x7f0000002700)=[{0x1, 0xe36, &(0x7f0000002240)='{*\x00', &(0x7f0000002280)="f1fc119b95d1adf0d87c1a68c773578302a6e3141b510dff4942c71ead7fd5830305fcb2bb992d6e47321b5da58282c8d5b75e726ccbb271761327d63bc8c0eeb1df4a0667d542d6054b2c91129c31ff96ffb73baf", 0x55, 0x22}, {0x1, 0x51, &(0x7f0000002300)=')\x00', &(0x7f0000002340)="84d236", 0x3, 0x12}, {0x2, 0xffffffff, &(0x7f0000002380)='+\x00', &(0x7f00000023c0)="7eadadd358b65497fcb67ec610491c024d68c724faca5a0f05744d14f94bcbbce6ae72798e73bf4bb33635a75c8dd2a4be8713ccbda314c6b0a23a57f8bbe99799dd6eccfbdad927c9c609846d66a66a01a05416cbaf7439e57773f1e1dfe795c3fa20d5cef5ec83655cf14c9c74f31842cc754cd6f47c09c38db0378a0ff89a936a8947869560da1a1ebf33f5e85bf04df94a2404c85973e09fd5b00f858c425db5f597668f83093f81d3db47d9c9e263f15a38f66b4e3a80c2164e1f688c3a22c2f7c0b3f58c6837196d6a7fe7d76ef41da5", 0xd3, 0x10}, {0x0, 0x4, &(0x7f00000024c0)='/proc/sys/net/ipv4/tcp_congestion_control\x00', &(0x7f0000002500)="8985f5d5a8e08138548a643d600d7bb41e40e54b715d00bb3e6787a0cc2787242237c1341c17d4a2e082d694e79ae869ea04", 0x32}, {0x1, 0x7fff, &(0x7f0000002540)='\x00', &(0x7f0000002580)="ca009e2bdfda4a12b5c921c99fb65d5e90433ab490a9048440f0bf5abdebf9204b3a0479ee1d46d87c799d8c6432673be6b456c01f45e8be0bcf4ff31ba5aef354b93c5265b14fa219d482fb7fcb7e995565ebf3209e0bc5845dcc5223261dce506c2ec39511669d168a", 0x6a}, {0x2426f58fb7235797, 0xc9fe, &(0x7f0000002600)='\x00', &(0x7f0000002640)="a28e84559def1c340ed786f86b9293ada135670c18155a7a44c08268ebbad5e945a5c14037925dac20cc5965b63c2bbf340a788e0f1a2e88bc8ce721b1bc3c53309951fd30d02b90a1e4eaa5f6b3e2d70c07beab603ff4a51f3cd6b4733552f0e601d3fc50a7062214aa5da518531836be69c0cb1ccf10517c5355ba6610461deea704ef7aa52e5edef15e76d3", 0x8d, 0xa}]}) ioctl$sock_FIOGETOWN(r13, 0x8903, &(0x7f0000002840)=0x0) write$cgroup_pid(r16, &(0x7f0000002880)=r17, 0x12) sendmsg$NFC_CMD_GET_SE(r5, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x14, r6, 0x88, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20004800) ioctl$IOCTL_GET_NCIDEV_IDX(r16, 0x0, &(0x7f00000029c0)) 952.050581ms ago: executing program 2 (id=3771): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'hsr0\x00', {0x1}, 0x9}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 913.756025ms ago: executing program 0 (id=3772): r0 = socket$kcm(0x29, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) sendfile(r0, r1, 0x0, 0xffffffff000) 867.2087ms ago: executing program 1 (id=3773): setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0x10, 0x2, 0x4) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="78010000", @ANYRES16=r2, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0005000000000000001fff0000b5bff7bd94f60a03783d136d5c86f2a1", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES64=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8002}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="6a69c274386d178550cb864bd572", 0x0, 0xffff6340, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) getsockname$packet(r10, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r11], 0x5c}}, 0x40) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x884) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180fffffffe08000140000000000c000180080001006c6f67000900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) close(0x3) syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffce2a0000000000000011424203"], 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={&(0x7f00000000c0)="b8b3cfc82a4bcc894ab7507d1ec276a00508255f1c95d44b1596c3f1d77b8645b4b20804252402a3c76f29b6995d484812ae1596404045284330339d20512a00cc875d7f1f73ba993720fafce70176c100082e4b9e5abfca4e03a25bcbf2480be0277262d1398625f0029719f19b84caeb8103b8fc0fdef347193f", &(0x7f0000000140)=""/75, &(0x7f0000000340)="41a915379d00ad11b7923d9b5f096afda3dd9b4f0fb3b50018b1f70f3dbcbfd3791dbb23d66998d07c32c8cc67a76dee0a9907416f603ac95689db1335fa860739a5c2661c2bea972051dfab5a1446816ca4e28f64f26102a5661470ebcd5a6fa8c4f363", &(0x7f0000000440)="43133fccfe315bbadd23a65e9771d18770391f4b2fa9cc63b159dffe7306a13c25", 0x6, 0xffffffffffffffff, 0x4}, 0x38) 788.555568ms ago: executing program 0 (id=3774): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newsa={0x1e4, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, {0x3bc7, 0x7, 0x80000004}, {0x2, 0x0, 0xffffffff}, 0x70bd2d, 0x800000, 0x2, 0x4, 0x0, 0x4c}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @algo_auth_trunc={0x8d, 0x14, {{'hmac(sha256)\x00'}, 0x208, 0x80, "aef356316f6f7d6ab0f8637b42ff0300008aa309bdd3f9dcffb669556b74c61e032441fd13571c4c64597441f3cf2a548c89a004673b82b4618529a52c676f7c94"}}]}, 0x1e4}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xe, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r1, {0x6, 0x3}, {0x18}, {0x5, 0xfff1}}}, 0x24}}, 0x44014) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) 677.348992ms ago: executing program 2 (id=3775): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000080)='\x1a', 0x240000, &(0x7f00000000c0)={@_ha_fsid={[0x97, 0x5]}, {0xffff, 0x8, 0x5, 0x2000000009}}, 0x3d, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000140)=0x80}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@ipv4_getnexthop={0x34, 0x6a, 0xe2e, 0x70bd26, 0x25dfdbfd, {}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r2}, @NHA_MASTER={0x8, 0xa, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x8044) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x4080) syz_emit_ethernet(0x76, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000240)="b6", 0x1, 0x4048080, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c) recvmmsg(r5, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)=""/135, 0x87}, {0x0}, {&(0x7f0000000380)=""/176, 0xb0}, {0x0}, {&(0x7f0000000500)=""/239, 0xef}], 0x5, &(0x7f0000000700)=""/71, 0x47}, 0x7fffffff}], 0x1, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e2c742b0d000000000000000300000000200000", @ANYRES32=r1, @ANYBLOB="e00b00"/20, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05000000030000000400"/28], 0x50) getsockopt$inet6_int(r6, 0x29, 0x10, 0x0, &(0x7f0000000600)) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') 632.44444ms ago: executing program 5 (id=3776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) recvmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0xffe}], 0x4b8, 0x40002002, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000080)=0x55b6, 0x4) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b1600000000000000000200000a4000048018000180080001006f7366000c000280080001400000000424000180090001006d6173710000000014000280080002400000004208000340000000040900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x0) 472.012239ms ago: executing program 2 (id=3777): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000010000000000a00000000000006"], 0x30}}, 0x4090) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r2, &(0x7f0000000080), 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) (async) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) (async) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) (async) sendmsg$can_bcm(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000010000000000a00000000000006"], 0x30}}, 0x4090) (async) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000100)) (async) 471.435091ms ago: executing program 0 (id=3778): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) readv(r1, &(0x7f0000000900)=[{&(0x7f0000000300)=""/89, 0xffffff43}, {&(0x7f0000000540)=""/117, 0x75}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0700000000000000ffd50200000009000100737900032c000000030a0103df0096f683c800364fa000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESHEX=r2, @ANYRES8=r2, @ANYRES64=r2, @ANYRESOCT=r2], 0x7c}}, 0x4040084) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd28, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xfd, [0x0, 0x4, 0x0, 0x80, 0x0, 0x3, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb], 0x0, [0xfffe, 0x2, 0xfffe, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)=ANY=[@ANYRES8=r2], 0x94}}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r0, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) readv(r1, &(0x7f0000000900)=[{&(0x7f0000000300)=""/89, 0xffffff43}, {&(0x7f0000000540)=""/117, 0x75}], 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0700000000000000ffd50200000009000100737900032c000000030a0103df0096f683c800364fa000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESHEX=r2, @ANYRES8=r2, @ANYRES64=r2, @ANYRESOCT=r2], 0x7c}}, 0x4040084) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd28, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xfd, [0x0, 0x4, 0x0, 0x80, 0x0, 0x3, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb], 0x0, [0xfffe, 0x2, 0xfffe, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)=ANY=[@ANYRES8=r2], 0x94}}, 0x0) (async) 341.788768ms ago: executing program 2 (id=3779): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_128={{0x304}, "0c73eaaa9a770035", "c433d9121416aa748f348fa0247b0c97", "0ec455a5", "552d559314bd1946"}, 0x28) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe0}}, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000040a010100000000000000000a0000010900030073797a320000000083df0a63f183422e4215036c08a6377775327d731a22565a505990290b084f38d7af564b530c79f51a3b1c74ad86292d882c"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) close(0x3) socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) openat$cgroup_ro(r3, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x20000000002) sendfile(r5, r0, &(0x7f0000000100)=0x40, 0x101) 103.093483ms ago: executing program 0 (id=3780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000002020500000000000000000002000005240002800c000280040001003a00000014000180080001000000000008000200"], 0x38}, 0x1, 0x0, 0x0, 0x21fc4162903678c6}, 0x8880) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x3ee3a0bb753ce0b, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20044040) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000200)={0x64b, 0x8, '\x00', 0x1, &(0x7f00000001c0)=[0x0]}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x88}, [@generic={0x91, 0x1, 0x1, 0x68}]}, &(0x7f0000000c40)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001140)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000700)={0x2, 0x2, @start={r4, 0x1, "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", "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"}, [0x0, 0x3, 0x3, 0x2, 0x2, 0xb859, 0x8, 0x5, 0x4, 0x5, 0x6, 0x3, 0x86, 0x0, 0x8, 0x37, 0x0, 0x5, 0x8, 0x3, 0x80000000, 0x0, 0x8, 0x9, 0xccfb, 0x6, 0xa8f3, 0x0, 0x100000001, 0x6, 0x0, 0xff, 0x3, 0x0, 0x9081, 0x400, 0x6, 0x7e, 0x3, 0x5, 0x40, 0xfffffffffffffffc, 0x100000001, 0x10000000, 0x5, 0x3, 0xd, 0x6375, 0x9, 0x4, 0x6f39, 0xfffffffffffffc00, 0x6, 0x7, 0x3, 0x7, 0x4, 0x3, 0x5, 0x6, 0x7, 0xe93, 0x100000000, 0xffffffffffffff9b]}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f0000000200)={0x64b, 0x10, '\x00', 0x1, &(0x7f00000001c0)=[0x0, 0x0]}) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x88}}, &(0x7f0000000c40)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r6, 0x4048587b, &(0x7f0000002ec0)={{r5, 0x0, 0x240001, &(0x7f0000000040)={@align=0x100, {0x5f94, 0xbd8d, 0x8, 0x6}}, 0x6, 0x0, &(0x7f00000000c0)=0x22f5}, 0x1, &(0x7f0000002e80)=[{0x2, 0xe3b, &(0x7f0000002dc0)=':\x00', 0x0, 0x0, 0x20}]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="008400000000040014001a80100004800c000180"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 0s ago: executing program 3 (id=3781): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x439, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb881}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001080)=@newtfilter={0x7cc, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r4, {0x9}, {0xf9d690b100bbf911}, {0x10, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0xfff2}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0xfffffffa}, @filter_kind_options=@f_matchall={{0xd}, {0x748, 0x2, [@TCA_MATCHALL_ACT={0x734, 0x2, [@m_police={0x98, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x69, 0x6, "c5b3d3ca027ef6b951c84002a85d4cd773eddcf025bda414c5303bff40229d06a6fd07d26010ff99288f8a6bbecb862f2dfba7e1fd8614644f8a906e1ea1589ea92a59948fa2f1f47c4bac4ff1b5f5be5cc4831fa3e5fe9b53dc06d48a06e477c76d4061a2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x98, 0x10, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x1, 0x4, 0x6, 0x3}, @multicast2, @multicast2, 0x0, 0x1}}]}, {0x46, 0x6, "9739047050a8a7c88903b2df34dc68863956497edf5de5c91cc689f39880106f6a7b4f53c0750249fa5d560e9880f786fc113b349f0ffc773f4cb10ca04b566f08c1"}, {0xc}, {0xc}}}, @m_bpf={0xe4, 0x13, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}]}, {0xb3, 0x6, "980874646c74ecfee7c596c97b78822d2760f3f777c410229f646687db9ceffba2468414001451062893759e94d1eba3f8a3db7bca3afd38072d7e8802913765c4bb9b31f5fe00538b0f8a0bb435d346d1005c341ca1c6ae48b40af78d0d69c3eb84c39af1b68f207d1f45dcdbd1c6b375a650dcb204e4f035c20b5bfe509917f267d3556ab262e122804a35fa3297aff1e267645b941ac22842eaf05f6147a063e797b37a30ffa30b270377500fb3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0xec, 0x17, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x265baf11, 0x5, 0x2, 0x9}}, @TCA_DEF_DATA={0x8, 0x3, 'drr\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xcd79, 0x2, 0x20000000, 0x1000, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x3d, 0x6, 0x7, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x8, 0x7, 0x7fff, 0xf}}]}, {0x56, 0x6, "3d27d9292cea229dc7c1726504dd39379bfb0825ec1f89a4ddc45db190cce3644a9c6e90453b1f5cdc98f93109261c389ae0e9b50dc136d0571d7303665b459b0ec86710d8a809f6522ca0ec7d6eb8cd311f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x114, 0x1, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x6c5, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x24c9, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1c9, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x100, 0x3}}]}, {0xb5, 0x6, "b1298689db45503887988b22a07a90e5e792ae657ae8c20bf499df5b3c39b8401fb12ddb6f6cd65b14d3a2c8141a7336fddd9b995187fd2d6ffa64e9f68a6399b531eb7278ab8cc530775a7ada6949ad2399e3cebcb69b02270aecbda58744a7746c3cd2f6cd16bb4cd73a3fb61e26308aa0097c2bab5607bbfb1516dee225809846d0958e61aa9b2eb7f15b88ae64b6ce85abb1cdd0d61210cfa9748a9d123a5c7e7665ab8c4dabff7f36c4e075a20c22"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0xe4, 0x12, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4d}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x8, 0x6, 0x6, 0x6}, 0x3}}]}, {0x92, 0x6, "67e9bcbbdfd4b6faefa45e3fc6b1e6a10f2defecb8c069ebe006aedd3611a58c393db421e91cb408d8947f052a50e8c87421bfe8445a9f101124d0b11de8ce603c18a79b02696b668c000197ecf7af72348f96043da0e6a1b617053563a8726ffc80b0fe725ca11cf639c1e6ffb2d7aa98d15775b4d76e8139416d015dd7ca0fbca0cae92a44f8b140ebfcae3ced"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x16c, 0x19, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x3, 0x2, 0x6, 0x5}, @dev={0xac, 0x14, 0x14, 0x3e}, @loopback, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xc7468000, 0x10000000, 0x18, 0x2}, @empty, @rand_addr=0x64010101, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x7, 0x8, 0x80, 0x60f1acc5}, @remote, @remote, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x5, 0x1, 0x5}, @remote, @private=0xa010100, 0xff, 0x1}}]}, {0xa3, 0x6, "bc75233552ca8ee6d151a6ed08eeb23e81bf9b23028540afb1ea3c740fcce0275303c564989c630cdda6a79a3a6b88208e8c6aaa218304e78c064a6abf37c44221d9f78ae751aa61170969dd4993e9c802f4383f9f060f99d9cbc6dacd3b44f104a4179e296b4363519d3fa643d3e57afb227f1da08543b06874e85a43e929dc0295b18464bc66e8da896422c4fe53fe5dcb86f0ec93631fc70f58a73d1025"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0xcc, 0xe, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, {0x7f, 0x6, "73a2fe442a50b5ad25b9efa1690b3969f6fd25e94f2b1728070351b8de18209df7dab9d087157c599d2ed2c451490350ccd1037e98a0c00ab3359609a43cc6adb10ec20683cb6daa117d47be16d8875fbb1993b30091db3237d0d95c6301d596ac5d4eb185fd499e389f3a65901ebe463a8065a6c1b73e9652574e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0x8}}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x4bb1}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x1}}]}, 0x7cc}, 0x1, 0x0, 0x0, 0x11}, 0x40) kernel console output (not intermixed with test programs): o perfect channel medium [ 367.293072][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 367.318755][T15706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.359048][T15709] __nla_validate_parse: 4 callbacks suppressed [ 367.359066][T15709] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2600'. [ 367.404841][T15702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.449706][T15709] bond12: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 367.465120][T15709] bond12 (unregistering): Released all slaves [ 367.538943][T15715] x_tables: unsorted entry at hook 3 [ 367.624994][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 367.753141][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 367.882629][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 368.152979][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 368.192961][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 368.333837][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 368.385047][T15743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2608'. [ 368.453893][ T6540] bond1: (slave bridge1): failed to get link speed/duplex [ 368.510272][T15754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2608'. [ 368.597801][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 368.678552][T15758] syzkaller0: entered promiscuous mode [ 368.692152][T15758] syzkaller0: entered allmulticast mode [ 368.728029][T15758] netlink: 'syz.2.2612': attribute type 1 has an invalid length. [ 368.733017][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 368.832967][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 369.038371][T15768] tipc: Resetting bearer [ 369.068902][T15780] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 369.088594][ T9] IPVS: starting estimator thread 0... [ 369.094504][T15786] ieee802154 phy0 wpan0: encryption failed: -22 [ 369.113020][ T6527] bond1: (slave bridge1): failed to get link speed/duplex [ 369.192760][T15785] IPVS: using max 28 ests per chain, 67200 per kthread [ 369.290180][T15795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2625'. [ 369.290219][T15793] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 369.322632][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 369.462698][ T6540] bond1: (slave bridge1): failed to get link speed/duplex [ 369.582800][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 369.708427][ T6527] bond1: (slave bridge1): failed to get link speed/duplex [ 369.878600][T15815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2631'. [ 370.257322][T15825] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2635'. [ 370.349151][T15797] dvmrp0: entered allmulticast mode [ 370.368573][T15835] netlink: 'syz.2.2637': attribute type 5 has an invalid length. [ 370.415161][ T257] dvmrp0: left allmulticast mode [ 370.475611][T15835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2637'. [ 370.490854][T15835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2637'. [ 370.520534][T15841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2638'. [ 370.844508][T15844] syzkaller0: entered promiscuous mode [ 370.867148][T15844] syzkaller0: entered allmulticast mode [ 370.885003][T15851] C: renamed from veth1_to_team [ 370.899600][T15851] netlink: 'syz.3.2641': attribute type 3 has an invalid length. [ 370.923153][T15851] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2641'. [ 370.958763][T15855] netlink: 'syz.3.2641': attribute type 2 has an invalid length. [ 370.973833][T15855] netlink: 'syz.3.2641': attribute type 8 has an invalid length. [ 371.486705][T15878] vlan3: entered promiscuous mode [ 371.510209][T15878] bridge0: entered promiscuous mode [ 371.712905][T15891] netlink: 'syz.0.2650': attribute type 1 has an invalid length. [ 371.716803][T15893] x_tables: duplicate underflow at hook 1 [ 371.727433][T15894] x_tables: duplicate underflow at hook 1 [ 372.225796][T15920] netlink: 'syz.4.2658': attribute type 1 has an invalid length. [ 372.350603][T15920] bond12: entered promiscuous mode [ 372.387827][T15920] bond12: entered allmulticast mode [ 372.403815][T15920] 8021q: adding VLAN 0 to HW filter on device bond12 [ 372.478405][T15927] __nla_validate_parse: 5 callbacks suppressed [ 372.478426][T15927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2661'. [ 372.856003][T15940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2665'. [ 373.034864][T15945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2666'. [ 373.060350][T15951] syzkaller0: entered promiscuous mode [ 373.068472][T15951] syzkaller0: entered allmulticast mode [ 373.144864][T15944] bond8: entered promiscuous mode [ 373.156179][T15944] bond8: entered allmulticast mode [ 373.234083][ T6527] net_ratelimit: 23 callbacks suppressed [ 373.234104][ T6527] bond1: (slave bridge1): failed to get link speed/duplex [ 373.372792][ T257] bond1: (slave bridge1): failed to get link speed/duplex [ 373.494219][ T6540] bond1: (slave bridge1): failed to get link speed/duplex [ 373.547265][T15967] netlink: 'syz.4.2672': attribute type 2 has an invalid length. [ 373.622772][ T6540] bond1: (slave bridge1): failed to get link speed/duplex [ 373.648632][T15967] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2672'. [ 373.742936][ T6527] bond1: (slave bridge1): failed to get link speed/duplex [ 373.872723][ T6540] bond1: (slave bridge1): failed to get link speed/duplex [ 374.012957][ T6540] bond1: (slave bridge1): failed to get link speed/duplex [ 374.132943][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 374.140443][T15988] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2677'. [ 374.262685][ T6540] bond1: (slave bridge1): failed to get link speed/duplex [ 374.392873][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 374.564303][T15994] bond5: (slave gretap0): Removing an active aggregator [ 374.576294][T15994] bond5: (slave gretap0): Releasing backup interface [ 374.788218][T16001] netlink: 'syz.3.2682': attribute type 1 has an invalid length. [ 374.938966][T16012] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2682'. [ 374.980289][T16001] 8021q: adding VLAN 0 to HW filter on device bond14 [ 374.998754][T16014] netlink: 'syz.4.2686': attribute type 2 has an invalid length. [ 375.062223][T16004] vlan3: entered promiscuous mode [ 375.072802][T16004] bond14: entered promiscuous mode [ 375.080634][T16004] vlan3: entered allmulticast mode [ 375.086343][T16004] bond14: entered allmulticast mode [ 375.096176][T16015] netlink: 'syz.4.2686': attribute type 2 has an invalid length. [ 375.348051][T16032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2690'. [ 375.550890][T16044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2692'. [ 375.793199][T16050] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2695'. [ 376.181079][T16079] netlink: 123 bytes leftover after parsing attributes in process `syz.3.2703'. [ 376.185786][T16078] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 376.315075][T16091] xt_hashlimit: size too large, truncated to 1048576 [ 376.601168][T16099] bond6: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 376.626797][T16099] bond6 (unregistering): Released all slaves [ 376.850698][ T7434] Bluetooth: hci4: link tx timeout [ 376.856052][ T7434] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 376.873053][ T7434] Bluetooth: hci4: link tx timeout [ 376.879532][ T7434] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 376.888629][ T7434] Bluetooth: hci4: link tx timeout [ 376.893893][ T7434] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 376.904732][ T7434] Bluetooth: hci4: link tx timeout [ 376.909959][ T7434] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 376.919771][ T7434] Bluetooth: hci4: link tx timeout [ 376.925483][ T7434] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 376.933604][ T7434] Bluetooth: hci4: link tx timeout [ 376.938819][ T7434] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 376.955842][ T7434] Bluetooth: hci4: link tx timeout [ 376.961079][ T7434] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 376.969610][ T7434] Bluetooth: hci4: link tx timeout [ 376.975100][ T7434] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 376.983303][ T7434] Bluetooth: hci4: link tx timeout [ 376.988530][ T7434] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 376.996687][ T7434] Bluetooth: hci4: link tx timeout [ 377.001899][ T7434] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 377.009735][ T7434] Bluetooth: hci4: link tx timeout [ 377.015042][ T7434] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 377.022897][ T7434] Bluetooth: hci4: link tx timeout [ 377.028095][ T7434] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 377.035932][ T7434] Bluetooth: hci4: link tx timeout [ 377.041175][ T7434] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 377.049573][ T7434] Bluetooth: hci4: link tx timeout [ 377.055605][ T7434] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 377.063593][ T7434] Bluetooth: hci4: link tx timeout [ 377.068832][ T7434] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 377.691412][T16133] veth12: entered allmulticast mode [ 377.908028][T16127] syzkaller0: entered promiscuous mode [ 377.932806][T16127] syzkaller0: entered allmulticast mode [ 378.008650][T16151] __nla_validate_parse: 3 callbacks suppressed [ 378.008669][T16151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2720'. [ 378.444227][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.493694][T16161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2719'. [ 378.525517][T16161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2719'. [ 378.916592][ T7434] Bluetooth: hci4: command 0x0406 tx timeout [ 380.370367][T16169] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 380.373060][ T12] net_ratelimit: 21 callbacks suppressed [ 380.373077][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 380.392640][T16169] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 380.392666][T16169] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 380.514034][ T6527] bond1: (slave bridge1): failed to get link speed/duplex [ 380.634254][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 380.747493][T16177] netlink: 'syz.2.2726': attribute type 2 has an invalid length. [ 380.763023][ T6527] bond1: (slave bridge1): failed to get link speed/duplex [ 380.765208][T16177] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2726'. [ 380.941372][T16197] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2733'. [ 380.953110][ T6527] bond1: (slave bridge1): failed to get link speed/duplex [ 380.983360][T16200] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2733'. [ 381.005552][T16177] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2726'. [ 381.097272][ T257] bond1: (slave bridge1): failed to get link speed/duplex [ 381.212964][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 381.336177][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 381.346830][T16218] netlink: 'syz.0.2735': attribute type 1 has an invalid length. [ 381.543511][ T6527] bond1: (slave bridge1): failed to get link speed/duplex [ 381.693586][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 381.719333][T16238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2743'. [ 381.826428][T16248] xt_connbytes: Forcing CT accounting to be enabled [ 381.865003][T16248] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 381.942422][T16257] netlink: 'syz.3.2747': attribute type 1 has an invalid length. [ 381.969934][T16261] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2748'. [ 382.085220][T16267] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2750'. [ 383.129297][T16309] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.2759'. [ 383.220374][T16314] netlink: 'syz.1.2761': attribute type 1 has an invalid length. [ 383.594716][T16328] bond15: option xmit_hash_policy: invalid value (10) [ 383.605359][T16328] bond15 (unregistering): Released all slaves [ 383.646680][ T5286] veth0_vlan: left promiscuous mode [ 383.705726][ T8709] veth0_vlan: entered promiscuous mode [ 383.767829][T16337] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 384.544515][T16376] netlink: 'syz.3.2778': attribute type 1 has an invalid length. [ 384.794176][ T257] nci: nci_ntf_packet: unknown ntf opcode 0x227 [ 384.840246][ T10] block nbd4: Possible stuck request ffff8880272c5080: control (read@0,2048B). Runtime 30 seconds [ 384.853495][ T10] block nbd4: Possible stuck request ffff8880272c5240: control (read@2048,2048B). Runtime 30 seconds [ 385.246921][T16405] netlink: 'syz.3.2781': attribute type 30 has an invalid length. [ 385.255405][T16405] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2781'. [ 385.302412][T16405] bond15: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 385.319195][T16405] bond15 (unregistering): Released all slaves [ 385.462083][T16386] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 385.482858][ T6533] net_ratelimit: 30 callbacks suppressed [ 385.482877][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 385.615790][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 385.714969][T16427] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 385.734307][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 385.853032][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 385.893715][T16438] syzkaller1: entered promiscuous mode [ 385.899321][T16438] syzkaller1: entered allmulticast mode [ 385.972899][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 385.985424][T16441] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2790'. [ 385.995939][T16439] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2790'. [ 386.093605][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 386.212923][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 386.332942][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 386.344278][T16453] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2793'. [ 386.372200][T16454] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2793'. [ 386.399150][T16453] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2793'. [ 386.414505][T16457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2794'. [ 386.464535][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 386.582777][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 386.921548][T16477] syzkaller0: entered promiscuous mode [ 386.937503][T16477] syzkaller0: entered allmulticast mode [ 387.243170][T16494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2808'. [ 387.359639][T16505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2809'. [ 387.699385][T16513] veth7: entered allmulticast mode [ 387.709077][T16515] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 387.718705][T16515] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 387.837139][T16523] netlink: 'syz.4.2815': attribute type 20 has an invalid length. [ 388.006737][T16530] netlink: 'syz.4.2817': attribute type 1 has an invalid length. [ 388.073756][T16530] 8021q: adding VLAN 0 to HW filter on device bond13 [ 388.336492][T16552] netlink: 'syz.3.2823': attribute type 27 has an invalid length. [ 388.363972][T16553] __nla_validate_parse: 5 callbacks suppressed [ 388.363990][T16553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2822'. [ 388.488995][ T8902] block nbd5: Receive control failed (result -32) [ 388.571771][T16561] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2826'. [ 388.580942][T16561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2826'. [ 388.597829][T16562] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2825'. [ 388.887348][T16579] netlink: 'syz.3.2829': attribute type 40 has an invalid length. [ 389.111437][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2835'. [ 389.157642][T16606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2837'. [ 389.323114][T16610] bridge2: entered allmulticast mode [ 389.411921][T16613] syz_tun: entered allmulticast mode [ 389.457920][T16617] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2841'. [ 389.480731][T16613] dvmrp8: entered allmulticast mode [ 389.491030][T16612] syz_tun: left allmulticast mode [ 389.496563][T16618] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2841'. [ 389.901477][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2849'. [ 390.186288][T16661] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2852'. [ 390.377389][T16678] netlink: 'syz.1.2854': attribute type 12 has an invalid length. [ 390.397609][T16676] tipc: Enabling of bearer rejected, already enabled [ 390.522827][ T6533] net_ratelimit: 31 callbacks suppressed [ 390.522846][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 390.653218][ T257] bond1: (slave bridge1): failed to get link speed/duplex [ 390.835019][ T257] bond1: (slave bridge1): failed to get link speed/duplex [ 391.034601][T16707] netlink: 'syz.1.2865': attribute type 32 has an invalid length. [ 391.043715][ T6527] bond1: (slave bridge1): failed to get link speed/duplex [ 391.154181][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 391.293399][ T6527] bond1: (slave bridge1): failed to get link speed/duplex [ 391.423067][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 391.595067][T16725] vlan7: entered allmulticast mode [ 391.640958][T16725] bond0: entered allmulticast mode [ 391.678349][T16725] bridge1: entered allmulticast mode [ 391.710603][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 391.862835][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 391.970764][T16755] bond0: (slave ip6tnl0): refused to change device type [ 392.002682][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 392.738874][T16782] ip6gre3: entered promiscuous mode [ 392.748450][T16782] ip6gre3: entered allmulticast mode [ 392.801732][ T12] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 392.837114][ T12] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 392.845344][ T9] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 392.874274][T16790] lo: entered promiscuous mode [ 392.891719][T16790] lo: entered allmulticast mode [ 392.957593][T16800] netlink: 'syz.3.2892': attribute type 10 has an invalid length. [ 392.990344][T16800] veth0_to_bond: entered promiscuous mode [ 393.100697][T16807] syzkaller0: entered promiscuous mode [ 393.132485][T16807] syzkaller0: entered allmulticast mode [ 393.392783][ T9] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 393.402142][T16825] syzkaller1: entered promiscuous mode [ 393.424802][T16825] syzkaller1: entered allmulticast mode [ 393.556962][T16828] nbd: nbd2 already in use [ 393.796047][ T9] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 394.197153][T16844] __nla_validate_parse: 13 callbacks suppressed [ 394.197172][T16844] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2906'. [ 394.215199][T16847] netlink: 'syz.0.2907': attribute type 1 has an invalid length. [ 394.376918][T16853] bond6: (slave veth1): Enslaving as an active interface with a down link [ 394.559031][T16866] netlink: 'syz.1.2910': attribute type 1 has an invalid length. [ 394.659460][T16866] bond12: entered promiscuous mode [ 394.676383][T16866] 8021q: adding VLAN 0 to HW filter on device bond12 [ 394.784599][T16873] 8021q: adding VLAN 0 to HW filter on device bond12 [ 394.828002][T16873] bond12: (slave xfrm1): The slave device specified does not support setting the MAC address [ 394.861525][T16873] bond12: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 394.900764][T16873] bond12: (slave xfrm1): making interface the new active one [ 394.926583][T16873] xfrm1: entered promiscuous mode [ 394.969392][T16873] xfrm1: left promiscuous mode [ 395.013255][T16879] bond0: Device is already in use. [ 395.182152][T16889] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2916'. [ 395.261532][T16891] lo: left promiscuous mode [ 395.271419][T16891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2918'. [ 395.294469][T16891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2918'. [ 395.312239][T16891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2918'. [ 395.334383][T16891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2918'. [ 395.351822][T16891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2918'. [ 395.375550][T16891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2918'. [ 395.395407][T16891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2918'. [ 395.410390][T16891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2918'. [ 395.559189][T16902] netlink: 'syz.2.2922': attribute type 1 has an invalid length. [ 395.622969][ T257] net_ratelimit: 17 callbacks suppressed [ 395.622989][ T257] bond1: (slave bridge1): failed to get link speed/duplex [ 395.659925][T16902] bond9: (slave bridge5): Enslaving as a backup interface with an up link [ 395.686617][T16902] macvlan2: entered promiscuous mode [ 395.692183][T16902] macvlan2: entered allmulticast mode [ 395.699027][T16902] bond9: entered promiscuous mode [ 395.705448][T16902] bridge5: entered promiscuous mode [ 395.711509][T16902] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 395.721056][T16902] bond9: left promiscuous mode [ 395.725922][T16902] bridge5: left promiscuous mode [ 395.746974][T16905] syzkaller0: entered promiscuous mode [ 395.752736][T16905] syzkaller0: entered allmulticast mode [ 395.843203][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 395.952838][ T6540] bond1: (slave bridge1): failed to get link speed/duplex [ 396.132722][ T6540] bond1: (slave bridge1): failed to get link speed/duplex [ 396.252721][ T6540] bond1: (slave bridge1): failed to get link speed/duplex [ 396.407304][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 396.582080][T16952] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 396.625350][ T6540] bond1: (slave bridge1): failed to get link speed/duplex [ 396.663318][T16964] tipc: New replicast peer: 172.20.20.187 [ 396.706226][T16964] tipc: Enabled bearer , priority 10 [ 396.778706][ T6540] bond1: (slave bridge1): failed to get link speed/duplex [ 396.842422][T16972] netlink: 'syz.1.2944': attribute type 1 has an invalid length. [ 396.911187][T16972] 8021q: adding VLAN 0 to HW filter on device bond13 [ 396.922721][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 397.060391][T16978] bond13: (slave veth13): Enslaving as an active interface with a down link [ 397.154715][T16972] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 397.187201][T16972] bond13: (slave batadv3): making interface the new active one [ 397.224780][T16972] batadv3: entered promiscuous mode [ 397.260090][T16972] bond13: (slave batadv3): Enslaving as an active interface with an up link [ 397.492969][ T7434] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 397.505682][ T7434] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 397.515621][ T7434] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 397.528868][ T7434] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 397.538186][ T7434] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 397.613236][T16972] syzkaller0: entered promiscuous mode [ 397.638843][T16972] syzkaller0: entered allmulticast mode [ 397.716915][T17007] netlink: 'syz.0.2949': attribute type 1 has an invalid length. [ 397.836467][T17010] netlink: 'syz.0.2949': attribute type 1 has an invalid length. [ 399.485693][T17007] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 399.597246][ T257] bond1: (slave bridge1): failed to get link speed/duplex [ 399.632859][ T7434] Bluetooth: hci5: command tx timeout [ 399.782037][T17025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 399.789326][T17025] IPv6: NLM_F_CREATE should be set when creating new route [ 399.798573][T17025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 400.048924][T17036] tipc: Enabled bearer , priority 0 [ 400.075540][T17036] syzkaller0: entered promiscuous mode [ 400.084859][T17036] syzkaller0: entered allmulticast mode [ 400.201537][T17036] tipc: Resetting bearer [ 400.234815][T17035] tipc: Resetting bearer [ 400.265225][T17035] tipc: Disabling bearer [ 400.271504][T17042] __nla_validate_parse: 57 callbacks suppressed [ 400.271521][T17042] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2958'. [ 400.488587][T17055] netlink: 'syz.0.2962': attribute type 39 has an invalid length. [ 400.782900][T17074] netlink: 'syz.0.2967': attribute type 3 has an invalid length. [ 400.788640][T16997] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.798125][T16997] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.806149][T16997] bridge_slave_0: entered allmulticast mode [ 400.814347][T16997] bridge_slave_0: entered promiscuous mode [ 400.823696][T16997] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.844279][T16997] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.856238][T16997] bridge_slave_1: entered allmulticast mode [ 400.865113][T16997] bridge_slave_1: entered promiscuous mode [ 400.968499][T16997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.988127][ T6540] bond0: (slave syz_tun): link status definitely up, 10000 Mbps full duplex [ 401.004540][ T6540] bond0: active interface up! [ 401.014450][T17082] syzkaller1: entered promiscuous mode [ 401.024286][T17082] syzkaller1: entered allmulticast mode [ 401.037831][T16997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.074602][T17082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2969'. [ 401.076992][T17086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2971'. [ 401.097568][T17082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2969'. [ 401.118518][T17086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2971'. [ 401.131907][T17082] netlink: 'syz.0.2969': attribute type 11 has an invalid length. [ 401.136001][T17086] netlink: 'syz.1.2971': attribute type 83 has an invalid length. [ 401.149547][T16997] team0: Port device team_slave_0 added [ 401.159585][T16997] team0: Port device team_slave_1 added [ 401.165512][T17082] netlink: 'syz.0.2969': attribute type 13 has an invalid length. [ 401.199342][T17090] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 401.207136][T17090] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 401.254458][T16997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.261513][T16997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.288141][T16997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.318340][T16997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.329603][T16997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.356655][T16997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.422649][ T257] net_ratelimit: 6 callbacks suppressed [ 401.422668][ T257] bond1: (slave bridge1): failed to get link speed/duplex [ 401.540792][T16997] hsr_slave_0: entered promiscuous mode [ 401.550932][T16997] hsr_slave_1: entered promiscuous mode [ 401.558372][T16997] debugfs: 'hsr0' already exists in 'hsr' [ 401.566088][T16997] Cannot create hsr debugfs directory [ 401.712727][ T7434] Bluetooth: hci5: command tx timeout [ 401.741460][T17112] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2977'. [ 401.768269][T17112] netlink: 'syz.3.2977': attribute type 4 has an invalid length. [ 401.985326][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 402.063791][T17125] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2980'. [ 402.155582][T17129] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2981'. [ 402.173124][T17130] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2981'. [ 402.233306][ T6538] bond1: (slave bridge1): link status up again after 0 ms [ 402.262633][ T6538] bond1: (slave bridge1): link status up again after 0 ms [ 402.276613][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 402.404347][ T6542] bond1: (slave bridge1): failed to get link speed/duplex [ 402.755277][ T6547] bond1: (slave bridge1): failed to get link speed/duplex [ 402.873508][ T1124] bond1: (slave bridge1): failed to get link speed/duplex [ 402.938720][T17156] bridge7: entered allmulticast mode [ 402.997950][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 403.097652][T17162] syzkaller1: entered promiscuous mode [ 403.104191][T17162] syzkaller1: entered allmulticast mode [ 403.193078][ T6547] bond1: (slave bridge1): failed to get link speed/duplex [ 403.200919][T16997] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 403.230560][T16997] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 403.241607][T16997] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 403.253747][T16997] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 403.269931][T16997] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 403.286714][T16997] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 403.295245][T16997] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 403.307415][T16997] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 403.422915][T16997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.447364][T16997] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.463337][ T6533] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.470516][ T6533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.502577][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.509785][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.584634][T17177] syzkaller0: entered promiscuous mode [ 403.590149][T17177] syzkaller0: entered allmulticast mode [ 403.606943][T17177] tipc: Enabled bearer , priority 0 [ 403.621442][T17176] tipc: Resetting bearer [ 403.658959][T17176] tipc: Disabling bearer [ 403.792795][ T7434] Bluetooth: hci5: command tx timeout [ 403.873562][T17186] netlink: 'syz.3.2990': attribute type 4 has an invalid length. [ 403.887862][T17186] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2990'. [ 403.919080][T17186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.208651][T16997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.312264][T16997] veth0_vlan: entered promiscuous mode [ 404.363377][T16997] veth1_vlan: entered promiscuous mode [ 404.469486][T16997] veth0_macvtap: entered promiscuous mode [ 404.488125][T16997] veth1_macvtap: entered promiscuous mode [ 404.512376][T16997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.577989][T16997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.623935][ T6533] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.642688][ T6533] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.668886][ T6533] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.687545][ T6533] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.960033][ T6547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.995792][ T6547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.021875][T17243] ip6tnl4: entered allmulticast mode [ 405.075132][ T6542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.094388][ T6542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.311525][ T8709] IPVS: starting estimator thread 0... [ 405.322692][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 405.412894][T17262] IPVS: using max 28 ests per chain, 67200 per kthread [ 405.641314][T17267] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20003 [ 405.696393][ T8902] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 405.727027][ T8902] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 405.743473][ T8902] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 405.768195][ T8902] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 405.776360][ T8902] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 405.778885][T17246] __nla_validate_parse: 14 callbacks suppressed [ 405.778901][T17246] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3005'. [ 405.888174][ T8902] Bluetooth: hci5: command tx timeout [ 406.049911][T17246] vlan3: left promiscuous mode [ 406.122115][T17246] 8021q: adding VLAN 0 to HW filter on device bond6 [ 406.145230][T17246] 8021q: adding VLAN 0 to HW filter on device bond7 [ 406.327371][T17276] netlink: 'syz.3.3010': attribute type 7 has an invalid length. [ 406.435654][ T1124] net_ratelimit: 34 callbacks suppressed [ 406.435673][ T1124] bond1: (slave bridge1): link status up again after 0 ms [ 406.471512][ T6538] bond6: (slave veth1): link status definitely up, 10000 Mbps full duplex [ 406.510218][ T6538] bond6: (slave veth1): making interface the new active one [ 406.525135][ T1124] bond1: (slave bridge1): link status up again after 0 ms [ 406.550956][ T6538] bond6: active interface up! [ 406.563917][ T6530] bond1: (slave bridge1): link status up again after 0 ms [ 406.582989][ T6547] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 406.594344][ T6538] bond1: (slave bridge1): link status up again after 0 ms [ 406.638256][ T6530] bond1: (slave bridge1): link status up again after 0 ms [ 406.678423][ T6538] bond1: (slave bridge1): link status up again after 0 ms [ 406.716342][ T6538] bond1: (slave bridge1): link status up again after 0 ms [ 406.719341][T17289] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3013'. [ 406.743174][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 406.864807][ T6530] bond1: (slave bridge1): failed to get link speed/duplex [ 406.991424][T17298] ipip1: entered promiscuous mode [ 407.014474][T17298] ipip1: entered allmulticast mode [ 407.042670][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 407.170980][T17303] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3018'. [ 407.207345][T17305] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3018'. [ 407.340779][T17310] netlink: 'syz.3.3020': attribute type 21 has an invalid length. [ 407.375526][T17310] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3020'. [ 407.388374][T17312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3020'. [ 407.407089][T17312] netlink: 'syz.3.3020': attribute type 30 has an invalid length. [ 407.418316][T17314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3021'. [ 407.427557][T17312] netlink: 'syz.3.3020': attribute type 29 has an invalid length. [ 407.436946][T17312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3020'. [ 407.649976][T17325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3025'. [ 407.748433][T17331] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3026'. [ 407.811404][T17322] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 407.841201][T17322] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 407.872964][ T8902] Bluetooth: hci4: command tx timeout [ 407.975202][T17268] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.982641][T17268] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.989948][T17268] bridge_slave_0: entered allmulticast mode [ 407.998292][T17268] bridge_slave_0: entered promiscuous mode [ 408.004718][ T11] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 408.016089][T17268] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.024089][T17268] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.031416][T17268] bridge_slave_1: entered allmulticast mode [ 408.041188][T17268] bridge_slave_1: entered promiscuous mode [ 408.062795][T15617] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 408.090581][T17268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.103748][T17268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.160142][T17268] team0: Port device team_slave_0 added [ 408.169263][T17268] team0: Port device team_slave_1 added [ 408.220156][T17268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.233487][T17268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.261953][T17268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.269478][T17348] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 408.281297][T17349] bridge0: port 2(batadv0) entered blocking state [ 408.290655][T17349] bridge0: port 2(batadv0) entered disabled state [ 408.300186][T17349] batadv0: entered allmulticast mode [ 408.308369][T17349] batadv0: entered promiscuous mode [ 408.318841][T17268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.332732][T17268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.408792][T17268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.616478][T17268] hsr_slave_0: entered promiscuous mode [ 408.641328][T17268] hsr_slave_1: entered promiscuous mode [ 408.651756][T17268] debugfs: 'hsr0' already exists in 'hsr' [ 408.659772][T17268] Cannot create hsr debugfs directory [ 408.782759][ T1124] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 408.792016][ T1124] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 409.063629][ T1124] batadv3: left promiscuous mode [ 409.791195][ T7434] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 409.810844][ T7434] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 409.822997][ T7434] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 409.834466][ T7434] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 409.843756][ T7434] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 409.925934][T17268] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.937826][T17268] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.953682][ T8902] Bluetooth: hci4: command tx timeout [ 410.100889][T17394] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 410.117220][T17394] bridge0: left allmulticast mode [ 410.125727][T17394] bond9: left allmulticast mode [ 410.139522][T17394] vlan1: left allmulticast mode [ 410.150374][T17394] bond11: left allmulticast mode [ 410.157417][T17394] bridge6: left allmulticast mode [ 410.167942][T17403] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 410.184025][T17394] vlan2: left allmulticast mode [ 410.189056][T17394] bond12: left allmulticast mode [ 410.229869][T17394] vlan3: left promiscuous mode [ 410.241521][T17394] bond14: left promiscuous mode [ 410.247577][T17394] vlan3: left allmulticast mode [ 410.259192][T17394] bond14: left allmulticast mode [ 410.269598][T17394] ip6gre3: left promiscuous mode [ 410.278393][T17394] ip6gre3: left allmulticast mode [ 410.288614][T17394] bridge7: left allmulticast mode [ 410.349988][T17268] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.372789][T17268] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.533088][T17424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.564802][T17268] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.575756][T17268] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.611371][T17423] macvtap1: entered promiscuous mode [ 410.620128][T17423] vlan0: entered promiscuous mode [ 410.629414][T17423] vlan0: left promiscuous mode [ 410.668024][T17427] netlink: 'syz.0.3050': attribute type 12 has an invalid length. [ 410.684046][T17426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.766955][T17268] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.784107][T17268] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.224774][T17450] xt_TPROXY: Can be used only with -p tcp or -p udp [ 411.245275][T17450] netlink: 'syz.2.3055': attribute type 10 has an invalid length. [ 411.295055][T17450] team0: Port device dummy0 added [ 411.307073][T17450] __nla_validate_parse: 10 callbacks suppressed [ 411.307090][T17450] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3055'. [ 411.326700][T17452] netlink: 1200 bytes leftover after parsing attributes in process `syz.3.3056'. [ 411.349322][T17268] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 411.383616][T17268] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 411.418966][T17268] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 411.429850][T17268] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 411.483556][T17268] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 411.517080][T17268] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 411.558457][T17268] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 411.582016][T17268] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 411.839520][T17479] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3062'. [ 411.856301][ T6533] net_ratelimit: 11 callbacks suppressed [ 411.856319][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 411.954215][ T8902] Bluetooth: hci0: command tx timeout [ 411.970698][T17268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.025000][T17268] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.033733][ T8902] Bluetooth: hci4: command tx timeout [ 412.035319][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 412.128361][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.135526][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.222665][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.229890][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.316042][T17390] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.323689][T17390] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.330929][T17390] bridge_slave_0: entered allmulticast mode [ 412.338887][T17390] bridge_slave_0: entered promiscuous mode [ 412.347954][T17390] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.355728][T17390] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.363442][T17390] bridge_slave_1: entered allmulticast mode [ 412.371298][T17390] bridge_slave_1: entered promiscuous mode [ 412.475528][T17390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.508215][T17390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.572250][T17519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3070'. [ 412.584686][T17519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3070'. [ 412.605824][T17517] netlink: 292 bytes leftover after parsing attributes in process `syz.2.3069'. [ 412.628823][T17516] netlink: 292 bytes leftover after parsing attributes in process `syz.2.3069'. [ 412.649552][T17521] Cannot find del_set index 2 as target [ 412.670623][T17390] team0: Port device team_slave_0 added [ 412.679137][T17390] team0: Port device team_slave_1 added [ 412.687431][T17521] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3071'. [ 412.691061][T17522] nbd: socks must be embedded in a SOCK_ITEM attr [ 412.838740][T17522] batadv_slave_1: entered promiscuous mode [ 412.868819][T17390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.877205][T17390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.905018][T17230] udevd[17230]: inotify_add_watch(7, /dev/nbd6, 10) failed: No such file or directory [ 412.916612][T17390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.951835][T17390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.961735][T17390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.000145][T17390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.013358][ T37] bond1: (slave bridge1): failed to get link speed/duplex [ 413.121359][T17390] hsr_slave_0: entered promiscuous mode [ 413.129066][T17390] hsr_slave_1: entered promiscuous mode [ 413.145497][T17390] debugfs: 'hsr0' already exists in 'hsr' [ 413.164418][T17390] Cannot create hsr debugfs directory [ 413.170711][T17537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3075'. [ 413.182670][ T1124] bond1: (slave bridge1): failed to get link speed/duplex [ 413.481447][T17518] batadv_slave_1: left promiscuous mode [ 413.504949][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 413.600035][T17553] netlink: 'syz.3.3080': attribute type 11 has an invalid length. [ 413.727142][T17558] 8021q: VLANs not supported on lo [ 413.816946][ T1124] bond1: (slave bridge1): failed to get link speed/duplex [ 414.032703][ T8902] Bluetooth: hci0: command tx timeout [ 414.053467][ T1124] bond1: (slave bridge1): failed to get link speed/duplex [ 414.112907][ T8902] Bluetooth: hci4: command tx timeout [ 414.313985][T17577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3086'. [ 414.342387][T17577] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 414.359217][T17577] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 414.405565][T17268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.442018][T17390] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 414.474645][T17390] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 414.487487][T17390] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 414.501474][T17390] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 414.513866][ T6547] bond1: (slave bridge1): failed to get link speed/duplex [ 414.539134][T17390] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 414.576978][T17390] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 414.599334][T17390] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 414.625699][T17390] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 414.800095][T17268] veth0_vlan: entered promiscuous mode [ 414.851623][T17268] veth1_vlan: entered promiscuous mode [ 414.873980][ T1124] bond1: (slave bridge1): failed to get link speed/duplex [ 414.920145][ T10] block nbd4: Possible stuck request ffff8880272c5080: control (read@0,2048B). Runtime 60 seconds [ 414.930941][ T10] block nbd4: Possible stuck request ffff8880272c5240: control (read@2048,2048B). Runtime 60 seconds [ 414.985129][T17390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.026925][T17268] veth0_macvtap: entered promiscuous mode [ 415.079117][T17390] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.106236][T17268] veth1_macvtap: entered promiscuous mode [ 415.138533][ T6547] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.145756][ T6547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.188769][ T6547] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.195992][ T6547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.222332][T17268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.243180][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 415.256725][T17268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.274195][T17619] netlink: 'syz.3.3095': attribute type 12 has an invalid length. [ 415.319585][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.330570][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.357370][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.367931][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.543798][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.573204][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.627206][ T6538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.646351][ T6538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.816161][T17628] gtp0: entered promiscuous mode [ 415.822851][T17628] gtp0: entered allmulticast mode [ 415.836593][T17628] team0: Device gtp0 is of different type [ 416.112946][ T8902] Bluetooth: hci0: command tx timeout [ 416.406929][T17654] 8021q: VLANs not supported on tunl0 [ 416.465610][T17390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.670057][T17669] syz.0.3106: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 416.696541][T17669] CPU: 1 UID: 0 PID: 17669 Comm: syz.0.3106 Not tainted syzkaller #0 PREEMPT(full) [ 416.696571][T17669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 416.696596][T17669] Call Trace: [ 416.696603][T17669] [ 416.696613][T17669] dump_stack_lvl+0xe8/0x150 [ 416.696645][T17669] warn_alloc+0x24c/0x270 [ 416.696679][T17669] ? stack_depot_save_flags+0x33/0x800 [ 416.696710][T17669] ? __pfx_warn_alloc+0x10/0x10 [ 416.696741][T17669] ? kasan_save_track+0x3e/0x80 [ 416.696758][T17669] ? __kasan_kmalloc+0x93/0xb0 [ 416.696779][T17669] ? xsk_setsockopt+0x52a/0x960 [ 416.696806][T17669] ? do_sock_setsockopt+0x17c/0x1b0 [ 416.696827][T17669] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 416.696845][T17669] ? do_syscall_64+0x174/0x580 [ 416.696861][T17669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.696888][T17669] __vmalloc_node_range_noprof+0x12c/0x1730 [ 416.696941][T17669] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 416.696969][T17669] ? __kasan_kmalloc+0x93/0xb0 [ 416.696988][T17669] ? __kmalloc_cache_noprof+0x32d/0x660 [ 416.697021][T17669] ? __kmalloc_cache_noprof+0x150/0x660 [ 416.697049][T17669] vmalloc_user_noprof+0xad/0xe0 [ 416.697077][T17669] ? xskq_create+0xbf/0x170 [ 416.697102][T17669] xskq_create+0xbf/0x170 [ 416.697129][T17669] xsk_init_queue+0x8a/0xe0 [ 416.697154][T17669] xsk_setsockopt+0x52a/0x960 [ 416.697176][T17669] ? __fget_files+0x2a/0x420 [ 416.697194][T17669] ? __pfx_xsk_setsockopt+0x10/0x10 [ 416.697218][T17669] ? __pfx_aa_sk_perm+0x10/0x10 [ 416.697242][T17669] ? aa_sock_opt_perm+0xff/0x1a0 [ 416.697267][T17669] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 416.697293][T17669] ? __pfx_xsk_setsockopt+0x10/0x10 [ 416.697320][T17669] do_sock_setsockopt+0x17c/0x1b0 [ 416.697347][T17669] __x64_sys_setsockopt+0x13d/0x1b0 [ 416.697370][T17669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.697392][T17669] do_syscall_64+0x174/0x580 [ 416.697409][T17669] ? trace_irq_disable+0x3b/0x140 [ 416.697429][T17669] ? clear_bhb_loop+0x40/0x90 [ 416.697454][T17669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.697474][T17669] RIP: 0033:0x7f088939ce59 [ 416.697493][T17669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.697510][T17669] RSP: 002b:00007f088a2c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 416.697535][T17669] RAX: ffffffffffffffda RBX: 00007f0889615fa0 RCX: 00007f088939ce59 [ 416.697550][T17669] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 416.697562][T17669] RBP: 00007f0889432e6f R08: 0000000000000004 R09: 0000000000000000 [ 416.697575][T17669] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.697588][T17669] R13: 00007f0889616038 R14: 00007f0889615fa0 R15: 00007fff9d0e1038 [ 416.697622][T17669] [ 416.697651][T17669] Mem-Info: [ 416.926832][ T6533] net_ratelimit: 10 callbacks suppressed [ 416.926851][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 417.034086][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 417.053157][T17669] active_anon:6166 inactive_anon:0 isolated_anon:0 [ 417.053157][T17669] active_file:0 inactive_file:43626 isolated_file:0 [ 417.053157][T17669] unevictable:768 dirty:181 writeback:0 [ 417.053157][T17669] slab_reclaimable:12128 slab_unreclaimable:123324 [ 417.053157][T17669] mapped:35039 shmem:1289 pagetables:1337 [ 417.053157][T17669] sec_pagetables:0 bounce:0 [ 417.053157][T17669] kernel_misc_reclaimable:0 [ 417.053157][T17669] free:1290841 free_pcp:5256 free_cma:0 [ 417.133058][T17669] Node 0 active_anon:24664kB inactive_anon:0kB active_file:0kB inactive_file:174300kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140256kB dirty:724kB writeback:0kB shmem:3620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15996kB pagetables:4900kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 417.175053][ T6530] bond1: (slave bridge1): failed to get link speed/duplex [ 417.236561][T17669] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 417.292650][ T6527] bond1: (slave bridge1): failed to get link speed/duplex [ 417.319832][T17686] __nla_validate_parse: 5 callbacks suppressed [ 417.319848][T17686] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3110'. [ 417.326519][T17669] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 417.413063][ T6527] bond1: (slave bridge1): failed to get link speed/duplex [ 417.424239][T17669] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 417.447124][ T11] hid-generic 0005:0C45:0007.0001: item fetching failed at offset 0/1 [ 417.454262][T17669] Node 0 DMA32 free:1210572kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24864kB inactive_anon:0kB active_file:0kB inactive_file:174300kB unevictable:1536kB writepending:724kB zspages:0kB present:3129332kB managed:2551444kB mlocked:0kB bounce:0kB free_pcp:15276kB local_pcp:9236kB free_cma:0kB [ 417.466952][ T11] hid-generic 0005:0C45:0007.0001: probe with driver hid-generic failed with error -22 [ 417.573954][T17669] lowmem_reserve[]: 0 0 0 0 0 [ 417.580160][T17669] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 417.614588][ T6547] bond1: (slave bridge1): failed to get link speed/duplex [ 417.629957][T17669] lowmem_reserve[]: 0 0 0 0 0 [ 417.637231][T17669] Node 1 Normal free:3937444kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4276kB local_pcp:3776kB free_cma:0kB [ 417.679618][T17669] lowmem_reserve[]: 0 0 0 0 0 [ 417.687305][T17669] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 417.714575][T17669] Node 0 DMA32: 489*4kB (M) 265*8kB (ME) 338*16kB (UM) 212*32kB (UM) 90*64kB (UME) 30*128kB (ME) 16*256kB (ME) 10*512kB (ME) 4*1024kB (ME) 6*2048kB (UME) 283*4096kB (UM) = 1210636kB [ 417.740867][T17669] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 417.754473][T17669] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 2*16kB (UM) 3*32kB (UM) 5*64kB (UM) 4*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 960*4096kB (M) = 3937748kB [ 417.756960][T17390] veth0_vlan: entered promiscuous mode [ 417.773172][T17669] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 417.807476][T17669] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 417.847563][T17669] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 417.874894][T17669] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 417.899581][T17669] 44911 total pagecache pages [ 417.917398][T17696] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3114'. [ 417.932811][T17669] 0 pages in swap cache [ 417.937044][T17669] Free swap = 124996kB [ 417.941333][T17669] Total swap = 124996kB [ 417.947748][T17669] 2097051 pages RAM [ 417.951688][T17669] 0 pages HighMem/MovableOnly [ 417.957189][T17669] 427419 pages reserved [ 417.961459][T17669] 0 pages cma reserved [ 418.052561][T17390] veth1_vlan: entered promiscuous mode [ 418.083900][ T6530] bond1: (slave bridge1): failed to get link speed/duplex [ 418.176371][T17390] veth0_macvtap: entered promiscuous mode [ 418.193731][ T8902] Bluetooth: hci0: command tx timeout [ 418.213831][T17390] veth1_macvtap: entered promiscuous mode [ 418.276040][ T6530] bond1: (slave bridge1): failed to get link speed/duplex [ 418.321260][T17390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.369438][T17390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.425452][ T6538] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.445667][ T6538] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.461387][ T6538] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.462163][T17709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3117'. [ 418.476780][ T6538] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.543659][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 418.679626][T17713] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3119'. [ 418.688335][ T6530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.702457][ T6530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.733446][ T6527] bond1: (slave bridge1): failed to get link speed/duplex [ 418.796748][ T6530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.820950][T17720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3120'. [ 418.821185][ T6530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.901108][T17720] 8021q: adding VLAN 0 to HW filter on device bond15 [ 419.023212][T17720] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3120'. [ 419.669008][ T7434] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 419.682164][ T7434] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 419.690617][ T7434] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 419.705688][ T7434] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 419.717805][ T7434] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 419.878094][T17761] Bluetooth: MGMT ver 1.23 [ 420.050547][T17768] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.058206][T17768] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.137812][T17768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.150186][T17768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.240285][ T6530] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.249590][ T6530] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.261234][ T6530] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.271748][ T6530] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.688553][T17750] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.696348][T17750] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.704212][T17750] bridge_slave_0: entered allmulticast mode [ 420.711196][T17750] bridge_slave_0: entered promiscuous mode [ 420.719031][T17750] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.726472][T17750] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.733743][T17750] bridge_slave_1: entered allmulticast mode [ 420.741600][T17750] bridge_slave_1: entered promiscuous mode [ 420.768356][T17750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.779987][T17750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.808364][T17750] team0: Port device team_slave_0 added [ 420.817072][T17750] team0: Port device team_slave_1 added [ 420.842059][T17750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.849125][T17750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.875626][T17750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.888017][T17750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.895460][T17750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.923287][T17750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.964448][T17750] hsr_slave_0: entered promiscuous mode [ 420.970859][T17750] hsr_slave_1: entered promiscuous mode [ 420.977073][T17750] debugfs: 'hsr0' already exists in 'hsr' [ 420.982962][T17750] Cannot create hsr debugfs directory [ 421.273787][T17750] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 421.618677][T17711] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 421.676642][T17750] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 421.749973][T17750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 421.770800][T17750] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 421.807776][T17750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.816568][ T7434] Bluetooth: hci6: command tx timeout [ 421.826670][T17750] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 421.871352][T17750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.897100][T17750] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 421.942210][T17750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.988213][T17802] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 422.021869][T17803] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3131'. [ 422.092822][ T6547] net_ratelimit: 20 callbacks suppressed [ 422.092841][ T6547] bond1: (slave bridge1): failed to get link speed/duplex [ 422.303846][ T6527] bond1: (slave bridge1): failed to get link speed/duplex [ 422.374070][T17750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.414490][T17750] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.436794][T17799] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3131'. [ 422.446298][ T6530] bond1: (slave bridge1): failed to get link speed/duplex [ 422.463160][ T6530] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.470327][ T6530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.512326][ T6530] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.519524][ T6530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.542822][T17799] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3131'. [ 422.574725][T17799] ip6tnl0: entered allmulticast mode [ 422.669564][T17832] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3142'. [ 422.685051][ T6527] bond1: (slave bridge1): failed to get link speed/duplex [ 422.698070][T17832] openvswitch: netlink: Message has 512 unknown bytes. [ 422.862969][ T6530] bond1: (slave bridge1): failed to get link speed/duplex [ 422.972722][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 423.122218][T17842] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3144'. [ 423.164535][T17842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3144'. [ 423.242997][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 423.363858][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 423.486197][T17750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.554969][ T6530] bond1: (slave bridge1): failed to get link speed/duplex [ 423.617169][T17750] veth0_vlan: entered promiscuous mode [ 423.648837][T17750] veth1_vlan: entered promiscuous mode [ 423.693106][T17750] veth0_macvtap: entered promiscuous mode [ 423.740145][T17750] veth1_macvtap: entered promiscuous mode [ 423.776989][T17750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.809709][T17750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.826509][T17871] netlink: 'syz.2.3151': attribute type 49 has an invalid length. [ 423.847051][ T6530] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.859540][ T6530] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.876385][ T7434] Bluetooth: hci6: command tx timeout [ 423.915369][ T6530] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.929929][ T6530] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.112367][T17876] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3152'. [ 424.158492][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.176802][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.233329][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.241376][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.513027][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 424.904779][ T8902] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 424.916817][ T8902] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 424.926502][ T8902] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 424.935932][ T8902] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 424.946504][ T8902] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 425.354114][T17927] x_tables: duplicate underflow at hook 2 [ 425.493421][ T5627] bond0: (slave syz_tun): Releasing backup interface [ 425.952817][ T8902] Bluetooth: hci6: command tx timeout [ 426.338730][T17966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3175'. [ 426.571279][T17969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3176'. [ 426.838754][T17978] pim6reg: entered allmulticast mode [ 426.993014][ T8902] Bluetooth: hci3: command tx timeout [ 427.195481][T17993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3180'. [ 427.204600][T17993] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3180'. [ 427.517362][T17914] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.524674][T17914] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.531951][T17914] bridge_slave_0: entered allmulticast mode [ 427.540521][T17914] bridge_slave_0: entered promiscuous mode [ 427.549607][T17914] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.558643][T17914] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.566758][T17914] bridge_slave_1: entered allmulticast mode [ 427.574851][T17914] bridge_slave_1: entered promiscuous mode [ 427.659036][T18008] net_ratelimit: 21 callbacks suppressed [ 427.659053][T18008] netlink: zone id is out of range [ 427.666484][T17914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.703068][T17914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.844409][T17914] team0: Port device team_slave_0 added [ 427.954359][T17914] team0: Port device team_slave_1 added [ 427.994626][T17914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.001676][T17914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.033353][ T8902] Bluetooth: hci6: command tx timeout [ 428.037259][T17914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.081791][T17914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.089423][T17914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.121400][T17914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.282195][T17914] hsr_slave_0: entered promiscuous mode [ 428.302027][T17914] hsr_slave_1: entered promiscuous mode [ 428.315756][T17914] debugfs: 'hsr0' already exists in 'hsr' [ 428.321611][T17914] Cannot create hsr debugfs directory [ 428.375630][T18027] macvtap1: entered promiscuous mode [ 428.391028][T18027] vlan0: entered promiscuous mode [ 428.417506][T18033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.461402][T18027] vlan0: left promiscuous mode [ 428.521393][T18033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.565458][T18033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.694489][ T6547] bond1: (slave bridge1): failed to get link speed/duplex [ 429.073431][ T8902] Bluetooth: hci3: command tx timeout [ 429.551021][T17914] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.572207][T17914] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.641906][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 429.739601][T17914] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.750203][T17914] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.873990][T17914] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.899846][T17914] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.926097][T18056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3198'. [ 429.949342][T18056] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 429.973039][ T6530] bond1: (slave bridge1): failed to get link speed/duplex [ 430.019173][T18057] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3197'. [ 430.127192][T17914] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 430.175862][T17914] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.216230][T17914] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.293187][ T6547] bond1: (slave bridge1): failed to get link speed/duplex [ 430.553582][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 430.667840][T18078] netlink: 'syz.1.3201': attribute type 1 has an invalid length. [ 430.767173][T18101] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3203'. [ 430.865198][T18078] 8021q: adding VLAN 0 to HW filter on device bond1 [ 430.922102][T18082] bond1: (slave geneve2): making interface the new active one [ 430.939185][T18082] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 430.956879][T18092] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3203'. [ 430.981045][T18087] netlink: 'syz.1.3201': attribute type 4 has an invalid length. [ 430.991419][T18111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3204'. [ 431.055741][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.068477][T18084] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3202'. [ 431.079365][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.152685][ T8902] Bluetooth: hci3: command tx timeout [ 431.192470][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.218155][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.306866][T18124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3205'. [ 431.415390][T18124] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 431.427891][T18124] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 431.485019][ T6530] bond1: (slave bridge1): failed to get link speed/duplex [ 431.624884][T17914] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 431.666685][T17914] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 431.862348][T18137] veth3: entered allmulticast mode [ 431.868885][T17914] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 431.888109][T17914] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 431.897821][T17914] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 431.911754][T17914] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 431.962616][ T6530] bond1: (slave bridge1): failed to get link speed/duplex [ 431.978795][T17914] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 432.043490][T17914] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 432.121543][T18159] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3213'. [ 432.254731][T17914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.275215][ T1124] bond1: (slave bridge1): failed to get link speed/duplex [ 432.316262][T17914] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.371266][T18171] bond2: entered promiscuous mode [ 432.379423][T18171] 8021q: adding VLAN 0 to HW filter on device bond2 [ 432.391397][T18175] netlink: 'syz.2.3214': attribute type 12 has an invalid length. [ 432.436988][ T6538] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.444201][ T6538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.471402][T18177] netlink: 'syz.5.3216': attribute type 1 has an invalid length. [ 432.472170][ T6538] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.486385][ T6538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.513437][T18177] netlink: 'syz.5.3216': attribute type 2 has an invalid length. [ 432.523976][ T37] bond1: (slave bridge1): failed to get link speed/duplex [ 432.540038][T18177] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3216'. [ 432.633531][ T6530] bond1: (slave bridge1): failed to get link speed/duplex [ 432.773298][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 432.893304][ T1124] bond1: (slave bridge1): failed to get link speed/duplex [ 433.076197][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 433.184948][T18206] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3221'. [ 433.196444][ T37] bond1: (slave bridge1): failed to get link speed/duplex [ 433.204472][T18206] netlink: 'syz.5.3221': attribute type 2 has an invalid length. [ 433.233419][ T8902] Bluetooth: hci3: command tx timeout [ 433.379708][T17914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.396145][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 433.475343][T17914] veth0_vlan: entered promiscuous mode [ 433.506205][T17914] veth1_vlan: entered promiscuous mode [ 433.560437][T18220] netlink: 'syz.2.3224': attribute type 1 has an invalid length. [ 433.747687][T18223] bond3: (slave geneve2): making interface the new active one [ 433.756339][T18223] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 433.768583][T18226] bond3 (unregistering): (slave geneve2): Releasing active interface [ 433.780891][T18226] bond3 (unregistering): Released all slaves [ 433.853859][T17914] veth0_macvtap: entered promiscuous mode [ 433.897679][T17914] veth1_macvtap: entered promiscuous mode [ 433.929882][T17914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.963108][ T6527] bond1: (slave bridge1): failed to get link speed/duplex [ 433.977222][T17914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.011155][ T6527] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.032071][ T6527] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.054953][ T6527] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.064848][ T6527] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.104498][ T6530] bond1: (slave bridge1): failed to get link speed/duplex [ 434.209331][T18214] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 434.223259][ T6527] bond1: (slave bridge1): failed to get link speed/duplex [ 434.312865][ T6527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.342753][ T6527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.362652][ T6542] bond1: (slave bridge1): failed to get link speed/duplex [ 434.418318][ T6530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.426554][ T6530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.468411][T18246] dummy0: entered allmulticast mode [ 434.494451][ T6530] bond1: (slave bridge1): failed to get link speed/duplex [ 434.758336][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 434.772643][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 435.061044][T18274] xt_CT: You must specify a L4 protocol and not use inversions on it [ 435.285608][T18282] gretap0: entered promiscuous mode [ 435.294428][T18282] vlan2: entered promiscuous mode [ 435.344829][T18287] x_tables: duplicate underflow at hook 2 [ 435.349746][T18286] __nla_validate_parse: 4 callbacks suppressed [ 435.349762][T18286] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3238'. [ 435.358862][T18289] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3241'. [ 435.373388][T18285] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3239'. [ 435.388588][T18289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.415131][T18289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.550582][T18289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.602758][T18289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.115473][T18332] hsr0: entered allmulticast mode [ 436.144269][T18332] hsr_slave_0: entered allmulticast mode [ 436.150433][T18332] hsr_slave_1: entered allmulticast mode [ 436.199387][T18340] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3254'. [ 436.241654][T18332] hsr0: left allmulticast mode [ 436.251973][T18332] hsr_slave_0: left allmulticast mode [ 436.252970][T18342] netlink: 'syz.5.3254': attribute type 5 has an invalid length. [ 436.259271][T18343] netlink: 'syz.0.3255': attribute type 58 has an invalid length. [ 436.273780][T18332] hsr_slave_1: left allmulticast mode [ 436.279305][T18343] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3255'. [ 436.299773][T18342] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3254'. [ 436.377136][T18351] netlink: 'syz.0.3255': attribute type 58 has an invalid length. [ 436.389229][T18353] netlink: 'syz.2.3257': attribute type 1 has an invalid length. [ 436.419979][T18351] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3255'. [ 437.452190][T18404] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3271'. [ 437.497402][T18410] netlink: 'syz.3.3273': attribute type 4 has an invalid length. [ 437.551021][T18410] netlink: 'syz.3.3273': attribute type 4 has an invalid length. [ 437.612318][T18410] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.3273'. [ 437.636886][T18414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3275'. [ 437.650660][T18416] tipc: Enabling of bearer rejected, failed to enable media [ 437.863340][ T6527] net_ratelimit: 23 callbacks suppressed [ 437.863366][ T6527] bond1: (slave bridge1): failed to get link speed/duplex [ 437.949450][T18423] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 437.976294][ T8708] team_slave_0: entered promiscuous mode [ 437.982065][ T8708] team_slave_1: entered promiscuous mode [ 438.001606][T18423] netlink: 'syz.0.3278': attribute type 11 has an invalid length. [ 438.010709][ T6530] bond1: (slave bridge1): failed to get link speed/duplex [ 438.036117][T18438] hsr_slave_0: left promiscuous mode [ 438.064449][T18438] hsr_slave_1: left promiscuous mode [ 438.173043][ T6527] bond1: (slave bridge1): failed to get link speed/duplex [ 438.191159][T18445] netlink: 'syz.2.3283': attribute type 1 has an invalid length. [ 438.191404][T18443] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 438.312678][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 438.443935][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 438.560963][T18453] netlink: 'syz.2.3286': attribute type 1 has an invalid length. [ 438.562333][T18454] netlink: 'syz.2.3286': attribute type 1 has an invalid length. [ 438.574869][T18456] netlink: 'syz.2.3286': attribute type 1 has an invalid length. [ 438.713326][ T6527] bond1: (slave bridge1): failed to get link speed/duplex [ 438.953495][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 439.267478][ T37] bond1: (slave bridge1): failed to get link speed/duplex [ 439.475911][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 439.560175][ T30] audit: type=1107 audit(1782809379.824:6): pid=18496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 439.600094][T18479] syzkaller1: entered promiscuous mode [ 439.604598][T18498] Unsupported ieee802154 address type: 0 [ 439.606088][T18479] syzkaller1: entered allmulticast mode [ 439.631492][T18497] Unsupported ieee802154 address type: 0 [ 439.642960][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 440.188390][T18535] policy can only be matched on NF_INET_PRE_ROUTING [ 440.188410][T18535] unable to load match [ 440.987948][T18574] __nla_validate_parse: 11 callbacks suppressed [ 440.987960][T18574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3306'. [ 441.053768][T18576] bond1: entered promiscuous mode [ 441.059153][T18576] 8021q: adding VLAN 0 to HW filter on device bond1 [ 442.626274][T18503] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 442.813059][T18585] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3311'. [ 442.833159][T18588] validate_nla: 3 callbacks suppressed [ 442.833175][T18588] netlink: 'syz.3.3312': attribute type 13 has an invalid length. [ 442.855024][ T6533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.875319][ T6533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.894585][ T6547] net_ratelimit: 28 callbacks suppressed [ 442.894602][ T6547] bond1: (slave bridge1): failed to get link speed/duplex [ 442.990694][T18602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3315'. [ 443.069094][T18608] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3317'. [ 443.136118][T18602] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 443.182354][T18602] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 443.363048][ T6542] bond1: (slave bridge1): failed to get link speed/duplex [ 443.451573][T18604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.484120][ T6547] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.517544][ T6547] bond1: (slave bridge1): failed to get link speed/duplex [ 443.634604][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 443.743913][T18645] tipc: Enabling of bearer rejected, failed to enable media [ 443.763009][ T6542] bond1: (slave bridge1): failed to get link speed/duplex [ 443.883947][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 444.043180][ T6542] bond1: (slave bridge1): failed to get link speed/duplex [ 444.112685][T18661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3333'. [ 444.140242][T18661] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 444.150843][T18661] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 444.173094][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 444.301514][ T6542] bond1: (slave bridge1): failed to get link speed/duplex [ 444.434957][ T6547] bond1: (slave bridge1): failed to get link speed/duplex [ 444.477900][T18673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3337'. [ 444.553508][T18673] netlink: 'syz.0.3337': attribute type 27 has an invalid length. [ 444.832225][T18688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3342'. [ 444.869548][T18688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 444.876858][T18688] IPv6: NLM_F_CREATE should be set when creating new route [ 444.891677][T18691] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3343'. [ 444.906392][T18688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3342'. [ 445.016252][ T10] block nbd4: Possible stuck request ffff8880272c5080: control (read@0,2048B). Runtime 90 seconds [ 445.029113][ T10] block nbd4: Possible stuck request ffff8880272c5240: control (read@2048,2048B). Runtime 90 seconds [ 445.071156][T18691] nbd7: detected capacity change from 0 to 1 [ 445.091272][T17230] buffer_io_error: 138 callbacks suppressed [ 445.091288][T17230] Buffer I/O error on dev nbd7, logical block 0, async page read [ 445.098388][ T7434] block nbd7: Receive control failed (result -32) [ 445.105368][T17230] Buffer I/O error on dev nbd7, logical block 0, async page read [ 445.119945][T17230] Buffer I/O error on dev nbd7, logical block 0, async page read [ 445.135897][T17230] Buffer I/O error on dev nbd7, logical block 0, async page read [ 445.164106][T17230] Buffer I/O error on dev nbd7, logical block 0, async page read [ 445.183034][T17230] ldm_validate_partition_table(): Disk read failed. [ 445.194148][T17230] Buffer I/O error on dev nbd7, logical block 0, async page read [ 445.216260][T17230] Buffer I/O error on dev nbd7, logical block 0, async page read [ 445.234064][T17230] Buffer I/O error on dev nbd7, logical block 0, async page read [ 445.246999][T17230] Buffer I/O error on dev nbd7, logical block 0, async page read [ 445.255347][T17230] Dev nbd7: unable to read RDB block 0 [ 445.261006][T17230] Buffer I/O error on dev nbd7, logical block 0, async page read [ 445.273643][T17230] nbd7: unable to read partition table [ 445.279426][T17230] nbd7: partition table beyond EOD, truncated [ 445.393504][T18717] 8021q: VLANs not supported on ipvlan0 [ 445.416608][T18717] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3352'. [ 445.637336][T18727] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 445.655928][T15617] team_slave_0: entered promiscuous mode [ 445.661664][T15617] team_slave_1: entered promiscuous mode [ 445.713063][ T36] wlan1: Trigger new scan to find an IBSS to join [ 446.568188][T18769] __nla_validate_parse: 5 callbacks suppressed [ 446.568206][T18769] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3372'. [ 446.589453][T18769] hsr_slave_0: left promiscuous mode [ 446.598740][T18769] hsr_slave_1: left promiscuous mode [ 446.630804][T18772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3373'. [ 446.673686][ T7434] Bluetooth: hci3: command 0x0405 tx timeout [ 446.726493][T18780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3374'. [ 447.060496][T18798] syz.5.3379: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 447.091497][T18795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3381'. [ 447.092117][T18798] CPU: 0 UID: 0 PID: 18798 Comm: syz.5.3379 Not tainted syzkaller #0 PREEMPT(full) [ 447.092142][T18798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 447.092153][T18798] Call Trace: [ 447.092160][T18798] [ 447.092168][T18798] dump_stack_lvl+0xe8/0x150 [ 447.092197][T18798] warn_alloc+0x24c/0x270 [ 447.092230][T18798] ? stack_depot_save_flags+0x33/0x800 [ 447.092259][T18798] ? __pfx_warn_alloc+0x10/0x10 [ 447.092289][T18798] ? kasan_save_track+0x3e/0x80 [ 447.092305][T18798] ? __kasan_kmalloc+0x93/0xb0 [ 447.092328][T18798] ? xsk_setsockopt+0x52a/0x960 [ 447.092352][T18798] ? do_sock_setsockopt+0x17c/0x1b0 [ 447.092370][T18798] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 447.092388][T18798] ? do_syscall_64+0x174/0x580 [ 447.092404][T18798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.092433][T18798] __vmalloc_node_range_noprof+0x12c/0x1730 [ 447.092489][T18798] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 447.092520][T18798] ? __kasan_kmalloc+0x93/0xb0 [ 447.092540][T18798] ? __kmalloc_cache_noprof+0x32d/0x660 [ 447.092568][T18798] ? __kmalloc_cache_noprof+0x150/0x660 [ 447.092599][T18798] vmalloc_user_noprof+0xad/0xe0 [ 447.092627][T18798] ? xskq_create+0xbf/0x170 [ 447.092654][T18798] xskq_create+0xbf/0x170 [ 447.092683][T18798] xsk_init_queue+0x8a/0xe0 [ 447.092710][T18798] xsk_setsockopt+0x52a/0x960 [ 447.092734][T18798] ? __fget_files+0x2a/0x420 [ 447.092754][T18798] ? __pfx_xsk_setsockopt+0x10/0x10 [ 447.092779][T18798] ? __pfx_aa_sk_perm+0x10/0x10 [ 447.092804][T18798] ? aa_sock_opt_perm+0xff/0x1a0 [ 447.092830][T18798] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 447.092854][T18798] ? __pfx_xsk_setsockopt+0x10/0x10 [ 447.092880][T18798] do_sock_setsockopt+0x17c/0x1b0 [ 447.092912][T18798] __x64_sys_setsockopt+0x13d/0x1b0 [ 447.092935][T18798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.092955][T18798] do_syscall_64+0x174/0x580 [ 447.092972][T18798] ? trace_irq_disable+0x3b/0x140 [ 447.092990][T18798] ? clear_bhb_loop+0x40/0x90 [ 447.093012][T18798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.093031][T18798] RIP: 0033:0x7f458039ce59 [ 447.093049][T18798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.093066][T18798] RSP: 002b:00007f45812b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 447.093085][T18798] RAX: ffffffffffffffda RBX: 00007f4580615fa0 RCX: 00007f458039ce59 [ 447.093098][T18798] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 447.093110][T18798] RBP: 00007f4580432e6f R08: 0000000000000004 R09: 0000000000000000 [ 447.093122][T18798] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.093134][T18798] R13: 00007f4580616038 R14: 00007f4580615fa0 R15: 00007fff86ec7758 [ 447.093164][T18798] [ 447.101352][T18798] Mem-Info: [ 447.211490][T18802] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3379'. [ 447.282650][T18798] active_anon:6202 inactive_anon:0 isolated_anon:0 [ 447.282650][T18798] active_file:0 inactive_file:43644 isolated_file:0 [ 447.282650][T18798] unevictable:768 dirty:215 writeback:0 [ 447.282650][T18798] slab_reclaimable:12733 slab_unreclaimable:133777 [ 447.282650][T18798] mapped:35017 shmem:1287 pagetables:1346 [ 447.282650][T18798] sec_pagetables:0 bounce:0 [ 447.282650][T18798] kernel_misc_reclaimable:0 [ 447.282650][T18798] free:1273567 free_pcp:9540 free_cma:0 [ 447.405841][T18802] netlink: 'syz.5.3379': attribute type 1 has an invalid length. [ 447.466019][T18798] Node 0 active_anon:24808kB inactive_anon:0kB active_file:0kB inactive_file:174372kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140068kB dirty:860kB writeback:0kB shmem:3612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17136kB pagetables:5236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 447.494283][T18802] netlink: 232 bytes leftover after parsing attributes in process `syz.5.3379'. [ 447.505729][T18798] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 447.544213][T18798] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 447.551604][T18802] netlink: 'syz.5.3379': attribute type 1 has an invalid length. [ 447.590571][T18798] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 447.596741][T18798] Node 0 DMA32 free:1137720kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24808kB inactive_anon:0kB active_file:0kB inactive_file:174372kB unevictable:1536kB writepending:860kB zspages:0kB present:3129332kB managed:2551444kB mlocked:0kB bounce:0kB free_pcp:36620kB local_pcp:17460kB free_cma:0kB [ 447.651815][T18798] lowmem_reserve[]: 0 0 0 0 0 [ 447.657525][T18798] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 447.689135][T18798] lowmem_reserve[]: 0 0 0 0 0 [ 447.694752][T18798] Node 1 Normal free:3940528kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1256kB local_pcp:1256kB free_cma:0kB [ 447.731514][T18798] lowmem_reserve[]: 0 0 0 0 0 [ 447.739007][T18798] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 447.802066][T18798] Node 0 DMA32: 697*4kB (UM) 317*8kB (UME) 89*16kB (UME) 131*32kB (ME) 105*64kB (UM) 26*128kB (UME) 7*256kB (UME) 11*512kB (UME) 4*1024kB (UM) 7*2048kB (UM) 266*4096kB (UM) = 1136380kB [ 447.832354][T18814] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 447.860608][T18798] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 447.905606][T18798] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 11*16kB (UM) 5*32kB (UM) 9*64kB (UM) 4*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 0*2048kB 961*4096kB (UM) = 3940780kB [ 447.949496][T18798] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 448.004044][ T6533] net_ratelimit: 68 callbacks suppressed [ 448.004062][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 448.035564][T18798] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 448.063082][T18798] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 448.105993][T18798] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 448.119171][T18798] 44927 total pagecache pages [ 448.130996][T18825] tipc: Started in network mode [ 448.149597][T18798] 0 pages in swap cache [ 448.150850][T18825] tipc: Node identity 1a192adc3dc7, cluster identity 4711 [ 448.172651][T18798] Free swap = 124996kB [ 448.179158][T18798] Total swap = 124996kB [ 448.204591][T18825] tipc: Enabled bearer , priority 0 [ 448.215835][T18798] 2097051 pages RAM [ 448.224387][T18798] 0 pages HighMem/MovableOnly [ 448.229416][T18798] 427419 pages reserved [ 448.247860][T18798] 0 pages cma reserved [ 448.333985][T18824] tipc: Disabling bearer [ 448.422841][ T6547] bond1: (slave bridge1): failed to get link speed/duplex [ 448.540556][ T5807] IPVS: starting estimator thread 0... [ 448.553548][ T6530] bond1: (slave bridge1): failed to get link speed/duplex [ 448.650184][T18843] syzkaller1: entered promiscuous mode [ 448.661013][T18843] syzkaller1: entered allmulticast mode [ 448.661777][T18835] IPVS: using max 32 ests per chain, 76800 per kthread [ 448.715674][T18839] netlink: 'syz.5.3393': attribute type 10 has an invalid length. [ 448.752879][ T6547] wlan1: Trigger new scan to find an IBSS to join [ 448.804842][ T6530] bond1: (slave bridge1): failed to get link speed/duplex [ 448.898198][T18853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3398'. [ 448.907507][T18853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3398'. [ 448.907872][T18849] xt_TPROXY: Can be used only with -p tcp or -p udp [ 448.999938][T18853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3398'. [ 449.015107][ T6533] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.034698][T18853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3398'. [ 449.043860][ T6533] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.073470][ T6533] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.100769][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.163093][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 449.188320][T18854] ip_tunnel: non-ECT from 100.1.1.1 with TOS=0xa [ 449.264554][T18858] netlink: 'syz.5.3399': attribute type 3 has an invalid length. [ 449.394865][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 449.553537][ T6530] bond1: (slave bridge1): failed to get link speed/duplex [ 449.692881][ T6530] bond1: (slave bridge1): failed to get link speed/duplex [ 449.832715][ T6530] bond1: (slave bridge1): failed to get link speed/duplex [ 449.931476][T18875] xt_CT: You must specify a L4 protocol and not use inversions on it [ 450.957582][T18930] xt_connbytes: Forcing CT accounting to be enabled [ 451.098187][T18930] xt_CT: No such helper "netbios-ns" [ 451.252073][T18938] syzkaller0: entered promiscuous mode [ 451.277772][T18938] syzkaller0: entered allmulticast mode [ 451.642458][T18965] netlink: 'syz.3.3431': attribute type 40 has an invalid length. [ 451.714566][ T36] wlan1: Trigger new scan to find an IBSS to join [ 451.875455][T18977] bond0: Error: CAN devices cannot be enslaved [ 451.903865][T18974] __nla_validate_parse: 3 callbacks suppressed [ 451.903883][T18974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3432'. [ 451.955378][T18981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3436'. [ 451.981620][T18977] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3434'. [ 452.044412][T18974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3432'. [ 452.080946][T18974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3432'. [ 452.118748][T18974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3432'. [ 452.141130][T18974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3432'. [ 452.163516][T18974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3432'. [ 452.196678][T18974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3432'. [ 452.228182][T18974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3432'. [ 452.620966][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.660941][T18993] bond1: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 452.692765][T18993] bond1: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 452.707650][T18993] bond1: entered allmulticast mode [ 453.263860][T19034] bond1: entered promiscuous mode [ 453.269113][T19034] bond1: entered allmulticast mode [ 453.276110][T19034] 8021q: adding VLAN 0 to HW filter on device bond1 [ 453.287362][T19039] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 453.293389][ T6533] net_ratelimit: 20 callbacks suppressed [ 453.293406][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 453.514064][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 453.675428][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 453.710313][T19052] Bluetooth: MGMT ver 1.23 [ 453.717054][T19049] syzkaller0: entered promiscuous mode [ 453.803130][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 453.933744][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 454.073604][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 454.373109][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 454.397294][T19071] netlink: 'syz.5.3457': attribute type 12 has an invalid length. [ 454.552954][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 454.677456][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 454.814932][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 454.847032][T19101] netlink: 'syz.5.3466': attribute type 4 has an invalid length. [ 454.896695][T19104] macsec1: entered allmulticast mode [ 454.902182][T19104] gretap0: entered allmulticast mode [ 454.920775][T19104] gretap0: left allmulticast mode [ 455.345739][T19121] netlink: 'syz.5.3472': attribute type 1 has an invalid length. [ 455.500126][T19121] bond2: entered promiscuous mode [ 455.533610][T19121] 8021q: adding VLAN 0 to HW filter on device bond2 [ 455.648736][T19127] 8021q: adding VLAN 0 to HW filter on device bond2 [ 455.649090][T19121] xt_policy: too many policy elements [ 455.686857][T19127] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 455.717054][T19127] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 455.747591][T19127] bond2: (slave gre1): making interface the new active one [ 455.766469][T19127] gre1: entered promiscuous mode [ 455.783279][T19127] bond2: (slave gre1): Enslaving as an active interface with an up link [ 455.833664][T19128] bond2 (unregistering): (slave gre1): Releasing backup interface [ 455.855078][T19128] gre1: left promiscuous mode [ 455.878337][T19128] bond2 (unregistering): Released all slaves [ 456.169384][T19145] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 457.256000][T19192] tipc: Invalid UDP bearer configuration [ 457.256051][T19192] tipc: Enabling of bearer rejected, failed to enable media [ 457.807804][T19214] syzkaller1: entered allmulticast mode [ 457.952026][T19221] __nla_validate_parse: 30 callbacks suppressed [ 457.952043][T19221] netlink: 4212 bytes leftover after parsing attributes in process `syz.2.3500'. [ 458.207242][T19235] netlink: 'syz.1.3507': attribute type 1 has an invalid length. [ 458.234084][T19235] netlink: 'syz.1.3507': attribute type 4 has an invalid length. [ 458.333655][ T6538] net_ratelimit: 23 callbacks suppressed [ 458.333674][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 458.412304][T19246] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3510'. [ 458.424967][T19248] lo: entered promiscuous mode [ 458.429989][T19248] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 458.500284][T19250] netlink: 'syz.1.3512': attribute type 3 has an invalid length. [ 458.511940][T19250] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3512'. [ 458.522612][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 458.632662][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 458.728677][T19260] netlink: 'syz.3.3516': attribute type 2 has an invalid length. [ 458.743276][T19260] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3516'. [ 458.770865][T19263] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 458.783068][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 458.923308][ T6542] bond1: (slave bridge1): failed to get link speed/duplex [ 459.042623][ T6542] bond1: (slave bridge1): failed to get link speed/duplex [ 459.096580][T19280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3520'. [ 459.172694][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 459.293056][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 459.426304][T19291] gretap1: entered promiscuous mode [ 459.881117][T19324] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3533'. [ 460.050637][T19334] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3537'. [ 460.104734][T19334] ip6tnl2: entered promiscuous mode [ 460.441445][T19357] netlink: 'syz.5.3545': attribute type 4 has an invalid length. [ 460.465461][T19357] netlink: 'syz.5.3545': attribute type 4 has an invalid length. [ 460.580818][T19364] netlink: 'syz.2.3546': attribute type 1 has an invalid length. [ 460.681043][T19370] netlink: 'syz.0.3548': attribute type 1 has an invalid length. [ 460.696332][T19364] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3546'. [ 460.721919][T19370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3548'. [ 460.736031][T19364] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3546'. [ 460.766149][T15617] IPVS: starting estimator thread 0... [ 460.853601][T19376] IPVS: using max 33 ests per chain, 79200 per kthread [ 460.928148][T19385] netlink: 'syz.3.3551': attribute type 25 has an invalid length. [ 461.023421][T19390] netlink: 'syz.3.3551': attribute type 1 has an invalid length. [ 461.356425][T19399] sctp: [Deprecated]: syz.5.3556 (pid 19399) Use of struct sctp_assoc_value in delayed_ack socket option. [ 461.356425][T19399] Use struct sctp_sack_info instead [ 461.877986][T19413] veth0: entered promiscuous mode [ 462.686615][T19412] veth0: left promiscuous mode [ 462.715431][T19446] syzkaller0: entered promiscuous mode [ 462.722950][T19446] syzkaller0: entered allmulticast mode [ 463.132408][T19456] __nla_validate_parse: 6 callbacks suppressed [ 463.132428][T19456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3575'. [ 463.336141][T19462] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3575'. [ 463.628364][T19473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3579'. [ 463.682855][ T6533] net_ratelimit: 29 callbacks suppressed [ 463.682875][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 463.690471][T19473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3579'. [ 463.772815][T19473] netlink: 'syz.2.3579': attribute type 11 has an invalid length. [ 463.832678][T19473] netlink: 'syz.2.3579': attribute type 13 has an invalid length. [ 463.849644][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 463.876117][T19475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3580'. [ 463.903836][T19475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3580'. [ 463.983202][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 464.082235][T19487] x_tables: unsorted entry at hook 3 [ 464.182221][T19491] nbd: socks must be embedded in a SOCK_ITEM attr [ 464.189090][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 464.276961][T19488] netlink: 'syz.2.3584': attribute type 10 has an invalid length. [ 464.322909][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 464.333678][T19488] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3584'. [ 464.395886][T19488] dummy0: entered promiscuous mode [ 464.426106][T19488] dummy0: entered allmulticast mode [ 464.478243][T17230] udevd[17230]: inotify_add_watch(7, /dev/nbd8, 10) failed: No such file or directory [ 464.543281][T19508] FAULT_INJECTION: forcing a failure. [ 464.543281][T19508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.573195][T19488] team0: Port device dummy0 removed [ 464.578946][T19508] CPU: 0 UID: 0 PID: 19508 Comm: syz.3.3590 Not tainted syzkaller #0 PREEMPT(full) [ 464.578974][T19508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 464.578985][T19508] Call Trace: [ 464.578993][T19508] [ 464.579001][T19508] dump_stack_lvl+0xe8/0x150 [ 464.579032][T19508] should_fail_ex+0x40c/0x560 [ 464.579081][T19508] _copy_from_user+0x2d/0xb0 [ 464.579103][T19508] __sys_bpf+0x2e7/0xd90 [ 464.579132][T19508] ? __pfx___sys_bpf+0x10/0x10 [ 464.579163][T19508] ? __fget_files+0x2a/0x420 [ 464.579200][T19508] ? ksys_write+0x242/0x270 [ 464.579225][T19508] ? __pfx_ksys_write+0x10/0x10 [ 464.579252][T19508] __x64_sys_bpf+0xba/0xd0 [ 464.579280][T19508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.579302][T19508] do_syscall_64+0x174/0x580 [ 464.579320][T19508] ? trace_irq_disable+0x3b/0x140 [ 464.579338][T19508] ? clear_bhb_loop+0x40/0x90 [ 464.579362][T19508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.579380][T19508] RIP: 0033:0x7f68af19ce59 [ 464.579399][T19508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.579415][T19508] RSP: 002b:00007f68affa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 464.579436][T19508] RAX: ffffffffffffffda RBX: 00007f68af415fa0 RCX: 00007f68af19ce59 [ 464.579450][T19508] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 464.579462][T19508] RBP: 00007f68affa5090 R08: 0000000000000000 R09: 0000000000000000 [ 464.579474][T19508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.579486][T19508] R13: 00007f68af416038 R14: 00007f68af415fa0 R15: 00007ffe79e9d6c8 [ 464.579517][T19508] [ 464.633671][T19488] bridge0: port 3(dummy0) entered blocking state [ 464.763586][T19488] bridge0: port 3(dummy0) entered disabled state [ 464.782965][ T6530] bond1: (slave bridge1): failed to get link speed/duplex [ 464.856424][T19517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3593'. [ 464.930037][T19517] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 464.964612][T19517] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 465.032796][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 465.158134][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 465.191988][T19523] syzkaller0: entered allmulticast mode [ 465.250101][T19531] xt_CT: You must specify a L4 protocol and not use inversions on it [ 465.302289][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 465.425392][T19539] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3600'. [ 465.513394][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 465.821065][T19559] netlink: 'syz.3.3608': attribute type 1 has an invalid length. [ 465.866503][T19559] 8021q: adding VLAN 0 to HW filter on device bond2 [ 465.890858][T19562] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 466.096459][T19583] netlink: 'syz.3.3613': attribute type 1 has an invalid length. [ 466.335208][T19604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3618'. [ 469.299162][T19583] netlink: 'syz.3.3613': attribute type 4 has an invalid length. [ 469.310682][T19604] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 469.453805][ T6542] net_ratelimit: 4 callbacks suppressed [ 469.453825][ T6542] bond1: (slave bridge1): failed to get link speed/duplex [ 469.633371][ T6527] bond1: (slave bridge1): failed to get link speed/duplex [ 469.678330][T19633] __nla_validate_parse: 1 callbacks suppressed [ 469.678348][T19633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3625'. [ 469.722965][T19633] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3625'. [ 469.731491][T19637] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 469.755550][T19633] veth0: entered promiscuous mode [ 469.831322][T19633] bond3 (unregistering): Released all slaves [ 469.841427][T19644] netlink: 'syz.5.3631': attribute type 1 has an invalid length. [ 469.842229][T19640] netlink: 'syz.0.3629': attribute type 1 has an invalid length. [ 469.917437][T19640] 8021q: adding VLAN 0 to HW filter on device bond2 [ 469.928266][T19644] netlink: 'syz.5.3631': attribute type 4 has an invalid length. [ 469.961254][T19640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3629'. [ 469.976435][T19627] veth0: left promiscuous mode [ 469.994436][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 470.015487][T19654] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3629'. [ 470.038026][T19654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3629'. [ 470.086019][T19654] macvlan3: entered promiscuous mode [ 470.091541][T19654] macvlan3: entered allmulticast mode [ 470.098769][T19654] bond2: entered allmulticast mode [ 470.106384][T19654] bond2: entered promiscuous mode [ 470.115304][T19654] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 470.129946][T19654] team0: Port device macvlan3 added [ 470.154071][T19660] bond2: (slave ip6gretap1): making interface the new active one [ 470.158698][T19659] netlink: 'syz.1.3634': attribute type 83 has an invalid length. [ 470.167679][T19660] ip6gretap1: entered promiscuous mode [ 470.179816][T19662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3635'. [ 470.190525][T19660] ip6gretap1: entered allmulticast mode [ 470.205661][T19660] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 470.243330][T19662] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 470.253356][T19662] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 470.270962][T19666] tunl0: Caught tx_queue_len zero misconfig [ 470.283330][ T6542] bond1: (slave bridge1): failed to get link speed/duplex [ 470.393036][ T6527] bond1: (slave bridge1): failed to get link speed/duplex [ 470.440173][T19674] tipc: Enabling of bearer rejected, failed to enable media [ 470.502711][ T6542] bond1: (slave bridge1): failed to get link speed/duplex [ 470.536788][T19683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3643'. [ 470.536957][T19685] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 470.556902][T19683] xt_TCPMSS: Only works on TCP SYN packets [ 470.569603][T19684] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3644'. [ 470.633063][ T6527] bond1: (slave bridge1): failed to get link speed/duplex [ 470.691000][T19688] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3644'. [ 470.707154][T19683] bridge_slave_1: left allmulticast mode [ 470.725089][T19690] netlink: 'syz.0.3645': attribute type 1 has an invalid length. [ 470.728038][T19683] bridge_slave_1: left promiscuous mode [ 470.747388][T19690] netlink: 'syz.0.3645': attribute type 11 has an invalid length. [ 470.755960][T19683] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.772457][T19690] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3645'. [ 470.789233][T19683] bridge_slave_0: left allmulticast mode [ 470.795631][T19683] bridge_slave_0: left promiscuous mode [ 470.806659][T19683] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.876532][ T6542] bond1: (slave bridge1): failed to get link speed/duplex [ 471.003200][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 471.187229][T19712] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 471.217068][T19712] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 471.610144][T19724] netlink: 'syz.2.3655': attribute type 153 has an invalid length. [ 471.688226][T19729] Unsupported ieee802154 address type: 0 [ 472.195548][T19754] netlink: 'syz.3.3664': attribute type 1 has an invalid length. [ 472.236629][T19753] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 472.283746][T19753] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 472.543944][T19763] bond3: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 472.557533][T19763] bond3 (unregistering): Released all slaves [ 472.699363][T19782] netlink: 'syz.5.3672': attribute type 13 has an invalid length. [ 472.814693][T19782] netlink: 'syz.5.3672': attribute type 2 has an invalid length. [ 473.184575][T19804] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 473.185751][T19808] SET target dimension over the limit! [ 473.222842][T19804] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 473.279924][T19812] vlan2: entered promiscuous mode [ 473.285557][T19812] batadv0: entered promiscuous mode [ 473.468632][T19824] pim6reg: left allmulticast mode [ 473.543361][ T6527] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.556612][ T6527] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.571246][ T6527] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.607730][ T6527] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.696537][T19836] syzkaller1: entered promiscuous mode [ 473.716756][T19836] syzkaller1: entered allmulticast mode [ 474.532849][ T6527] net_ratelimit: 23 callbacks suppressed [ 474.532870][ T6527] bond1: (slave bridge1): failed to get link speed/duplex [ 474.664694][ T6527] bond1: (slave bridge1): failed to get link speed/duplex [ 474.792721][ T6542] bond1: (slave bridge1): failed to get link speed/duplex [ 474.831946][T19877] __nla_validate_parse: 15 callbacks suppressed [ 474.831965][T19877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3703'. [ 474.913342][ T6542] bond1: (slave bridge1): failed to get link speed/duplex [ 475.053376][ T6527] bond1: (slave bridge1): failed to get link speed/duplex [ 475.076164][ T10] block nbd4: Possible stuck request ffff8880272c5080: control (read@0,2048B). Runtime 120 seconds [ 475.087051][ T10] block nbd4: Possible stuck request ffff8880272c5240: control (read@2048,2048B). Runtime 120 seconds [ 475.224777][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 475.344243][ T6542] bond1: (slave bridge1): failed to get link speed/duplex [ 475.473437][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 475.593204][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 475.714419][ T6533] bond1: (slave bridge1): failed to get link speed/duplex [ 476.429696][T19936] bridge2: entered promiscuous mode [ 476.449635][T19936] bridge2: entered allmulticast mode [ 476.471628][T19945] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3720'. [ 476.507660][T19945] netlink: 'syz.0.3720': attribute type 1 has an invalid length. [ 476.521928][T19936] team0: Port device bridge2 added [ 476.561661][T19945] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3720'. [ 476.846647][T19958] sock: sock_timestamping_bind_phc: sock not bind to device [ 476.904921][T19962] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 476.905661][T19961] netlink: 'syz.3.3724': attribute type 1 has an invalid length. [ 476.916365][T19958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3722'. [ 477.619497][T19983] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3730'. [ 477.804652][T19995] netlink: 'syz.3.3735': attribute type 10 has an invalid length. [ 477.857648][T19996] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3735'. [ 477.976364][T19995] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 478.011483][T19995] team0: Port device netdevsim1 added [ 478.174336][T20012] netlink: 'syz.0.3739': attribute type 1 has an invalid length. [ 478.231884][T20014] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3738'. [ 478.309479][T20019] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3740'. [ 478.410720][T20023] netlink: 7688 bytes leftover after parsing attributes in process `syz.3.3740'. [ 479.143359][T20035] netlink: 'syz.2.3744': attribute type 1 has an invalid length. [ 479.224358][T20039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3744'. [ 479.382260][T20035] bond5: entered promiscuous mode [ 479.423155][T20035] 8021q: adding VLAN 0 to HW filter on device bond5 [ 479.544140][T20039] bond5 (unregistering): Released all slaves [ 479.632854][ T6542] net_ratelimit: 17 callbacks suppressed [ 479.632874][ T6542] bond1: (slave bridge1): failed to get link speed/duplex [ 479.774559][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 479.913587][ T6542] bond1: (slave bridge1): failed to get link speed/duplex [ 480.039481][T20060] netlink: 'syz.2.3753': attribute type 1 has an invalid length. [ 480.120174][ T6542] bond1: (slave bridge1): failed to get link speed/duplex [ 480.214129][T20066] __nla_validate_parse: 1 callbacks suppressed [ 480.214148][T20066] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3754'. [ 480.254504][ T6527] bond1: (slave bridge1): failed to get link speed/duplex [ 480.280166][T20069] netlink: 'syz.3.3755': attribute type 29 has an invalid length. [ 480.333319][T20066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3754'. [ 480.376071][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 480.504786][ T6527] bond1: (slave bridge1): failed to get link speed/duplex [ 480.622807][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 480.733133][ T6527] bond1: (slave bridge1): failed to get link speed/duplex [ 480.873159][ T6542] bond1: (slave bridge1): failed to get link speed/duplex [ 480.907928][T20090] syzkaller1: entered promiscuous mode [ 480.940683][T20090] syzkaller1: entered allmulticast mode [ 481.066921][T20100] netlink: 'syz.1.3764': attribute type 1 has an invalid length. [ 481.283690][T20113] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 481.345235][T20113] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 481.362966][T20113] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 481.582143][T20134] netlink: 'syz.1.3773': attribute type 1 has an invalid length. [ 481.900087][T20157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3777'. [ 481.920074][T20156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3778'. [ 482.088421][T20165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3779'. [ 482.330841][T20172] netlink: 'syz.0.3780': attribute type 1 has an invalid length. [ 482.367144][ T8902] block nbd9: Receive control failed (result -1) [ 482.381152][ T8902] [ 482.383491][ T8902] ====================================================== [ 482.390488][ T8902] WARNING: possible circular locking dependency detected [ 482.397497][ T8902] syzkaller #0 Not tainted [ 482.401889][ T8902] ------------------------------------------------------ [ 482.408895][ T8902] kworker/u9:6/8902 is trying to acquire lock: [ 482.415054][ T8902] ffff888048a745e0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 482.424620][ T8902] [ 482.424620][ T8902] but task is already holding lock: [ 482.431989][ T8902] ffff88807afb9868 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 482.440988][ T8902] [ 482.440988][ T8902] which lock already depends on the new lock. [ 482.440988][ T8902] [ 482.451393][ T8902] [ 482.451393][ T8902] the existing dependency chain (in reverse order) is: [ 482.460410][ T8902] [ 482.460410][ T8902] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 482.468072][ T8902] __mutex_lock+0x19d/0x1550 [ 482.473213][ T8902] nbd_queue_rq+0x373/0x1150 [ 482.478341][ T8902] blk_mq_dispatch_rq_list+0x499/0x1990 [ 482.484539][ T8902] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 482.491459][ T8902] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 482.497965][ T8902] blk_mq_run_work_fn+0x16c/0x300 [ 482.503508][ T8902] process_scheduled_works+0xa8e/0x14e0 [ 482.509604][ T8902] worker_thread+0xa47/0xfb0 [ 482.514705][ T8902] kthread+0x388/0x470 [ 482.519284][ T8902] ret_from_fork+0x514/0xb70 [ 482.524409][ T8902] ret_from_fork_asm+0x1a/0x30 [ 482.529690][ T8902] [ 482.529690][ T8902] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 482.536885][ T8902] __mutex_lock+0x19d/0x1550 [ 482.541979][ T8902] nbd_queue_rq+0xc1/0x1150 [ 482.546990][ T8902] blk_mq_dispatch_rq_list+0x499/0x1990 [ 482.553047][ T8902] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 482.559880][ T8902] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 482.566365][ T8902] blk_mq_run_work_fn+0x16c/0x300 [ 482.571896][ T8902] process_scheduled_works+0xa8e/0x14e0 [ 482.577952][ T8902] worker_thread+0xa47/0xfb0 [ 482.583057][ T8902] kthread+0x388/0x470 [ 482.587634][ T8902] ret_from_fork+0x514/0xb70 [ 482.592735][ T8902] ret_from_fork_asm+0x1a/0x30 [ 482.598011][ T8902] [ 482.598011][ T8902] -> #4 (set->srcu){.+.+}-{0:0}: [ 482.605121][ T8902] __synchronize_srcu+0xc9/0x2f0 [ 482.610595][ T8902] elevator_switch+0x1e8/0x7b0 [ 482.615946][ T8902] elevator_change+0x2fa/0x480 [ 482.621225][ T8902] elevator_set_default+0x375/0x440 [ 482.626934][ T8902] blk_register_queue+0x3f3/0x4e0 [ 482.632507][ T8902] __add_disk+0x6cb/0xe30 [ 482.637371][ T8902] add_disk_fwnode+0xfb/0x4b0 [ 482.642555][ T8902] nbd_dev_add+0x733/0xb60 [ 482.647478][ T8902] nbd_init+0x15f/0x1e0 [ 482.652251][ T8902] do_one_initcall+0x250/0x870 [ 482.657524][ T8902] do_initcall_level+0x10a/0x1a0 [ 482.663038][ T8902] do_initcalls+0x59/0xa0 [ 482.667876][ T8902] kernel_init_freeable+0x29d/0x3e0 [ 482.673583][ T8902] kernel_init+0x1d/0x1d0 [ 482.678428][ T8902] ret_from_fork+0x514/0xb70 [ 482.683525][ T8902] ret_from_fork_asm+0x1a/0x30 [ 482.688797][ T8902] [ 482.688797][ T8902] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 482.696601][ T8902] __mutex_lock+0x19d/0x1550 [ 482.701698][ T8902] elevator_change+0x1af/0x480 [ 482.706973][ T8902] elevator_set_none+0xb5/0x140 [ 482.712335][ T8902] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 482.718646][ T8902] nbd_start_device+0x189/0xb30 [ 482.724005][ T8902] nbd_genl_connect+0x1597/0x1c10 [ 482.729531][ T8902] genl_family_rcv_msg_doit+0x233/0x340 [ 482.735604][ T8902] genl_rcv_msg+0x614/0x7a0 [ 482.740619][ T8902] netlink_rcv_skb+0x226/0x4a0 [ 482.745889][ T8902] genl_rcv+0x28/0x40 [ 482.750380][ T8902] netlink_unicast+0x7bb/0x940 [ 482.755649][ T8902] netlink_sendmsg+0x813/0xb40 [ 482.760926][ T8902] sock_sendmsg_nosec+0x13a/0x180 [ 482.766472][ T8902] ____sys_sendmsg+0x54e/0x850 [ 482.771748][ T8902] ___sys_sendmsg+0x2a5/0x360 [ 482.776928][ T8902] __x64_sys_sendmsg+0x1b1/0x290 [ 482.782371][ T8902] do_syscall_64+0x174/0x580 [ 482.787474][ T8902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.793887][ T8902] [ 482.793887][ T8902] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 482.802476][ T8902] blk_alloc_queue+0x544/0x690 [ 482.807755][ T8902] __blk_mq_alloc_disk+0x194/0x390 [ 482.813372][ T8902] nbd_dev_add+0x494/0xb60 [ 482.818293][ T8902] nbd_init+0x15f/0x1e0 [ 482.822961][ T8902] do_one_initcall+0x250/0x870 [ 482.828233][ T8902] do_initcall_level+0x10a/0x1a0 [ 482.833684][ T8902] do_initcalls+0x59/0xa0 [ 482.838520][ T8902] kernel_init_freeable+0x29d/0x3e0 [ 482.844228][ T8902] kernel_init+0x1d/0x1d0 [ 482.849066][ T8902] ret_from_fork+0x514/0xb70 [ 482.854159][ T8902] ret_from_fork_asm+0x1a/0x30 [ 482.859430][ T8902] [ 482.859430][ T8902] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 482.866625][ T8902] fs_reclaim_acquire+0x71/0x100 [ 482.872065][ T8902] __kmalloc_noprof+0xbc/0x720 [ 482.877337][ T8902] tls_sw_sendmsg+0x599/0x2860 [ 482.882718][ T8902] sock_sendmsg_nosec+0x90/0x180 [ 482.888172][ T8902] sock_sendmsg+0x1ca/0x2d0 [ 482.893182][ T8902] splice_to_socket+0xb5e/0x12a0 [ 482.898625][ T8902] direct_splice_actor+0x101/0x160 [ 482.904242][ T8902] splice_direct_to_actor+0x57b/0xcb0 [ 482.910119][ T8902] do_splice_direct+0x195/0x290 [ 482.915476][ T8902] do_sendfile+0x52e/0x7c0 [ 482.920407][ T8902] __se_sys_sendfile64+0x144/0x1a0 [ 482.926029][ T8902] do_syscall_64+0x174/0x580 [ 482.931127][ T8902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.937525][ T8902] [ 482.937525][ T8902] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 482.945589][ T8902] __lock_acquire+0x1520/0x2cf0 [ 482.950956][ T8902] lock_acquire+0x106/0x350 [ 482.955962][ T8902] lock_sock_nested+0x41/0x100 [ 482.961234][ T8902] inet_shutdown+0x6a/0x390 [ 482.966248][ T8902] nbd_mark_nsock_dead+0x2cb/0x550 [ 482.971866][ T8902] recv_work+0x1cee/0x1e10 [ 482.976789][ T8902] process_scheduled_works+0xa8e/0x14e0 [ 482.982843][ T8902] worker_thread+0xa47/0xfb0 [ 482.987945][ T8902] kthread+0x388/0x470 [ 482.992519][ T8902] ret_from_fork+0x514/0xb70 [ 482.997621][ T8902] ret_from_fork_asm+0x1a/0x30 [ 483.002894][ T8902] [ 483.002894][ T8902] other info that might help us debug this: [ 483.002894][ T8902] [ 483.013105][ T8902] Chain exists of: [ 483.013105][ T8902] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 483.013105][ T8902] [ 483.026123][ T8902] Possible unsafe locking scenario: [ 483.026123][ T8902] [ 483.033554][ T8902] CPU0 CPU1 [ 483.038909][ T8902] ---- ---- [ 483.044267][ T8902] lock(&nsock->tx_lock); [ 483.048679][ T8902] lock(&cmd->lock); [ 483.055176][ T8902] lock(&nsock->tx_lock); [ 483.062103][ T8902] lock(sk_lock-AF_INET6-NBD); [ 483.066944][ T8902] [ 483.066944][ T8902] *** DEADLOCK *** [ 483.066944][ T8902] [ 483.075070][ T8902] 3 locks held by kworker/u9:6/8902: [ 483.080336][ T8902] #0: ffff8880270ed940 ((wq_completion)nbd9-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 483.091559][ T8902] #1: ffffc900033c7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 483.103296][ T8902] #2: ffff88807afb9868 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 483.112605][ T8902] [ 483.112605][ T8902] stack backtrace: [ 483.118488][ T8902] CPU: 0 UID: 0 PID: 8902 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) [ 483.118506][ T8902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 483.118516][ T8902] Workqueue: nbd9-recv recv_work [ 483.118536][ T8902] Call Trace: [ 483.118544][ T8902] [ 483.118551][ T8902] dump_stack_lvl+0xe8/0x150 [ 483.118570][ T8902] print_circular_bug+0x2e1/0x300 [ 483.118591][ T8902] check_noncircular+0x12e/0x150 [ 483.118610][ T8902] __lock_acquire+0x1520/0x2cf0 [ 483.118630][ T8902] ? irqentry_exit+0x218/0x8f0 [ 483.118653][ T8902] ? lockdep_hardirqs_on+0x7a/0x110 [ 483.118674][ T8902] ? inet_shutdown+0x6a/0x390 [ 483.118694][ T8902] lock_acquire+0x106/0x350 [ 483.118708][ T8902] ? inet_shutdown+0x6a/0x390 [ 483.118732][ T8902] lock_sock_nested+0x41/0x100 [ 483.118752][ T8902] ? inet_shutdown+0x6a/0x390 [ 483.118772][ T8902] inet_shutdown+0x6a/0x390 [ 483.118799][ T8902] nbd_mark_nsock_dead+0x2cb/0x550 [ 483.118817][ T8902] recv_work+0x1cee/0x1e10 [ 483.118838][ T8902] ? lockdep_unlock+0x5d/0xd0 [ 483.118850][ T8902] ? __lock_acquire+0x13e8/0x2cf0 [ 483.118868][ T8902] ? __pfx_recv_work+0x10/0x10 [ 483.118888][ T8902] ? process_scheduled_works+0xa20/0x14e0 [ 483.118911][ T8902] ? rcu_is_watching+0x15/0xb0 [ 483.118929][ T8902] ? process_scheduled_works+0xa20/0x14e0 [ 483.118948][ T8902] process_scheduled_works+0xa8e/0x14e0 [ 483.118976][ T8902] ? __pfx_process_scheduled_works+0x10/0x10 [ 483.118997][ T8902] ? assign_work+0x3cf/0x5d0 [ 483.119017][ T8902] worker_thread+0xa47/0xfb0 [ 483.119046][ T8902] kthread+0x388/0x470 [ 483.119061][ T8902] ? __pfx_worker_thread+0x10/0x10 [ 483.119079][ T8902] ? __pfx_kthread+0x10/0x10 [ 483.119094][ T8902] ret_from_fork+0x514/0xb70 [ 483.119111][ T8902] ? __pfx_ret_from_fork+0x10/0x10 [ 483.119126][ T8902] ? __switch_to+0xc89/0x1420 [ 483.119148][ T8902] ? __pfx_kthread+0x10/0x10 [ 483.119163][ T8902] ret_from_fork_asm+0x1a/0x30 [ 483.119186][ T8902] [ 484.733758][ T6542] net_ratelimit: 26 callbacks suppressed [ 484.733778][ T6542] bond1: (slave bridge1): failed to get link speed/duplex [ 484.852866][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 484.962655][ T6542] bond1: (slave bridge1): failed to get link speed/duplex [ 485.082711][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 485.192642][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 485.302810][ T6542] bond1: (slave bridge1): failed to get link speed/duplex [ 485.412663][ T6542] bond1: (slave bridge1): failed to get link speed/duplex [ 485.522695][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 485.632755][ T6530] bond1: (slave bridge1): failed to get link speed/duplex [ 485.742668][ T6542] bond1: (slave bridge1): failed to get link speed/duplex [ 487.557590][ T4991] udevd[4991]: worker [12065] /devices/virtual/block/nbd4 is taking a long time [ 489.842742][ T6542] net_ratelimit: 36 callbacks suppressed [ 489.842763][ T6542] bond1: (slave bridge1): failed to get link speed/duplex [ 489.962776][ T6530] bond1: (slave bridge1): failed to get link speed/duplex [ 490.082761][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 490.192688][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 490.302758][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 490.412985][ T6538] bond1: (slave bridge1): failed to get link speed/duplex [ 490.522776][ T6530] bond1: (slave bridge1): failed to get link speed/duplex [ 490.632760][ T6530] bond1: (slave bridge1): failed to get link speed/duplex [ 490.742806][ T6542] bond1: (slave bridge1): failed to get link speed/duplex [ 490.862636][ T6530] bond1: (slave bridge1): failed to get link speed/duplex