last executing test programs: 7m45.89242117s ago: executing program 1 (id=10491): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @multicast}]}}}]}, 0x48}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0) preadv(r1, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/125, 0x7d}, {&(0x7f0000000340)=""/170, 0xaa}, {&(0x7f0000000400)=""/12, 0xc}, {&(0x7f0000000440)=""/126, 0x7e}, {&(0x7f00000004c0)=""/188, 0xbc}, {&(0x7f0000000580)=""/91, 0x5b}, {&(0x7f0000000600)=""/59, 0x3b}, {&(0x7f0000000640)=""/192, 0xc0}], 0x8, 0x3, 0x5) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$XFS_IOC_FSGROWFSRT(r2, 0x40105870, &(0x7f0000000140)={0x502, 0xafd}) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000840)={0x2, 0x2, 0x80000001, 0x8000000000000001, 0x3, 0x5}) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000780)={0x5df, 0x9, 0x5, 0x0, 0x0, [{{r1}, 0xdb3}, {{r0}, 0x6}, {{r1}, 0x3}, {{r2}}, {{r0}, 0x6}]}) 7m45.331721504s ago: executing program 1 (id=10494): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x1, 0x3, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r3, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x1, 0x0) (async, rerun: 32) recvmsg$can_raw(r3, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x40012020) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}}, 0x0) 7m44.749462327s ago: executing program 1 (id=10497): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x6d56, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x87}, @in6={0xa, 0x4e23, 0xff, @mcast1, 0xba6d}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e20, 0x1fe, @local, 0x4c7}, @in6={0xa, 0x4e23, 0x7fffffff, @loopback, 0x4}, @in6={0xa, 0x4e24, 0x7, @remote, 0x3}, @in6={0xa, 0x4e20, 0xffff243a, @private2, 0x2}], 0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x80000001, 0x3, 0x2, 0x20000, 0x1, 0xcf57, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5, 0x8}, 0x50) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x1a, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @random="d9410349e5f6"}, 0x14) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000280)=ANY=[@ANYRES64], 0x0, 0x2, 0x0, 0x0, 0x410ff, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) (async) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x800}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x1e, &(0x7f0000000440)=ANY=[@ANYBLOB="180000008100000000000000070000008c95e0ffffffffff18010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000ff0700007b8af8ff00000000bfa200000000000007020000f8ffffffb702000008000000b704010002000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000540)='syzkaller\x00', 0xa, 0x9a, &(0x7f0000000580)=""/154, 0x41100, 0x1a, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0xd, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x2fc2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x1e, &(0x7f0000000440)=ANY=[@ANYBLOB="180000008100000000000000070000008c95e0ffffffffff18010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000ff0700007b8af8ff00000000bfa200000000000007020000f8ffffffb702000008000000b704010002000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000540)='syzkaller\x00', 0xa, 0x9a, &(0x7f0000000580)=""/154, 0x41100, 0x1a, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0xd, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x2fc2}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000840)={r0, 0x5, 0x800}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000840)={r0, 0x5, 0x800}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000980)={r0, &(0x7f0000000880)='/\x00', 0x80100, &(0x7f00000008c0)={@align=0x7, {0x8, 0x34, 0x5, 0x9}}, 0x9, &(0x7f0000000900)={@_ha_fsid}, &(0x7f0000000940)=0x2210c979}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1e00000040000000060000000800000016000400", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000005000000040000000b00"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={0x1}, 0x4) 7m43.246362855s ago: executing program 1 (id=10502): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000740)={'dummy0\x00', @ifru_ivalue=0x10004}) 7m42.280734729s ago: executing program 1 (id=10505): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000d4d300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) recvmsg$unix(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/167, 0xa7}], 0x1}, 0x40012062) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x88}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r9, 0xc0385869, &(0x7f0000000740)={r1, &(0x7f0000000500)='\xaa', 0x2, &(0x7f0000000680)={@_ha_fsid={[0x3ff, 0x5]}, {0x4, 0x4, 0xfffffffb, 0x3}}, 0x200, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f0000000700)=0xf9f2}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xd, 0x7, &(0x7f0000000b80)=ANY=[@ANYBLOB="185408bdff24bd2ead5a223b3e0000000000000018016ce9ee2a2a5afe3bb3ba57f3d2e2a323fb5673cfaac9c3fcf581bac47167d258a4d3f8c358347a46fd7e5f1c4e0dc9c12f74f4bc8acdc0656efd72e6a9274392e532bae035cb9f2aa6838f3531db2ff2d783e62e8265b0d1dab106264fb6929663789f868b3b092ef9c546dcbd0f6de75799423c692d6b097a8d865e00890b1276c18717c8d72cf379cda22c5274261b1e7db8253f0633d675575174f703a64b793e8cc04ece1361ed23c73fbea04013cc643236fc58", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000380)='GPL\x00', 0x1, 0xe0, &(0x7f0000000400)=""/224, 0x41100, 0x0, '\x00', r2, @fallback=0x33, r10, 0x8, &(0x7f0000000780)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x3, 0x5, 0x2, 0x1}, 0x10, r3, r9, 0x6, &(0x7f0000000800)=[r7, r7, r7, r6, r7, r7, r7, r7], &(0x7f0000000840)=[{0x0, 0x2, 0x3, 0xc}, {0x2, 0x5, 0xb, 0x6}, {0x0, 0x4, 0x0, 0x6}, {0x3, 0x1, 0x8, 0x9}, {0x3, 0x4, 0x6, 0x8}, {0x2, 0x2, 0xe, 0x3}], 0x10, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94) 7m41.116719698s ago: executing program 1 (id=10511): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x2, 0x3, 0xffff}, 0x20) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0xc8282, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x4ac, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x478, 0x2, [@TCA_MATCHALL_ACT={0x474, 0x2, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x0, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x7fe, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x1, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x0, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x3, 0x100, 0xfffffffe, 0xd, 0xff, 0x3, 0xfffc, 0x6, 0x10a4, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0x1, 0x3, 0x2, 0x9, 0x81, 0x7, 0x8, 0x5, 0x10001, 0x8f7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0xffffca9a, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x8, 0x6, 0x10007e, 0x8, 0x0, 0x5, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x9, 0x2, 0x2, 0x6, 0x3ff, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x180, 0x2f0cb955, 0x7, 0x8, 0xf, 0x6ae, 0x9, 0x0, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0x40ac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x3, 0x2, 0x3, 0xffffffff, 0x8, 0x9, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x3, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x5, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x206, 0x5f, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x6, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x4, 0x2, 0x1, 0x200, 0x0, 0x8, 0x7, 0x0, 0x80, 0x5, 0x8, 0x1, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0xafb, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0xdbec, {0xb, 0x2, 0xb55, 0x5, 0xa, 0xb}, {0x6, 0x1, 0xd, 0x800, 0x1}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(r4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x5}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00003c0ff000000000ff8400000066e4532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x45) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x0, 0x0, 0x200}, 0x20) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0xe) unshare(0x6a040000) 7m25.556845779s ago: executing program 32 (id=10511): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x2, 0x3, 0xffff}, 0x20) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0xc8282, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x4ac, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x478, 0x2, [@TCA_MATCHALL_ACT={0x474, 0x2, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x0, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x7fe, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x1, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x0, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x3, 0x100, 0xfffffffe, 0xd, 0xff, 0x3, 0xfffc, 0x6, 0x10a4, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0x1, 0x3, 0x2, 0x9, 0x81, 0x7, 0x8, 0x5, 0x10001, 0x8f7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0xffffca9a, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x8, 0x6, 0x10007e, 0x8, 0x0, 0x5, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x9, 0x2, 0x2, 0x6, 0x3ff, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x180, 0x2f0cb955, 0x7, 0x8, 0xf, 0x6ae, 0x9, 0x0, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0x40ac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x3, 0x2, 0x3, 0xffffffff, 0x8, 0x9, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x3, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x5, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x206, 0x5f, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x6, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x4, 0x2, 0x1, 0x200, 0x0, 0x8, 0x7, 0x0, 0x80, 0x5, 0x8, 0x1, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0xafb, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0xdbec, {0xb, 0x2, 0xb55, 0x5, 0xa, 0xb}, {0x6, 0x1, 0xd, 0x800, 0x1}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(r4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x5}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00003c0ff000000000ff8400000066e4532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x45) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x0, 0x0, 0x200}, 0x20) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0xe) unshare(0x6a040000) 16.644168706s ago: executing program 3 (id=13477): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872061ce618117c56f0979bd10b97163c953ab1abda4589e9cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346d2014006000000e1ffff8816326d7d35c32aac1c7d5b5be399f6609876b5887437a172751151b633fbc02a74067529194e533583412dff048f0000000000000000b2728a04816cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13ceec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad30000000000170022626165866c156a25148972700000b515a1000000000000000eb2e9c15b6c8f6198282d0000000000c2ccf3f69cfcf1e15ea7a9e57aee78e12a2caebaada42811754e19a7e9b531636794a718b4766d2c7c61c3dba128c7fcd1f97989ccf1d55de496eae46c590c2d0225f9cd07005ac7f76d9d560a08c9fd0caafd9d095cb9db0099014cd0d4df62af52b088b01adeadc4c5225a6cd8486b03f83805dffe90dbf7ad042012b7213a2b03e3b1634ddfc9d6f570c4990fbbc7306871d9a52a157fb1a10fa2868df06faf83a8420e9ce62567043ce7e56d1ebe81"], &(0x7f0000000340)='GPL\x00'}, 0x48) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r1, 0x0, 0x5, &(0x7f0000001740)={@local, @private, 0x0, "50195b9ae2d280a88343baee300eb695f9a491328803d89ff721bbc0b17cce26"}, 0x3c) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xffff0000, 0x40f, 0xfffffffffffffe4a, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) 16.056647246s ago: executing program 3 (id=13483): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x1000, 0x2}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01070000000000000000670000f4070001"], 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x12) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)={0x18, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x8, 0xf2, 0x0, 0x1, [@nested={0x4, 0x66}]}]}, 0x18}, {&(0x7f0000001500)=ANY=[], 0x10}], 0x2, 0x0, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000ff06000000000000000e00000000000108000a0000000000060002000100000014001f0000000000000000000000fffffffffffff2f11d909877c7796766549b47c0115b2cfc99a9bb83ccd22829cfbabd3429d5e0d891632a8ef0aeab50759696ae3a033aa84c4e4e734b8602fb58a9d2928ae018bccf62277b3971d927cc8a275171d6d9c2af38bdb41935f8a1d15c7e"], 0x5c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f0091af76d027000000000008000a00a8"], 0x6c}}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="80032bbd7000ffdbdf250700001108000b0001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x200040c0) 14.792596961s ago: executing program 3 (id=13493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_MASTER={0x4}]}, 0x3c}}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000400)={{r0, &(0x7f0000000080)='!\x00', 0x200000, &(0x7f00000000c0)={@_ha_fsid={[0xdc38, 0x1]}, {0x1, 0xb1, 0x100, 0x4}}, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x400}, {[0x1, 0x4, 0x5, 0xfffffffd]}, 0x0, 0x82, &(0x7f0000000340)=""/130}) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000480)={0x0, 0xfffffbff}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000500)={r3, 0x6}, &(0x7f0000000540)=0x8) 14.533506866s ago: executing program 3 (id=13495): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r0, 0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_FSGETXATTRA(r1, 0x801c582d, &(0x7f0000000440)) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r2, 0xfffffffd, '\x00', 0x0, 0x0}, 0x50) getpeername$unix(r1, &(0x7f0000000480)=@abs, &(0x7f0000000500)=0x6e) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000c, 0x4010, r3, 0xc73a9000) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14.373272745s ago: executing program 3 (id=13497): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r1, 0x109, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x3c}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = accept4(r2, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote}, &(0x7f00000003c0)=0xffffffffffffff76, 0xc00) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80010014}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x895) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f00000000c0)={&(0x7f0000000040)=@hci, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f00000005c0)=""/255, 0xff}], 0x2}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001800ffff2cbd7000010000010a000000ff0000090009"], 0x2c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="680000001000ffff64e4ff030000df2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500480012800e00010069703665727370616e00000034000280060003003000000014000700fc02000000000000000000000000000014000600fc"], 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) (async) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r1, 0x109, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x3c}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) accept4(r2, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote}, &(0x7f00000003c0)=0xffffffffffffff76, 0xc00) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80010014}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x895) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)) (async) recvmsg(r3, &(0x7f00000000c0)={&(0x7f0000000040)=@hci, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f00000005c0)=""/255, 0xff}], 0x2}, 0x1f00) (async) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) (async) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001800ffff2cbd7000010000010a000000ff0000090009"], 0x2c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="680000001000ffff64e4ff030000df2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500480012800e00010069703665727370616e00000034000280060003003000000014000700fc02000000000000000000000000000014000600fc"], 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) (async) 4.98452064s ago: executing program 0 (id=13542): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000001c0)=0x1004, 0x4) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0xff, 0x4) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000007c0)=@buf={0x0, &(0x7f0000000500)}) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000140), 0x0}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_user\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x70, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000540), 0x8, 0x4f, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300021000000000000000040000000200080008000000540000000000000005000600000000000a00000000000000fe8000000000000000000000000000aa00000000000020000200010000000000000005fd80ffffff05000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r7) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r3) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="000032f1b1c112a230239b472c7b324b53d5b0cbb318588793c3d9351ecb7a0e0d2f2ee4f94d27d467b868cb0e3f27e0eea4a0f9716dc449eaf0c76bcfa1d0182c70a7ce0fad3e4ab20082be06913b95eb8e2cda5fcea8bf6c6248e9eb8df0bfd039af315bb713a26be713568cbf373d7f9d617303c5350e86c0e3b9211a6f298f043a1eac2c5bd02c9f9f5e9877eb9a31a25d961aa5309208bc8fcbb588a904c413698d68af441a75b68e0f77e9029941706536ad587496c22dff5049c51059a300000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r12 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000580)="c1515a1232c30600776bef766d838203bee2", 0x12}], 0x1}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) 4.429574936s ago: executing program 0 (id=13549): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000006c0)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000340), &(0x7f00000003c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x14, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xe}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r0}, &(0x7f0000000100), &(0x7f00000006c0)='%pB \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000340), &(0x7f00000003c0)='%pi6 \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r1}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x14, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xe}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 4.184571473s ago: executing program 0 (id=13552): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.984957691s ago: executing program 0 (id=13553): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffdac, &(0x7f0000000140)="5b030023e0f6f1", 0x0}, 0x50) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={r0, &(0x7f0000000000)=':!.\x00', 0x44, &(0x7f0000000080)={@align=0xfffffffffffffff9, {0x8, 0x8, 0x2, 0x405edf40}}, 0x1, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x7ff}) 3.905622836s ago: executing program 0 (id=13555): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)=ANY=[@ANYBLOB="300000000514010027bd7000fbdbdf250800010000000000080003"], 0x30}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x10) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="77f918f40b4d45ede100247b715861c7d8baed0c4b24dfc1220a6f24527cfb73540823aab63e7ca62aa048efcef2dc71b1eb81c04c5b8d21dc653d8ed2b18034b22c02f301c6188e352360a601e7efc4bef6919ba4330bd41db9d8205f852eed59cef449c457e79009cc39558e19fb2728328c140fca07d93eb3c54e", @ANYRES16=r3, @ANYBLOB="010000000000000000000f0000000c0007800500020000000000"], 0x20}}, 0x0) r4 = socket(0x8, 0x4, 0x3) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x40106183, &(0x7f0000000000)={{r1, 0x0, 0x640880, 0x0, 0x9, 0x0, 0x0}, 0x0, 0x0}) 3.591931069s ago: executing program 4 (id=13558): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x3, 0x8, 0x5, 0x0, 0xde8}, 0x14) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r0, r3, 0x0, 0x20000000002) 2.55773822s ago: executing program 4 (id=13561): r0 = socket$inet6(0x2d, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x11d, 0x76, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @mcast1, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0), r3) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r4, 0x1, 0x0, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x4004) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x22}, @private1={0xfc, 0x1, '\x00', 0x7}, [0x0, 0xff, 0xffffff00, 0xff000000], [0x0, 0xff000000, 0x0, 0xff], 'veth0_vlan\x00', 'veth0_to_team\x00', {}, {}, 0x2f, 0x1, 0x1, 0x1}, 0x0, 0xd0, 0xf8, 0x60030000, {0x0, 0xff000000}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000300)={{r6}, "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"}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 2.437456534s ago: executing program 2 (id=13562): r0 = socket$netlink(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x700) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xa}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES64], 0x48}}, 0x400400c0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r9, 0x1ff}, &(0x7f0000000400)=0x8) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x0, 0x7d, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xb2, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newlink={0x74, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60012}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x74}}, 0x2000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x2c, 0x5, 0x2) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x4c}}, 0x0) 2.057957243s ago: executing program 2 (id=13563): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14, 0x80000) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x7fff, 0xfff, 0x5, 0x10, 0x10000, 0x1, 0x400}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newrule={0x44, 0x20, 0x100, 0x70bd26, 0x200, {0x2, 0x20, 0x10, 0x4, 0x9, 0x0, 0x0, 0x4, 0x6}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x10}, @FRA_FLOW={0x8, 0xb, 0x1541db15}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x40011) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1f8, r4, 0x300, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x1dc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0x47, 0x8, 0x7}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x10}, 0x20044050) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000500)) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r6, 0x40285881, &(0x7f0000000540)={r0, 0x0, 0x101, 0x5c8e, 0x80, 0x8}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r7, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xcbd771cfe3f532b1}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r7, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x48044}, 0x48080) sendmmsg$inet(r2, &(0x7f0000003800)=[{{&(0x7f0000000800)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000840)="9522d679785a58a0bb715fbf7319a1c3e1a699d190fc7f278adc4acabf51ff2f5a057b56c8c042402558e43bcbead86e303909532a1f2aa4b37f315d73943a541759add817c244b48ff7e95a109cba54d0632be523d7463991c7c8d85990a3a56a079340d59fb3db593a3a396ad60c5a46602811ace0c560ede5bc311628c4b7cb633ce800ce31399c7cff56fc9c23fbb625957df6578345fcefcfbee488469918349e9e4e98b298e4a5f6b4f831aa681dc514933d593058cbb101aa0819f209651e342e3b80e40de84c90dc64a89db3ba0e27f07ef01f7303e9288055026651290cf2f8c2", 0xe5}, {&(0x7f0000000940)="530c13642a479168aeb3e5de", 0xc}, {&(0x7f0000000980)="cdead9a04fe2ac7a2e8b07a3058e102147e7598b80b4369d08d12589427afa5ba9cbcee09ed9bbf64b9b05116d2ee77ed6ee54de62d8e6ec66d57e17c1a3868dbef48f4b3e4ed52d8f1fe33e2622198179ce2c84c4eff67ecf674fca9aa96b33287b54429ae60f4dcd64e6b60d826dde7c38c992405349bdfce15628aafce221967f315b2fb585855a80976fe9b1f0e390b5e3916784f7d11aa419d9efeea5631a6e3b6c1d973c593bb08b86fe57303a644c66f346dd34c8e61ec19e750b8be0", 0xc0}, {&(0x7f0000000a40)="7d14c292af8b32e3b0d6363a7dc1a2d553bc4891174998662a4841e2d1caabc4512048d0ee449d52dd34c0dafa1cd3972108c3251c2c61676ec6fc8e79452dc86e84c860", 0x44}, {&(0x7f0000000ac0)="23aeb634d6b8f051b739f00718a640237c30cac0ede6649c5926c253169bec5c1abd68638fae19dfde560de4", 0x2c}], 0x5}}, {{&(0x7f0000000b80)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000002140)=[{&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000001bc0)="d3c356e93724922bd680ce864f574e3654430770098d8760da56568e1831e49bcad3c3c51ee4a199c434c8a3afe56012c08123994085a26f43fabdbf3bdd9abed4d5d9abee3ef2fa5ce075882b456ac45d28642a996e", 0x56}, {&(0x7f0000001c40)="6d2a6a9c3b1ced3dad32e7750065623684a3a7f0b043efc44be24c8d41aca53a0cce20a2e35547b60e9b6b7ef2a1d46e9bba0d432253962d4365d68a1425750658b511f32fcdb2288704b96c3c89e58825c5ebc18eb21b9e185de2a2c3e0f781c3e0ac875fe1542d4559b23125d911995eb0c60f3bbef7a9b06b77ee48ba129542d6a416b4b5c243f8f466ec173cc686464eed09477f54937b0fc56cb35ec76f69230296a4fdf006443d6c4db3d0ae88e0e6cef84c3d5f031eb9f21fed607e69fd2ef97139a6efcf9192f8f7856edd19473b5744b67bde7bcc96b430781641ff4d00161d5cc1f1a957f1c1cf5705c82b2607150f485b93", 0xf7}, {&(0x7f0000001d40)="89c9c417a7cfc6fef073406b4ab7794fcb903f3951f1564859e0c15d81590f70383e5491452ac4414a9ab2cff88b792656587b9eae190db5617bd39d990156e977d030815c407c8c1336ea30494aec93f21f6e8d5ef5a3a8fa5f062e56abeb13abf8b2162e9d64ff251a70564d3045980b4d5f205f8d07a275397d5a67608f473e0564464591752787efde5e654bde25bd1e283345cbe036cb8e0a23283830ef692f61c8e7ca4ad1b20ab9da2a8fff4556a7ce83c2f9436cf9987b80973d392916812d79ca9afc22bca6ba099f9d354f33220b3ee1d95062772fb5b60eedd74b4dfbc6881d1c", 0xe6}, {&(0x7f0000001e40)="26729ef41ccb9465f1db02ed466be27e9e7bc6bb7c24dd77d3d495b97b844291eda69f2e5640b71dae5bf0ed289e4d4e48c177bf8dbee95959179f14a848e4608ac55c27551cd48f1cdfee5679f268f030fbc48f7aaf1266dcfaeae2a8d6cdf13e1592716fdb02d8b6c32bde3db505b758a1ae8e72af172d60561685cc200d45357bf46c03ddd388ab5d154db2400cf0d65d601a991292254cf9045b6c5b2844588ec51176fcfbc531a639b5e04c826aaa43748ca8b0b5b0d1439e3a9d80f229fb", 0xc1}, {&(0x7f0000001f40)="af3dea5ba5b946510c8f369241bdd47842ece2e71987c60585daf0f35879cfaddd96eb5a3b5b3e12294bc232f764b1b35008ad3d7bdc1dd424b0f4782ce578f907e13e3764388c0e646bc4", 0x4b}, {&(0x7f0000001fc0)="c7316f2c9100184fa271576a6d78239b6bccffba902b2aa4831e9962533add2a06a34d1032d70a0fd959eb5697bf87eeb1465020b7e0dec7f4b85be39f291705a4d8f4ecd004073321eda47a08854df1ec6ee76b71e2bee1c31509afecdc3999a97c405564cb9dce6afba53ca678f8c4eb6507c17aa76c9aa707db147aee0693fd4d7b741611dd3da33f12f38ba6a2a556ec93bf69eba0eba81e6921bda318f628c6675f73", 0xa5}, {&(0x7f0000002080)="037a316d5fb955da8cbf783ca2d51e5fa294de467a513029b26837c3e9e20dbce7e3b50bb55103970b05bddaf82f473ae6530d284f2971b3e1303c24d5f1bf82a1d08851d3b21056c9fc9275c5cb65af22e8b45a7b83824f0eb12af64b6e982d1f5759351dcf8fe3d05631b58338ce9c119cb5c36305f3a332a80629d01259a46f1e1abb1ffaf4e6caa3d99c4355e249f1b3a94dcec7753efd9e1d9c6db3a767e5109027a5c59cb5fac1a38851c2e009216859", 0xb3}], 0x8, &(0x7f00000021c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6e4}}], 0x30}}, {{&(0x7f0000002200)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000022c0)=[{&(0x7f0000002240)="70847924f01ad4bf0bae5050c07504b463bb53694f0333f1cb931c327ae4bca16735d09ba62646e58bcd50f53612fbb9aa6797a16a38298f22", 0x39}, {&(0x7f0000002280)="3724b85a0368fe6e9069032b34e46eb5ec8bb0cd2595b6450a4c944022099924c1fb8baf63b1a41850ff45294c9552", 0x2f}], 0x2, &(0x7f0000002300)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x12, 0x0, 0x7, [0xffffffff, 0xfac0, 0x1]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x68}}, {{&(0x7f0000002380)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000003600)=[{&(0x7f00000023c0)="b7bc7fc3500f3ff2840c6e97b79869ddee165ea6991aac86d9bf32ff1d15639ec5faaced3705805cd4d2ec3476497c55fdaf6b63e76aee34886912837b78d3c6fe1c436de0ac2323f10de93a7234a1ee851e04897d1510efcf7d2300e7a6ea30b211deebb6d599dcd1f99cb3c40933efea8c0a593baf3f3a530a6613b937963b0031ad8ed51d3c0d88e427a9a1d600e2134c956226a7ec0635d5f7fa1d367dd6af1d7c4669", 0xa5}, {&(0x7f0000002480)="38d59dd33cc0822fda9144cb72102a5c1c29d2e3621b8db0689e31054f4564823ba030d16bfe746cd9859ee0fd2cb7a003e0b99b7269ef7dc4115882455bae4f1c43f7b098c805e3f8b5a091a8d280d7f75fad0ec233389ce1ccf6986a1aed3c43e5d7a7e8afc0c5cf296f60f48d3415e3438e0f683fea3c8fff6d28a32b8f72523f6f54e8d16fdf214849bb9f62fbccca6dff0b8bd07f99258d933bba191f716d5706231f303c37ccf1bf7515e7d6f4354ab258588df0c0e87a05cf2d56b15344b1c614b491f4b8f7274fdc8ad471068f796081c45530d9b58642051adf3890fc3414887b12bd90e3", 0xe9}, {&(0x7f0000002580)="f868e21f523f39c2e83b2241bc96265e61e39f5f1a5c63b38db62907c6e98d00bf8e61dabdf7e14c238c81f8348ff5ff1fdc5f2e8f0df465009596716c0a0566d6ebec8bc8202bfe2260358767922f05779f96efca93024bdca2", 0x5a}, {&(0x7f0000002600)="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", 0x1000}], 0x4, &(0x7f0000003640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0x71, [@multicast1, @rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x78}}, {{&(0x7f00000036c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000037c0)=[{&(0x7f0000003700)="0edbea3ee78778d3c74ba96ccd034fba9123dc939aed8d7fe49292a2c2e6498a5dd38b98e33ce70a340fce4cf58d04219f45c4e071e65b579c160bb6c8927de769a1641fbdbe9528ca125130293638d7d2dc84618b32a051bb6ac0d3696ac23a6258f0e35750062e9dfd762fed62a478b7c38da531051fbfc149f1b888debd2331f335e1cf10795649733c2e2ce8aa1ad123c9b4d1e35f963a85ce6d", 0x9c}], 0x1}}], 0x5, 0x2800) r8 = accept4(r3, &(0x7f0000003940)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000039c0)=0x80, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r9, &(0x7f0000003ac0)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003a80)={&(0x7f0000003a40)={0x38, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x7c}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x40}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x35}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000003b40), r3) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000003c00)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003b80)={0x1c, r10, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048880}, 0x40000) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003c80), r8) getsockopt$inet_mreqn(r8, 0x0, 0x24, &(0x7f0000003cc0)={@remote, @initdev, 0x0}, &(0x7f0000003d00)=0xc) sendmsg$ETHTOOL_MSG_DEBUG_GET(r9, &(0x7f0000003e80)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003e40)={&(0x7f0000003d40)={0xd8, r11, 0x120, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x800) r13 = socket$alg(0x26, 0x5, 0x0) r14 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000003ec0), &(0x7f0000003f00)=0x10, 0x0) poll(&(0x7f0000003f40)=[{r13, 0x82}, {r14, 0x204}, {r9, 0x8000}], 0x3, 0x1000) ioctl$NILFS_IOCTL_GET_SUINFO(r9, 0x80186e84, &(0x7f0000003fc0)={&(0x7f0000003f80)=[{0x6, 0x3, 0x1}], 0x1, 0x10, 0x1, 0x1}) setsockopt$sock_void(r13, 0x1, 0xe58ca66cc70513a8, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000004000)={0x0, 0x2}, &(0x7f0000004040)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000004080)={r15, 0x7ff}, &(0x7f00000040c0)=0x8) 2.055162675s ago: executing program 5 (id=13564): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001580), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1016, &(0x7f0000003080)=""/4118, 0x40f00}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, 0x2, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x71c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000015c0)={0x14, r2, 0x305, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x28, r9, 0x1, 0x400000, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}}, 0x2000c050) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x18c, r9, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_OURS={0x134, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe}, @ETHTOOL_A_BITSET_MASK={0x75, 0x5, "1ed566aeb7bbcea0a3f1c38665b8e1235597fc82a043f5b771c0fa9db054faa6e43aed181e72841bd437ea427ac4bc8e650cc39897e1aa2a0c0a9cdf1369514565e7e937376c5e0de07ae6518631847929058da8b5e0acb7a65820ebd7c66553bc9408c2c93a95ee8d8bc249f83f5415c8"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_MASK={0x5b, 0x5, "d89b3be7a8004b7c807a12864705038b79aba0aef526c4743c11f971f50b11735f222f93b2463d229aa051ceca96b834fec987b38dab5eb969a0fb9b61a63738741709d19f12b5c7f7fbfe4642a15d0816d910b4cc433c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3ff}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKMODES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40080}, 0x240480c0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x10, 0x0, 0x0, 0xfc}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x10, 0x8, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5, 0x2, 0xea}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 2.036393905s ago: executing program 4 (id=13565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1006}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x440b0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f000000abc0)={&(0x7f000000aa40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @typedef={0x5, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x37, 0x0, 0x8}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x8c}}, 0x10) 1.78032845s ago: executing program 4 (id=13566): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) accept4(r1, 0x0, 0x0, 0x0) sendto$x25(r0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x149e42, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000012c0)=ANY=[@ANYBLOB="5800000002060101000000000000000000000000050005000a000000050004000000000005000100070000000c00078008001300000000000900020073797a320000000011000300686173683a6970"], 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r7, 0x1, 0x1c, &(0x7f0000002340)=""/4076, &(0x7f0000000340)=0xfec) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000180)=0x3) ioctl$PPPIOCGFLAGS1(r9, 0x8004745a, &(0x7f0000000040)) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.767805111s ago: executing program 5 (id=13567): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x307200, 0x0) ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, &(0x7f00000000c0)=0x9) listen(r4, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 1.539250177s ago: executing program 5 (id=13568): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r1, 0x705, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000810) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "dadfa1db4c1002e5", "b3288da1e5e76a49641d48ac3f0ab45ff59bf0558e4253af8bda2b550a109352", '\x00', "f36d58c0a62b7baa"}, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x11000) vmsplice(r5, &(0x7f0000000280)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1.007962997s ago: executing program 2 (id=13569): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x79, "9d4625107f756ac4f28f3b65ca2a123101464bd790a231ee31b0947ecc67ef0450b8eae8011289a0e1d5fa7871e00c4d5a3d895136a9e6a492dec1d9f765880a197b833d2fc13ca5d64e42253f9ba8eb497a112c0efeffc1cd87e8e39ec2c9f2074d58d6e55a1a6474d713162991c1946946cd44281bc0f0f0"}, &(0x7f0000000180)=0x81) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x9}}, ["", "", ""]}, 0x24}}, 0x40) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) 853.639307ms ago: executing program 2 (id=13570): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x10, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) shutdown(r2, 0x1) (async) shutdown(r2, 0x1) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000500)={0x0, 0x2}, 0x8) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 553.881867ms ago: executing program 2 (id=13571): getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x7, 0x3, {0x0, @in={{0x2, 0x4e22, @multicast2}}, 0xd, 0x1d52, 0xe36, 0x4, 0xb}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000100)={r0, 0x101, 0x4}, 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={r1, 0x3}, &(0x7f0000000180)=0x8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000001c0)={r0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000200)={r0, 0xe1}, 0x8) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x24, 0x9, 0x6, 0x3ff, 0x2]}, &(0x7f00000002c0)=0x78) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$NILFS_IOCTL_RESIZE(r5, 0x40086e8b, &(0x7f0000000300)=0xbc50) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000340)={r3, 0x3}, 0x8) connect$bt_l2cap(r5, &(0x7f0000000380)={0x1f, 0x3, @none, 0x1}, 0xe) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$NILFS_IOCTL_GET_VINFO(r4, 0xc0186e86, &(0x7f0000000500)={&(0x7f0000000440)=[{0xffffffffffffffff, 0x2800000, 0x0, 0xfff}, {0x4, 0xfff, 0x2, 0x6}, {0x5, 0xbd, 0x6, 0x8}, {0x9, 0xeb, 0x9, 0x750b}, {0x7, 0x80000000, 0x2, 0x8000000000000000}, {0x5, 0x4, 0x4, 0x66}], 0x6, 0x20, 0x200, 0xa520}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r6, &(0x7f00000008c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f00000005c0)={0x2b0, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3a}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x64}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x280, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x274, 0x4, 0x0, 0x1, [{0x270, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xc707}, @NL80211_PKTPAT_PATTERN={0x1a, 0x2, "7b6f43c4fa03813283ef6911a94091a0f75370478663"}, @NL80211_PKTPAT_MASK={0xfe, 0x1, "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"}, @NL80211_PKTPAT_MASK={0xf0, 0x1, "9f5665793ca5175c3fe22231bf68fda212d604ec16a513d002614636e3c9d5d88e662b984ec342c3854929a804b5f44bd12449bbbdc25a9883c0574634967cefe4dc127bd9afb6b95f5047a66a9511b3560d2c444b330a3ee0643c3d87d03b51135f86886040892c94dd3a4140849fe3c08dcc988dcde65f61a2387a5aaaf021cebd1f19885c55473c24b3be1e45d8598cef498ab9458ac55d7d9808f855fec7336a392366039c5de0e617c20844116d28663788a8cc85ea31226e2029e7b8424bc26f9356e2fccbfd0dc7f53e07e244b429e4a620b197581eea77c3d7f578b0c9497cbd7f9d890a8e073f05"}, @NL80211_PKTPAT_PATTERN={0x4f, 0x2, "52126d51402d9860ae4863ac0203c55ba4ff9ff738c9eb9e0d9d3b65ba2f65a755a674d53ab45b435cc75a02c7d93c2981653889e9feca1a8013063100fdc429cb9e7d1180df2554318e14"}]}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x4c014}, 0x50) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000900)={r0, @in6={{0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}, 0xa}}, 0x7fff, 0xc3c7}, &(0x7f00000009c0)=0x90) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000a00)={r3, 0x21, 0xf}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000a40)=[@in6={0xa, 0x4e23, 0x5, @mcast1, 0x6}, @in6={0xa, 0x4e21, 0x1b0ef88e, @mcast2, 0x7}, @in6={0xa, 0x4e24, 0x8, @loopback, 0x5}, @in={0x2, 0x4e24, @rand_addr=0x64010100}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}], 0x90) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000b00)={@rand_addr=0x64010102, @broadcast, 0x1, "477c95efb9aee6a5361f3f22e2e260dea39a0395921c3ea8a07dc06cfbc1d108", 0x9ab, 0x7ff, 0x7fff, 0x7}, 0x3c) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0xb, [@enum={0xa, 0x8, 0x0, 0x6, 0x4, [{0x10, 0x7f}, {0x10, 0x9}, {0xf, 0x9}, {0x6, 0xfffffff5}, {0xc, 0x655d}, {0x6, 0xfffffffa}, {0xe, 0x94}, {0x10, 0xe37}]}, @volatile={0xb, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x5f, 0x0, 0x5f, 0x2e, 0x5f, 0x30, 0x0, 0x2e, 0x30]}}, &(0x7f0000000cc0)=""/14, 0x7b, 0xe, 0x0, 0x2, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000dc0)={0x7, 0x0}, 0x8) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000010c0)={0x6, 0x15, &(0x7f0000000e00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @jmp={0x5, 0x0, 0x6, 0xa, 0xa, 0x10, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000ec0)='syzkaller\x00', 0x10001, 0x53, &(0x7f0000000f00)=""/83, 0x41000, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000f80)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000fc0)={0x1, 0x7, 0xffff, 0x7f}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001000)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000001040)=[{0x3, 0x5, 0x2, 0x5}, {0x3, 0x3, 0x4, 0xa}, {0x3, 0x2, 0x7, 0x7}, {0x4, 0x4, 0x6da}, {0x5, 0x1, 0xf, 0x8}, {0x1, 0x3, 0x9, 0xc}], 0x10, 0xfffffffd}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x10, 0x16, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000c00)='GPL\x00', 0xffff0b47, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x29, r8, 0x8, &(0x7f0000000d40)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000d80)={0x2, 0x9, 0x5, 0x3}, 0x10, r9, r10, 0x4, 0x0, &(0x7f0000001180)=[{0x0, 0x5, 0xf, 0x4}, {0x1, 0x1, 0xf, 0x3}, {0x1, 0x4, 0x0, 0xc94b7ba8dc5f5367}, {0x1, 0x1, 0x6, 0xbb1c5b51e518bb83}], 0x10, 0x3000}, 0x94) r12 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r12, 0x40049366, &(0x7f0000001280)=0x1) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000012c0)={0x6, {{0xa, 0x4e23, 0x1b42, @loopback, 0x8}}}, 0x88) r13 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r13, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001380)="a757177ded802bdddc4b5320504a5b007582577bba06b31b3f015c4188c476d34086fc0845ae341672039f0ac1e6adeb32344659348ed883c0f81556135b35bcf4ccabf57ccd2d4dae2739c026fe5a4fef02da7fd9a1dd8dc45fcb4dfbc6c0643b8e2af8493ad2bc4247fc8af1a33fa6ec71a36490cc1c129c70738db4bce19774296696a25369b0ee2cc5853e0c594d16babc37908b8b982ea31b74f69ed31dc1560f0a04e0dcd286566aa5944cc95c885fb96519", 0xb5}], 0x1, &(0x7f0000001700)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r6]}}, @rights={{0x30, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, r12, 0xffffffffffffffff, r5, 0xffffffffffffffff, r4]}}, @rights={{0x18, 0x1, 0x1, [r11, r2]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r12, r12, 0xffffffffffffffff, r5, r5, r5, r2]}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0xc8, 0x40080d4}, 0x80080) 485.361882ms ago: executing program 4 (id=13572): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001a40)={{0xffffffffffffffff, &(0x7f0000000000)='/proc/sys/net/ip]\x11tiox_control\x00'/42, 0x200, 0x0, 0x7ff, 0x0, 0x0}, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b400000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000760000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000c5"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x60, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8, 0x6, r2}}}]}}]}, 0x60}, 0x1, 0x400000000000000, 0x0, 0x10}, 0x40000) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000000c0)={r0, &(0x7f0000000140)='/proc/sys/net/ip]\x11tiox_control\x00', 0x44040, &(0x7f0000000080)={@align=0x6, {0x7, 0xc4, 0x2, 0x1}}, 0x0, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000100)=0xb9b}) ioctl$SIOCGETSGCNT(r6, 0x89e1, &(0x7f0000000180)={@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000008, 0x810, r0, 0xcf523000) socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001a40)={{0xffffffffffffffff, &(0x7f0000000000)='/proc/sys/net/ip]\x11tiox_control\x00'/42, 0x200, 0x0, 0x7ff, 0x0, 0x0}, 0x0, 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) (async) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000005c1762bd0000181200005cb8729aa554fa3b1b3de3227fbe35c6f6a87614fb2ace8855bf19b2785ba91167b9b15e6b9024d8a5061054b479b3172d2eb03ebd764d9c647bf8c2ce92839d27ab473bbc9e1f7becd887f93caaec33e94bfe62ae944c31ff4074e694b9e7c22256168a54f739a06e4314414e4b3c356b1d05de030eb3b7f04c4e4612c04c436edb31c5f14fd7837cf1fa93d43cdb9f70071bec33cf92b88a15e95303b3e468b5ba205de91483aaa0ef0d33fea1506fa4eeffe26f7df3901faaa0a0e26196d1f93848f808291338631124a619f73373fb55d09db825bf388b944d7f48d71cd6320d0b92a1b74045fc4a913251e7b30f88c73ba635943a6c88a10e772a9171b4c45a7f44c7a19b1e3ffc9dcf2a3d9a273732257d3ad5e934304ff981749678f2fa1a", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b400000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000760000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000c5"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x60, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8, 0x6, r2}}}]}}]}, 0x60}, 0x1, 0x400000000000000, 0x0, 0x10}, 0x40000) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000000c0)={r0, &(0x7f0000000140)='/proc/sys/net/ip]\x11tiox_control\x00', 0x44040, &(0x7f0000000080)={@align=0x6, {0x7, 0xc4, 0x2, 0x1}}, 0x0, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000100)=0xb9b}) (async) ioctl$SIOCGETSGCNT(r6, 0x89e1, &(0x7f0000000180)={@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}}) (async) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000008, 0x810, r0, 0xcf523000) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) 484.778739ms ago: executing program 5 (id=13573): r0 = socket(0x9, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0xffffffac, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x4000000}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 439.565748ms ago: executing program 0 (id=13574): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) (async) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a0000000000000600"], 0x30}}, 0x4090) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r3}) (async) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) close(r4) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) (async) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720a07fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed00000f030000000000001d44000000000000730a06fe0000000072030000000a0000b500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000f200000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0xfcbe}], 0x2, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x38}, 0x40010) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$sock_int(r8, 0x1, 0x12, &(0x7f0000000040)=0xfffffb6c, 0x4) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_newroute={0x40, 0x18, 0x400, 0x70bd29, 0x25dfdbff, {0x1c, 0x10, 0x20, 0x1, 0xfd, 0x4, 0xfd, 0x15, 0x400}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x2}, @RTA_DST={0x8, 0x1, {0x6}}, @RTA_VIA={0x14, 0x12, {0x15, "53c694d5e73daf7af4d0a80cd20e"}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2050}, 0x8095) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) (async) bind$alg(r9, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) accept(r9, 0x0, 0x0) (async) r10 = accept(r9, 0x0, 0x0) recvmmsg(r10, &(0x7f0000009940)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/18, 0x12}, {&(0x7f00000003c0)=""/245, 0xf5}], 0x2}, 0x7}], 0x1, 0x100, 0x0) 323.131371ms ago: executing program 4 (id=13575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, 0xfdb7) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030004000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100013601c1698ceedfd0fe29d80ec2058ce6a1114423112a31f6e91fd59335f56167820450c7df99d9fcff200779"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @private0, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm, @timestamp, @sack_perm, @timestamp, @mss={0x2, 0xa}, @sack_perm, @timestamp, @timestamp, @sack_perm, @window={0x3, 0x6, 0xa14}], 0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, 0x0, &(0x7f0000000040)=0x13fe4c102fd7fdb3) (async) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, 0x0, &(0x7f0000000040)=0x13fe4c102fd7fdb3) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c000000020903000000000000feff000100000908000640000000010c00048008000140000000020900010073797a31000000000800064000000001a9bacab97562da4c9fc7ffef110b95a452705e86fb6a48726e23dba4edfa7e4a9ff0f5a6e3a7f4615be866e32366c141e0a9046a3c2578385774dd5622e939ec5b8fee83901d2adeba7af125788d92997b94a33f781d4a2dc113b8e39e0a0322b1f9ec0f740a6a58ba389e6441162f11bb1f9a6dd6e719fd755e7291fa65ea928a5049f8da1edba655fba301fdeaf2c88c06"], 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x4844) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r5, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x3a4040, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x3a4040, 0x0) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000480)=0x5) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newtaction={0x118, 0x30, 0x300, 0x0, 0x0, {}, [{0x104, 0x1, [@m_mpls={0x100, 0x1, 0x0, 0x0, {{0x9, 0x3f}, {0x4}, {0xd2, 0x4, "a0fc4682b78e6bf52c2ab85cbc1ddce7523c6c627118ff1bae4b7618e7e3de1a0ebf4aa342d2f835cb58c0d3703547c411b55223167789103dec3b8874b785f29e8b4465df4e65671f2220cb91c6c68203228dcf9b8c3a39dbc9b08876d0fd3fbcd5f086cfcf23c6b064bea217a7e58710954e6534e5830c490e4b1b0609730452953e42ffa82460aeed32e6b180e6ec99d2793b783c4f9ba3d40404a1e52588fe8e84f64ce41bd04ace70f7dd0271f0725861506a20c2051bb55c21df71a0b847c9796631471688aa41a757090c"}, {0xc}, {0xc}}}]}]}, 0x118}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newtaction={0x118, 0x30, 0x300, 0x0, 0x0, {}, [{0x104, 0x1, [@m_mpls={0x100, 0x1, 0x0, 0x0, {{0x9, 0x3f}, {0x4}, {0xd2, 0x4, "a0fc4682b78e6bf52c2ab85cbc1ddce7523c6c627118ff1bae4b7618e7e3de1a0ebf4aa342d2f835cb58c0d3703547c411b55223167789103dec3b8874b785f29e8b4465df4e65671f2220cb91c6c68203228dcf9b8c3a39dbc9b08876d0fd3fbcd5f086cfcf23c6b064bea217a7e58710954e6534e5830c490e4b1b0609730452953e42ffa82460aeed32e6b180e6ec99d2793b783c4f9ba3d40404a1e52588fe8e84f64ce41bd04ace70f7dd0271f0725861506a20c2051bb55c21df71a0b847c9796631471688aa41a757090c"}, {0xc}, {0xc}}}]}]}, 0x118}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a582a5dcd77443c31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a582a5dcd77443c31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 251.089198ms ago: executing program 2 (id=13576): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, 0x0, 0xc) write$nci(r2, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e806005ffffffffffffaaaaaaaaaabb0800450000240000000000049078e0000002660000004e230000001090780204000100000000"], 0x36) 235.169188ms ago: executing program 5 (id=13577): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) (async) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x102, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x6}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x4a}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000081) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x800) getpeername(0xffffffffffffffff, &(0x7f0000000600)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f0000000680)=0x80) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r8, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r9, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48014}, 0x3347abc2bf728d44) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r0) sendmsg$IEEE802154_SCAN_REQ(r10, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r11, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xdd}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x13}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x6}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xca}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x4}]}, 0x3c}}, 0x40020) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r12, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x6c, r13, 0x0, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0xe04, 0x5d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40001) (async) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r15, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x78, r11, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x8013) (async) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r17 = syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r10) sendmsg$NFC_CMD_GET_SE(r16, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r17, 0x0, 0x70bd2d, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20048040) ioctl$F2FS_IOC_RESIZE_FS(r12, 0x4008f510, &(0x7f0000000dc0)=0xfffffffffffffff9) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x5c, 0x0, 0x8, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x55}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x6ce5}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x800) 36.037371ms ago: executing program 5 (id=13578): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="010000000000fcdbdf251200000018000180140002007665746830000000000000000800000008"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_cmd={0x26, 0x80000001, 0x2, 0x4e, 0x3, 0x0, 0x9, 0x8, 0x6, 0x4, 0x9, 0x4000000, 0x5, 0xb, 0x6, 0x969b, [0xd3, 0x6]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1280015000600142603600e120900040044000000a80016000a0003402e60b90000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb0700000000000000ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x600440c4) 0s ago: executing program 3 (id=13579): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="093a722800000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="4b1b020000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) kernel console output (not intermixed with test programs): m3: left allmulticast mode [ 1628.957377][T19192] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1628.966364][T19192] mac80211_hwsim hwsim98 wlan0: left allmulticast mode [ 1628.974346][T19192] mac80211_hwsim hwsim99 wlan1: left allmulticast mode [ 1629.004965][T19237] tipc: Enabling of bearer rejected, failed to enable media [ 1629.184121][ T6210] xfrm0 speed is unknown, defaulting to 1000 [ 1629.189324][ T7933] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.203532][ T6210] syz1: Port: 1 Link ACTIVE [ 1629.241750][ T7933] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.447025][ T8059] xfrm0 speed is unknown, defaulting to 1000 [ 1629.465076][ T7933] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.497604][ T7933] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.865173][T19281] syzkaller1: entered promiscuous mode [ 1629.906061][T19281] syzkaller1: entered allmulticast mode [ 1630.356706][T19301] netlink: 'syz.4.12207': attribute type 9 has an invalid length. [ 1630.418979][T19301] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.12207'. [ 1630.547138][T19312] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12208'. [ 1630.569713][ T7933] net_ratelimit: 172 callbacks suppressed [ 1630.569750][ T7933] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1630.570322][T18977] bond2: (slave bridge1): failed to get link speed/duplex [ 1630.599728][ T1176] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1630.660848][T28984] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1630.719824][ T1176] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1630.737819][T19018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1630.753501][T28984] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1630.820054][T28984] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1630.820430][T19320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12210'. [ 1630.840673][T18977] bond2: (slave bridge1): failed to get link speed/duplex [ 1630.879476][T18977] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1630.910209][T19323] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12211'. [ 1630.929165][T18977] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1631.057239][T19018] veth0_vlan: entered promiscuous mode [ 1631.136198][T19018] veth1_vlan: entered promiscuous mode [ 1631.202248][T19327] netlink: 'syz.3.12212': attribute type 12 has an invalid length. [ 1631.262184][T19327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12212'. [ 1631.941020][T19018] veth0_macvtap: entered promiscuous mode [ 1631.984588][T19327] netlink: 'syz.3.12212': attribute type 12 has an invalid length. [ 1632.008992][T19018] veth1_macvtap: entered promiscuous mode [ 1632.024144][T19327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12212'. [ 1632.118569][T19018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1632.207544][T19018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1632.291806][T19351] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1632.304380][T19351] bond3 (unregistering): Released all slaves [ 1632.380819][T28984] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.451931][T18974] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.487683][T18974] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.570317][T18974] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.705145][T19367] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12221'. [ 1633.097608][T28984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1633.162671][T28984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1633.356324][T18974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1633.407023][T18974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1633.649175][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1633.781263][T19398] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12229'. [ 1633.886381][T19405] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12132'. [ 1634.302497][T19416] IPVS: set_ctl: invalid protocol: 0 172.30.1.3:20001 [ 1634.328507][T19417] netlink: 'syz.2.12235': attribute type 1 has an invalid length. [ 1634.352608][T19417] netlink: 'syz.2.12235': attribute type 3 has an invalid length. [ 1634.381772][T19417] netlink: 172 bytes leftover after parsing attributes in process `syz.2.12235'. [ 1634.405594][T19417] NCSI netlink: No device for ifindex 813332851 [ 1634.466406][T19420] netlink: 388 bytes leftover after parsing attributes in process `syz.0.12236'. [ 1634.705951][T19429] netlink: 'syz.4.12238': attribute type 4 has an invalid length. [ 1634.719046][T19429] netlink: 240 bytes leftover after parsing attributes in process `syz.4.12238'. [ 1634.769004][T19431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12239'. [ 1634.780443][T19435] netlink: 'syz.3.12241': attribute type 1 has an invalid length. [ 1634.843560][T19435] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1634.943810][T19442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12242'. [ 1634.978006][T19442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12242'. [ 1635.131492][T19442] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1635.261247][T19446] bridge7: entered promiscuous mode [ 1635.302480][T19446] bridge7: entered allmulticast mode [ 1635.376218][T19446] bond4: (slave bridge7): making interface the new active one [ 1635.441325][T19446] bond4: (slave bridge7): Enslaving as an active interface with an up link [ 1635.620988][T18982] net_ratelimit: 168 callbacks suppressed [ 1635.621007][T18982] bond2: (slave bridge1): failed to get link speed/duplex [ 1635.622959][T28984] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1635.659447][T18982] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1635.679243][T18982] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1635.749222][ T57] bond2: (slave bridge1): failed to get link speed/duplex [ 1635.789129][ T57] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1635.819032][ T57] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1635.869137][T18982] bond2: (slave bridge1): failed to get link speed/duplex [ 1635.949470][T18982] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1635.976368][T18982] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1636.605632][T19514] bond11: option miimon: invalid value (18446744073709551585) [ 1636.615243][T19520] xt_hashlimit: size too large, truncated to 1048576 [ 1636.655542][T19514] bond11: option miimon: allowed values 0 - 2147483647 [ 1636.690971][T19514] bond11 (unregistering): Released all slaves [ 1636.905962][T19522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1636.971794][T19522] bridge_slave_0 (unregistering): left allmulticast mode [ 1636.997386][T19522] bridge_slave_0 (unregistering): left promiscuous mode [ 1637.006891][T19522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1637.011177][T19528] netlink: 'syz.3.12265': attribute type 4 has an invalid length. [ 1637.314736][T19536] xt_policy: too many policy elements [ 1637.366455][T19537] __nla_validate_parse: 4 callbacks suppressed [ 1637.366476][T19537] netlink: 2 bytes leftover after parsing attributes in process `syz.2.12269'. [ 1637.498458][T19541] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12271'. [ 1637.503306][T19546] tipc: Failed to remove unknown binding: 66,1,1/2478393766:2819577461/2819577463 [ 1637.532544][T19539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12271'. [ 1637.705745][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055e98800: rx timeout, send abort [ 1638.078205][T19573] netlink: 'syz.3.12281': attribute type 3 has an invalid length. [ 1638.117336][T19578] netlink: 'syz.4.12282': attribute type 3 has an invalid length. [ 1638.165182][T19581] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12285'. [ 1638.205971][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055e98000: rx timeout, send abort [ 1638.209811][T19581] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.217626][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055e98800: abort rx timeout. Force session deactivation [ 1638.445812][ T30] audit: type=1800 audit(1778067474.405:21): pid=19591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.12286" name="memory.events" dev="tmpfs" ino=2836 res=0 errno=0 [ 1638.510688][ T30] audit: type=1804 audit(1778067474.405:22): pid=19591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.12286" name="/newroot/556/memory.events" dev="tmpfs" ino=2836 res=1 errno=0 [ 1638.717492][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055e98000: abort rx timeout. Force session deactivation [ 1638.848135][T19610] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.12295'. [ 1638.925604][T19614] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12296'. [ 1638.938165][T19614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12296'. [ 1639.014251][T19615] RDS: rds_bind could not find a transport for ::ffff:100.1.1.3, load rds_tcp or rds_rdma? [ 1639.043906][T19615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12296'. [ 1639.150280][T19615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12296'. [ 1639.193674][ T7933] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1639.213350][ T7933] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1639.243432][ T7933] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1639.244029][T19617] netlink: 294 bytes leftover after parsing attributes in process `syz.4.12297'. [ 1639.263810][ T7933] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1640.152593][T19660] tipc: Enabled bearer , priority 0 [ 1640.162378][T19660] syzkaller0: entered promiscuous mode [ 1640.167989][T19660] syzkaller0: entered allmulticast mode [ 1640.196163][T19660] tipc: Resetting bearer [ 1640.224710][T19659] tipc: Resetting bearer [ 1640.501010][T19659] tipc: Disabling bearer [ 1640.669106][T18982] net_ratelimit: 147 callbacks suppressed [ 1640.669125][T18982] bond2: (slave bridge1): failed to get link speed/duplex [ 1640.684094][T30430] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1640.730037][T30430] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1640.753691][T30430] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1640.842813][ T7933] bond2: (slave bridge1): failed to get link speed/duplex [ 1640.889902][ T7933] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1640.896203][T19673] netlink: 'syz.3.12313': attribute type 1 has an invalid length. [ 1640.917273][ T7933] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1640.935845][T19676] netlink: 'syz.2.12314': attribute type 1 has an invalid length. [ 1640.957956][T19677] netlink: 'syz.2.12314': attribute type 1 has an invalid length. [ 1641.059912][ T7933] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1641.089905][ T142] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1641.101671][T19673] bond5: entered promiscuous mode [ 1641.125725][T19673] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1641.140249][ T1176] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1641.427820][T19697] team0: Cannot enslave team device to itself [ 1641.450699][T19698] tipc: Enabled bearer , priority 0 [ 1641.485149][T19694] syzkaller0: entered promiscuous mode [ 1641.507375][T19694] syzkaller0: entered allmulticast mode [ 1641.658344][T19709] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1641.836145][T19715] xt_hashlimit: size too large, truncated to 1048576 [ 1641.894506][T19701] tipc: Resetting bearer [ 1641.976460][T19701] tipc: Disabling bearer [ 1642.026223][T19722] vcan0: tx address claim with dest, not broadcast [ 1642.484547][T19735] gretap0: entered promiscuous mode [ 1642.705119][T19744] __nla_validate_parse: 5 callbacks suppressed [ 1642.705137][T19744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12335'. [ 1642.750994][T19753] IPv6: Can't replace route, no match found [ 1642.768365][T19753] IPv6: Can't replace route, no match found [ 1643.265645][T19767] syzkaller0: entered promiscuous mode [ 1643.295030][T19767] syzkaller0: entered allmulticast mode [ 1643.676189][T19787] netlink: 1 bytes leftover after parsing attributes in process `syz.4.12351'. [ 1643.696788][T19789] netlink: 272 bytes leftover after parsing attributes in process `syz.5.12349'. [ 1643.753841][T19793] netlink: 84 bytes leftover after parsing attributes in process `syz.2.12352'. [ 1643.927727][T19801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12355'. [ 1644.012049][T19797] bond4: (slave bond_slave_1): Device is not our slave [ 1644.043048][T19797] bond4: option active_slave: invalid value (bond_slave_1) [ 1644.082221][T19797] bond4 (unregistering): Released all slaves [ 1644.373764][T19819] ip6gre0: entered promiscuous mode [ 1644.391866][T19819] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12359'. [ 1644.417153][T19822] netlink: 'syz.3.12360': attribute type 2 has an invalid length. [ 1644.637274][T19834] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12364'. [ 1644.709750][T19825] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1644.723875][T19825] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.764005][T19832] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1644.775803][T19832] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1644.784413][T19832] gretap1: entered promiscuous mode [ 1644.791776][T19832] gretap1: entered allmulticast mode [ 1645.028139][T19825] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1645.042765][T19825] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.092526][T19840] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12366'. [ 1645.137959][T19841] netlink: 42 bytes leftover after parsing attributes in process `syz.5.12368'. [ 1645.180633][T19841] netlink: 42 bytes leftover after parsing attributes in process `syz.5.12368'. [ 1645.213821][T19846] syzkaller0: entered promiscuous mode [ 1645.221771][T19846] syzkaller0: entered allmulticast mode [ 1645.440109][T19845] syzkaller0: entered promiscuous mode [ 1645.456658][T19845] syzkaller0: entered allmulticast mode [ 1645.539755][T19825] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1645.550833][T19825] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.573119][T19862] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1645.738819][T30430] net_ratelimit: 163 callbacks suppressed [ 1645.738839][T30430] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1645.789921][T30430] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1645.819497][ T7933] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1645.858944][T30430] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1645.890465][T30430] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1645.929361][T30430] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1645.963630][T30430] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1645.992334][T30430] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1646.021800][T30430] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1646.049616][ T142] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1646.292435][T19857] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1650.573514][T19825] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1650.584918][T19825] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.837319][ T1176] net_ratelimit: 195 callbacks suppressed [ 1650.837362][ T1176] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1650.857543][ T142] bond2: (slave bridge1): failed to get link speed/duplex [ 1650.897125][ T1176] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1650.937895][T19891] __nla_validate_parse: 4 callbacks suppressed [ 1650.937915][T19891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12379'. [ 1650.976772][T19892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12379'. [ 1651.009733][ T1176] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1651.019199][ T142] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1651.028168][ T1176] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.048833][ T142] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1651.068928][ T1176] bond2: (slave bridge1): failed to get link speed/duplex [ 1651.086412][ T142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1651.230372][ T1176] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1651.231641][T30430] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1651.251493][ T1176] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.335845][ T142] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1651.352932][T30430] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1651.380382][ T142] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.411347][T30430] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1651.412900][ T1176] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1651.434709][T19907] netlink: 9 bytes leftover after parsing attributes in process `syz.3.12382'. [ 1651.455430][ T1176] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.566019][T19912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12384'. [ 1651.823051][T19921] netlink: 156 bytes leftover after parsing attributes in process `syz.5.12387'. [ 1651.855457][T19931] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12388'. [ 1651.871689][T19921] netlink: 156 bytes leftover after parsing attributes in process `syz.5.12387'. [ 1652.116655][T19944] netlink: 264 bytes leftover after parsing attributes in process `syz.5.12393'. [ 1652.231860][T19917] syzkaller0: delete flow: hash 1048309365 index 1 [ 1655.849457][ T142] net_ratelimit: 180 callbacks suppressed [ 1655.849497][ T142] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1655.881252][T18974] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1655.919970][T28984] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1655.938987][T28984] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1655.959817][T28984] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1655.986033][T28984] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1656.010309][ T7933] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1656.034206][ T142] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1656.059144][ T142] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1656.082797][ T142] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1656.470860][T19962] h: entered promiscuous mode [ 1656.586312][T18982] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.651530][T19961] netlink: 'syz.5.12398': attribute type 1 has an invalid length. [ 1656.674148][T19961] netlink: 224 bytes leftover after parsing attributes in process `syz.5.12398'. [ 1656.758380][T19986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12402'. [ 1656.864841][T19993] "syz.2.12405" (19993) uses obsolete ecb(arc4) skcipher [ 1656.959884][T18982] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.097255][T19981] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1657.188394][T18982] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.333433][T20008] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1657.435390][T20023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12410'. [ 1657.444479][T20016] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12409'. [ 1657.472066][T20023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12410'. [ 1657.492036][T18982] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.843800][T20037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12413'. [ 1658.116371][T20031] bond1: entered promiscuous mode [ 1658.599728][ C1] ip6_tunnel: D xmit: Local address not yet configured! [ 1658.682725][ T142] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1658.803709][T20072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12422'. [ 1658.856207][T20075] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12422'. [ 1658.876659][ T7933] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1658.928005][T20076] netem: incorrect ge model size [ 1658.959205][T20076] netem: change failed [ 1659.022108][T20082] sctp: [Deprecated]: syz.5.12425 (pid 20082) Use of int in max_burst socket option. [ 1659.022108][T20082] Use struct sctp_assoc_value instead [ 1659.063811][T20085] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12426'. [ 1659.103742][T20075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1659.228600][T20075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1659.318285][T20075] bond0 (unregistering): Released all slaves [ 1659.539547][T30430] bridge1: port 1(veth0_to_bond) entered disabled state [ 1659.577613][T20109] netlink: 'syz.0.12430': attribute type 1 has an invalid length. [ 1659.715010][T20109] bond11: entered promiscuous mode [ 1659.765148][T20109] bond11: entered allmulticast mode [ 1659.802908][T20109] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1659.835932][ T7933] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1659.910948][T20114] macvlan2: entered promiscuous mode [ 1659.925376][T20114] macvlan2: entered allmulticast mode [ 1659.966521][T20114] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1660.306227][T18974] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1660.392113][T20144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12435'. [ 1660.410380][T18982] bridge_slave_1: left promiscuous mode [ 1660.427477][T18982] bridge0: port 2(bridge_slave_1) entered disabled state [ 1660.462747][T18982] bridge_slave_0: left promiscuous mode [ 1660.476748][T18982] bridge0: port 1(bridge_slave_0) entered disabled state [ 1660.594564][T20157] netlink: 'syz.3.12438': attribute type 1 has an invalid length. [ 1660.872193][T20163] netlink: 'syz.3.12439': attribute type 21 has an invalid length. [ 1660.886308][T20163] IPv6: NLM_F_CREATE should be specified when creating new route [ 1660.901136][T18982] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 1661.014900][ T6210] net_ratelimit: 230 callbacks suppressed [ 1661.014920][ T6210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1661.133380][T18982] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1661.281709][T18982] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 1661.290106][T18982] bridge2 (unregistering): left promiscuous mode [ 1661.376847][T18982]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1661.390722][T18982]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1661.406223][T18982]  (unregistering): Released all slaves [ 1661.423355][T18982] bond1 (unregistering): Released all slaves [ 1661.448113][T18982] bond2 (unregistering): Released all slaves [ 1661.476048][T18982] bond3 (unregistering): Released all slaves [ 1661.498809][T18982] bond4 (unregistering): Released all slaves [ 1661.533711][T18982] bond5 (unregistering): Released all slaves [ 1661.657554][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1661.684263][T18982] : left promiscuous mode [ 1661.985383][T20176] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1662.002235][T20176] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1662.011252][T20176] gretap1: entered promiscuous mode [ 1662.017730][T20176] gretap1: entered allmulticast mode [ 1662.047967][ T8059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1662.053274][ T142] bond2: (slave bridge1): failed to get link speed/duplex [ 1662.191686][T20180] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1662.311282][T20180] bond4: (slave lo): Enslaving as an active interface with an up link [ 1662.397861][T20180] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1662.519349][ T7933] bond2: (slave bridge1): failed to get link speed/duplex [ 1662.759395][T27829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1662.869637][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1662.898239][T20216] netlink: 'syz.2.12452': attribute type 29 has an invalid length. [ 1663.013050][ T7933] bond2: (slave bridge1): failed to get link speed/duplex [ 1663.021321][T20220] __nla_validate_parse: 5 callbacks suppressed [ 1663.021368][T20220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12451'. [ 1663.079094][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.092703][ T6210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.227697][T20230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12454'. [ 1663.980946][T20263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12462'. [ 1664.040784][T20265] xt_ecn: cannot match TCP bits for non-tcp packets [ 1664.360379][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1665.518038][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1665.587576][T18982] hsr_slave_0: left promiscuous mode [ 1665.605525][T18982] hsr_slave_1: left promiscuous mode [ 1665.615181][T18982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1665.635216][T18982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1665.670107][T18982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1665.684471][T18982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1665.715223][T20303] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.12470'. [ 1665.732948][T18982] dummy0: left allmulticast mode [ 1665.749363][T18982] veth1_macvtap: left promiscuous mode [ 1665.763746][T18982] veth0_macvtap: left promiscuous mode [ 1665.780741][T18982] veth1_vlan: left promiscuous mode [ 1665.794712][T18982] veth: left promiscuous mode [ 1665.898604][T20305] netlink: 'syz.4.12472': attribute type 1 has an invalid length. [ 1665.918275][T20305] netlink: 228 bytes leftover after parsing attributes in process `syz.4.12472'. [ 1666.200821][ T6210] net_ratelimit: 10 callbacks suppressed [ 1666.200839][ T6210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1666.402201][T18982] team0 (unregistering): Port device team_slave_1 removed [ 1666.436432][T18982] team0 (unregistering): Port device team_slave_0 removed [ 1666.639169][T18974] bond2: (slave bridge1): failed to get link speed/duplex [ 1667.246389][T19012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1667.410322][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1667.681041][T20351] netlink: 'syz.4.12482': attribute type 1 has an invalid length. [ 1667.806966][T20333] syzkaller1: entered promiscuous mode [ 1667.834957][T20333] syzkaller1: entered allmulticast mode [ 1667.860349][T18974] bond2: (slave bridge1): failed to get link speed/duplex [ 1668.004722][T18974] bond2: (slave bridge1): failed to get link speed/duplex [ 1668.031215][T18982] IPVS: stop unused estimator thread 0... [ 1668.045744][T20359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12485'. [ 1668.131794][T18974] bond2: (slave bridge1): failed to get link speed/duplex [ 1668.248947][T18982] bond2: (slave bridge1): failed to get link speed/duplex [ 1668.283619][T19012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.290047][T20364] netlink: 27 bytes leftover after parsing attributes in process `syz.0.12484'. [ 1668.310911][T20368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.337320][T20371] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12486'. [ 1668.572707][T20381] netlink: 52 bytes leftover after parsing attributes in process `syz.4.12489'. [ 1669.039500][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1669.185357][ T6698] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1669.208882][ T6698] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1669.223270][ T6698] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1669.235417][ T6698] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1669.257679][ T6698] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1669.407516][T20410] sctp: [Deprecated]: syz.4.12497 (pid 20410) Use of int in max_burst socket option. [ 1669.407516][T20410] Use struct sctp_assoc_value instead [ 1669.965754][T20432] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12501'. [ 1669.970048][T18974] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1669.989115][T18974] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1670.000272][T18974] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.035498][T20433] netlink: 'syz.0.12501': attribute type 21 has an invalid length. [ 1670.043715][T20433] IPv6: NLM_F_CREATE should be specified when creating new route [ 1670.234302][T18974] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1670.269189][T18974] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1670.288833][T18974] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.441832][T18974] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1670.455576][T18974] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1670.468140][T18974] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.497758][T20445] netlink: 33 bytes leftover after parsing attributes in process `syz.0.12505'. [ 1670.525730][T20401] xfrm0 speed is unknown, defaulting to 1000 [ 1670.531913][T20445] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12505'. [ 1670.780549][T20453] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12506'. [ 1670.821955][T18974] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1670.834477][T18974] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1670.846280][T18974] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.846446][T20449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12506'. [ 1670.870283][T20401] xfrm0 speed is unknown, defaulting to 1000 [ 1671.052166][ T1176] netdevsim netdevsim3 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 1671.112796][ T142] netdevsim netdevsim3 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 1671.164687][T28984] netdevsim netdevsim3 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 1671.204154][ T1176] netdevsim netdevsim3 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 1671.238426][T18974] batadv2: left allmulticast mode [ 1671.244209][T18974] batadv2: left promiscuous mode [ 1671.252503][T18974] bridge0: port 3(batadv2) entered disabled state [ 1671.264600][T18974] bridge_slave_1: left allmulticast mode [ 1671.271351][T18974] bridge_slave_1: left promiscuous mode [ 1671.277403][T18974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1671.288502][T18974] bridge_slave_0: left allmulticast mode [ 1671.294993][T18974] bridge_slave_0: left promiscuous mode [ 1671.301608][T18974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1671.313573][T18974] veth0_to_bond: left allmulticast mode [ 1671.319843][ T6698] Bluetooth: hci5: command tx timeout [ 1671.326202][T18974] veth0_to_bond: left promiscuous mode [ 1671.333132][T18974] bridge1: port 1(veth0_to_bond) entered disabled state [ 1671.408065][ T8059] net_ratelimit: 24 callbacks suppressed [ 1671.408084][ T8059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.639978][T20387] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1671.846586][T20461] netlink: 'syz.0.12508': attribute type 4 has an invalid length. [ 1671.873756][T20463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.886533][T20461] netlink: 'syz.0.12508': attribute type 19 has an invalid length. [ 1671.999230][T20466] netlink: 'syz.5.12509': attribute type 1 has an invalid length. [ 1672.157117][T20473] netlink: 'syz.2.12511': attribute type 1 has an invalid length. [ 1672.437613][T18974] bond4 (unregistering): (slave bridge7): Releasing active interface [ 1672.446704][T27245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1672.477545][T18974] bond1 (unregistering): Released all slaves [ 1672.498511][T18974] ` (unregistering): Released all slaves [ 1672.518074][T18974] bond2 (unregistering): Released all slaves [ 1672.551066][T18974] bond3 (unregistering): Released all slaves [ 1672.571316][T18974] bond4 (unregistering): Released all slaves [ 1672.592202][T18974] bond5 (unregistering): Released all slaves [ 1672.618560][T18974] bond6 (unregistering): Released all slaves [ 1672.800114][T20473] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1672.862505][T18974] tipc: Left network mode [ 1672.870026][T28984] bond2: (slave bridge1): failed to get link speed/duplex [ 1673.072873][T20474] bond2: (slave geneve2): making interface the new active one [ 1673.108068][T30430] nci: nci_ntf_packet: unknown ntf opcode 0x137 [ 1673.109804][T20493] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1673.170520][T20474] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1673.343991][T18974] IPVS: stopping backup sync thread 17918 ... [ 1673.399058][ T6698] Bluetooth: hci5: command tx timeout [ 1673.481636][ T6210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.490605][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.556550][T20503] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12516'. [ 1673.559394][ T7933] bond2: (slave bridge1): failed to get link speed/duplex [ 1673.575957][T20503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12516'. [ 1673.725926][ T1176] bond2: (slave bridge1): failed to get link speed/duplex [ 1674.150222][ T142] bond2: (slave bridge1): failed to get link speed/duplex [ 1674.268778][T18980] bond2: (slave bridge1): failed to get link speed/duplex [ 1674.466104][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1674.517404][T20401] bridge0: port 1(bridge_slave_0) entered blocking state [ 1674.548717][T20401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.564820][T20401] bridge_slave_0: entered allmulticast mode [ 1674.576775][T20401] bridge_slave_0: entered promiscuous mode [ 1674.585996][T20401] bridge0: port 2(bridge_slave_1) entered blocking state [ 1674.594409][T20401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1674.606072][T20401] bridge_slave_1: entered allmulticast mode [ 1674.625694][T20401] bridge_slave_1: entered promiscuous mode [ 1674.781978][T20401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1674.796453][T20401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1674.898400][T20401] team0: Port device team_slave_0 added [ 1674.907901][T20401] team0: Port device team_slave_1 added [ 1674.992038][T20401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1675.001286][T20401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1675.029908][T20401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1675.046131][T20401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1675.055147][T20401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1675.090043][T20401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1675.234657][T20401] hsr_slave_0: entered promiscuous mode [ 1675.247497][T20401] hsr_slave_1: entered promiscuous mode [ 1675.264915][T20401] debugfs: 'hsr0' already exists in 'hsr' [ 1675.271831][T20401] Cannot create hsr debugfs directory [ 1675.360420][T18974] hsr_slave_0: left promiscuous mode [ 1675.366513][T18974] hsr_slave_1: left promiscuous mode [ 1675.373393][T18974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1675.381619][T18974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1675.390139][T18974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1675.397552][T18974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1675.414541][T18974] veth1_macvtap: left promiscuous mode [ 1675.420438][T18974] veth0_macvtap: left promiscuous mode [ 1675.479103][ T6698] Bluetooth: hci5: command tx timeout [ 1675.853015][T18974] team0 (unregistering): Port device team_slave_1 removed [ 1675.874816][T18974] team0 (unregistering): Port device team_slave_0 removed [ 1675.935936][T20482] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1675.947021][T20491] netlink: 'syz.0.12515': attribute type 2 has an invalid length. [ 1675.955291][T20491] netlink: 'syz.0.12515': attribute type 2 has an invalid length. [ 1676.593773][T20555] netem: incorrect gi model size [ 1676.609217][T19012] net_ratelimit: 6 callbacks suppressed [ 1676.609234][T19012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.619519][T20555] netem: change failed [ 1676.880777][T28984] bond2: (slave bridge1): failed to get link speed/duplex [ 1676.896137][T20563] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12527'. [ 1676.944441][T20561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12527'. [ 1677.020616][T20573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12530'. [ 1677.144252][T20401] netdevsim netdevsim3 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1677.192783][T20576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12531'. [ 1677.301548][T20573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1677.391425][ T7933] bond2: (slave bridge1): failed to get link speed/duplex [ 1677.562743][ T6698] Bluetooth: hci5: command tx timeout [ 1677.627755][T20401] netdevsim netdevsim3 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1677.640214][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1677.649333][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1677.676127][T20596] netlink: 'syz.5.12535': attribute type 3 has an invalid length. [ 1677.770603][T18974] IPVS: stop unused estimator thread 0... [ 1677.771008][T28984] bond2: (slave bridge1): failed to get link speed/duplex [ 1677.840184][T20401] netdevsim netdevsim3 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1677.940419][T18982] bond2: (slave bridge1): failed to get link speed/duplex [ 1678.024913][T20401] netdevsim netdevsim3 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1678.056941][T20607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12538'. [ 1678.114875][T20607] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1678.161421][T18982] bond2: (slave bridge1): failed to get link speed/duplex [ 1678.341063][ T7933] bond2: (slave bridge1): failed to get link speed/duplex [ 1678.404503][T20593] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1678.422440][T20617] netlink: 'syz.4.12540': attribute type 39 has an invalid length. [ 1678.432189][T20593] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1678.459534][T20617] hsr_slave_0: left promiscuous mode [ 1678.522949][T20617] hsr_slave_1: left promiscuous mode [ 1678.581410][ T142] bond2: (slave bridge1): failed to get link speed/duplex [ 1678.582856][T20625] netlink: 260 bytes leftover after parsing attributes in process `syz.5.12543'. [ 1678.629239][T20620] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12542'. [ 1678.661045][T20620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12542'. [ 1678.691777][T20401] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1678.703141][T20401] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1678.725835][T20401] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1678.734336][T20628] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12544'. [ 1678.775469][T20401] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1678.796813][T20401] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1678.854180][T20401] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1678.895769][T20401] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1678.943180][T20401] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1678.996854][T20639] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.12546'. [ 1679.396657][T20660] netlink: 140 bytes leftover after parsing attributes in process `syz.4.12549'. [ 1679.418022][T20401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1679.487515][T20401] 8021q: adding VLAN 0 to HW filter on device team0 [ 1679.545393][T18982] bridge0: port 1(bridge_slave_0) entered blocking state [ 1679.552600][T18982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1679.649569][T20669] netlink: 'syz.2.12554': attribute type 1 has an invalid length. [ 1679.658664][T18982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1679.665823][T18982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1679.677058][T20669] netlink: 'syz.2.12554': attribute type 7 has an invalid length. [ 1679.687247][T20669] netlink: 'syz.2.12554': attribute type 8 has an invalid length. [ 1679.706580][T20666] vcan1: entered promiscuous mode [ 1679.713502][T20669] netlink: 208 bytes leftover after parsing attributes in process `syz.2.12554'. [ 1679.733343][T20666] vcan1: entered allmulticast mode [ 1679.751799][T20669] NCSI netlink: No device for ifindex 65584 [ 1680.033024][T20684] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12555'. [ 1680.065438][T20681] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12556'. [ 1680.092973][T20681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12556'. [ 1680.121657][T20690] netlink: 'syz.0.12558': attribute type 12 has an invalid length. [ 1680.157364][T20690] netlink: 'syz.0.12558': attribute type 11 has an invalid length. [ 1680.310177][T20696] netlink: 'syz.0.12558': attribute type 12 has an invalid length. [ 1680.487639][T20703] syzkaller0: entered promiscuous mode [ 1680.518380][T20703] syzkaller0: entered allmulticast mode [ 1681.027599][T20724] validate_nla: 1 callbacks suppressed [ 1681.027617][T20724] netlink: 'syz.2.12565': attribute type 1 has an invalid length. [ 1681.061412][ T6698] Bluetooth: hci3: link tx timeout [ 1681.066784][ T6698] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1681.093745][T20724] netlink: 'syz.2.12565': attribute type 1 has an invalid length. [ 1681.562661][T20747] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1681.620376][ T142] net_ratelimit: 18 callbacks suppressed [ 1681.620412][ T142] bond2: (slave bridge1): failed to get link speed/duplex [ 1681.747744][T20401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1681.803385][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1681.822709][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1681.956649][T20401] veth0_vlan: entered promiscuous mode [ 1682.007765][T20401] veth1_vlan: entered promiscuous mode [ 1682.062837][T20401] veth0_macvtap: entered promiscuous mode [ 1682.092478][T20401] veth1_macvtap: entered promiscuous mode [ 1682.157232][T20771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.163348][T20401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1682.169373][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.341031][T20401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1682.400945][T20778] sctp: [Deprecated]: syz.4.12575 (pid 20778) Use of int in max_burst socket option. [ 1682.400945][T20778] Use struct sctp_assoc_value instead [ 1682.433385][ T7933] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.456925][T30430] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.522200][T30430] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.535253][T20793] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1682.565065][T30430] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.674507][T28984] bond2: (slave bridge1): failed to get link speed/duplex [ 1682.842440][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.149004][ T7933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1683.164720][T12899] Bluetooth: hci3: command 0x0406 tx timeout [ 1683.212520][ T7933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1683.281143][T20813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1683.524279][T18982] bond2: (slave bridge1): failed to get link speed/duplex [ 1683.536996][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1683.567163][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1683.674522][T20829] netlink: 'syz.5.12586': attribute type 75 has an invalid length. [ 1683.683013][T18982] bond2: (slave bridge1): failed to get link speed/duplex [ 1683.769624][T20832] netlink: 'syz.5.12586': attribute type 8 has an invalid length. [ 1683.818492][T20832] __nla_validate_parse: 14 callbacks suppressed [ 1683.818509][T20832] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12586'. [ 1683.864955][T20840] netlink: 4100 bytes leftover after parsing attributes in process `syz.2.12588'. [ 1683.960315][T20832] bond0: entered promiscuous mode [ 1684.016437][T20832] gretap0: entered promiscuous mode [ 1684.054808][T20832] team0: entered promiscuous mode [ 1684.080331][T20832] debugfs: 'hsr0' already exists in 'hsr' [ 1684.103276][T20832] Cannot create hsr debugfs directory [ 1684.143123][T20832] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1684.175627][T20832] hsr0: Interlink (team0) is not up; please bring it up to get a fully working HSR network [ 1684.236744][T20832] hsr0: entered promiscuous mode [ 1684.394167][T20871] netlink: 'syz.2.12592': attribute type 3 has an invalid length. [ 1685.154024][T20901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12599'. [ 1685.189140][T20895] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12597'. [ 1685.228026][T20895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12597'. [ 1685.319651][T20905] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12600'. [ 1685.346572][T20905] tipc: Enabling of bearer rejected, failed to enable media [ 1685.393344][T12899] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1685.416611][T12899] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1685.439937][T12899] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1685.450350][T12899] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1685.458093][T12899] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1685.883230][T20927] netlink: 'syz.3.12602': attribute type 4 has an invalid length. [ 1686.016803][T20927] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12602'. [ 1686.111793][T20935] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12605'. [ 1686.164900][ T9393] bridge0: port 4(syz_tun) entered disabled state [ 1686.165667][T20938] sctp: [Deprecated]: syz.2.12605 (pid 20938) Use of int in max_burst socket option. [ 1686.165667][T20938] Use struct sctp_assoc_value instead [ 1686.263600][ T9393] syz_tun (unregistering): left allmulticast mode [ 1686.300161][ T9393] syz_tun (unregistering): left promiscuous mode [ 1686.321022][ T9393] bridge0: port 4(syz_tun) entered disabled state [ 1686.426468][T20927] .`¹: renamed from bond0 (while UP) [ 1686.496524][T20942] vlan0: entered allmulticast mode [ 1686.510293][T20942] bond0: entered allmulticast mode [ 1687.017031][T18980] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1687.035613][T18980] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1687.070149][T20961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12607'. [ 1687.170991][T20973] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12612'. [ 1687.290099][T30430] net_ratelimit: 14 callbacks suppressed [ 1687.290118][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1687.468205][T18980] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1687.527721][T18980] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1687.560736][ T6698] Bluetooth: hci1: command tx timeout [ 1687.624495][T20988] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1687.854846][T18980] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1687.888107][T18980] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.164774][T21015] netlink: 'syz.2.12621': attribute type 2 has an invalid length. [ 1688.465496][T18980] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1688.508829][T18980] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.649765][T20907] xfrm0 speed is unknown, defaulting to 1000 [ 1688.690996][T18974] bond2: (slave bridge1): failed to get link speed/duplex [ 1688.770860][T21044] veth0: entered promiscuous mode [ 1688.910950][T18974] bond2: (slave bridge1): failed to get link speed/duplex [ 1688.958822][T21043] veth0: left promiscuous mode [ 1689.060997][ T7933] bond2: (slave bridge1): failed to get link speed/duplex [ 1689.210329][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1689.365745][ T7933] bond2: (slave bridge1): failed to get link speed/duplex [ 1689.513314][T21069] tipc: Started in network mode [ 1689.524777][T21069] tipc: Node identity b650fc27a34c, cluster identity 4711 [ 1689.543881][T21069] tipc: Enabled bearer , priority 0 [ 1689.567573][T18974] netdevsim netdevsim0 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 1689.619798][T18974] bond2: (slave bridge1): failed to get link speed/duplex [ 1689.640331][ T6698] Bluetooth: hci1: command tx timeout [ 1689.700774][T21069] tipc: Disabling bearer [ 1689.883142][ T7933] netdevsim netdevsim0 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 1689.923709][ T7933] netdevsim netdevsim0 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 1690.084823][T18982] bond2: (slave bridge1): failed to get link speed/duplex [ 1690.124896][T20907] xfrm0 speed is unknown, defaulting to 1000 [ 1690.127790][ T7933] netdevsim netdevsim0 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 1690.224714][T18980] team0: left allmulticast mode [ 1690.237446][T18980] team_slave_0: left allmulticast mode [ 1690.251767][T21094] __nla_validate_parse: 9 callbacks suppressed [ 1690.251785][T21094] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12640'. [ 1690.272492][T18980] team_slave_1: left allmulticast mode [ 1690.291372][T18980] team0: left promiscuous mode [ 1690.305787][T18980] team_slave_0: left promiscuous mode [ 1690.317895][T18980] team_slave_1: left promiscuous mode [ 1690.336810][T18980] bridge0: port 3(team0) entered disabled state [ 1690.365716][T18980] bridge_slave_1: left allmulticast mode [ 1690.377782][T18980] bridge_slave_1: left promiscuous mode [ 1690.392797][T18980] bridge0: port 2(bridge_slave_1) entered disabled state [ 1690.421895][T18980] bridge_slave_0: left allmulticast mode [ 1690.429318][T18980] bridge_slave_0: left promiscuous mode [ 1690.442980][T18980] bridge0: port 1(bridge_slave_0) entered disabled state [ 1691.162712][T18980] bond7 (unregistering): (slave ip6gre3): Releasing backup interface [ 1691.173857][T18980] ip6gre3 (unregistering): left promiscuous mode [ 1691.284986][T18980] bond8 (unregistering): (slave vti0): Releasing backup interface [ 1691.303188][T18980] vti0 (unregistering): left promiscuous mode [ 1691.719069][ T6698] Bluetooth: hci1: command tx timeout [ 1691.785238][T18980] team0: Port device bridge5 removed [ 1691.955952][T18980] team0: Port device bridge9 removed [ 1692.021946][T18980] bond0 (unregistering): Released all slaves [ 1692.049467][T18980] bond1 (unregistering): Released all slaves [ 1692.069769][T18980] bond2 (unregistering): Released all slaves [ 1692.095625][T18980] bond3 (unregistering): Released all slaves [ 1692.115155][T18980] bond4 (unregistering): Released all slaves [ 1692.137230][T18980] bond5 (unregistering): Released all slaves [ 1692.166952][T18980] bond6 (unregistering): (slave veth5): Releasing active interface [ 1692.178080][T18980] bond6 (unregistering): Released all slaves [ 1692.205920][T18980] bond7 (unregistering): Released all slaves [ 1692.229367][T18980] bond8 (unregistering): Released all slaves [ 1692.250072][T18980] bond9 (unregistering): (slave veth9): Releasing active interface [ 1692.258027][T18980] veth0_to_bond: entered promiscuous mode [ 1692.277344][T18980] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1692.290918][T18980] bond9 (unregistering): Released all slaves [ 1692.311272][T18980] bond10 (unregistering): Released all slaves [ 1692.332708][T18980] bond11 (unregistering): Released all slaves [ 1692.615294][T21119] xfrm0 speed is unknown, defaulting to 1000 [ 1692.719503][T18980] tipc: Left network mode [ 1692.769042][T18974] bond2: (slave bridge1): failed to get link speed/duplex [ 1692.918959][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1692.997354][T18980] IPVS: stopping master sync thread 15588 ... [ 1693.022767][T21127] netlink: 180 bytes leftover after parsing attributes in process `syz.4.12649'. [ 1693.119349][ T7933] bond2: (slave bridge1): failed to get link speed/duplex [ 1693.599666][ T1176] bond2: (slave bridge1): failed to get link speed/duplex [ 1693.754802][ T7933] bond2: (slave bridge1): failed to get link speed/duplex [ 1693.812738][ T6698] Bluetooth: hci1: command tx timeout [ 1693.869559][T21144] tipc: Enabled bearer , priority 0 [ 1693.880590][T21159] tipc: Resetting bearer [ 1693.942573][T21139] tipc: Resetting bearer [ 1694.014355][T21166] netlink: 'syz.3.12654': attribute type 1 has an invalid length. [ 1694.025837][T21119] xfrm0 speed is unknown, defaulting to 1000 [ 1694.032055][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1694.068961][T21166] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12654'. [ 1694.169649][T18974] bond2: (slave bridge1): failed to get link speed/duplex [ 1694.609473][T21186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12658'. [ 1694.651303][T21186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12658'. [ 1694.683791][T21187] netlink: 'syz.5.12656': attribute type 39 has an invalid length. [ 1694.715165][ T142] bond2: (slave bridge1): failed to get link speed/duplex [ 1694.900358][T21192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12659'. [ 1695.282779][T21205] netlink: 'syz.3.12661': attribute type 1 has an invalid length. [ 1695.628397][T21205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1695.711770][T18974] bond2: (slave bridge1): failed to get link speed/duplex [ 1695.757553][T21204] bridge2: entered promiscuous mode [ 1695.774632][T21204] bridge2: entered allmulticast mode [ 1695.787947][T21204] bond0: (slave bridge2): making interface the new active one [ 1695.797957][T21204] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 1695.809519][T20907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1695.852021][T21223] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1695.869548][T20907] bridge0: port 1(bridge_slave_0) entered disabled state [ 1695.877002][T20907] bridge_slave_0: entered allmulticast mode [ 1695.917101][T20907] bridge_slave_0: entered promiscuous mode [ 1695.948807][ T142] bond2: (slave bridge1): failed to get link speed/duplex [ 1696.110272][T20907] bridge0: port 2(bridge_slave_1) entered blocking state [ 1696.130299][T20907] bridge0: port 2(bridge_slave_1) entered disabled state [ 1696.151373][T20907] bridge_slave_1: entered allmulticast mode [ 1696.181458][T20907] bridge_slave_1: entered promiscuous mode [ 1696.399550][T21249] netlink: 'syz.4.12669': attribute type 19 has an invalid length. [ 1696.478602][T20907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1696.503034][T20907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1697.173833][T20907] team0: Port device team_slave_0 added [ 1697.235786][T20907] team0: Port device team_slave_1 added [ 1697.305763][T21282] veth1_macvtap: left promiscuous mode [ 1697.333929][T21282] macsec0: entered promiscuous mode [ 1697.355706][T21282] macsec0: entered allmulticast mode [ 1697.701011][T21289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12674'. [ 1697.746362][T20907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1697.783609][T20907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1697.842855][T21289] Unsupported ieee802154 address type: 0 [ 1697.855452][T20907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1697.917313][T20907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1697.945886][T21295] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12676'. [ 1697.972299][T20907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1698.094135][T20907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1698.326512][T21309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12677'. [ 1698.354721][T21276] netlink: 'syz.4.12671': attribute type 16 has an invalid length. [ 1698.369029][T21276] netlink: 'syz.4.12671': attribute type 17 has an invalid length. [ 1698.794624][T21276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1698.806320][T21276] eql: remember to turn off Van-Jacobson compression on your slave devices [ 1698.837251][T21276] net_ratelimit: 3 callbacks suppressed [ 1698.837271][T21276] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1698.880924][ T142] bond2: (slave bridge1): failed to get link speed/duplex [ 1698.929836][T21324] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12679'. [ 1698.997176][T20907] hsr_slave_0: entered promiscuous mode [ 1699.045557][T20907] hsr_slave_1: entered promiscuous mode [ 1699.063992][T20907] debugfs: 'hsr0' already exists in 'hsr' [ 1699.090184][T20907] Cannot create hsr debugfs directory [ 1699.112885][T21323] netem: change failed [ 1699.212317][T18982] bond2: (slave bridge1): failed to get link speed/duplex [ 1699.752454][T21345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12683'. [ 1699.789475][T21345] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12683'. [ 1699.854483][T18980] hsr_slave_0: left promiscuous mode [ 1699.884692][T18980] hsr_slave_1: left promiscuous mode [ 1699.913542][T18980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1699.944509][T18980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1699.977704][T18980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1700.017308][T18980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1700.105283][T18980] veth1_macvtap: left promiscuous mode [ 1700.111570][T18980] veth0_macvtap: left promiscuous mode [ 1700.117175][T18980] veth1_vlan: left promiscuous mode [ 1700.132027][T18980] veth0_vlan: left promiscuous mode [ 1700.190877][T21367] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12689'. [ 1700.522886][T18980] team0 (unregistering): Port device team_slave_1 removed [ 1700.540191][T18980] team0 (unregistering): Port device team_slave_0 removed [ 1700.666339][T21365] macvlan2: entered promiscuous mode [ 1700.674560][T21365] macvlan2: entered allmulticast mode [ 1700.688058][T21365] team0: Device macvlan2 is already an upper device of the team interface [ 1700.937422][ T24] IPVS: starting estimator thread 0... [ 1700.945745][T21378] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12692'. [ 1700.955546][T21378] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12692'. [ 1700.955583][T21373] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1701.051088][T21379] IPVS: using max 33 ests per chain, 79200 per kthread [ 1701.070980][ T142] bond2: (slave bridge1): failed to get link speed/duplex [ 1701.078534][T21382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12693'. [ 1701.212132][T21389] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3955159637/3955159639 [ 1701.252289][T21389] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3955159637/3955159638 [ 1701.276081][T21389] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3955159637/3955159639 [ 1701.287500][T20907] netdevsim netdevsim0 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1701.318358][T21389] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3955159637/3955159638 [ 1701.560754][ T57] bond2: (slave bridge1): failed to get link speed/duplex [ 1701.602887][T18980] IPVS: stop unused estimator thread 0... [ 1701.622113][T20907] netdevsim netdevsim0 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1701.835343][T21410] x_tables: duplicate underflow at hook 4 [ 1701.859788][T20907] netdevsim netdevsim0 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1701.939927][T18974] bond2: (slave bridge1): failed to get link speed/duplex [ 1702.013501][T20907] netdevsim netdevsim0 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1702.109926][T18980] bond2: (slave bridge1): failed to get link speed/duplex [ 1702.240357][T18982] bond2: (slave bridge1): failed to get link speed/duplex [ 1702.342132][T21442] xt_ipcomp: unknown flags 1D [ 1702.389284][ T57] bond2: (slave bridge1): failed to get link speed/duplex [ 1702.685301][T21460] netlink: 'syz.2.12709': attribute type 1 has an invalid length. [ 1702.782791][T21460] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1702.962488][T21470] bond6: option fail_over_mac: invalid value (16) [ 1703.017143][T21470] bond6 (unregistering): Released all slaves [ 1703.280904][T21464] xfrm0 speed is unknown, defaulting to 1000 [ 1703.392349][T21498] tipc: Enabled bearer , priority 4 [ 1703.436586][T20907] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1703.478412][T20907] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1703.498167][T20907] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1703.542662][T20907] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1703.579215][T20907] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1703.611288][T20907] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1703.636420][T20907] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1703.674352][T20907] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1703.727506][T21511] __nla_validate_parse: 2 callbacks suppressed [ 1703.727526][T21511] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12721'. [ 1703.755275][T21517] Cannot find set identified by id 0 to match [ 1703.909509][ T142] net_ratelimit: 3 callbacks suppressed [ 1703.909528][ T142] bond2: (slave bridge1): failed to get link speed/duplex [ 1704.007863][T21464] xfrm0 speed is unknown, defaulting to 1000 [ 1704.025465][T20907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1704.063555][T18974] bond2: (slave bridge1): failed to get link speed/duplex [ 1704.116236][T20907] 8021q: adding VLAN 0 to HW filter on device team0 [ 1704.156048][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1704.163271][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1704.252498][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1704.259713][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1704.339849][ T57] bond2: (slave bridge1): failed to get link speed/duplex [ 1704.469086][T18982] bond2: (slave bridge1): failed to get link speed/duplex [ 1704.522724][T21547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12728'. [ 1704.570947][T21545] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12728'. [ 1704.618866][T18980] bond2: (slave bridge1): failed to get link speed/duplex [ 1704.797783][T21560] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12731'. [ 1704.880649][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1704.895365][T21568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12731'. [ 1705.159363][T18980] bond2: (slave bridge1): failed to get link speed/duplex [ 1705.317178][ T57] bond2: (slave bridge1): failed to get link speed/duplex [ 1705.358190][T21584] Bluetooth: MGMT ver 1.23 [ 1705.404564][T21584] netlink: 204 bytes leftover after parsing attributes in process `syz.2.12734'. [ 1705.439547][ T57] bond2: (slave bridge1): failed to get link speed/duplex [ 1705.514516][T21584] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12734'. [ 1705.579512][T18982] bond2: (slave bridge1): failed to get link speed/duplex [ 1706.175095][T21611] bond4: entered allmulticast mode [ 1706.257778][T21619] bridge1: entered promiscuous mode [ 1706.299469][T21619] bridge1: entered allmulticast mode [ 1706.317085][T21619] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 1706.360866][T21631] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12743'. [ 1706.435824][T20907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1706.591614][T20907] veth0_vlan: entered promiscuous mode [ 1706.630530][T20907] veth1_vlan: entered promiscuous mode [ 1706.771796][T20907] veth0_macvtap: entered promiscuous mode [ 1706.814296][T20907] veth1_macvtap: entered promiscuous mode [ 1706.854978][T20907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1706.922260][T20907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1706.958900][T21654] netlink: 'syz.2.12750': attribute type 1 has an invalid length. [ 1706.970829][ T142] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.982665][T21654] netlink: 'syz.2.12750': attribute type 1 has an invalid length. [ 1707.004282][T21654] netlink: 'syz.2.12750': attribute type 1 has an invalid length. [ 1707.005269][ T142] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.015761][T21654] netlink: 'syz.2.12750': attribute type 1 has an invalid length. [ 1707.092311][ T142] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.115475][ T142] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.144454][T21654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12750'. [ 1707.416260][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1707.454284][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1707.465202][T21676] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.12756'. [ 1707.500415][T21676] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1707.512540][T21673] netlink: 'syz.3.12755': attribute type 64 has an invalid length. [ 1707.535784][T21681] batadv1: entered allmulticast mode [ 1707.560822][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1707.570180][T21676] syzkaller1: entered promiscuous mode [ 1707.570471][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1707.590224][T21676] syzkaller1: entered allmulticast mode [ 1707.785373][ T5740] IPVS: starting estimator thread 0... [ 1707.909228][T21692] IPVS: using max 29 ests per chain, 69600 per kthread [ 1708.263692][T21722] netlink: 'syz.0.12766': attribute type 1 has an invalid length. [ 1708.296784][T21721] netlink: 'syz.0.12766': attribute type 1 has an invalid length. [ 1708.311435][T21721] 8021q: VLANs not supported on ip6gre0 [ 1708.480862][T21729] netdevsim netdevsim5 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 1708.532275][T21731] netdevsim netdevsim5 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 1708.916535][T21758] syzkaller1: entered allmulticast mode [ 1708.959199][T30430] net_ratelimit: 22 callbacks suppressed [ 1708.959216][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1709.048439][T21765] __nla_validate_parse: 4 callbacks suppressed [ 1709.048458][T21765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12776'. [ 1709.100338][T18982] bond2: (slave bridge1): failed to get link speed/duplex [ 1709.104961][T21770] netlink: 'syz.2.12777': attribute type 61 has an invalid length. [ 1709.158153][T21771] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1709.237285][T21778] netlink: 'syz.3.12778': attribute type 1 has an invalid length. [ 1709.249506][T21781] netlink: 'syz.3.12778': attribute type 1 has an invalid length. [ 1709.250263][T21776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12779'. [ 1709.297666][T21784] vcan0: tx drop: invalid da for name 0x0000800000000015 [ 1709.346578][T21781] bond1: entered promiscuous mode [ 1709.363265][T21781] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1709.404360][T18980] bond2: (slave bridge1): failed to get link speed/duplex [ 1709.538774][ T57] bond2: (slave bridge1): failed to get link speed/duplex [ 1709.588409][T21800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1709.678888][T18980] bond2: (slave bridge1): failed to get link speed/duplex [ 1709.816830][T21816] netlink: 164 bytes leftover after parsing attributes in process `syz.0.12792'. [ 1709.828384][T21817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12792'. [ 1709.842354][T21816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12792'. [ 1709.951952][T21817] team0: Port device team_slave_0 removed [ 1710.002346][T18980] bond2: (slave bridge1): failed to get link speed/duplex [ 1710.003295][T21823] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12794'. [ 1710.130121][T18980] bond2: (slave bridge1): failed to get link speed/duplex [ 1710.169588][T21834] netlink: 216 bytes leftover after parsing attributes in process `syz.0.12796'. [ 1710.200456][T21834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12796'. [ 1710.249316][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1710.262256][T21840] netlink: 'syz.4.12797': attribute type 25 has an invalid length. [ 1710.277836][T21840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12797'. [ 1710.324067][T18982] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1710.325586][T21840] netlink: 'syz.4.12797': attribute type 25 has an invalid length. [ 1710.352112][T21840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12797'. [ 1710.368417][T18982] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1710.403994][T18982] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1710.430303][T18982] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1710.793188][T21860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1710.807628][T21860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1711.020527][T30430] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1711.047795][T30430] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.089493][T30430] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1711.124089][T30430] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.153315][T30430] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1711.186289][T30430] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.217368][T30430] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1711.249232][T30430] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.432115][T21880] xfrm0 speed is unknown, defaulting to 1000 [ 1711.939136][T18053] xfrm0 speed is unknown, defaulting to 1000 [ 1711.958428][T18053] syz1: Port: 1 Link DOWN [ 1711.983927][T18053] xfrm0 speed is unknown, defaulting to 1000 [ 1712.130157][T21880] xfrm0 speed is unknown, defaulting to 1000 [ 1712.390178][T21927] batadv1: entered allmulticast mode [ 1713.355435][T21956] syzkaller0: entered promiscuous mode [ 1713.375337][T21956] syzkaller0: entered allmulticast mode [ 1713.402813][T21966] xt_l2tp: invalid flags combination: 8 [ 1717.329048][T30430] net_ratelimit: 163 callbacks suppressed [ 1717.329067][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1717.449953][T21992] x_tables: duplicate underflow at hook 1 [ 1717.489457][T18982] bond2: (slave bridge1): failed to get link speed/duplex [ 1717.609488][T18982] bond2: (slave bridge1): failed to get link speed/duplex [ 1717.701701][T22009] sctp: [Deprecated]: syz.2.12842 (pid 22009) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1717.701701][T22009] Use struct sctp_sack_info instead [ 1717.735108][T21997] __nla_validate_parse: 16 callbacks suppressed [ 1717.735131][T21997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12841'. [ 1717.751130][ T142] bond2: (slave bridge1): failed to get link speed/duplex [ 1717.766243][T18053] IPVS: starting estimator thread 0... [ 1717.832830][T22010] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12841'. [ 1717.860814][T22013] IPVS: using max 32 ests per chain, 76800 per kthread [ 1717.899136][T18980] bond2: (slave bridge1): failed to get link speed/duplex [ 1717.931718][T18982] nci: nci_rsp_packet: unknown rsp opcode 0xb05 [ 1717.981235][T22025] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12848'. [ 1718.019677][T18982] bond2: (slave bridge1): failed to get link speed/duplex [ 1718.081585][T22031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12850'. [ 1718.170852][T18982] bond2: (slave bridge1): failed to get link speed/duplex [ 1718.299283][T18982] bond2: (slave bridge1): failed to get link speed/duplex [ 1718.347791][T22044] syzkaller0: entered promiscuous mode [ 1718.354454][T22044] syzkaller0: entered allmulticast mode [ 1718.381592][T22049] Cannot find add_set index 0 as target [ 1718.419275][ T1176] bond2: (slave bridge1): failed to get link speed/duplex [ 1718.434598][T22055] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 1718.529890][T18982] bond2: (slave bridge1): failed to get link speed/duplex [ 1720.552748][T22010] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1720.790517][T22071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12862'. [ 1720.894886][T22068] syzkaller1: entered promiscuous mode [ 1720.938407][T22068] syzkaller1: entered allmulticast mode [ 1721.227117][T22093] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12867'. [ 1721.257895][T22094] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12867'. [ 1721.423175][T22113] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12870'. [ 1721.607163][T22119] netlink: 'syz.2.12873': attribute type 1 has an invalid length. [ 1721.608840][T22130] netlink: 'syz.3.12874': attribute type 32 has an invalid length. [ 1721.624121][T22130] netlink: 776 bytes leftover after parsing attributes in process `syz.3.12874'. [ 1721.820745][T22135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12876'. [ 1721.877145][T22137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1721.888549][T22137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1721.897887][T22137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1721.912161][T22137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1722.250341][T22159] netlink: 'syz.3.12884': attribute type 29 has an invalid length. [ 1722.405317][T22167] netlink: 'syz.2.12888': attribute type 32 has an invalid length. [ 1722.418803][T18982] net_ratelimit: 33 callbacks suppressed [ 1722.419018][T18982] bond2: (slave bridge1): failed to get link speed/duplex [ 1722.559929][ T57] bond2: (slave bridge1): failed to get link speed/duplex [ 1722.568341][T22176] netlink: 'syz.5.12891': attribute type 1 has an invalid length. [ 1722.595039][T22176] netlink: 'syz.5.12891': attribute type 3 has an invalid length. [ 1722.691533][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1722.793585][T22192] __nla_validate_parse: 9 callbacks suppressed [ 1722.793604][T22192] netlink: 232 bytes leftover after parsing attributes in process `syz.0.12895'. [ 1722.809321][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1722.919316][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1723.029376][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1723.149758][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1723.261166][T18982] bond2: (slave bridge1): failed to get link speed/duplex [ 1723.368966][T18982] bond2: (slave bridge1): failed to get link speed/duplex [ 1723.480560][T18982] bond2: (slave bridge1): failed to get link speed/duplex [ 1727.499046][ T142] net_ratelimit: 35 callbacks suppressed [ 1727.499067][ T142] bond2: (slave bridge1): failed to get link speed/duplex [ 1727.618752][T18980] bond2: (slave bridge1): failed to get link speed/duplex [ 1727.728817][T18980] bond2: (slave bridge1): failed to get link speed/duplex [ 1727.848794][ T142] bond2: (slave bridge1): failed to get link speed/duplex [ 1727.959611][ T142] bond2: (slave bridge1): failed to get link speed/duplex [ 1728.069055][ T57] bond2: (slave bridge1): failed to get link speed/duplex [ 1728.188848][ T57] bond2: (slave bridge1): failed to get link speed/duplex [ 1728.298842][T18980] bond2: (slave bridge1): failed to get link speed/duplex [ 1728.408952][T18980] bond2: (slave bridge1): failed to get link speed/duplex [ 1728.519443][T18980] bond2: (slave bridge1): failed to get link speed/duplex [ 1732.509252][T30430] net_ratelimit: 35 callbacks suppressed [ 1732.509273][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1732.629131][T18980] bond2: (slave bridge1): failed to get link speed/duplex [ 1732.739044][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1732.848942][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1732.968788][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1733.079201][ T142] bond2: (slave bridge1): failed to get link speed/duplex [ 1733.188907][ T57] bond2: (slave bridge1): failed to get link speed/duplex [ 1733.298835][ T57] bond2: (slave bridge1): failed to get link speed/duplex [ 1733.408919][T18980] bond2: (slave bridge1): failed to get link speed/duplex [ 1733.519088][ T142] bond2: (slave bridge1): failed to get link speed/duplex [ 1737.544328][T28984] net_ratelimit: 35 callbacks suppressed [ 1737.544351][T28984] bond2: (slave bridge1): failed to get link speed/duplex [ 1737.672088][T18980] bond2: (slave bridge1): failed to get link speed/duplex [ 1737.801404][ T7933] bond2: (slave bridge1): failed to get link speed/duplex [ 1737.918770][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1738.032128][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1738.148887][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1738.258820][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1738.369149][ T7933] bond2: (slave bridge1): failed to get link speed/duplex [ 1738.479363][T28984] bond2: (slave bridge1): failed to get link speed/duplex [ 1738.588877][T28984] bond2: (slave bridge1): failed to get link speed/duplex [ 1742.599172][ T6698] Bluetooth: hci2: command 0x0406 tx timeout [ 1742.607741][ T7933] net_ratelimit: 35 callbacks suppressed [ 1742.607760][ T7933] bond2: (slave bridge1): failed to get link speed/duplex [ 1742.729193][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1742.841127][ T142] bond2: (slave bridge1): failed to get link speed/duplex [ 1742.949934][ T142] bond2: (slave bridge1): failed to get link speed/duplex [ 1743.058876][ T1176] bond2: (slave bridge1): failed to get link speed/duplex [ 1743.169079][ T7933] bond2: (slave bridge1): failed to get link speed/duplex [ 1743.279274][ T142] bond2: (slave bridge1): failed to get link speed/duplex [ 1743.388895][ T142] bond2: (slave bridge1): failed to get link speed/duplex [ 1743.498987][ T57] bond2: (slave bridge1): failed to get link speed/duplex [ 1743.609592][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1745.013483][T22196] netlink: 16042 bytes leftover after parsing attributes in process `syz.5.12898'. [ 1745.265264][T22211] netlink: 64 bytes leftover after parsing attributes in process `syz.5.12903'. [ 1745.813075][T22231] bridge0: port 2(bridge_slave_1) entered disabled state [ 1745.820867][T22231] bridge0: port 1(bridge_slave_0) entered disabled state [ 1746.423597][T22278] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1746.662237][T22297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12928'. [ 1746.824250][T22305] bond_slave_1: entered promiscuous mode [ 1747.639284][T18978] net_ratelimit: 32 callbacks suppressed [ 1747.639307][T18978] bond2: (slave bridge1): failed to get link speed/duplex [ 1747.759225][T18978] bond2: (slave bridge1): failed to get link speed/duplex [ 1747.869306][ T7846] bond2: (slave bridge1): failed to get link speed/duplex [ 1747.978862][ T7846] bond2: (slave bridge1): failed to get link speed/duplex [ 1748.089481][T18978] bond2: (slave bridge1): failed to get link speed/duplex [ 1748.202842][T18981] bond2: (slave bridge1): failed to get link speed/duplex [ 1748.318777][ T7846] bond2: (slave bridge1): failed to get link speed/duplex [ 1748.428892][T22267] bond2: (slave bridge1): failed to get link speed/duplex [ 1748.539105][T18981] bond2: (slave bridge1): failed to get link speed/duplex [ 1748.648879][T18981] bond2: (slave bridge1): failed to get link speed/duplex [ 1749.521734][T22284] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1749.574496][T22309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12931'. [ 1749.705766][T22313] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12932'. [ 1749.777826][T22316] tipc: Enabling of bearer rejected, failed to enable media [ 1750.083798][T22344] Cannot find add_set index 65532 as target [ 1750.195388][T22349] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12942'. [ 1750.219161][T22349] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12942'. [ 1750.429480][T22356] netlink: 'syz.2.12945': attribute type 1 has an invalid length. [ 1750.460587][T22356] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12945'. [ 1750.504128][T22356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12945'. [ 1750.522369][T22371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12948'. [ 1750.619336][T22370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12949'. [ 1751.230397][T22375] bridge0: left allmulticast mode [ 1751.287174][T22375] tipc: Resetting bearer [ 1751.474496][T28984] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1751.520245][T28984] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.625005][T28984] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1751.669782][T28984] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.700253][T28984] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1751.738775][T28984] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.738905][T22403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12954'. [ 1751.778030][T28984] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1751.815530][T28984] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.930253][T22415] netlink: 'syz.2.12958': attribute type 1 has an invalid length. [ 1752.067950][T22425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12962'. [ 1752.140802][T22425] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1752.285177][T22429] ipvlan2: entered allmulticast mode [ 1752.309696][T22429] bond4: entered allmulticast mode [ 1752.374122][T22443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12964'. [ 1752.386470][T22425] bond4: (slave ipip0): refused to change device type [ 1752.413702][T22443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12964'. [ 1752.482953][T22451] netlink: 'syz.2.12968': attribute type 1 has an invalid length. [ 1752.491609][T22450] netlink: 'syz.2.12968': attribute type 1 has an invalid length. [ 1752.603964][T22454] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1752.738937][ T59] net_ratelimit: 18 callbacks suppressed [ 1752.738957][ T59] bond2: (slave bridge1): failed to get link speed/duplex [ 1752.787465][T22465] netlink: 'syz.2.12973': attribute type 11 has an invalid length. [ 1752.810844][T22467] vlan0: entered promiscuous mode [ 1752.869516][T18981] bond2: (slave bridge1): failed to get link speed/duplex [ 1753.020503][T22477] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1753.062321][T22477] tipc: Started in network mode [ 1753.083298][T22477] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1753.104429][T22477] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1753.113930][T22477] tipc: Enabled bearer , priority 10 [ 1753.127171][T22484] netlink: 'syz.4.12979': attribute type 9 has an invalid length. [ 1753.139414][T18981] bond2: (slave bridge1): failed to get link speed/duplex [ 1753.259065][T18981] bond2: (slave bridge1): failed to get link speed/duplex [ 1753.311334][T22499] netlink: 'syz.0.12984': attribute type 5 has an invalid length. [ 1753.547826][T22508] bond6: entered promiscuous mode [ 1753.561023][T18981] bond2: (slave bridge1): failed to get link speed/duplex [ 1753.620352][T22501] xfrm0 speed is unknown, defaulting to 1000 [ 1753.688915][T18981] bond2: (slave bridge1): failed to get link speed/duplex [ 1753.796090][T22524] netlink: 'syz.4.12989': attribute type 1 has an invalid length. [ 1753.820900][T18978] bond2: (slave bridge1): failed to get link speed/duplex [ 1753.939038][ T59] bond2: (slave bridge1): failed to get link speed/duplex [ 1754.004870][T22534] netlink: 'syz.5.12992': attribute type 1 has an invalid length. [ 1754.032707][T22534] netlink: 'syz.5.12992': attribute type 3 has an invalid length. [ 1754.059791][T18976] bond2: (slave bridge1): failed to get link speed/duplex [ 1754.068218][T22534] NCSI netlink: No device for ifindex 813332851 [ 1754.088481][T22536] netlink: 'syz.5.12992': attribute type 1 has an invalid length. [ 1754.097479][T22536] NCSI netlink: No device for ifindex 813332851 [ 1754.191042][T18978] bond2: (slave bridge1): failed to get link speed/duplex [ 1754.214226][T22542] bridge0: port 1(bridge_slave_0) entered disabled state [ 1754.233496][T22542] bridge0: port 1(bridge_slave_0) entered blocking state [ 1754.240741][T22542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1754.261683][T27393] tipc: Node number set to 1 [ 1755.015913][T22596] xfrm0 speed is unknown, defaulting to 1000 [ 1755.741114][T22638] syzkaller0: entered promiscuous mode [ 1755.766510][T22638] syzkaller0: entered allmulticast mode [ 1755.797460][T22638] IPVS: Error connecting to the multicast addr [ 1755.919925][T22642] __nla_validate_parse: 13 callbacks suppressed [ 1755.919944][T22642] netlink: 56 bytes leftover after parsing attributes in process `syz.2.13021'. [ 1756.078918][T22651] block nbd2: NBD_DISCONNECT [ 1756.088109][T22651] block nbd2: Send disconnect failed -32 [ 1756.106237][T22651] block nbd2: shutting down sockets [ 1756.304572][T22658] validate_nla: 1 callbacks suppressed [ 1756.304590][T22658] netlink: 'syz.0.13026': attribute type 1 has an invalid length. [ 1756.805394][T22691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13033'. [ 1756.877551][T22689] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1757.201765][T22706] netlink: 'syz.5.13038': attribute type 10 has an invalid length. [ 1757.368043][T22716] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 1757.368296][T22712] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13040'. [ 1757.385064][T22716] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 1757.419366][T22712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13040'. [ 1757.608476][T22733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13046'. [ 1757.615858][T22728] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1757.624734][T22728] IPv6: NLM_F_CREATE should be set when creating new route [ 1757.632013][T22728] IPv6: NLM_F_CREATE should be set when creating new route [ 1757.646880][T22733] veth2: entered allmulticast mode [ 1757.681277][T22733] veth3: entered promiscuous mode [ 1757.687481][T22733] veth3: entered allmulticast mode [ 1757.792812][T22742] IPv6: NLM_F_CREATE should be specified when creating new route [ 1757.845880][T12899] Bluetooth: hci1: link tx timeout [ 1757.851638][T22267] net_ratelimit: 24 callbacks suppressed [ 1757.851654][T22267] bond2: (slave bridge1): failed to get link speed/duplex [ 1757.855747][T12899] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1757.886398][T12899] Bluetooth: hci1: link tx timeout [ 1757.892597][T12899] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1758.010254][ T59] bond2: (slave bridge1): failed to get link speed/duplex [ 1758.024253][T12899] Bluetooth: hci1: link tx timeout [ 1758.031843][T12899] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1758.055975][T12899] Bluetooth: hci1: link tx timeout [ 1758.062884][T12899] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1758.129630][T22267] bond2: (slave bridge1): failed to get link speed/duplex [ 1758.214829][T22757] netlink: 205456 bytes leftover after parsing attributes in process `syz.0.13052'. [ 1758.242465][T12899] Bluetooth: hci1: link tx timeout [ 1758.250173][T12899] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1758.295999][T28984] bond2: (slave bridge1): failed to get link speed/duplex [ 1758.421641][ T59] bond2: (slave bridge1): failed to get link speed/duplex [ 1758.571338][T18976] bond2: (slave bridge1): failed to get link speed/duplex [ 1758.718875][T28984] bond2: (slave bridge1): failed to get link speed/duplex [ 1758.859782][T18976] bond2: (slave bridge1): failed to get link speed/duplex [ 1758.953737][T22791] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13060'. [ 1758.997548][T22791] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13060'. [ 1759.018944][ T7846] bond2: (slave bridge1): failed to get link speed/duplex [ 1759.079640][T12899] Bluetooth: hci1: link tx timeout [ 1759.085318][T12899] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1759.164481][T18981] bond2: (slave bridge1): failed to get link speed/duplex [ 1759.321825][T12899] Bluetooth: hci1: link tx timeout [ 1759.327067][T12899] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1759.358476][T22812] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1759.424317][T22817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13065'. [ 1759.499042][T22817] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13065'. [ 1759.707071][T22822] bond7: option xmit_hash_policy: invalid value (64) [ 1759.766324][T22822] bond7 (unregistering): Released all slaves [ 1759.951163][T12899] Bluetooth: hci1: link tx timeout [ 1759.956423][T12899] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1759.966997][T12899] Bluetooth: hci1: command 0x0406 tx timeout [ 1760.041440][T18981] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x5 [ 1760.662657][T22880] netlink: 'syz.2.13081': attribute type 13 has an invalid length. [ 1760.680910][T22880] netlink: 'syz.2.13081': attribute type 58 has an invalid length. [ 1761.019642][T22899] netlink: 'syz.4.13086': attribute type 1 has an invalid length. [ 1761.717126][T22941] __nla_validate_parse: 6 callbacks suppressed [ 1761.717143][T22941] netlink: 84 bytes leftover after parsing attributes in process `syz.4.13098'. [ 1761.729819][T22935] syzkaller0: entered promiscuous mode [ 1761.758199][T22935] syzkaller0: entered allmulticast mode [ 1761.892656][T22951] netlink: 'syz.0.13101': attribute type 30 has an invalid length. [ 1761.969752][T22962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13103'. [ 1762.002747][T22962] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13103'. [ 1762.093955][T22962] geneve3: entered promiscuous mode [ 1762.130362][T22962] geneve3: entered allmulticast mode [ 1762.150238][T22968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13104'. [ 1762.192518][T22968] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13104'. [ 1762.196268][T22976] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13105'. [ 1762.204950][T22968] netlink: 'syz.4.13104': attribute type 7 has an invalid length. [ 1762.234207][T22968] netlink: 'syz.4.13104': attribute type 8 has an invalid length. [ 1762.242539][T22968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13104'. [ 1762.273465][T22980] netlink: 'syz.5.13108': attribute type 2 has an invalid length. [ 1762.276990][T22981] netlink: 'syz.2.13107': attribute type 1 has an invalid length. [ 1762.307315][T22981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13107'. [ 1762.590349][T22989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13110'. [ 1762.711022][T23001] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13115'. [ 1762.842859][ T48] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1762.864519][ T48] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1762.896688][ T48] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1762.925587][ T48] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1762.979314][ T48] net_ratelimit: 25 callbacks suppressed [ 1762.979333][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1763.109137][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1763.229238][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1763.284788][T23034] netlink: 'syz.4.13127': attribute type 1 has an invalid length. [ 1763.383414][T23036] bridge0: port 1(batadv1) entered blocking state [ 1763.397281][T23036] bridge0: port 1(batadv1) entered disabled state [ 1763.412452][T23036] batadv1: entered allmulticast mode [ 1763.422011][T23036] batadv1: entered promiscuous mode [ 1763.480156][T18978] bond2: (slave bridge1): failed to get link speed/duplex [ 1763.505580][T23046] netlink: 'syz.3.13132': attribute type 2 has an invalid length. [ 1763.599864][T18975] bond2: (slave bridge1): failed to get link speed/duplex [ 1763.729125][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1763.875663][T23063] netlink: 'syz.3.13136': attribute type 1 has an invalid length. [ 1763.884597][T22964] batman_adv: batadv1: IGMP Querier appeared [ 1763.884617][T22964] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1763.900557][T18975] bond2: (slave bridge1): failed to get link speed/duplex [ 1764.012648][ T8497] bond2: (slave bridge1): failed to get link speed/duplex [ 1764.166537][T23073] tc action pedit 'at' offset 9 out of bounds [ 1764.180630][T23076] netlink: 'syz.3.13141': attribute type 10 has an invalid length. [ 1764.180760][T18975] bond2: (slave bridge1): failed to get link speed/duplex [ 1764.261230][T23080] netlink: 'syz.5.13143': attribute type 83 has an invalid length. [ 1764.303383][T23081] xt_TCPMSS: Only works on TCP SYN packets [ 1764.360295][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1764.480509][T23088] bond7 (unregistering): Released all slaves [ 1764.739498][T23096] pim6reg1: entered promiscuous mode [ 1764.766080][T23096] pim6reg1: entered allmulticast mode [ 1765.311821][T23120] veth9: entered allmulticast mode [ 1765.585713][T23129] xt_hashlimit: size too large, truncated to 1048576 [ 1766.725592][T23185] __nla_validate_parse: 15 callbacks suppressed [ 1766.725610][T23185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13178'. [ 1766.744149][T23184] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13177'. [ 1766.849923][T23180] syzkaller1: entered promiscuous mode [ 1766.883176][T23180] syzkaller1: entered allmulticast mode [ 1767.335863][T23231] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13187'. [ 1767.347335][T23231] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1767.740992][T23249] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13194'. [ 1768.078162][T23262] netlink: 33 bytes leftover after parsing attributes in process `syz.3.13198'. [ 1768.133750][T23262] netlink: 140 bytes leftover after parsing attributes in process `syz.3.13198'. [ 1768.215846][T23262] netlink: 33 bytes leftover after parsing attributes in process `syz.3.13198'. [ 1768.418260][T23277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13198'. [ 1769.399803][T12899] Bluetooth: hci1: command 0x0406 tx timeout [ 1773.128305][T23272] vlan2: entered promiscuous mode [ 1773.134348][T23272] gretap0: entered promiscuous mode [ 1773.348848][T18974] net_ratelimit: 21 callbacks suppressed [ 1773.348867][T18974] bond2: (slave bridge1): failed to get link speed/duplex [ 1773.539571][T18979] bond2: (slave bridge1): failed to get link speed/duplex [ 1773.668780][T18974] bond2: (slave bridge1): failed to get link speed/duplex [ 1773.828900][T22964] bond2: (slave bridge1): failed to get link speed/duplex [ 1773.968905][T18974] bond2: (slave bridge1): failed to get link speed/duplex [ 1774.011231][T23312] validate_nla: 3 callbacks suppressed [ 1774.011265][T23312] netlink: 'syz.2.13208': attribute type 9 has an invalid length. [ 1774.122448][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1774.182150][T23312] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.13208'. [ 1774.260430][T18974] bond2: (slave bridge1): failed to get link speed/duplex [ 1774.413927][T18974] bond2: (slave bridge1): failed to get link speed/duplex [ 1774.415238][T23322] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13211'. [ 1774.540015][T18978] bond2: (slave bridge1): failed to get link speed/duplex [ 1774.630124][T23331] xt_hashlimit: size too large, truncated to 1048576 [ 1774.685865][T18979] bond2: (slave bridge1): failed to get link speed/duplex [ 1774.933201][T23344] netlink: 'syz.4.13215': attribute type 1 has an invalid length. [ 1775.017122][T23346] IPVS: ip_vs_add_dest(): server weight less than zero [ 1775.028281][T22389] IPVS: starting estimator thread 0... [ 1775.149603][T23347] IPVS: using max 30 ests per chain, 72000 per kthread [ 1775.477748][T23358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13221'. [ 1775.531034][T23358] netlink: 50 bytes leftover after parsing attributes in process `syz.2.13221'. [ 1775.575927][T23358] netlink: 50 bytes leftover after parsing attributes in process `syz.2.13221'. [ 1775.760622][T23375] netlink: 'syz.5.13224': attribute type 11 has an invalid length. [ 1776.271301][T23349] netlink: 'syz.3.13218': attribute type 10 has an invalid length. [ 1776.331098][T23349] veth1_macvtap: left promiscuous mode [ 1776.380114][T23394] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13229'. [ 1776.404107][T23349] veth1_macvtap: entered promiscuous mode [ 1776.478592][T23349] .`¹: (slave macsec0): Enslaving as an active interface with an up link [ 1777.337658][T23428] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13237'. [ 1777.677726][T23437] IPVS: length: 146 != 232968 [ 1778.364247][ T48] net_ratelimit: 25 callbacks suppressed [ 1778.364265][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1778.505760][T23471] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1778.529221][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1778.669061][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1778.798845][T18979] bond2: (slave bridge1): failed to get link speed/duplex [ 1778.978582][T18979] bond2: (slave bridge1): failed to get link speed/duplex [ 1779.002020][T23492] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 1779.085257][T23497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13259'. [ 1779.115562][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1779.289874][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1779.445173][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1779.617508][T23521] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1779.791781][T18979] bond2: (slave bridge1): failed to get link speed/duplex [ 1779.793913][T23532] netlink: 320 bytes leftover after parsing attributes in process `syz.3.13267'. [ 1779.857174][T23519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13267'. [ 1780.164847][T23546] netlink: 68 bytes leftover after parsing attributes in process `syz.5.13275'. [ 1780.182953][T23544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13274'. [ 1780.252940][T23544] team0 (unregistering): Port device team_slave_0 removed [ 1780.370243][T23544] team0 (unregistering): Port device team_slave_1 removed [ 1780.466105][T23543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1780.847019][T23570] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.13280'. [ 1780.999712][T23574] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13282'. [ 1781.401388][T23593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13289'. [ 1781.466530][T23593] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13289'. [ 1781.544203][T23593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13289'. [ 1781.624870][T23593] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13289'. [ 1783.139210][T23654] netlink: 'syz.5.13306': attribute type 21 has an invalid length. [ 1783.185169][T23658] netlink: 'syz.2.13307': attribute type 1 has an invalid length. [ 1783.211702][T23658] netlink: 'syz.2.13307': attribute type 3 has an invalid length. [ 1783.273056][T23658] NCSI netlink: No device for ifindex 813332851 [ 1783.302707][T23656] netlink: 'syz.2.13307': attribute type 1 has an invalid length. [ 1783.360062][T23656] netlink: 'syz.2.13307': attribute type 3 has an invalid length. [ 1783.375891][T23656] NCSI netlink: No device for ifindex 813332851 [ 1783.548838][T18979] net_ratelimit: 30 callbacks suppressed [ 1783.548857][T18979] bond2: (slave bridge1): failed to get link speed/duplex [ 1783.720494][T22964] bond2: (slave bridge1): failed to get link speed/duplex [ 1783.849814][T22964] bond2: (slave bridge1): failed to get link speed/duplex [ 1783.990118][T18974] bond2: (slave bridge1): failed to get link speed/duplex [ 1784.163826][T22964] bond2: (slave bridge1): failed to get link speed/duplex [ 1784.289968][T23698] bond0: entered promiscuous mode [ 1784.318768][T23698] bond_slave_0: entered promiscuous mode [ 1784.335257][T23698] batadv0: entered promiscuous mode [ 1784.355515][T23698] debugfs: 'hsr0' already exists in 'hsr' [ 1784.375611][T23698] Cannot create hsr debugfs directory [ 1784.394720][T23698] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1784.450127][T23698] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1784.463712][T23698] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1784.483905][T23698] bond0: left promiscuous mode [ 1784.489895][T23698] bond_slave_0: left promiscuous mode [ 1784.496731][T23698] batadv0: left promiscuous mode [ 1784.608868][T22964] bond2: (slave bridge1): failed to get link speed/duplex [ 1784.738889][T22964] bond2: (slave bridge1): failed to get link speed/duplex [ 1784.821951][T23718] __nla_validate_parse: 10 callbacks suppressed [ 1784.821973][T23718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13325'. [ 1784.899770][T23722] netlink: 'syz.5.13327': attribute type 1 has an invalid length. [ 1784.911164][T18974] bond2: (slave bridge1): failed to get link speed/duplex [ 1785.025764][T23722] bond7: (slave geneve2): making interface the new active one [ 1785.051882][T23722] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 1785.061537][T23726] netlink: 208 bytes leftover after parsing attributes in process `syz.4.13328'. [ 1785.083790][T23727] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13327'. [ 1785.121099][T22964] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1785.141923][T22964] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1785.191912][T23727] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1785.218321][T23730] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13329'. [ 1785.260873][T22964] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1785.313185][T22964] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1785.331641][T23734] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1785.338944][T23734] IPv6: NLM_F_CREATE should be set when creating new route [ 1785.364513][T23734] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13329'. [ 1785.998886][T18979] bond2: (slave bridge1): failed to get link speed/duplex [ 1786.117500][T23758] netlink: 'syz.5.13337': attribute type 1 has an invalid length. [ 1786.229370][T23758] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1786.331521][T23761] bond10: (slave veth5): Enslaving as an active interface with a down link [ 1786.353740][T23766] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13339'. [ 1786.426103][T23758] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1786.446442][T23758] bond10: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1786.486659][T23773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1786.695152][T23777] nbd: must specify a device to reconfigure [ 1786.740705][T23777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13343'. [ 1787.091095][T23794] netlink: 240 bytes leftover after parsing attributes in process `syz.3.13345'. [ 1787.564185][T23817] netlink: 'syz.2.13354': attribute type 1 has an invalid length. [ 1787.692670][T23817] bond6: entered promiscuous mode [ 1787.697938][T23817] bond6: entered allmulticast mode [ 1787.704143][T23817] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1787.732353][T23822] netlink: 'syz.3.13357': attribute type 3 has an invalid length. [ 1788.217047][T23839] xfrm0 speed is unknown, defaulting to 1000 [ 1788.274475][T23845] netlink: 'syz.0.13362': attribute type 1 has an invalid length. [ 1788.310858][T23845] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13362'. [ 1788.342295][T23843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13361'. [ 1788.393108][T23848] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1788.569254][ T8497] net_ratelimit: 15 callbacks suppressed [ 1788.569276][ T8497] bond2: (slave bridge1): failed to get link speed/duplex [ 1788.792973][T23856] xt_hashlimit: size too large, truncated to 1048576 [ 1789.022291][T23862] tipc: Enabling of bearer rejected, failed to enable media [ 1789.068783][T28984] bond2: (slave bridge1): failed to get link speed/duplex [ 1789.216287][T28984] bond2: (slave bridge1): failed to get link speed/duplex [ 1789.361946][T28984] bond2: (slave bridge1): failed to get link speed/duplex [ 1789.402523][T23839] xfrm0 speed is unknown, defaulting to 1000 [ 1789.619767][T23877] netlink: 'syz.2.13372': attribute type 21 has an invalid length. [ 1789.648952][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1789.825104][T23877] bond7: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1789.847518][T23877] bond7 (unregistering): Released all slaves [ 1790.121614][T23905] __nla_validate_parse: 2 callbacks suppressed [ 1790.121633][T23905] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13377'. [ 1790.142717][T23907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13374'. [ 1790.271680][T23897] macvtap1: entered promiscuous mode [ 1790.293004][T23897] macvtap1: entered allmulticast mode [ 1790.312737][T23897] veth1_vlan: entered allmulticast mode [ 1790.362985][T12899] block nbd2: Receive control failed (result -32) [ 1790.394255][T23904] kthread_run failed with err -4 [ 1790.434346][T28984] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1790.457751][T28984] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1790.713541][T28984] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1790.734768][T28984] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1790.940018][T23926] netlink: 'syz.0.13381': attribute type 7 has an invalid length. [ 1791.005903][T23923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13380'. [ 1791.017097][T23926] netlink: 'syz.0.13381': attribute type 8 has an invalid length. [ 1791.025154][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1791.228766][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1791.461089][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1791.589434][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1791.739180][T18975] bond2: (slave bridge1): failed to get link speed/duplex [ 1791.746692][T23938] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13385'. [ 1791.814028][T23941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13387'. [ 1792.063791][T23950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13389'. [ 1792.324993][T23955] veth0: entered promiscuous mode [ 1792.351795][T23955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13391'. [ 1793.205749][T23989] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.13399'. [ 1793.381765][T23993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13402'. [ 1793.461914][T23999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13401'. [ 1793.628981][T30430] net_ratelimit: 9 callbacks suppressed [ 1793.629002][T30430] bond2: (slave bridge1): failed to get link speed/duplex [ 1793.810673][T12899] Bluetooth: hci5: command 0x0406 tx timeout [ 1793.908818][T18978] bond2: (slave bridge1): failed to get link speed/duplex [ 1793.919905][T24009] netlink: 'syz.2.13407': attribute type 83 has an invalid length. [ 1793.941691][T24017] vcan1: entered promiscuous mode [ 1793.946796][T24017] vcan1: entered allmulticast mode [ 1793.956161][T24009] netlink: 'syz.2.13407': attribute type 1 has an invalid length. [ 1794.159107][T18979] bond2: (slave bridge1): failed to get link speed/duplex [ 1794.302216][T28984] bond2: (slave bridge1): failed to get link speed/duplex [ 1794.471598][T22270] bond2: (slave bridge1): failed to get link speed/duplex [ 1794.632164][T18978] bond2: (slave bridge1): failed to get link speed/duplex [ 1794.829334][T18975] bond2: (slave bridge1): failed to get link speed/duplex [ 1794.912201][T24059] siw: device registration error -23 [ 1794.999184][T18978] bond2: (slave bridge1): failed to get link speed/duplex [ 1795.136879][T24070] __nla_validate_parse: 2 callbacks suppressed [ 1795.136899][T24070] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13424'. [ 1795.155441][T24070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13424'. [ 1795.167312][T24071] "syz.2.13423" (24071) uses obsolete ecb(arc4) skcipher [ 1795.268871][T18978] bond2: (slave bridge1): failed to get link speed/duplex [ 1795.276633][T24073] netlink: 72 bytes leftover after parsing attributes in process `syz.5.13425'. [ 1795.289100][T24070] netlink: 'syz.0.13424': attribute type 9 has an invalid length. [ 1795.474741][T24076] gtp2: entered promiscuous mode [ 1795.481196][T24076] gtp2: entered allmulticast mode [ 1795.509180][T18978] bond2: (slave bridge1): failed to get link speed/duplex [ 1795.526158][T24076] syzkaller1: entered promiscuous mode [ 1795.536791][T24076] syzkaller1: entered allmulticast mode [ 1795.824177][T24085] xfrm0 speed is unknown, defaulting to 1000 [ 1796.311948][T24105] syz_tun: entered allmulticast mode [ 1796.604867][T24085] xfrm0 speed is unknown, defaulting to 1000 [ 1797.405651][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069927c00: rx timeout, send abort [ 1797.905781][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880b267e800: rx timeout, send abort [ 1797.914522][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069927c00: abort rx timeout. Force session deactivation [ 1798.044367][T24153] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13451'. [ 1798.098545][T24153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13451'. [ 1798.122063][T24158] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13451'. [ 1798.414064][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880b267e800: abort rx timeout. Force session deactivation [ 1798.447759][T24170] netlink: 'syz.3.13454': attribute type 1 has an invalid length. [ 1798.473850][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055d9b800: rx timeout, send abort [ 1798.482560][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055d9b800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 1798.490073][T24170] netlink: 16179 bytes leftover after parsing attributes in process `syz.3.13454'. [ 1798.698956][ T48] net_ratelimit: 20 callbacks suppressed [ 1798.698977][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1799.084754][T18979] bond2: (slave bridge1): failed to get link speed/duplex [ 1799.230638][T18979] bond2: (slave bridge1): failed to get link speed/duplex [ 1799.358957][T18979] bond2: (slave bridge1): failed to get link speed/duplex [ 1799.489800][T22270] bond2: (slave bridge1): failed to get link speed/duplex [ 1799.527644][T24190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13458'. [ 1799.629043][T28984] bond2: (slave bridge1): failed to get link speed/duplex [ 1799.781109][T18975] bond2: (slave bridge1): failed to get link speed/duplex [ 1799.919358][T18979] bond2: (slave bridge1): failed to get link speed/duplex [ 1800.069702][T18979] bond2: (slave bridge1): failed to get link speed/duplex [ 1800.147712][T24214] netlink: 36 bytes leftover after parsing attributes in process `syz.5.13466'. [ 1800.201764][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1800.263812][T24218] netlink: 'syz.4.13468': attribute type 21 has an invalid length. [ 1800.291899][T24218] netlink: 156 bytes leftover after parsing attributes in process `syz.4.13468'. [ 1800.455451][T24229] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13472'. [ 1800.533955][T24224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13469'. [ 1801.093038][T24249] syzkaller0: entered promiscuous mode [ 1801.108511][T24249] syzkaller0: entered allmulticast mode [ 1801.266091][T24257] netlink: 32217 bytes leftover after parsing attributes in process `syz.5.13480'. [ 1801.423509][T24263] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1801.496183][T24263] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1801.522565][T24263] gretap1: entered promiscuous mode [ 1801.553771][T24263] gretap1: entered allmulticast mode [ 1801.581461][T24267] netlink: 'syz.3.13483': attribute type 1 has an invalid length. [ 1801.590567][T24277] netlink: 'syz.5.13485': attribute type 8 has an invalid length. [ 1801.629815][T24276] netlink: 'syz.2.13486': attribute type 1 has an invalid length. [ 1801.755102][T24279] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13483'. [ 1801.821821][T24279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13483'. [ 1802.137975][T24294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13489'. [ 1802.199375][T24294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13489'. [ 1802.247937][T24294] netlink: 'syz.2.13489': attribute type 3 has an invalid length. [ 1802.347137][T24300] ip6gre1: entered allmulticast mode [ 1802.469662][T24306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13491'. [ 1802.543626][T24301] netlink: 'syz.4.13490': attribute type 1 has an invalid length. [ 1802.610311][T24306] IPVS: length: 173 != 30744 [ 1803.413802][T24323] syzkaller0: entered promiscuous mode [ 1803.449761][T24323] syzkaller0: entered allmulticast mode [ 1808.368415][T24324] ip6erspan0: entered allmulticast mode [ 1808.509239][ T1176] net_ratelimit: 20 callbacks suppressed [ 1808.509261][ T1176] bond2: (slave bridge1): failed to get link speed/duplex [ 1808.679655][T18979] bond2: (slave bridge1): failed to get link speed/duplex [ 1808.809533][ T1176] bond2: (slave bridge1): failed to get link speed/duplex [ 1808.928939][T18979] bond2: (slave bridge1): failed to get link speed/duplex [ 1808.965929][T24361] __nla_validate_parse: 5 callbacks suppressed [ 1808.965948][T24361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13507'. [ 1809.042959][T24377] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13511'. [ 1809.053671][T18981] bond2: (slave bridge1): failed to get link speed/duplex [ 1809.146825][T24377] bond11: entered promiscuous mode [ 1809.152413][T24377] bond11: entered allmulticast mode [ 1809.178804][T18979] bond2: (slave bridge1): failed to get link speed/duplex [ 1809.292783][T18975] bond2: (slave bridge1): failed to get link speed/duplex [ 1809.409703][T18975] bond2: (slave bridge1): failed to get link speed/duplex [ 1809.622205][T24392] bond12: option packets_per_slave: invalid value (18446744073709551615) [ 1809.687165][T24392] bond12: option packets_per_slave: allowed values 0 - 65535 [ 1809.734667][T24392] bond12 (unregistering): Released all slaves [ 1809.761839][T24406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13518'. [ 1809.972824][T24402] bond8: entered promiscuous mode [ 1810.000433][T24402] bond8: entered allmulticast mode [ 1810.102448][T24417] netlink: 'syz.5.13522': attribute type 1 has an invalid length. [ 1810.111759][T24417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13522'. [ 1810.122836][T18978] bond2: (slave bridge1): failed to get link speed/duplex [ 1810.123664][T24417] netlink: 'syz.5.13522': attribute type 1 has an invalid length. [ 1810.262741][T24424] netlink: 9 bytes leftover after parsing attributes in process `syz.0.13525'. [ 1810.289361][T18979] bond2: (slave bridge1): failed to get link speed/duplex [ 1810.297455][T24424] netlink: 9 bytes leftover after parsing attributes in process `syz.0.13525'. [ 1810.640025][T24438] geneve4: entered promiscuous mode [ 1810.701797][T24438] geneve4: entered allmulticast mode [ 1810.721528][T24343] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1810.743922][T24343] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1810.787271][T24343] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1810.811757][T24343] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1810.941503][T24450] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13531'. [ 1810.983908][T24451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13530'. [ 1811.207750][T24456] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13532'. [ 1811.272949][T24460] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13533'. [ 1811.956102][T24477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1812.027570][T24477] 8021q: adding VLAN 0 to HW filter on device team0 [ 1812.077204][T24477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1812.216119][T18975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1812.223353][T18975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1812.291879][T18975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1812.299074][T18975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1812.428488][T24496] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 1812.451260][T24494] netlink: 'syz.0.13542': attribute type 1 has an invalid length. [ 1812.964484][T24518] netlink: 'syz.2.13548': attribute type 30 has an invalid length. [ 1813.619079][ T142] net_ratelimit: 17 callbacks suppressed [ 1813.619115][ T142] bond2: (slave bridge1): failed to get link speed/duplex [ 1813.732554][T24542] xfrm0 speed is unknown, defaulting to 1000 [ 1813.779417][ T1176] bond2: (slave bridge1): failed to get link speed/duplex [ 1813.929766][T18979] bond2: (slave bridge1): failed to get link speed/duplex [ 1813.968266][ T6698] block nbd4: Receive control failed (result -1) [ 1814.065102][T24555] __nla_validate_parse: 4 callbacks suppressed [ 1814.065136][T24555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13559'. [ 1814.091644][T18976] bond2: (slave bridge1): failed to get link speed/duplex [ 1814.238901][T24343] bond2: (slave bridge1): failed to get link speed/duplex [ 1814.368922][T18978] bond2: (slave bridge1): failed to get link speed/duplex [ 1814.508759][ T1176] bond2: (slave bridge1): failed to get link speed/duplex [ 1814.638951][T18978] bond2: (slave bridge1): failed to get link speed/duplex [ 1814.665432][T24542] xfrm0 speed is unknown, defaulting to 1000 [ 1814.833605][T18978] bond2: (slave bridge1): failed to get link speed/duplex [ 1814.937413][T24564] netlink: 'syz.2.13562': attribute type 1 has an invalid length. [ 1815.019310][T24343] bond2: (slave bridge1): failed to get link speed/duplex [ 1815.079274][T24564] sctp: [Deprecated]: syz.2.13562 (pid 24564) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1815.079274][T24564] Use struct sctp_sack_info instead [ 1815.243039][T24568] team0: Device vlan0 failed to change mtu [ 1815.998301][T24579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13566'. [ 1816.055141][T24579] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13566'. [ 1816.103452][T24579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13566'. [ 1816.146331][T24579] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13566'. [ 1816.717362][T24594] netlink: 'syz.2.13570': attribute type 11 has an invalid length. [ 1816.726976][T24594] netlink: 'syz.2.13570': attribute type 11 has an invalid length. [ 1816.735273][T24594] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13570'. [ 1816.982093][T24604] netlink: 64 bytes leftover after parsing attributes in process `syz.5.13573'. [ 1817.077734][T24607] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1817.085015][T24607] IPv6: NLM_F_CREATE should be set when creating new route [ 1817.092290][T24606] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1817.123498][T24606] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13574'. [ 1817.155178][T24607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13574'. [ 1817.340161][T18981] [ 1817.342524][T18981] ====================================================== [ 1817.349536][T18981] WARNING: possible circular locking dependency detected [ 1817.356566][T18981] syzkaller #0 Not tainted [ 1817.360979][T18981] ------------------------------------------------------ [ 1817.367994][T18981] kworker/u8:20/18981 is trying to acquire lock: [ 1817.374328][T18981] ffffffff8ea854e0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1817.384183][T18981] [ 1817.384183][T18981] but task is already holding lock: [ 1817.391544][T18981] ffff888052b3aae0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 1817.401221][T18981] [ 1817.401221][T18981] which lock already depends on the new lock. [ 1817.401221][T18981] [ 1817.411624][T18981] [ 1817.411624][T18981] the existing dependency chain (in reverse order) is: [ 1817.420640][T18981] [ 1817.420640][T18981] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 1817.428560][T18981] lock_sock_nested+0x41/0x100 [ 1817.433860][T18981] mptcp_sendmsg_fastopen+0x128/0x580 [ 1817.439771][T18981] mptcp_sendmsg+0x1b0c/0x1dc0 [ 1817.445074][T18981] ____sys_sendmsg+0x5c7/0x9f0 [ 1817.450379][T18981] ___sys_sendmsg+0x2a5/0x360 [ 1817.455588][T18981] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1817.461056][T18981] do_syscall_64+0x15f/0xf80 [ 1817.466180][T18981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1817.472598][T18981] [ 1817.472598][T18981] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1817.480342][T18981] lock_sock_nested+0x41/0x100 [ 1817.485641][T18981] inet_shutdown+0x6a/0x390 [ 1817.490680][T18981] nbd_mark_nsock_dead+0x2e9/0x560 [ 1817.496316][T18981] recv_work+0x1c2e/0x1d40 [ 1817.501259][T18981] process_scheduled_works+0xb5d/0x1860 [ 1817.507319][T18981] worker_thread+0xa53/0xfc0 [ 1817.512421][T18981] kthread+0x388/0x470 [ 1817.517011][T18981] ret_from_fork+0x514/0xb70 [ 1817.522124][T18981] ret_from_fork_asm+0x1a/0x30 [ 1817.527404][T18981] [ 1817.527404][T18981] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1817.535044][T18981] __mutex_lock+0x1a3/0x1550 [ 1817.540151][T18981] nbd_queue_rq+0x37b/0x1100 [ 1817.545258][T18981] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1817.551319][T18981] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1817.558167][T18981] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1817.564671][T18981] blk_mq_run_hw_queue+0x348/0x4f0 [ 1817.570305][T18981] blk_mq_dispatch_list+0xd16/0xe10 [ 1817.576022][T18981] blk_mq_flush_plug_list+0x48d/0x570 [ 1817.581906][T18981] __blk_flush_plug+0x3ed/0x4d0 [ 1817.587277][T18981] __submit_bio+0x28d/0x580 [ 1817.592295][T18981] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1817.598443][T18981] block_read_full_folio+0x599/0x830 [ 1817.604242][T18981] filemap_read_folio+0x137/0x3b0 [ 1817.609783][T18981] do_read_cache_folio+0x358/0x590 [ 1817.615411][T18981] read_part_sector+0xb6/0x2b0 [ 1817.620692][T18981] adfspart_check_ICS+0xb1/0x960 [ 1817.626149][T18981] bdev_disk_changed+0x817/0x1770 [ 1817.631689][T18981] blkdev_get_whole+0x380/0x510 [ 1817.637059][T18981] bdev_open+0x31e/0xd30 [ 1817.641823][T18981] blkdev_open+0x470/0x610 [ 1817.646756][T18981] do_dentry_open+0x785/0x14e0 [ 1817.652032][T18981] vfs_open+0x3b/0x340 [ 1817.656619][T18981] path_openat+0x2e08/0x3860 [ 1817.661727][T18981] do_file_open+0x23e/0x4a0 [ 1817.666745][T18981] do_sys_openat2+0x113/0x200 [ 1817.671934][T18981] __x64_sys_openat+0x138/0x170 [ 1817.677297][T18981] do_syscall_64+0x15f/0xf80 [ 1817.682403][T18981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1817.688808][T18981] [ 1817.688808][T18981] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1817.696012][T18981] __mutex_lock+0x1a3/0x1550 [ 1817.701116][T18981] nbd_queue_rq+0xc6/0x1100 [ 1817.706129][T18981] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1817.712191][T18981] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1817.719038][T18981] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1817.725533][T18981] blk_mq_run_hw_queue+0x348/0x4f0 [ 1817.731160][T18981] blk_mq_dispatch_list+0xd16/0xe10 [ 1817.736873][T18981] blk_mq_flush_plug_list+0x48d/0x570 [ 1817.742763][T18981] __blk_flush_plug+0x3ed/0x4d0 [ 1817.748129][T18981] __submit_bio+0x28d/0x580 [ 1817.753146][T18981] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1817.759380][T18981] block_read_full_folio+0x599/0x830 [ 1817.765177][T18981] filemap_read_folio+0x137/0x3b0 [ 1817.770715][T18981] do_read_cache_folio+0x358/0x590 [ 1817.776344][T18981] read_part_sector+0xb6/0x2b0 [ 1817.781622][T18981] adfspart_check_ICS+0xb1/0x960 [ 1817.787073][T18981] bdev_disk_changed+0x817/0x1770 [ 1817.792614][T18981] blkdev_get_whole+0x380/0x510 [ 1817.797988][T18981] bdev_open+0x31e/0xd30 [ 1817.802743][T18981] blkdev_open+0x470/0x610 [ 1817.807673][T18981] do_dentry_open+0x785/0x14e0 [ 1817.812947][T18981] vfs_open+0x3b/0x340 [ 1817.817525][T18981] path_openat+0x2e08/0x3860 [ 1817.822631][T18981] do_file_open+0x23e/0x4a0 [ 1817.827651][T18981] do_sys_openat2+0x113/0x200 [ 1817.832839][T18981] __x64_sys_openat+0x138/0x170 [ 1817.838201][T18981] do_syscall_64+0x15f/0xf80 [ 1817.843307][T18981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1817.849714][T18981] [ 1817.849714][T18981] -> #3 (set->srcu){.+.+}-{0:0}: [ 1817.856832][T18981] __synchronize_srcu+0xca/0x300 [ 1817.862282][T18981] elevator_switch+0x1e8/0x7a0 [ 1817.867566][T18981] elevator_change+0x2cc/0x450 [ 1817.872845][T18981] elevator_set_default+0x36c/0x430 [ 1817.878556][T18981] blk_register_queue+0x3e9/0x4e0 [ 1817.884100][T18981] __add_disk+0x677/0xd50 [ 1817.888942][T18981] add_disk_fwnode+0xfb/0x480 [ 1817.894131][T18981] nbd_dev_add+0x72c/0xb50 [ 1817.899058][T18981] nbd_init+0x168/0x1f0 [ 1817.903727][T18981] do_one_initcall+0x250/0x870 [ 1817.909006][T18981] do_initcall_level+0x104/0x190 [ 1817.914461][T18981] do_initcalls+0x59/0xa0 [ 1817.919302][T18981] kernel_init_freeable+0x2a6/0x3e0 [ 1817.925021][T18981] kernel_init+0x1d/0x1d0 [ 1817.929871][T18981] ret_from_fork+0x514/0xb70 [ 1817.934979][T18981] ret_from_fork_asm+0x1a/0x30 [ 1817.940261][T18981] [ 1817.940261][T18981] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1817.948077][T18981] __mutex_lock+0x1a3/0x1550 [ 1817.953185][T18981] elevator_change+0x1b3/0x450 [ 1817.958473][T18981] elevator_set_none+0xb5/0x140 [ 1817.963840][T18981] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1817.970157][T18981] nbd_start_device+0x17f/0xb10 [ 1817.975523][T18981] nbd_genl_connect+0x165b/0x1cf0 [ 1817.981055][T18981] genl_family_rcv_msg_doit+0x22a/0x330 [ 1817.987119][T18981] genl_rcv_msg+0x61c/0x7a0 [ 1817.992140][T18981] netlink_rcv_skb+0x232/0x4b0 [ 1817.997417][T18981] genl_rcv+0x28/0x40 [ 1818.001916][T18981] netlink_unicast+0x75c/0x8e0 [ 1818.007193][T18981] netlink_sendmsg+0x813/0xb40 [ 1818.012476][T18981] ____sys_sendmsg+0x972/0x9f0 [ 1818.017753][T18981] ___sys_sendmsg+0x2a5/0x360 [ 1818.022941][T18981] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1818.028392][T18981] do_syscall_64+0x15f/0xf80 [ 1818.033495][T18981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1818.039903][T18981] [ 1818.039903][T18981] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1818.048511][T18981] blk_alloc_queue+0x546/0x680 [ 1818.053797][T18981] __blk_mq_alloc_disk+0x197/0x390 [ 1818.059426][T18981] nbd_dev_add+0x499/0xb50 [ 1818.064355][T18981] nbd_init+0x168/0x1f0 [ 1818.069018][T18981] do_one_initcall+0x250/0x870 [ 1818.074301][T18981] do_initcall_level+0x104/0x190 [ 1818.079754][T18981] do_initcalls+0x59/0xa0 [ 1818.084598][T18981] kernel_init_freeable+0x2a6/0x3e0 [ 1818.090313][T18981] kernel_init+0x1d/0x1d0 [ 1818.095161][T18981] ret_from_fork+0x514/0xb70 [ 1818.100260][T18981] ret_from_fork_asm+0x1a/0x30 [ 1818.105537][T18981] [ 1818.105537][T18981] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1818.112744][T18981] __lock_acquire+0x15a5/0x2cf0 [ 1818.118106][T18981] lock_acquire+0x106/0x350 [ 1818.123120][T18981] fs_reclaim_acquire+0x71/0x100 [ 1818.128581][T18981] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1818.134904][T18981] __alloc_skb+0x1d0/0x7d0 [ 1818.139834][T18981] tcp_stream_alloc_skb+0x3f/0x580 [ 1818.145457][T18981] tcp_connect+0x15a9/0x53a0 [ 1818.150565][T18981] tcp_v6_connect+0x128d/0x1b10 [ 1818.155933][T18981] __inet_stream_connect+0x25a/0xdd0 [ 1818.161739][T18981] inet_stream_connect+0x66/0xa0 [ 1818.167196][T18981] kernel_connect+0x141/0x1c0 [ 1818.172395][T18981] rds_tcp_conn_path_connect+0x6f6/0x930 [ 1818.178542][T18981] rds_connect_worker+0x1d8/0x290 [ 1818.184087][T18981] process_scheduled_works+0xb5d/0x1860 [ 1818.190155][T18981] worker_thread+0xa53/0xfc0 [ 1818.195277][T18981] kthread+0x388/0x470 [ 1818.199870][T18981] ret_from_fork+0x514/0xb70 [ 1818.204976][T18981] ret_from_fork_asm+0x1a/0x30 [ 1818.210254][T18981] [ 1818.210254][T18981] other info that might help us debug this: [ 1818.210254][T18981] [ 1818.220473][T18981] Chain exists of: [ 1818.220473][T18981] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 1818.220473][T18981] [ 1818.233416][T18981] Possible unsafe locking scenario: [ 1818.233416][T18981] [ 1818.240854][T18981] CPU0 CPU1 [ 1818.246202][T18981] ---- ---- [ 1818.251559][T18981] lock(k-sk_lock-AF_INET6); [ 1818.256239][T18981] lock(sk_lock-AF_INET6); [ 1818.263259][T18981] lock(k-sk_lock-AF_INET6); [ 1818.270453][T18981] lock(fs_reclaim); [ 1818.274433][T18981] [ 1818.274433][T18981] *** DEADLOCK *** [ 1818.274433][T18981] [ 1818.282566][T18981] 4 locks held by kworker/u8:20/18981: [ 1818.288010][T18981] #0: ffff88802a1f4140 ((wq_completion)krds_cp_wq#32/0#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1818.299932][T18981] #1: ffffc9000d58fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1818.312715][T18981] #2: ffff88809a632780 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x930 [ 1818.323768][T18981] #3: ffff888052b3aae0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 1818.333879][T18981] [ 1818.333879][T18981] stack backtrace: [ 1818.339768][T18981] CPU: 0 UID: 0 PID: 18981 Comm: kworker/u8:20 Not tainted syzkaller #0 PREEMPT(full) [ 1818.339787][T18981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1818.339799][T18981] Workqueue: krds_cp_wq#32/0 rds_connect_worker [ 1818.339825][T18981] Call Trace: [ 1818.339835][T18981] [ 1818.339843][T18981] dump_stack_lvl+0xe8/0x150 [ 1818.339862][T18981] print_circular_bug+0x2e1/0x300 [ 1818.339885][T18981] check_noncircular+0x12e/0x150 [ 1818.339912][T18981] __lock_acquire+0x15a5/0x2cf0 [ 1818.339938][T18981] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1818.339957][T18981] lock_acquire+0x106/0x350 [ 1818.339973][T18981] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1818.339993][T18981] ? ip6_dst_check+0xe2/0x7e0 [ 1818.340013][T18981] fs_reclaim_acquire+0x71/0x100 [ 1818.340035][T18981] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1818.340053][T18981] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1818.340073][T18981] ? ip6_default_advmss+0x80/0x3b0 [ 1818.340094][T18981] ? __alloc_skb+0x1d0/0x7d0 [ 1818.340113][T18981] __alloc_skb+0x1d0/0x7d0 [ 1818.340132][T18981] tcp_stream_alloc_skb+0x3f/0x580 [ 1818.340146][T18981] ? __asan_memset+0x22/0x50 [ 1818.340166][T18981] tcp_connect+0x15a9/0x53a0 [ 1818.340199][T18981] ? __pfx_tcp_connect+0x10/0x10 [ 1818.340219][T18981] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1818.340242][T18981] ? lockdep_hardirqs_on+0x7a/0x110 [ 1818.340260][T18981] ? ktime_get_with_offset+0x93/0x2d0 [ 1818.340281][T18981] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1818.340307][T18981] ? __asan_memset+0x22/0x50 [ 1818.340327][T18981] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 1818.340348][T18981] ? inet6_hash_connect+0xeb/0x170 [ 1818.340373][T18981] tcp_v6_connect+0x128d/0x1b10 [ 1818.340401][T18981] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1818.340425][T18981] ? __bfs+0x153/0x290 [ 1818.340440][T18981] ? __bfs+0x153/0x290 [ 1818.340454][T18981] ? __pfx_hlock_conflict+0x10/0x10 [ 1818.340474][T18981] __inet_stream_connect+0x25a/0xdd0 [ 1818.340499][T18981] ? do_raw_spin_lock+0x12b/0x2f0 [ 1818.340518][T18981] ? lock_sock_nested+0x6a/0x100 [ 1818.340533][T18981] ? __pfx___inet_stream_connect+0x10/0x10 [ 1818.340557][T18981] ? inet_stream_connect+0x51/0xa0 [ 1818.340577][T18981] ? __local_bh_enable_ip+0xd0/0x130 [ 1818.340596][T18981] inet_stream_connect+0x66/0xa0 [ 1818.340617][T18981] kernel_connect+0x141/0x1c0 [ 1818.340638][T18981] ? net_generic+0x1e/0x240 [ 1818.340653][T18981] ? __pfx_kernel_connect+0x10/0x10 [ 1818.340678][T18981] ? __local_bh_enable_ip+0xd0/0x130 [ 1818.340696][T18981] rds_tcp_conn_path_connect+0x6f6/0x930 [ 1818.340718][T18981] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1818.340735][T18981] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1818.340757][T18981] ? process_scheduled_works+0xa70/0x1860 [ 1818.340772][T18981] ? process_scheduled_works+0xa70/0x1860 [ 1818.340792][T18981] rds_connect_worker+0x1d8/0x290 [ 1818.340811][T18981] ? process_scheduled_works+0xa70/0x1860 [ 1818.340828][T18981] process_scheduled_works+0xb5d/0x1860 [ 1818.340855][T18981] ? __pfx_process_scheduled_works+0x10/0x10 [ 1818.340872][T18981] ? assign_work+0x3d5/0x5e0 [ 1818.340890][T18981] worker_thread+0xa53/0xfc0 [ 1818.340921][T18981] kthread+0x388/0x470 [ 1818.340939][T18981] ? __pfx_worker_thread+0x10/0x10 [ 1818.340955][T18981] ? __pfx_kthread+0x10/0x10 [ 1818.340973][T18981] ret_from_fork+0x514/0xb70 [ 1818.340991][T18981] ? __pfx_ret_from_fork+0x10/0x10 [ 1818.341005][T18981] ? __switch_to+0xc79/0x1410 [ 1818.341028][T18981] ? __pfx_kthread+0x10/0x10 [ 1818.341047][T18981] ret_from_fork_asm+0x1a/0x30 [ 1818.341070][T18981] [ 1818.714903][ T1176] net_ratelimit: 15 callbacks suppressed [ 1818.714949][ T1176] bond2: (slave bridge1): failed to get link speed/duplex [ 1818.767247][T24629] netlink: 27 bytes leftover after parsing attributes in process `syz.5.13578'. [ 1818.776930][T24629] netlink: 'syz.5.13578': attribute type 4 has an invalid length. [ 1818.786223][T24629] .`¹: renamed from  [ 1818.858735][T18981] bond2: (slave bridge1): failed to get link speed/duplex [ 1818.968876][ T142] bond2: (slave bridge1): failed to get link speed/duplex [ 1819.079217][ T142] bond2: (slave bridge1): failed to get link speed/duplex [ 1819.188714][T18981] bond2: (slave bridge1): failed to get link speed/duplex [ 1819.298808][T18981] bond2: (slave bridge1): failed to get link speed/duplex [ 1819.408952][T18981] bond2: (slave bridge1): failed to get link speed/duplex [ 1819.518810][ T1176] bond2: (slave bridge1): failed to get link speed/duplex [ 1819.629037][T18981] bond2: (slave bridge1): failed to get link speed/duplex [ 1819.738737][T24343] bond2: (slave bridge1): failed to get link speed/duplex [ 1820.142443][T24612] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1823.729080][T18978] net_ratelimit: 35 callbacks suppressed [ 1823.729104][T18978] bond2: (slave bridge1): failed to get link speed/duplex [ 1823.848777][T18978] bond2: (slave bridge1): failed to get link speed/duplex [ 1823.961096][ T1176] bond2: (slave bridge1): failed to get link speed/duplex [ 1824.088756][T18978] bond2: (slave bridge1): failed to get link speed/duplex [ 1824.199339][T18979] bond2: (slave bridge1): failed to get link speed/duplex [ 1824.318796][T18978] bond2: (slave bridge1): failed to get link speed/duplex [ 1824.428708][ T142] bond2: (slave bridge1): failed to get link speed/duplex [ 1824.538736][ T142] bond2: (slave bridge1): failed to get link speed/duplex [ 1824.648708][ T142] bond2: (slave bridge1): failed to get link speed/duplex [ 1824.758843][T18981] bond2: (slave bridge1): failed to get link speed/duplex [ 1825.040146][ T6698] Bluetooth: hci1: link tx timeout [ 1825.045302][ T6698] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1827.079332][ T6698] Bluetooth: hci1: command 0x0406 tx timeout