last executing test programs: 2m29.108450245s ago: executing program 1 (id=6826): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000071120800000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x3d, 0x301, 0x70bd28, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x7, 0x40, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{0x3, 0x0, 0x1, 0x1}, 0x2, 0x3, 0x0, 0x0, "3eb9d3adfb751535"}}, 0x48}, 0x1, 0x0, 0x0, 0x8890}, 0x400c0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket(0x2c, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, 0x0, 0x0) listen(r6, 0xf) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x3) ioctl$sock_inet6_tcp_SIOCOUTQ(r6, 0x5411, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r8) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="970900800000000000d35338dd0cb598cc31", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r8], 0x4) unshare(0x26020480) r10 = gettid() syz_open_procfs$namespace(r10, &(0x7f00000006c0)='ns/time_for_children\x00') socket(0x10, 0x2, 0x3) 2m28.710459099s ago: executing program 1 (id=6831): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5202) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)={0x14, 0x76, 0xfcdfa0f79c183163, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000003000128008000100736974002400028008000100", @ANYRES32=0x0, @ANYBLOB="0800032b0affffff080002007f0700"/24], 0x50}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)={0x2c, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x6, 0x8, 0x0, 0x1, [@generic="d812"]}]}]}, @typed={0x4, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x6230}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x5726}]}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) (async) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5202) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)={0x14, 0x76, 0xfcdfa0f79c183163, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000000)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000003000128008000100736974002400028008000100", @ANYRES32=0x0, @ANYBLOB="0800032b0affffff080002007f0700"/24], 0x50}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)={0x2c, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x6, 0x8, 0x0, 0x1, [@generic="d812"]}]}]}, @typed={0x4, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x6230}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x5726}]}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x5c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 2m28.309607389s ago: executing program 1 (id=6836): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a31000000000500010007000000050005000a0000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x44, 0x0, 0x0, 0x116}, {0x6}]}, 0x10) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117100000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0x5}}]}}]}, 0x3c}}, 0x2004c840) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={@remote, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0x0, 0x930311}) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a31000000000500010007000000050005000a0000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x44, 0x0, 0x0, 0x116}, {0x6}]}, 0x10) (async) socket(0x2a, 0x2, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117100000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0x5}}]}}]}, 0x3c}}, 0x2004c840) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={@remote, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0x0, 0x930311}) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 2m28.02756231s ago: executing program 1 (id=6841): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r2, 0xb15}, 0x14}}, 0x80) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfc, 0x0, 0xfe, 0x7}}, 0x1c}}, 0x40000) 2m25.099572963s ago: executing program 1 (id=6848): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x830, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2b, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000200)={0x0, 0x800}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)=r4}, 0x20) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0203000019000000000000000000000004000300000000000000000000000000000000000000000077067bf1de175c011248fc06a869c8a422d13889b8c64da9000000000000050006006c0000000a0000d70f00000000000000000000000000000000000000000000000000000004000400000000000700000000000000000000000000000000020001000000000000000003000000000500d16c941ed8a9439f87b948ef410500008000000a00000000000000ff01000000000000000000000000000e0000000000000002004e20ac1e00"], 0xc8}}, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}}, 0x24}}, 0x0) 2m24.750443582s ago: executing program 1 (id=6853): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="05000c00000000000000000000190005000a0101017534daac54dc8a94b783f2f8f04031ba55b24add69f560ee3c719979cfcd18c7aae1a24527c7476ba9571033d9379a9e58618c"], 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x4040000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) r4 = openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r5 = gettid() write$cgroup_pid(r4, &(0x7f0000000100)=r5, 0x12) (async) close(r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x3c, 0x0, "bb02a3c364ca41d6357e544508474004000b42a201ecffffffffffffff8a0e2f964e0000c534a632ab6193fcf19b2df3ee0500faa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r6 = socket$kcm(0x23, 0x5, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x803, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r6, 0x8) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) (async) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='THAWED\x00', 0x7) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180000002e000100000000000000000004001980040010"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) 2m9.654129089s ago: executing program 32 (id=6853): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="05000c00000000000000000000190005000a0101017534daac54dc8a94b783f2f8f04031ba55b24add69f560ee3c719979cfcd18c7aae1a24527c7476ba9571033d9379a9e58618c"], 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x4040000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) r4 = openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r5 = gettid() write$cgroup_pid(r4, &(0x7f0000000100)=r5, 0x12) (async) close(r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x3c, 0x0, "bb02a3c364ca41d6357e544508474004000b42a201ecffffffffffffff8a0e2f964e0000c534a632ab6193fcf19b2df3ee0500faa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r6 = socket$kcm(0x23, 0x5, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x803, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r6, 0x8) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) (async) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='THAWED\x00', 0x7) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180000002e000100000000000000000004001980040010"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) 9.290632316s ago: executing program 2 (id=8666): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @link_local}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b27, &(0x7f0000000040)) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipmr_getroute={0x1c, 0x1a, 0x400, 0x70bd25, 0x25dfdbff, {0x80, 0x14, 0x20, 0xac, 0x0, 0x4, 0xfd, 0x9, 0x100}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x0) 9.088614685s ago: executing program 2 (id=8668): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000140)="f52a663fa08804c9f389d90f004fa374383c3ec409ff47f9682408ed9ec36a39ff40174ea3db1b82dc1e34a5bb466af559c93bb122f30c14ee74ea9b") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x8, &(0x7f00000001c0), &(0x7f0000006680)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0) write$cgroup_int(r2, &(0x7f0000000100)=0x3, 0x12) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x2, 0x10}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000140)="f52a663fa08804c9f389d90f004fa374383c3ec409ff47f9682408ed9ec36a39ff40174ea3db1b82dc1e34a5bb466af559c93bb122f30c14ee74ea9b") (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) (async) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x8, &(0x7f00000001c0), &(0x7f0000006680)=0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) (async) pipe(&(0x7f0000000180)) (async) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000100)=0x3, 0x12) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket(0x2, 0x80805, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) close(r5) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x2, 0x10}, &(0x7f0000000240)=0xc) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) (async) 8.268228218s ago: executing program 2 (id=8675): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async, rerun: 32) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "5b1404c3bd0038c6", "a1d6fcca11a60f84f8fb6cd0934e7699eb89e1ac24e540159e8e5d7aaf029a2e", '\b\x00', "82020b23ec3a405d"}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000002180)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x48) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x28}, 0x8080) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x800, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004002}, 0x20040000) (rerun: 32) 8.181515311s ago: executing program 2 (id=8677): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18e9676043c0e5aec92500000001000000002a8fbd531bed9b1c000100ffffffac8bf8b8f2840e586f4f12cb251bc160bd3c5ae86a03d1c0ea08002c1b3666531e56f0949353efbe4912ae1bd83fb19f4f864359b005731b45d451526cbe0f1b5aa2d4638798cfce30165633e76c2a0e08d7484d8ddec2fca93fbf003453716d26428789c0eee1e552b8afd62e04556df07711489415c95b1d24a5afed878c78329b4f525aee133c97dce706c0c368d9"], &(0x7f0000001a40)='GPL\x00', 0x7}, 0x94) 2.085789268s ago: executing program 5 (id=8747): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@dev, {}, {0x0, 0x1}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x96}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}}}]}, 0x1a0}}, 0x0) 1.970593673s ago: executing program 4 (id=8750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x400}) (async) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56d45, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0x2, 0xb}, {0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004810}, 0x1000c844) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00\r'], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.887521644s ago: executing program 3 (id=8751): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x6}}, @var={0x1, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x61]}}, 0x0, 0x43, 0x0, 0x1, 0x4}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000c000000080026000816"], 0x40}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0xffffffff, '\x00', r5, r0, 0x0, 0x4, 0x2}, 0x50) 1.652538637s ago: executing program 3 (id=8752): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x31c, 0x2e, 0x1, 0x3, 0x25dfdbfc, "", [@nested={0x30b, 0x10f3, 0x0, 0x1, [@nested={0xc, 0xe5, 0x0, 0x1, [@typed={0x8, 0xda, 0x0, 0x0, @pid}]}, @nested={0x15d, 0x7f, 0x0, 0x1, [@generic="cc39cb9db042474549524889905886009171313736215baae9fdfd00355318c9977e4535d6b232b37dc0067392db2608b279505c77b74983531f58fce686effe61b609487abb81bc75d4e67ca3e055d72cb435ab6f1639ffd15c57dfcf7a0a6386e7afb30e5a0ce79b72d75913", @generic="f80bec69229f826d13775d03b15cc5d9882718098ed0675d1935b77f14e53e774732635edbf74182997ee5", @generic="8a1413e08e03a3389678ab2957a52405dabfa582c12516d13e7b20e21bec94abd3cc16f391bb36c846adb1a2dde9e7c38240b38b72f3f4f667a4f434dde0b0aeb0a2f56f7fd8eba140f139432ea7537f6f3f749d8dfca2af8f34aebbe449c0fda2131ad1c773103d88ebb282185baceaa3003f43f6993418a06f3f7a0a4a7342638a92486ebfdd5f632e95a74f510d67c3ea24374ce3676f13e058fe6d39426ccf2a0bf4c7e7ebab5b43d4756cbc7775fed402e1e066532afc62323a1bacacdf62"]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @generic="053b3a0b0a3176fa81d5dd205df77d46f70df08bc18894624e7bffe90164484395675b08b5cb590c676c2142be91e216739d0690e72a5925af7fb13fb2a4be76902e2211229172bd7c360f6d603e8eff61b35dd6ff34fe58dc5d3ba23ebb70b0d2f8d302084ad3e98ec61864d2cb9d0647451ab80d4f325eadc8d7ad364274f68cf6f7874b0d0c1b6442967dae092f893ad27643e311bc94a206618e9e36515064a0fab336692db34956ed512f98d73cf478601a5677008289970a674d1b41"]}]}, 0x31c}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r1, 0x30b}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) 1.615279236s ago: executing program 5 (id=8753): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r0, 0x118, 0x2b, 0x0, &(0x7f00000003c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0xbb8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x6d8, 0x490, 0x390, 0xd0, 0xd0, 0x490, 0x608, 0x608, 0x608, 0x608, 0x608, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x33}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@ipv6={@local, @mcast1, [], [], 'lo\x00', 'vlan1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x738) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4], 0x38}}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f00000002c0)=0x20, 0x4) setsockopt$sock_attach_bpf(r8, 0x1, 0x34, &(0x7f00000000c0)=r7, 0x4) listen(r8, 0xfffffffd) close(r8) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) socket$netlink(0x10, 0x3, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001dc0)={0x1058, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@generic="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", @nested={0x38, 0x1, 0x0, 0x1, [@nested={0x34, 0x10, 0x0, 0x1, [@nested={0x2d, 0x8, 0x0, 0x1, [@generic="a83198bea9e08593d2e88db4c3201524464ad487a940f68b30f98f8d3a30a96baf5671950000000000"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x1058}, 0x1, 0x0, 0x0, 0x44805}, 0x4008094) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0x3, 0x4}, 0x6) 1.462139898s ago: executing program 4 (id=8755): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000880)={{r0, &(0x7f0000000080)='%-5lx \x00', 0x20801, &(0x7f00000002c0)={@align, {0x200, 0x0, 0x48, 0xccee}}, 0x3, &(0x7f0000000700), &(0x7f0000000740)=0x3}, {[0x3, 0xfffffff8, 0x1, 0x6]}, 0x0, 0xc2, &(0x7f0000000780)=""/194}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a80)={'ip6gre0\x00', &(0x7f0000000a00)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0x5, 0x3e3, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x8000, 0x20, 0xfffffff7}}) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x5, [@typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @volatile={0x10, 0x0, 0x0, 0x9, 0x1}, @ptr={0xe, 0x0, 0x0, 0x2, 0x1}, @struct={0x9, 0x5, 0x0, 0x4, 0x1, 0x80000001, [{0xb, 0x0, 0x100}, {0x1, 0x5, 0x101}, {0xf, 0x3, 0x1}, {0x10, 0x5, 0x101}, {0xf, 0x5}]}, @float={0x7, 0x0, 0x0, 0x10, 0x8}, @volatile={0x8}, @restrict={0x7, 0x0, 0x0, 0xb, 0x3}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x5}, @volatile={0xf, 0x0, 0x0, 0x9, 0x7}]}, {0x0, [0x30, 0x61, 0x30]}}, &(0x7f0000000bc0)=""/64, 0xc5, 0x40, 0x0, 0x7}, 0x28) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}]}]}, 0x58}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x16, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x0, 0x5, 0xa, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, @generic={0xd, 0x0, 0x3, 0xa, 0x7ff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000009c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000c40)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000c80)={0x3, 0x0, 0x3, 0x1000}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000cc0)=[{0x0, 0x4, 0xc, 0x2}], 0x10, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b91f04076003008cb89e00f086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x2, 0x7}, 0x10}, 0x94) 1.452588885s ago: executing program 3 (id=8756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x1d8, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x14c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x44, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, {0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x77}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x61}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xb}]}}}, {0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x333b58f066f671fb}]}}}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x5b, 0x7, 0x1, 0x0, "ad7f25814cd15c01e4a3ad6b536ebe70ba06473bc0d8b2540a627c24c659b7d2e7a182eae4a8bc023260ac1a594835aa65861bea609d9da1a0ae429c20e6ee34303fabb18d09847ede5fd5ddfe97faf8efcfd8ad612048"}]}, @NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1ff}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x29}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x78, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_HOOK={0x64, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x32d731df}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2f807444}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3678ccb9}, @NFTA_HOOK_DEV={0x14, 0x3, 'nicvf0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4c805220}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x2fc}, 0x1, 0x0, 0x0, 0x8844}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe189}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x80000001}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.370850297s ago: executing program 4 (id=8757): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x0, 0x3}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}], 0x20) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)="04", 0x1}], 0x1}}], 0x1, 0x4000040) r3 = socket$netlink(0x10, 0x3, 0xa) getsockopt$nfc_llcp(r2, 0x118, 0x4, &(0x7f0000000380)=""/211, 0xd3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000f00)=ANY=[@ANYBLOB='-', @ANYRESDEC, @ANYRESHEX], 0x27) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e3371", 0x24}], 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000800)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3f, 0xb0, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e22, 0x23, 0x0, @wg=@initiation={0x1, 0xffffffff, "c63585e7526aab9d42a8b6769138c30a26cd9a7a0950c019b7a55e8a8bfb3e7f", "b87b7a3b656030ba78a7fe3fc60f0232ad2ea02820b11bc983859cfd0f5885df6fe0994fe153a52dcd2c9a84cf7c7741", "874427be29c95b93303cd1be9716d01efc0c9ca574199dd700", {"45227a29c5acbb706c8d97cd14ba0aa2", "2984e0aeafde90bd933b89b3a4beac08"}}}}}}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0x39, 0x2, 0x0, 0x1, {0x8}}}}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x40}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54010000100033060000000000000000fc000000000000000000000000000000fc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe88000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0020000000000000000000ac1e000100"/268], 0x154}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)={0x40, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x40}}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r10, 0x5, 0x4}, 0x8) 1.244632991s ago: executing program 5 (id=8758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000006000000020000002c0084802800018008000100666962001c0002800800024000000001080001400000000008000340000000110900010073797a3000000000090002"], 0x80}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f8483f0000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf251a000000060021006200000008002280"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_EDIT(r5, 0x0, 0x483, &(0x7f0000000140)={0x29, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x0, 'sh\x00', 0x0, 0x9, 0x26}, 0x2c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x95, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x80}, 0x1c) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100)=0x8000) 1.03768857s ago: executing program 4 (id=8760): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x11, 0xa, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x88) syz_emit_ethernet(0xca, &(0x7f0000000240)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x94, 0x11, 0xff, @empty, @mcast2, {[@fragment={0x89, 0x0, 0x2, 0x1, 0x0, 0xe, 0x65}, @routing={0x16, 0x2, 0x0, 0xa, 0x0, [@mcast2]}, @fragment={0x35, 0x0, 0x9, 0x1, 0x0, 0x2, 0x64}, @fragment={0x6c, 0x0, 0x0, 0x1, 0x0, 0x9, 0x66}], {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb", "201f3a70a41ff6c2fca06a9bd768d5f1", {"77c14a5cd359c721417b883ecdcaba15", "9514b06796dbf2ea9e520f1475c8f65b"}}}}}}}}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="100000005304000027bd7000ffdbdf25c697b3a910600ce8d8c16140b19e91e654cd85ca51ef5f40b2cea02339d7a4bebd700afa1da72030f70e09b4484e4699ca1d11c39562e511f07f91a36674be7e"], 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x800) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) recvfrom(r2, &(0x7f0000000000)=""/38, 0x26, 0x0, 0x0, 0x0) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x1, {0x2, 0xff, 0x3}, 0xfe}, 0x18) syz_extract_tcp_res(&(0x7f0000000140), 0x6, 0x100) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000740)=0x14, 0x4) sendmsg$inet(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="82b411e1e18d60585fdfb6c17cdd486a2b473c97278b", 0x16}, {&(0x7f0000000340)="d377a4f9c985ba235d8bf7e61efb1fe0ddc35542b3ba83a3da883eb693fcb959990a99fcd805a8d086d9b051e408e8f0dfa9e2fbdd18a71df9d000efe1ad5c45f28bb1bcf087258eab119c4d2cc2193a00d9a1919c6ed6", 0x57}, {&(0x7f0000000400)="dde418ce1c79a2be12b924fdb107f4122de4fe1186de94660ff0e4c195dcc80a11800fd4df6c9ae4962391bf885bc6e42b8cd6f8e991c1a24390c813e49b3fe00bc21c1f01654618a3c84299de9c6f4f1ed060915d9399d010cc42db8793a254e9a0036562a23d037ca12a0ea91f5d5f827e3c1fdbc44f23a3c49664403cd2caea8c1cdabd3e957b54a58523be369552674b2bca05a6b75ef30391137cde00fbc2c2c33f0dd977d3e766871c59c9fc25a69b809aca7fd6c8061d2f9f30564a80ea412f7a127d9d80b6e8d50bc3a6bf519e98d5ba634d", 0xd6}, {&(0x7f0000000500)="6fa586d45931bd0974226df5b936f0709143eb93de819a792336d43bb380f82d08ad96905cd425e5cdece471d770fb16846e7c66c393fb3d806ded01a094986248423538bf045b939546d83733f1ba1cfafa733a2e9894e7375d34ebf0c64a45852e053395eecfd0613caf3d93e413", 0x6f}, {&(0x7f0000000840)="4f52ab1409098782e85a3a75ffa64e01b76563b12d55853502694f834addd3134cc225b996a4520e1a3a7cf316ecb6f26615b87f86a51141d91f6e0903220e2e7f87a1f6e7d2e7601aaf392f2ebebffd46c0bc08896b139f97d571cdd46ff86d4ddaae16da1b18c10558b12b0e2b25f1f68d68b9ede8cc0b03c90bc54e9bc63ec93ff120414cd1b1", 0x88}], 0x5, &(0x7f0000000640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xbb}}], 0x18}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000006c0)={'vxcan1\x00'}) sendmmsg(r2, &(0x7f0000000100)=[{{&(0x7f0000000040)=@un=@file={0x1, './file0\x00'}, 0x80, 0x0}}], 0x1, 0xf5) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r5, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000200)=0x40) 1.028698102s ago: executing program 3 (id=8761): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x7f}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)={r1}, &(0x7f0000000140)=0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f00000002c0)={r3, &(0x7f00000001c0)='\x00', 0x2100, &(0x7f0000000200)={@align=0x4, {0x6, 0x80, 0xc1c, 0xff}}, 0xffff, &(0x7f0000000240), &(0x7f0000000280)=0x7}) sendmsg$nl_route(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@setneightbl={0x78, 0x43, 0x10, 0x70bd29, 0x25dfdbff, {0x1c}, [@NDTA_PARMS={0x40, 0x6, 0x0, 0x1, [@NDTPA_LOCKTIME={0xc, 0xf, 0x8}, @NDTPA_PROXY_QLEN={0x8, 0xe, 0x5}, @NDTPA_UCAST_PROBES={0x8, 0xa, 0x1}, @NDTPA_LOCKTIME={0xc, 0xf, 0x8}, @NDTPA_PROXY_QLEN={0x8, 0xe, 0x1ce}, @NDTPA_LOCKTIME={0xc, 0xf, 0x8000000000000001}]}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x4}, @NDTA_THRESH3={0x8, 0x4, 0x2}, @NDTA_NAME={0x5, 0x1, '\x00'}, @NDTA_THRESH2={0x8, 0x3, 0xda43}]}, 0x78}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4008085) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000440)={0xc619}, 0x4) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000480), &(0x7f00000004c0)=0x4) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000580)={0x6, 'batadv0\x00', {0x90}, 0x5}) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000005c0)={0x8, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0xda}, @pad1, @generic={0x0, 0x14, "301d95f13eacacbc5df84067bb35623001ac57f0"}, @ra={0x5, 0x2, 0x6}, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x18, {0x3, 0x4, 0x7, 0x6, [0x80000000, 0x3]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x60) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000640)={0x3, [0x3ff, 0x7, 0x0]}, &(0x7f0000000680)=0xa) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000006c0)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000000700)=0x28) r5 = socket(0x29, 0x4, 0x9) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000780), r4) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r6, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4044884) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, r6, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4050}, 0x40) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000009c0)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000a00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000000c00)={{r7}, r9, 0x2, @unused=[0x2, 0x5, 0x800, 0x8000000000000001], @devid}) bind$bt_hci(r4, &(0x7f0000001c00)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_SIOCBRADDBR(r8, 0x89a0, &(0x7f0000001c40)='nr0\x00') r10 = syz_genetlink_get_family_id$team(&(0x7f0000001cc0), r8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001d00)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000001d40)={@initdev, 0x0}, &(0x7f0000001d80)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001e40)={0xffffffffffffffff, 0x58, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000002b00)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002380)={0x73c, r10, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r11}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffb223}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1b7}}}]}}, {{0x8, 0x1, r12}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1a3c0920}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1d}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xc0, 0xc0, 0x0, 0x9}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x10c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x73c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 956.658141ms ago: executing program 0 (id=8762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000405250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f00000001c0)={0x8, 'team_slave_0\x00', {'vxcan1\x00'}, 0x5}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x40448c5) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) getsockopt$WPAN_WANTLQI(r8, 0x0, 0x3, &(0x7f00000002c0), &(0x7f0000000340)=0x4) connect$inet6(r7, 0x0, 0x0) (async) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async, rerun: 32) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (rerun: 32) write$rfkill(r9, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f83edf848480000005e140602ab1100000e002b000f000000028000001294", 0x2e}], 0x1}, 0x0) (async, rerun: 32) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000840)=ANY=[], 0x1a) (rerun: 32) 901.19442ms ago: executing program 5 (id=8763): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x890b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000a6"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)=ANY=[@ANYRES32=0x0, @ANYBLOB="4964d7139bbfbf83e2ff3cdc760f85884c2b1dc53b75e9461321e56d898e8c2ba9f11ee86d5d063a6c1e5e14e09be5023f4b5c0d068c3ff3b00f09595edccb5e9aa15060f63f92185853a817e65d5d3eb12c58ec2944a4d67ec71d9bd05c8b1c6b6c705a55b2ecd87230ea14b7f15d55b1ba2f8aa88c6015d4e5794b8a51dc6a771207c85965388cec10dd1fad486ad8ff4033b04b7c8119", @ANYBLOB="130000003020000000000000", @ANYRES32=0x0, @ANYRES8=r1, @ANYRES64=0x0], 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071106d0000000000951ffe5acea13c46"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038980a00000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0a03801c0000800800034000000002100002800c000280080001"], 0xb40}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b9ff030768040600000014fd88a8", 0x0, 0x7fc, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x105}, 0x37) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100004c65235c8f246c0c7aae9c11fd5dfffc000500050500"/46], 0x34}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0xffffff8b}], 0x2}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000540)={'gretap0\x00', 0x8000}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000700)={r1, &(0x7f0000000580)="806dd8fdf5a369148724f544f7ddae4e51b974fb38f0ff75fdf83ac8a011f7d81e312635", &(0x7f00000006c0)=""/10, 0x4}, 0x20) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820faeb705000092ea54c7be", 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000180)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe5, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x48, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) 772.201576ms ago: executing program 0 (id=8764): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000000)=0xe) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000180)={0x0, @loopback, @local}, &(0x7f00000001c0)=0xc) 693.853352ms ago: executing program 2 (id=8681): mmap(&(0x7f0000159000/0x1000)=nil, 0x1000, 0x7, 0x40010, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/55, 0x32a000, 0x800, 0x200, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f0000003140)=""/4090, 0xffa}, {&(0x7f0000004680)=""/4094, 0xffe}], 0x3}, 0x0) recvmmsg(r3, &(0x7f000000b9c0)=[{{0x0, 0x0, 0x0}, 0xe68d}, {{0x0, 0x0, 0x0}, 0x810}, {{0x0, 0x0, 0x0}, 0xda02}], 0x3, 0x2002, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf253e00000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r8 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x4, 0x1}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000056000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="100001"], 0x28}}, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x201082, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0x200000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 632.464537ms ago: executing program 0 (id=8765): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="050000000300000000000000", @ANYBLOB="0080220294bbf164"], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0xd, 0x9, 0x5, 0x7, 0x0, 0xd, 0x25dfdbff, [@sadb_address={0x5, 0x5, 0x3c, 0xa0, 0x0, @in6={0xa, 0x4e22, 0x32, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80}}]}, 0x38}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$sock(r1, &(0x7f0000000ac0)={&(0x7f00000005c0)=@in6={0xa, 0x4e24, 0x3, @private0, 0x1}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000640)="44819fab1fddb2c86c351f2964c29e1e57af609b791a8d533fb5e802f32f20c8f5d5ca0762b891c23787268913af3142e0500c497c4c2587bd9d40926ccf6de748d3bb07dbc537fe1b62242df8d636c11406267df00a21cd17087bbd4f867352709eb95c3568f3db2f55c4d2a952e303e3f075153ee4137f9ed7ecdcb1cdc677b4e1e0c16c60c9519a445bd0ba0ccbbcbbead34532327e1f7f24c027127abcc3c94b187ea67c519be6aa3e1c2a8c6cf3fc5288af0181dbe57cfd09b2329a7d32436d93ef5388ee07c8e2bfd777175396ef2199efa16f", 0xd6}, {&(0x7f0000000740)="bbe48f34e6b21f4a8685c88870280d3b31c67da246daf40f9a7aecab674d83321a4979ae4d506f12eb95c20a978ebc760494a1388f0f0753a210b38c726bf29cdb144981e08370e78db87e1158a94f6a27e00ee38b583d815dda499a666237a896e50d09038e7676b380caf3974d76cd5833ca8f31fedde08baf7211f0e13698645916535a1d0a8a96f11b52e7fb88023a30a507c4f44dcedb238d66dd88fd", 0x9f}, {&(0x7f0000000800)="a47e5c79c4018562a8911b9a330c296703d51f81243c99eb6fdb58357a1e402e59beb125a4c384e3c2c6f5cd2daaf784f28f1f00320426f3dc5c7bda6ea3a8467ceb87138905f8010913055b8ddf7e9208446827a0c8997f", 0x58}, {&(0x7f0000000880)="106e81e846c7e46cfbe6f1a439cbc7889e800d3a0c1d9aa2a5c0daab981eda49989d8bb6bcbdff96da94d88c1215a89b83d4b1505d60b0ce8110d31e3ff3e5f70b5f8ab09ee4e88c1007b85e8bc52c80a5d19cf43a3a7628e0ba75267602bc50b995a924a8d87f72219ad8524917b74f08429fda35291e516cc13459c26f7ebaf25f628bbbb837f308425f8037cf4fc4b84e6bb88dbed9f17875b9eb316a36e03b3b3eea3c23d5288dea2398e38546f89fc085e87d6c54b09e5a150ecfdef4b7a358d14dbcd3d34206caf8f8a1c634135750dc426d2730f5723aabe901d3cce7c2", 0xe1}, {&(0x7f0000000500)="b5d378037271d1bd82284550570ac3677aefcfcf8af77a7b0d40ed2684f965cb5a43d60adf", 0x25}, {&(0x7f0000000980)="5aeb857a32aab3dcb801d3af28b6d0c4e96bfd46a71da5ce621e9756666f0bf3293e9a2be57e47cad3e64a6c89d6e7603c14978480ffd2ba038ffb2d01c47e670e927bd3ffd4414a8715fc3b23ff29524d2c346f9b458d81846e2129472a40fbeffe72e45ef5c770a14b1e59663134533ef57e04d33b5ce854e3766ec17eacca1bcc060c766863f62df34847fa5be56f33c441bbb6542a7f010f9f5c616002716943c2e02fa5621e", 0xa8}], 0x6}, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x8, 0x8, 0x8, 0x8, {{0xf, 0x4, 0x1, 0x26, 0x3c, 0x64, 0x0, 0x40, 0x29, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010101, {[@end, @generic={0xcd, 0x2}, @timestamp_prespec={0x44, 0x1c, 0x9e, 0x3, 0x1, [{@broadcast}, {@multicast2, 0x9}, {@rand_addr=0x64010101, 0x5}]}, @end, @lsrr={0x83, 0x7, 0x75, [@rand_addr=0x64010102]}]}}}}}) syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x1, {[@fastopen={0x22, 0x11, "79c4fd826e79ceae3697e1c46f1327"}]}}}}}}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@local, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x1, 0x1}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@ipv6_newroute={0x78, 0x18, 0x10, 0x81, 0x25dfdbfd, {0xa, 0x0, 0x14, 0x4, 0x2, 0x2, 0x0, 0x2, 0x3500}, [@RTA_PREF={0x5, 0x14, 0x40}, @RTA_IIF={0x8, 0x3, r3}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_PREF={0x5, 0x14, 0x4}, @RTA_UID={0x8, 0x19, r7}, @RTA_MULTIPATH={0xc, 0x9, {0x7fff, 0x2af1a464a446664d, 0xa8, r8}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xb}}}, @RTA_MARK={0x8, 0x10, 0x200}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_TOS={0x5, 0x5, 0x7d}}]}, 0x78}, 0x1, 0x0, 0x0, 0x1040}, 0x4) 622.62624ms ago: executing program 5 (id=8766): r0 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11}, 0x11) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000008fcff", 0x58}], 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, &(0x7f00000004c0)='N', 0x0}, 0x50) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x59f5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8084}, 0x4000080) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x616}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40811) 595.67268ms ago: executing program 3 (id=8767): r0 = socket(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000040)=0xcbfd, 0x4) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000a000000080001"], 0x1c}}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r3}, 0x20) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000580)=0xfff, 0x4) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000400)="e8", &(0x7f0000000480)=@tcp6=r0, 0x1}, 0x20) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x38, 0x1404, 0x300, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4c0c4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 472.268857ms ago: executing program 3 (id=8768): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYRES64=0x0, @ANYRES32=r0, @ANYBLOB="8634", @ANYRES32=r3, @ANYBLOB="0c000600020000000000000008000e000500000008000e000300000008000300", @ANYRES32=0x0, @ANYRES16=r3], 0x54}}, 0x4000090) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r5 = socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x2}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088d1}, 0x0) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendto$packet(r5, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r11, 0x0, 0x486, 0x0, 0x0) (async) getsockopt$IP_VS_SO_GET_TIMEOUT(r11, 0x0, 0x486, 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r12) sendmsg$DEVLINK_CMD_RATE_SET(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, r13, 0x6ff, 0x0, 0x25dfdbfc, {0x52}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 450.945822ms ago: executing program 0 (id=8769): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001500)={{r0, &(0x7f0000000000)='GPL\x00', 0x224000, &(0x7f0000000040)={@_ha_fsid={[0xfffffff7, 0x1]}, {0x2, 0x8, 0x2, 0x3ff}}, 0x2, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000180)}, 0x3, &(0x7f0000000380)=[{0x0, 0xffffffff, &(0x7f00000001c0)='GPL\x00', &(0x7f0000000500)="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", 0x1000, 0x10}, {0x2, 0x3ff, &(0x7f0000000200)='GPL\x00', &(0x7f0000000280)="10bd39113d9a7dc787bab00f19ac6dadbc285c542b289707dfa372f2bfd918e9d99cf289e73d261cb8758d86707b38b103e48b5e4f3cea775327ef37039c68bdd3b768787ad8e25bad5532d7ec481a6f60ec1298b284f33e01012e3a607b495e90d5e8fbbdd63efa865c54314fac", 0x6e, 0x10}, {0x0, 0x9, &(0x7f0000000300)='!\x00', &(0x7f0000000340)="4a149e4915bdf9af2c525fd8e4f549f2cf64ca3d2a371960dab9beb9420a2c0eb20572e5fc250d17471b9101b892e54075e7def1", 0x34}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback=0x19, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 450.613312ms ago: executing program 5 (id=8770): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_per_queue_op={0x4b, 0x1, [0x80, 0x6579, 0x9, 0x400, 0xfffffffa, 0x80000000, 0x0, 0x0, 0xa8, 0x9, 0x5, 0x40, 0x4, 0x38, 0x800, 0x10001, 0x3, 0x7, 0x7fff, 0x97, 0x4, 0x8001, 0x4, 0x2, 0x7, 0x2, 0x380000, 0x6, 0xb, 0xb4, 0x6, 0x1, 0x1000, 0x1, 0x1, 0x32146399, 0x6, 0xfff, 0x3, 0xe, 0x3, 0x6, 0x9, 0x800, 0x5, 0xe, 0x9e3, 0xfffeffff, 0x7fffffff, 0x0, 0x1ec0, 0x2c22, 0x9, 0x6, 0x2, 0x6, 0xc20a, 0x5, 0x1, 0x26bd, 0x5, 0xe406, 0x4, 0x3, 0x2, 0x400, 0x7, 0xffffffff, 0x200007, 0x3d, 0xfffffffb, 0x1, 0x5, 0x7, 0x2, 0x10, 0xbee, 0x10000c7, 0x10, 0x5, 0xda, 0x9, 0x80, 0x6, 0xfffffffe, 0xe74a, 0x10, 0xffff8b55, 0x8, 0x893, 0x0, 0x5d, 0x4, 0x4, 0x6, 0x7, 0x4, 0x9, 0xffffffff, 0x5, 0xffff, 0x3, 0x200, 0x7ff, 0x3, 0x2, 0xffff7fff, 0x7, 0xda62, 0x5a0, 0xa9, 0x9, 0x3, 0x3, 0x6, 0x100, 0x1, 0x0, 0x9, 0x4, 0x8, 0x5, 0x7ff, 0x7, 0x9, 0x3, 0x7068, 0xfff]}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x400) r5 = socket$isdn_base(0x22, 0x3, 0x0) bind$inet(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) (async) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_per_queue_op={0x4b, 0x1, [0x80, 0x6579, 0x9, 0x400, 0xfffffffa, 0x80000000, 0x0, 0x0, 0xa8, 0x9, 0x5, 0x40, 0x4, 0x38, 0x800, 0x10001, 0x3, 0x7, 0x7fff, 0x97, 0x4, 0x8001, 0x4, 0x2, 0x7, 0x2, 0x380000, 0x6, 0xb, 0xb4, 0x6, 0x1, 0x1000, 0x1, 0x1, 0x32146399, 0x6, 0xfff, 0x3, 0xe, 0x3, 0x6, 0x9, 0x800, 0x5, 0xe, 0x9e3, 0xfffeffff, 0x7fffffff, 0x0, 0x1ec0, 0x2c22, 0x9, 0x6, 0x2, 0x6, 0xc20a, 0x5, 0x1, 0x26bd, 0x5, 0xe406, 0x4, 0x3, 0x2, 0x400, 0x7, 0xffffffff, 0x200007, 0x3d, 0xfffffffb, 0x1, 0x5, 0x7, 0x2, 0x10, 0xbee, 0x10000c7, 0x10, 0x5, 0xda, 0x9, 0x80, 0x6, 0xfffffffe, 0xe74a, 0x10, 0xffff8b55, 0x8, 0x893, 0x0, 0x5d, 0x4, 0x4, 0x6, 0x7, 0x4, 0x9, 0xffffffff, 0x5, 0xffff, 0x3, 0x200, 0x7ff, 0x3, 0x2, 0xffff7fff, 0x7, 0xda62, 0x5a0, 0xa9, 0x9, 0x3, 0x3, 0x6, 0x100, 0x1, 0x0, 0x9, 0x4, 0x8, 0x5, 0x7ff, 0x7, 0x9, 0x3, 0x7068, 0xfff]}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x400) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) bind$inet(r5, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) 366.52518ms ago: executing program 0 (id=8771): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FIONCLEX(r0, 0x5450) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r1, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r0, 0xd7735000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 244.759226ms ago: executing program 2 (id=8772): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x124, r2, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x108, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20f3c203}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3dd4fe0c}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1515bf08}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x394ed7f7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb90323c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39c09eee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f70c8bf}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23b389d1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a936966}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x124}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000030620000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="ddbe"], 0x54}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r4], 0x7c}}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x124, r2, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x108, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20f3c203}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3dd4fe0c}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1515bf08}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x394ed7f7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb90323c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39c09eee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f70c8bf}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23b389d1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a936966}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x124}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000030620000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="ddbe"], 0x54}}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r4], 0x7c}}, 0x20000000) (async) 120.170504ms ago: executing program 0 (id=8773): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r1, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0xffe0}}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) syz_emit_ethernet(0x7f, &(0x7f0000000180)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"20a0af87b114bef97f088af5c997e3fa5d72ef62b65e8252fb1992c04f88d28e17bfbc2318466f535d674524987f59a090720de9a2c19c20b9dbe0d99eb471d2b0e9273041"}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x150, 0x2, 0x1, 0x101, 0x0, 0x0, {0x7}, [@CTA_PROTOINFO={0x58, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x54, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x61aa}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xff84}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x9c}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x6dd7}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xf5b}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x200}]}}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc22}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x284}]}, @CTA_TUPLE_ORIG={0xb4, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x10}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x150}}, 0x5) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0x1}, 0x1c) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000140)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='ip6gre0\x00', 0x10) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0) r7 = accept4$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, &(0x7f00000004c0)=0x10, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000640)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4e23, 0x2, 0x4e21, 0x8, 0xa, 0x20, 0xa0, 0x6, r1, r8}, {0xfffffffffffffff7, 0x1, 0x8000000000000001, 0x4, 0x9, 0x2, 0x80, 0x2}, {0x1ff, 0x4, 0x3, 0x10001}, 0x101, 0x6e6bbd, 0x2, 0x0, 0x2}, {{@in6=@empty, 0x4d5, 0x32}, 0x2, @in6=@private0, 0x0, 0x0, 0x1, 0x10, 0x10000, 0x702}}, 0xe8) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats={0x1d, 0x2000000000000070}}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x800, 0x70bd2a, 0x25dfdbfc, {0x2, 0xc8, 0x0, 0xfd, r5}}, 0x18}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) 91.544667ms ago: executing program 4 (id=8774): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x14, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000140)) 0s ago: executing program 4 (id=8775): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000070}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x805) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x200040c0) sendmsg$IEEE802154_START_REQ(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x5}]}, 0x1c}}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000640)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000001ac0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000080}, 0xc, &(0x7f0000001a80)={&(0x7f0000000680)={0x13e0, r6, 0x0, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x160, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x3f, 0x5, "2087b29557c706ecd1aebc2566eeb0bc734f20f28bd7c27a2dbb8629cfd7ec168c3e5dac3dd069e014ac6f6c44fca449211b13fddbb10536bcd80f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4d, 0x4, "d65e07782eb304448ce1d73006c840cc95f8e4e8eebcbcff23cdcd13df89dd18abbcdc994b7a49c7f197c3e955f0f8a7ebf565358ed7de2c4806f4a83f939c9b2d9495b5e3b915f545"}, @ETHTOOL_A_BITSET_VALUE={0xc7, 0x4, "994f08079490cefb97394622958b83cd8e59ccea779e4ddbef4ff8d34b5e562b28376cbc1a970be3ec90f69d01a67ca87d303372969f257c5b6a7e1074aeb28b263313f1e4bb4204f9ed7cdb4fca87fb9ee994f5776f3c4ea4fc67763ef47c3bce8493173450796e970999dee37ad3ad8a28b597152b51a98206169779374702193047f27fc06bf2210cc9a60774dec67ee138a7612195cf37d1ae11d4ba9d36ea7bec14f6d54c274762fb81e41fc6bc493406a85a2fba6915ba9c8c23a3f5e6ca9a52"}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x121c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc4, 0x5, "bfc81647938b3008460c46bfc77f67f54a67908084b4f05813b610fc41a0d5c10d00e17ed90bfdba05645cead71dee1636db2aac1fd7eec8fdd13b22f8e2906a50681723f7d48967c602f431ecc73ef8d5da063111ad1091394b2b47245d5cacc32daf092b76720277b9d0846ac1e2b2f0d081ee998e9c4e7c91d4e99117513a7def4ccac09e096d00cbe98d83e1d30e51bfee4e3e1ef6899c6d31e3eaaae1b77857774d6cb4491d9112c915604cbafef5bf908e84e8e7c15edccfd50cc0b65c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '@/-(%.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-::.\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nbd\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7af}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%\\,/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x60000}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '`!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_MASK={0xa4, 0x5, "fca033e7692aecc311ff6bd638b85fd555e737193df427cb9c369d20b224541fb9706fb1897342aa3249d6b8fcb310129718a73422a116ead5e00531b1bd5767721d1d30cfc73f13fd55bdd9a5e0e899574fe4c3572ed1a0bbe9cf05283058e966a529a82b954c03ecc094fb466f1341810487c6edfc1c72a9f1c2ff4dd0da5ee4fdec3d699f7eda6fbdae69709424120dd3eae37a390d1cad6a3a7ba058ac98"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x13e0}, 0x1, 0x0, 0x0, 0x1}, 0x24008040) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000001c80)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b40)={0xc8, 0x0, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_LABELS_MASK={0x20, 0x17, [0x9, 0x9b, 0x7de70000, 0x1, 0x0, 0xfcc, 0x8]}, @CTA_ID={0x8}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xffff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4fa}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3d24}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_NAT_SRC={0x4}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1a}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xb}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40400c0}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001d40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000001e00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x34, r9, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x4e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000001e80), r5) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x24, r11, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xbd3}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000001fc0), r5) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x28, r12, 0x800, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x800) r13 = accept(r4, &(0x7f00000020c0)=@nfc, &(0x7f0000002140)=0x80) r14 = syz_genetlink_get_family_id$fou(&(0x7f00000021c0), r5) sendmsg$FOU_CMD_GET(r13, &(0x7f00000022c0)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x5c, r14, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002300)={'team0\x00', 0x20}) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f00000025c0)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002580)={&(0x7f0000002380)={0x1c8, 0x1, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x25, 0x6, "d772069aa114c871cc57f0a7eaacaae9b64ae9be7302df5fe82227106541357664"}, @NFTA_TABLE_USERDATA={0xab, 0x6, "42a750a3663e8dc5043dd18545d13df5831cfa58bd02e127e0970615f29a79eaa1fdefe9d00d02ff1b758ceac096979214a29e3f1d5edef2513060d6b068550f4d3d71916f30d37646479ad01c14b988fe673ae32f91951ebe5023dbb91240b6979aef3b33932c3d8394b3f384e7763b9867ec7792714ee34034859c2bc8e056109c841ff2059e5d96fd4af691c646efac74230753e72847c5c3cd65c3a69fd3e34bc354faec9f"}, @NFTA_TABLE_USERDATA={0xd1, 0x6, "be541c6f5d435180d9d444fb3875899c5b9197dd1d22f56ae624e09f7bc0f1e8eb6940b6ece362c9aff75fe103103c61e38cb817d3496224788eb4d258687a827d49c7778107f7b419e34c56db916d7a9e2c0eacf345ddd1afbf6b05b4d3ef6eb10695c41b1849bad3ef0a9abf289f0336471098b3639eb578d2b9a2a7a30ec389313448fe06e43278f7998612dfbe0a16e68844cac02bccc383d00560e069a3f5179668a6beb4e1ef763df5b582bb6eecd45e30ee3e5e4f277fd7854652782c6ffee0a758f2b2091f48173f8e"}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f00000026c0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x1c, r9, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x4) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r15, &(0x7f0000002d40)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002740)={0x58c, r9, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IE={0xa, 0x2a, [@chsw_timing={0x68, 0x4, {0x5, 0x7}}]}, @NL80211_ATTR_IE={0x104, 0x2a, [@challenge={0x10, 0x1, 0x22}, @tim={0x5, 0x8e, {0x68, 0xd7, 0xcb, "7afb54f96370f15889ac413f760817dd9b39edf11610fbd09029ffb4083bbda3294eae887c47db25e29e13a6d7e46a10975eb93d2485d7c39e7a640f0b9b8058b5be0a084eb3065004998b0f689012e5439e7c50b98393c84d6eafda6fc96be505df07968435cca2d758175ddfc1b1104ccec1c8cc3a02b55bcd99dec660272f3f165e78de8078ddaca45c"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x97, 0xb3, 0x8}}, @fast_bss_trans={0x37, 0x5d, {0x6, 0x2, "8e03a31c95a8169216382b517abb481a", "e0c63b77171ef232c69b3a15bf33b62e74d583cd57c5a4bc2ffcd08e219e28b7", "fccd0a2ce79dcd7168861c14b10080ca77abfbf53201b120ae2dfa0dbe03757e", [{0x4, 0x2, 's8'}, {0x1, 0x5, "aabe81a9fd"}]}}, @mesh_id={0x72, 0x6}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xa6, 0xfc, "c1cf83e758c56e048ca6e60e6ad72aa7eacaf00102ae55baee7d82535b5385499036db712df7ddace4f48e62e8b38e40165937bccaeb4f9a2aebbaff77ce228708fafdf6c93bcf0bd84d579f3daa978e82606034e3f9621f470ce99763ed188445c9268fdc1316f3a0e2d825ee2f3ba625c66638490b7960f692965239f42e2963f96500813ae60de243f75d7b45b0b8a0df87ec1945fbd9516daa78931ca4a0929f"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "699342d0beb969d842ac97e275e23a1d"}, @NL80211_ATTR_FILS_ERP_REALM={0x2c, 0xfa, "f5426b1cebba32431307fb4f8640490dc8f6a09c4ec87f34c38ee1e388c96a2cc4f48df2e8903ad6"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}], @NL80211_ATTR_IE={0xa, 0x2a, [@chsw_timing={0x68, 0x4, {0x7, 0x7}}]}, @NL80211_ATTR_IE={0x10c, 0x2a, [@fast_bss_trans={0x37, 0xa5, {0x8, 0x4, "8a0277a7ed2406546584c2c476b4e1d6", "0070e1b85fb4794ae614a2fa8b7f94014639590a312f6a9168ce056ea1cfa25e", "b19324ade1fc4b6bba14bab4800adf2a3148ac7e4582ab31bbeb6b46148f029f", [{0x3, 0xa, "4da76e8998ddfa883197"}, {0x1, 0x10, "4d8b6965e289038e0c284401452da8bd"}, {0x4, 0x1e, "b99c0ebb5b0762c8ecad49b4e67ffe8eac3a43565a7dcccfd2b616b01e34"}, {0x1, 0x13, "88cb17695a3bb4c36a36b28ceac63b21a3b96c"}]}}, @mesh_chsw={0x76, 0x6, {0x20, 0x2, 0x3b, 0x8000}}, @preq={0x82, 0x57, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0x9, 0x8, 0x40, @device_a, 0x2, @value=@broadcast, 0x3b, 0x9, 0x5, [{{0x1, 0x0, 0x1}, @device_b, 0x1}, {{0x1}, @device_a, 0x39e}, {{0x0, 0x0, 0x1}, @device_b, 0x800}, {{0x1}, @device_a, 0xffffffff}, {{0x1, 0x0, 0x1}, @broadcast, 0x2}]}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x68, 0xfa, "39e2a02cb819cfb86bb52874d7ab12d2076417c397d6a7c22530cdd89db9f7e24378144f2fc6940c5ea2a8661148010759d9b853e989c2292091421705c70a78439d316edec296f5619229c712d525abeefd1ff65ca161cc39d1d690c951ce4b16a32ae0"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "531e98035cb4f7596a27"}, @NL80211_ATTR_FILS_ERP_REALM={0x102, 0xfa, "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"}, @NL80211_ATTR_FILS_ERP_RRK={0x56, 0xfc, "a06b6f5260cdefc6d6279a447ededa936ec795face74f4179db3e43dbbbd95986753dd87d9dca26d370bbbf9cb1f82c1efb58140622a6b2e3acb6f6abc71188d1019dbe004ae93cf115f6cf369e2eb8e5e8b"}, @NL80211_ATTR_FILS_ERP_REALM={0x50, 0xfa, "992f86d24fef78f3b06616bc656bb715012dbec823a4d649f2023c3b09bc0295ec40457af2013336cea825a7c70658808a58f9ed9da5d6a8030198c95f714b8ca88e6e8c3392c907b9953392"}, @NL80211_ATTR_FILS_ERP_RRK={0x35, 0xfc, "a2824c02b69db0b62c5e5238ce54e3cc82a33e1f694ca37ccf591beade08117d29ca313b6359cd42b510a9c02219bf410d"}]]}, 0x58c}}, 0x20000) kernel console output (not intermixed with test programs): 17437][T30490] bridge_slave_1: left promiscuous mode [ 718.445763][T30490] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.502630][T30490] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 718.532977][T30497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.745913][T30504] netlink: 288 bytes leftover after parsing attributes in process `syz.0.6628'. [ 718.902323][T30521] gretap2: entered promiscuous mode [ 718.907595][T30521] gretap2: entered allmulticast mode [ 719.057701][T30528] netlink: 'syz.3.6638': attribute type 2 has an invalid length. [ 719.067570][T30528] x_tables: unsorted entry at hook 3 [ 719.087937][T30537] netlink: 'syz.1.6639': attribute type 1 has an invalid length. [ 719.206241][T30543] syzkaller0: entered promiscuous mode [ 719.213792][T30543] syzkaller0: entered allmulticast mode [ 719.299525][T30550] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 719.386438][T30542] netlink: 'syz.3.6642': attribute type 12 has an invalid length. [ 719.433882][T30542] bond5: option primary_reselect: invalid value (255) [ 719.452189][T30542] bond5 (unregistering): Released all slaves [ 719.702488][T30561] tipc: New replicast peer: 255.255.255.255 [ 719.710533][T30561] tipc: Enabled bearer , priority 10 [ 720.432552][T30601] bond1: option lp_interval: invalid value (0) [ 720.483503][T30601] bond1: option lp_interval: allowed values 1 - 2147483647 [ 720.534757][T30601] bond1 (unregistering): Released all slaves [ 721.350507][T30659] netlink: 'syz.2.6673': attribute type 1 has an invalid length. [ 721.371429][T30658] netlink: 'syz.2.6673': attribute type 1 has an invalid length. [ 721.502898][T30674] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 721.726066][T30680] netlink: 'syz.3.6677': attribute type 21 has an invalid length. [ 721.750019][T30680] __nla_validate_parse: 11 callbacks suppressed [ 721.750038][T30680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6677'. [ 721.797220][T30687] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6679'. [ 722.358008][T30713] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6686'. [ 722.394694][ T7800] IPVS: starting estimator thread 0... [ 722.412341][T30717] netlink: 248 bytes leftover after parsing attributes in process `syz.2.6688'. [ 722.446288][T30720] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6689'. [ 722.498254][T30721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6689'. [ 722.522772][T30718] IPVS: using max 29 ests per chain, 69600 per kthread [ 722.548787][T30720] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6689'. [ 722.752608][T30740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6695'. [ 722.765146][T30741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6696'. [ 722.774495][T30741] chnl_net:caif_netlink_parms(): no params data found [ 722.805576][T30743] netlink: 'syz.3.6697': attribute type 4 has an invalid length. [ 723.047948][T30754] netlink: 'syz.2.6702': attribute type 8 has an invalid length. [ 723.064426][T30754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6702'. [ 723.161696][T30754] bond0: entered promiscuous mode [ 723.166987][T30754] bond_slave_0: entered promiscuous mode [ 723.192106][T30754] bond_slave_1: entered promiscuous mode [ 723.202390][T30754] bridge_slave_1: entered promiscuous mode [ 723.220379][T30754] gretap0: entered promiscuous mode [ 723.230412][T30754] bond0: left promiscuous mode [ 723.235218][T30754] bond_slave_0: left promiscuous mode [ 723.263176][T30754] bond_slave_1: left promiscuous mode [ 723.268770][T30754] bridge_slave_1: left promiscuous mode [ 723.292044][T30754] gretap0: left promiscuous mode [ 724.209359][T30834] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 724.219217][T30834] bond2 (unregistering): Released all slaves [ 724.390939][T30845] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 724.410205][T30845] syzkaller0: entered promiscuous mode [ 724.415719][T30845] syzkaller0: entered allmulticast mode [ 725.329912][T30859] netlink: 'syz.1.6727': attribute type 13 has an invalid length. [ 725.681726][ T1168] block nbd1: Possible stuck request ffff888026ac8000: control (read@0,1024B). Runtime 60 seconds [ 725.692636][ T1168] block nbd1: Possible stuck request ffff888026ac8200: control (read@1024,1024B). Runtime 60 seconds [ 725.704371][ T1168] block nbd1: Possible stuck request ffff888026ac8400: control (read@2048,1024B). Runtime 60 seconds [ 725.717388][ T1168] block nbd1: Possible stuck request ffff888026ac8600: control (read@3072,1024B). Runtime 60 seconds [ 727.061465][T30826] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 727.240308][T30878] __nla_validate_parse: 3 callbacks suppressed [ 727.240339][T30878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6732'. [ 727.291723][T30878] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6732'. [ 727.301717][T30874] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6730'. [ 727.335788][T30886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6734'. [ 727.440899][T30881] tipc: Enabled bearer , priority 0 [ 727.480280][T30880] tipc: Disabling bearer [ 727.550810][T30902] netlink: 'syz.3.6738': attribute type 1 has an invalid length. [ 727.569845][T30902] netlink: 'syz.3.6738': attribute type 2 has an invalid length. [ 727.604733][T30902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.632942][T30902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.654076][T30902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.672118][T30902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.712237][T30914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6742'. [ 727.756843][T30911] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 727.762223][T30914] netlink: 'syz.1.6742': attribute type 7 has an invalid length. [ 727.813182][T30911] bond2 (unregistering): Released all slaves [ 727.851673][T30914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6742'. [ 727.862380][T30914] netlink: 'syz.1.6742': attribute type 7 has an invalid length. [ 728.027355][T30928] IPv6: addrconf: prefix option has invalid lifetime [ 728.176330][T30946] xt_hashlimit: size too large, truncated to 1048576 [ 728.183638][T30947] netlink: 'syz.4.6749': attribute type 1 has an invalid length. [ 728.419982][T30958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6753'. [ 728.661271][T30967] vlan2: entered promiscuous mode [ 728.666732][T30967] vlan2: entered allmulticast mode [ 728.841310][T30973] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6757'. [ 728.874502][T30975] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6757'. [ 728.972591][T30981] IPVS: length: 8 != 1152 [ 729.219816][T30992] sctp: [Deprecated]: syz.3.6762 (pid 30992) Use of int in maxseg socket option. [ 729.219816][T30992] Use struct sctp_assoc_value instead [ 729.737881][T31018] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6768'. [ 729.814685][T31025] team_slave_0: entered allmulticast mode [ 729.850286][T31026] team_slave_0: entered promiscuous mode [ 729.944762][T31036] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 730.376285][T31067] tipc: Enabled bearer , priority 0 [ 730.440056][T31072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.525614][T31067] syzkaller0: entered promiscuous mode [ 730.546024][T31067] syzkaller0: entered allmulticast mode [ 730.620772][T31067] tipc: Resetting bearer [ 730.639951][T31065] tipc: Resetting bearer [ 730.663553][T31080] netlink: 'syz.1.6786': attribute type 21 has an invalid length. [ 730.689920][T28903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.698543][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.763562][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.320815][T31065] tipc: Disabling bearer [ 732.360059][T31080] __nla_validate_parse: 1 callbacks suppressed [ 732.360071][T31080] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6786'. [ 732.406377][T31099] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 732.699406][T31123] IPv6: sit1: Disabled Multicast RS [ 732.800064][ T7802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.811919][T28575] Bluetooth: hci3: command 0x0405 tx timeout [ 732.905594][T31132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6801'. [ 732.935023][T31138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6800'. [ 732.956785][T31132] netlink: 'syz.2.6801': attribute type 10 has an invalid length. [ 732.966026][T31138] netlink: 272 bytes leftover after parsing attributes in process `syz.3.6800'. [ 732.982966][T31132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6801'. [ 733.270775][T31154] netlink: 'syz.4.6806': attribute type 4 has an invalid length. [ 733.509763][T31172] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6813'. [ 733.565260][T31178] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6813'. [ 733.760563][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.840220][ T7802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.971392][T31205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6823'. [ 734.150716][T31216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6825'. [ 734.164761][T31218] netlink: 'syz.1.6826': attribute type 83 has an invalid length. [ 734.263113][T31216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.314162][T31216] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6825'. [ 734.883479][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.022558][T31281] lo: Caught tx_queue_len zero misconfig [ 735.177407][T31275] netlink: 'syz.2.6837': attribute type 1 has an invalid length. [ 735.381096][T31301] syzkaller0: entered promiscuous mode [ 735.390481][T31301] syzkaller0: entered allmulticast mode [ 737.977642][T31283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 737.989596][T31298] __nla_validate_parse: 5 callbacks suppressed [ 738.000580][T31298] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6840'. [ 738.191014][T31338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6847'. [ 738.213083][T31338] netlink: 'syz.3.6847': attribute type 1 has an invalid length. [ 738.243804][T31341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6848'. [ 738.362188][T31344] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6849'. [ 738.381485][T31347] netlink: 'syz.0.6850': attribute type 1 has an invalid length. [ 738.411753][T31347] openvswitch: netlink: Missing key (keys=40, expected=100) [ 738.673061][T31369] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6857'. [ 738.681298][T31374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 738.860494][T31390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6861'. [ 738.897729][T31390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6861'. [ 739.019081][T31390] netlink: 'syz.2.6861': attribute type 29 has an invalid length. [ 739.035242][T31396] netlink: 'syz.3.6863': attribute type 8 has an invalid length. [ 739.046746][T31396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6863'. [ 739.074016][T31396] bond0: entered promiscuous mode [ 739.079208][T31396] bond_slave_0: entered promiscuous mode [ 739.085507][T31396] bond_slave_1: entered promiscuous mode [ 739.097217][T31396] gretap0: entered promiscuous mode [ 739.105042][T31396] erspan0: entered promiscuous mode [ 739.115392][T31396] hsr1: entered promiscuous mode [ 739.181198][T31405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6865'. [ 739.257050][T19273] nci: nci_ntf_packet: unknown ntf opcode 0x804 [ 739.308669][T31399] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 739.505854][T31416] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6868'. [ 739.534665][T31418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 739.650917][T31424] openvswitch: netlink: IP tunnel dst address not specified [ 739.768559][T31431] netlink: 'syz.0.6871': attribute type 58 has an invalid length. [ 740.098110][T31447] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 740.108088][T31447] bond2: option packets_per_slave: allowed values 0 - 65535 [ 740.120232][T31447] bond2 (unregistering): Released all slaves [ 740.205441][T31453] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 740.214598][T31453] bond2: option packets_per_slave: allowed values 0 - 65535 [ 740.226924][T31453] bond2 (unregistering): Released all slaves [ 740.483960][T31475] netlink: 'syz.2.6883': attribute type 10 has an invalid length. [ 740.871337][T31498] unsupported nla_type 33542 [ 742.180746][T31538] netlink: 'syz.3.6891': attribute type 13 has an invalid length. [ 742.204603][T31538] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 743.652828][T31485] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 743.763586][T31541] __nla_validate_parse: 4 callbacks suppressed [ 743.763605][T31541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6892'. [ 743.867867][T31546] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 743.885662][T31546] bond1: (slave lo): Enslaving as an active interface with an up link [ 743.896464][T31546] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 743.994847][T31545] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 744.154782][T31569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6899'. [ 744.175170][T31568] vcan0: entered allmulticast mode [ 744.267206][T31570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6901'. [ 744.287142][T31570] vlan2: entered allmulticast mode [ 744.300577][T31570] mac80211_hwsim hwsim76 wlan0: entered allmulticast mode [ 744.311662][T31576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6903'. [ 744.375232][T31587] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.390239][T31587] bridge0: entered allmulticast mode [ 744.444005][T31591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6905'. [ 744.486649][T31596] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 744.725812][T31604] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 744.941812][T31621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6915'. [ 745.146052][T31630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6920'. [ 745.185359][T31630] vcan0 (unregistering): left allmulticast mode [ 745.235216][T31639] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6923'. [ 745.428965][T31653] netlink: 'syz.0.6927': attribute type 1 has an invalid length. [ 745.494114][T31653] 8021q: adding VLAN 0 to HW filter on device bond2 [ 745.509141][T31657] bond2: entered allmulticast mode [ 745.573127][T31662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6931'. [ 745.586392][T31660] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 745.596056][T31660] syzkaller0: entered promiscuous mode [ 745.603187][T31660] syzkaller0: entered allmulticast mode [ 745.615623][T31664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6930'. [ 745.838023][T31672] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 745.838409][T31676] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 746.167831][T31692] netlink: 'syz.3.6937': attribute type 11 has an invalid length. [ 746.177547][T31691] netlink: 'syz.3.6937': attribute type 11 has an invalid length. [ 746.232625][T31694] netlink: 'syz.3.6938': attribute type 1 has an invalid length. [ 746.246265][T31694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 746.306226][T31696] netlink: 'syz.3.6939': attribute type 32 has an invalid length. [ 747.216188][T31699] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 747.254091][T31719] tap0: tun_chr_ioctl cmd 1074025678 [ 747.259522][T31719] tap0: group set to 0 [ 747.723788][T31782] x_tables: duplicate underflow at hook 3 [ 749.777343][T31728] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 749.943958][ T5942] IPVS: starting estimator thread 0... [ 750.039943][T31794] IPVS: using max 27 ests per chain, 64800 per kthread [ 750.076463][T31801] x_tables: duplicate underflow at hook 2 [ 750.152390][T31811] __nla_validate_parse: 7 callbacks suppressed [ 750.152410][T31811] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.6961'. [ 750.191159][T31811] syzkaller0: entered promiscuous mode [ 750.204542][T31811] syzkaller0: entered allmulticast mode [ 750.873864][T31863] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6975'. [ 750.946146][T31864] netlink: 'syz.0.6975': attribute type 4 has an invalid length. [ 750.946538][T31851] "syz.2.6973" (31851) uses obsolete ecb(arc4) skcipher [ 750.955691][T31864] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6975'. [ 751.012488][T31863] tc_dump_action: action bad kind [ 751.086667][T31869] netlink: 'syz.2.6977': attribute type 12 has an invalid length. [ 751.525561][T31893] netlink: 'syz.4.6983': attribute type 1 has an invalid length. [ 751.534716][T31900] netlink: 'syz.2.6980': attribute type 4 has an invalid length. [ 752.227613][T31937] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6995'. [ 752.457552][T31950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6999'. [ 752.754751][T31966] netlink: 'syz.3.7003': attribute type 1 has an invalid length. [ 752.811237][T31966] 8021q: adding VLAN 0 to HW filter on device bond7 [ 752.873057][T31966] bond7: (slave veth5): Enslaving as an active interface with a down link [ 753.116941][T31984] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 753.138715][T31988] netlink: 'syz.3.7009': attribute type 1 has an invalid length. [ 753.161302][T31988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 753.174202][T31984] bond2: (slave lo): Enslaving as an active interface with an up link [ 753.185495][T31990] netlink: 'syz.0.7010': attribute type 5 has an invalid length. [ 753.190415][T31984] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 753.277526][T31997] netlink: 'syz.3.7012': attribute type 10 has an invalid length. [ 753.297720][T31997] mac80211_hwsim hwsim79 wlan1: entered promiscuous mode [ 753.307884][T31997] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 753.395377][T32004] netlink: 'syz.0.7013': attribute type 4 has an invalid length. [ 753.418382][T32004] netlink: 532 bytes leftover after parsing attributes in process `syz.0.7013'. [ 753.418494][T32005] netlink: 532 bytes leftover after parsing attributes in process `syz.0.7013'. [ 753.429880][T32004] openvswitch: netlink: Flow key attr not present in new flow. [ 753.459809][T32005] openvswitch: netlink: Flow key attr not present in new flow. [ 753.675899][T32017] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7019'. [ 753.695552][T32019] openvswitch: netlink: Unknown key attributes 2 [ 753.782415][T32024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7020'. [ 753.887213][T27595] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 753.897710][T27595] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 753.907867][T27595] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 753.915999][T27595] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 753.925709][T27595] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 754.212185][T19244] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x18 [ 754.241755][T32028] chnl_net:caif_netlink_parms(): no params data found [ 754.492874][T32066] netlink: 'syz.2.7029': attribute type 2 has an invalid length. [ 754.526393][T32068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7030'. [ 754.700673][T32028] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.707955][T32028] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.910281][T32028] bridge_slave_0: entered allmulticast mode [ 754.929422][T32028] bridge_slave_0: entered promiscuous mode [ 754.948324][T32028] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.966008][T32028] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.996669][T32028] bridge_slave_1: entered allmulticast mode [ 755.021163][T32028] bridge_slave_1: entered promiscuous mode [ 755.130906][T32028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.145136][T32028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.186023][T32028] team0: Port device team_slave_0 added [ 755.203240][T32028] team0: Port device team_slave_1 added [ 755.269910][T32028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.276908][T32028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.309909][T32028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.324404][T32028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.333364][T32028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.399771][T32028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.485202][T32028] hsr_slave_0: entered promiscuous mode [ 755.492818][T32028] hsr_slave_1: entered promiscuous mode [ 755.499272][T32028] debugfs: 'hsr0' already exists in 'hsr' [ 755.505569][T32028] Cannot create hsr debugfs directory [ 755.601950][T32103] openvswitch: netlink: Flow key attr not present in new flow. [ 755.762032][ T1168] block nbd1: Possible stuck request ffff888026ac8000: control (read@0,1024B). Runtime 90 seconds [ 755.772861][ T1168] block nbd1: Possible stuck request ffff888026ac8200: control (read@1024,1024B). Runtime 90 seconds [ 755.783809][ T1168] block nbd1: Possible stuck request ffff888026ac8400: control (read@2048,1024B). Runtime 90 seconds [ 755.795045][ T1168] block nbd1: Possible stuck request ffff888026ac8600: control (read@3072,1024B). Runtime 90 seconds [ 755.851446][T32113] __nla_validate_parse: 2 callbacks suppressed [ 755.851463][T32113] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7046'. [ 755.892407][T32113] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7046'. [ 755.934334][T32028] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 755.956213][T32028] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 755.980257][T32028] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 756.003986][T32028] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 756.014706][T27595] Bluetooth: hci4: command tx timeout [ 756.075346][T32123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7049'. [ 756.085866][T32123] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 756.110314][T32123] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 756.178949][T32134] validate_nla: 2 callbacks suppressed [ 756.178968][T32134] netlink: 'syz.4.7052': attribute type 1 has an invalid length. [ 756.246877][T32140] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7054'. [ 756.259023][T32134] bond2: entered promiscuous mode [ 756.267705][T32134] bond2: entered allmulticast mode [ 756.273480][T32134] 8021q: adding VLAN 0 to HW filter on device bond2 [ 756.352785][T32028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.391967][T32028] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.414586][ T7337] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.421807][ T7337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.436667][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.443919][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.525872][T32028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 757.007884][T32166] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 757.020895][T32170] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 757.049183][T32028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.348623][T32196] netlink: 'syz.0.7069': attribute type 1 has an invalid length. [ 757.393010][T32196] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 757.403686][T32196] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 757.416048][T32196] bond3: (slave ip6gre1): making interface the new active one [ 757.424525][T32196] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 757.517070][T32201] netlink: 'syz.3.7070': attribute type 10 has an invalid length. [ 757.612836][T32028] veth0_vlan: entered promiscuous mode [ 757.640771][T32028] veth1_vlan: entered promiscuous mode [ 757.690228][T32208] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7073'. [ 757.695877][T32206] syzkaller0: entered promiscuous mode [ 757.707512][T32206] syzkaller0: entered allmulticast mode [ 757.718060][T32028] veth0_macvtap: entered promiscuous mode [ 757.750377][T32028] veth1_macvtap: entered promiscuous mode [ 757.785189][T32028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 757.809161][T32028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 757.828857][T32210] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7074'. [ 757.853765][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.865749][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.883680][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.895357][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.042419][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.075195][T32217] ipt_rpfilter: unknown options [ 758.081304][T27595] Bluetooth: hci4: command tx timeout [ 758.081309][T32217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7076'. [ 758.098254][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.133900][T19244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.143391][T19244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.287637][T32223] lo: Caught tx_queue_len zero misconfig [ 758.346476][T32229] netlink: 'syz.5.7017': attribute type 15 has an invalid length. [ 758.378098][T32223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.393152][T32235] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 758.432865][T32235] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 758.537603][T32243] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.7083'. [ 758.548265][T32242] xt_hashlimit: size too large, truncated to 1048576 [ 758.569426][T32244] xt_hashlimit: size too large, truncated to 1048576 [ 758.576965][T32243] openvswitch: netlink: Missing key (keys=40, expected=100) [ 758.618462][T32246] netlink: 'syz.2.7085': attribute type 1 has an invalid length. [ 758.650186][T32090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.761106][T32246] 8021q: adding VLAN 0 to HW filter on device bond3 [ 758.804595][T32253] bond3: entered allmulticast mode [ 758.838803][T32258] netlink: 80 bytes leftover after parsing attributes in process `syz.5.7087'. [ 758.881934][ T7806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.048574][T32262] netlink: 'syz.0.7089': attribute type 3 has an invalid length. [ 759.098147][T32266] vlan2: entered promiscuous mode [ 759.125075][T32266] gretap0: entered promiscuous mode [ 759.266520][T32275] tipc: Failed to remove unknown binding: 66,1,1/4189575834:3160848023/3160848025 [ 759.558292][T32300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7100'. [ 759.747475][T32310] x_tables: duplicate underflow at hook 1 [ 759.840514][T32312] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 759.920403][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.161253][T27595] Bluetooth: hci4: command tx timeout [ 760.521477][T32372] netlink: 'syz.3.7121': attribute type 2 has an invalid length. [ 760.784724][T32395] x_tables: unsorted underflow at hook 4 [ 760.801384][T32398] Cannot find set identified by id 65534 to match [ 760.856210][T32395] openvswitch: netlink: Flow key attr not present in new flow. [ 760.959963][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.058169][T32407] tipc: Started in network mode [ 761.064014][T32409] __nla_validate_parse: 10 callbacks suppressed [ 761.064033][T32409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7130'. [ 761.087066][T32407] tipc: Node identity 8e4517336d93, cluster identity 4711 [ 761.097689][T32411] netlink: 'syz.5.7131': attribute type 1 has an invalid length. [ 761.106841][T32407] tipc: Enabled bearer , priority 0 [ 761.134105][T32407] syzkaller0: entered promiscuous mode [ 761.139968][T32407] syzkaller0: entered allmulticast mode [ 761.156617][T32411] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7131'. [ 761.170090][T32411] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7131'. [ 761.179487][T32411] 8021q: VLANs not supported on wg2 [ 761.274571][T32419] tipc: Resetting bearer [ 761.311760][T32406] tipc: Resetting bearer [ 761.352338][T32406] tipc: Disabling bearer [ 761.416570][T32426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7134'. [ 761.636286][T32440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 761.685918][T32090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.001053][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.240183][T27595] Bluetooth: hci4: command tx timeout [ 762.293502][T32454] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7146'. [ 762.303900][T32454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7146'. [ 762.662985][T32461] IPVS: set_ctl: invalid protocol: 24930 100.118.0.0:20002 [ 762.703698][T32466] netlink: 'syz.4.7148': attribute type 2 has an invalid length. [ 762.751844][T32466] 9: entered promiscuous mode [ 762.762301][T32468] netlink: 'syz.5.7150': attribute type 1 has an invalid length. [ 762.782251][T32468] netlink: 'syz.5.7150': attribute type 2 has an invalid length. [ 762.848142][T32472] IPVS: length: 145 != 24 [ 763.002594][T32479] xt_nat: multiple ranges no longer supported [ 763.033341][T32480] netlink: 'syz.3.7153': attribute type 10 has an invalid length. [ 763.070518][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.084910][T32480] bridge_slave_1: left allmulticast mode [ 763.092804][T32482] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.7153'. [ 763.133195][T32484] x_tables: duplicate underflow at hook 1 [ 763.139194][T32480] bridge_slave_1: left promiscuous mode [ 763.156879][T32480] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.220564][T32480] bridge_slave_1: entered promiscuous mode [ 763.246783][T32480] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 763.325301][T32489] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7158'. [ 763.544649][T32497] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7158'. [ 763.912211][T32532] netlink: 'syz.0.7169': attribute type 7 has an invalid length. [ 763.922413][T32532] net_ratelimit: 1 callbacks suppressed [ 763.922430][T32532] openvswitch: netlink: Flow actions attr not present in new flow. [ 763.970275][T32532] syzkaller1: entered promiscuous mode [ 763.975765][T32532] syzkaller1: entered allmulticast mode [ 764.081296][ T7806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.115952][T32489] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 764.492424][T32556] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 764.505982][T32563] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7175'. [ 764.658276][T32556] delete_channel: no stack [ 764.723437][T32090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.802126][T32576] netlink: 'syz.5.7180': attribute type 17 has an invalid length. [ 764.821124][T32576] erspan0: entered promiscuous mode [ 764.845822][T32576] erspan0: left promiscuous mode [ 765.001867][T32597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.119985][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.361402][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.160254][ T7806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.199977][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.746049][T32572] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 767.758919][T32605] __nla_validate_parse: 3 callbacks suppressed [ 767.758938][T32605] netlink: 256 bytes leftover after parsing attributes in process `syz.5.7186'. [ 767.790086][T32090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.927442][T32614] netlink: 'syz.4.7187': attribute type 4 has an invalid length. [ 768.060813][T32614] netlink: 'syz.4.7187': attribute type 4 has an invalid length. [ 768.085909][T32614] netlink: 'syz.4.7187': attribute type 4 has an invalid length. [ 768.111559][T32614] netlink: 'syz.4.7187': attribute type 4 has an invalid length. [ 768.133193][T32614] netlink: 'syz.4.7187': attribute type 4 has an invalid length. [ 768.156656][T32614] netlink: 'syz.4.7187': attribute type 4 has an invalid length. [ 768.199839][T32614] netlink: 'syz.4.7187': attribute type 4 has an invalid length. [ 768.216158][T32614] netlink: 'syz.4.7187': attribute type 4 has an invalid length. [ 768.224680][T32614] netlink: 'syz.4.7187': attribute type 4 has an invalid length. [ 768.236854][T32614] netlink: 'syz.4.7187': attribute type 4 has an invalid length. [ 768.242920][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.356692][T32642] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7193'. [ 768.444498][T32643] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7195'. [ 768.684737][T32661] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7201'. [ 769.020320][T32680] bond4: option min_links: invalid value (18446744073709551614) [ 769.031092][T32680] bond4: option min_links: allowed values 0 - 2147483647 [ 769.039304][T32673] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7206'. [ 769.059387][T32680] bond4 (unregistering): Released all slaves [ 769.192904][T32687] syzkaller1: entered promiscuous mode [ 769.207057][T32687] syzkaller1: entered allmulticast mode [ 769.257249][T32691] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7210'. [ 769.289358][T32673] net_ratelimit: 1 callbacks suppressed [ 769.289373][T32673] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 769.311823][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.553180][T32708] ipt_REJECT: TCP_RESET invalid for non-tcp [ 769.566620][T32706] ipt_REJECT: TCP_RESET invalid for non-tcp [ 769.608349][T32710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7216'. [ 769.700493][T32710] bond4: option resend_igmp: invalid value (32767) [ 769.715766][T32710] bond4: option resend_igmp: allowed values 0 - 255 [ 769.740100][T32716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7218'. [ 769.754964][T32710] bond4 (unregistering): Released all slaves [ 769.812503][T32714] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 769.825699][T32714] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 769.861646][T32714] gretap1: entered promiscuous mode [ 769.880135][T32714] gretap1: entered allmulticast mode [ 769.911308][T32723] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7220'. [ 769.999848][T28575] Bluetooth: hci0: command 0x0406 tx timeout [ 770.287132][T32733] syzkaller0: entered promiscuous mode [ 770.307666][T32733] syzkaller0: entered allmulticast mode [ 770.321885][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.367625][T32755] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7228'. [ 770.531762][T32767] sctp: [Deprecated]: syz.2.7232 (pid 32767) Use of struct sctp_assoc_value in delayed_ack socket option. [ 770.531762][T32767] Use struct sctp_sack_info instead [ 770.551427][ T300] sctp: [Deprecated]: syz.2.7232 (pid 300) Use of struct sctp_assoc_value in delayed_ack socket option. [ 770.551427][ T300] Use struct sctp_sack_info instead [ 770.803016][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.362082][ T7806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.305310][ T322] bridge0: left allmulticast mode [ 772.315303][ T322] bridge0: entered promiscuous mode [ 772.342039][ T322] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 772.403651][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.599865][ T349] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 772.979580][ T362] syzkaller0: entered promiscuous mode [ 773.065299][ T362] syzkaller0: entered allmulticast mode [ 773.092175][ T365] __nla_validate_parse: 2 callbacks suppressed [ 773.092193][ T365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7250'. [ 773.138326][ T363] tipc: Enabled bearer , priority 0 [ 773.156427][ T368] gre0: Caught tx_queue_len zero misconfig [ 773.171382][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.185376][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.196545][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.276817][ T360] tipc: Resetting bearer [ 773.325973][ T360] tipc: Disabling bearer [ 773.387090][ T376] tipc: Invalid UDP bearer configuration [ 773.387138][ T376] tipc: Enabling of bearer rejected, failed to enable media [ 773.751692][ T398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7260'. [ 773.849146][ T406] validate_nla: 31 callbacks suppressed [ 773.849167][ T406] netlink: 'syz.4.7262': attribute type 1 has an invalid length. [ 773.970779][ T406] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 774.077760][ T415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7264'. [ 774.124859][ T415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7264'. [ 774.480186][ T5806] net_ratelimit: 259 callbacks suppressed [ 774.480207][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.595181][ T433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.731914][ T440] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7273'. [ 774.833348][ T444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.842250][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.898675][ T444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.939994][ T444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.962155][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.971236][ T444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.994457][ T445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.010654][ T445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.025672][ T450] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7276'. [ 775.036699][ T450] tipc: Started in network mode [ 775.047445][ T450] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 775.056542][ T450] tipc: Enabling of bearer rejected, failed to enable media [ 775.141301][ T454] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 775.240267][ T428] netlink: 'syz.4.7270': attribute type 39 has an invalid length. [ 775.368764][ T466] vlan2: entered promiscuous mode [ 775.378560][ T466] bridge0: entered promiscuous mode [ 775.585545][ T479] tipc: Enabled bearer , priority 0 [ 775.592977][ T480] tipc: Enabling of bearer rejected, already enabled [ 775.604611][ T479] syzkaller0: entered promiscuous mode [ 775.619208][ T481] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7284'. [ 775.630009][ T479] syzkaller0: entered allmulticast mode [ 775.637329][ T481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7284'. [ 775.683683][ T479] tipc: Resetting bearer [ 775.779055][ T479] tipc: Disabling bearer [ 776.152404][ T501] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.7292'. [ 776.478030][ T516] syzkaller0: entered promiscuous mode [ 776.493966][ T516] syzkaller0: entered allmulticast mode [ 776.550800][ T516] netlink: 'syz.0.7297': attribute type 1 has an invalid length. [ 776.558725][ T516] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7297'. [ 776.767190][ T540] syzkaller0: entered promiscuous mode [ 776.774711][ T540] syzkaller0: entered allmulticast mode [ 777.460149][ T582] lo: entered promiscuous mode [ 777.482339][ T583] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 777.485647][ T582] netlink: 'syz.2.7319': attribute type 2 has an invalid length. [ 778.010522][ T619] netlink: 'syz.3.7334': attribute type 11 has an invalid length. [ 778.101921][ T623] tipc: Started in network mode [ 778.106978][ T623] tipc: Node identity d67553d15ccb, cluster identity 4711 [ 778.135993][ T623] tipc: Enabled bearer , priority 0 [ 778.238601][ T634] netlink: 'syz.4.7338': attribute type 5 has an invalid length. [ 778.257890][ T634] __nla_validate_parse: 11 callbacks suppressed [ 778.257909][ T634] netlink: 140 bytes leftover after parsing attributes in process `syz.4.7338'. [ 778.340717][ T632] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.7336'. [ 778.340717][ T631] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.7336'. [ 778.364068][ T634] lo: Caught tx_queue_len zero misconfig [ 778.387896][ T634] netlink: 'syz.4.7338': attribute type 8 has an invalid length. [ 778.414436][ T634] sch_fq: defrate 0 ignored. [ 778.534572][ T650] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7342'. [ 778.545243][ T649] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7342'. [ 778.812404][ T668] syzkaller0: entered promiscuous mode [ 778.820251][ T668] syzkaller0: entered allmulticast mode [ 778.875567][ T668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7347'. [ 779.003974][ T677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7349'. [ 779.015508][ T677] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7349'. [ 779.132768][ T5914] tipc: Node number set to 2327729105 [ 779.148674][ T684] netlink: 'syz.5.7351': attribute type 1 has an invalid length. [ 779.285117][ T684] 8021q: adding VLAN 0 to HW filter on device bond1 [ 779.442273][ T703] bond4: option lp_interval: invalid value (0) [ 779.448843][ T703] bond4: option lp_interval: allowed values 1 - 2147483647 [ 779.463754][ T703] bond4 (unregistering): Released all slaves [ 779.612527][ T714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7359'. [ 779.658958][ T720] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7360'. [ 779.685260][ T7806] net_ratelimit: 27 callbacks suppressed [ 779.685275][ T7806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.924478][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.964851][ T743] syzkaller0: entered promiscuous mode [ 779.972067][ T743] syzkaller0: entered allmulticast mode [ 780.009891][ T747] bond0: entered promiscuous mode [ 780.036482][ T747] bond_slave_0: entered promiscuous mode [ 780.073867][ T747] bond_slave_1: entered promiscuous mode [ 780.115205][ T747] batadv0: entered promiscuous mode [ 780.121839][ T747] debugfs: 'hsr1' already exists in 'hsr' [ 780.127691][ T747] Cannot create hsr debugfs directory [ 780.134332][ T747] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 780.146047][ T747] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 780.156479][ T747] hsr1: entered promiscuous mode [ 780.161853][ T747] hsr1: entered allmulticast mode [ 780.167028][ T747] bond0: entered allmulticast mode [ 780.172812][ T747] bond_slave_0: entered allmulticast mode [ 780.178683][ T747] bond_slave_1: entered allmulticast mode [ 780.184717][ T747] batadv0: entered allmulticast mode [ 780.198319][ T747] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 780.227038][ T747] bond0: left promiscuous mode [ 780.245721][T27595] Bluetooth: hci5: command 0x0406 tx timeout [ 780.247973][ T747] bond_slave_0: left promiscuous mode [ 780.264607][ T747] bond_slave_1: left promiscuous mode [ 780.272281][ T747] batadv0: left promiscuous mode [ 780.724551][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.966764][ T799] sctp: [Deprecated]: syz.4.7379 (pid 799) Use of int in max_burst socket option. [ 780.966764][ T799] Use struct sctp_assoc_value instead [ 781.032525][ T800] netlink: 'syz.3.7381': attribute type 2 has an invalid length. [ 781.052538][ T800] netlink: 'syz.3.7381': attribute type 25 has an invalid length. [ 781.194335][ T813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 781.762782][ T7806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.066563][ T865] xt_hashlimit: overflow, rate too high: 0 [ 782.176707][ T872] veth0: entered promiscuous mode [ 782.199018][ T872] veth0: left promiscuous mode [ 782.215162][ T872] sctp: [Deprecated]: syz.4.7397 (pid 872) Use of int in maxseg socket option. [ 782.215162][ T872] Use struct sctp_assoc_value instead [ 782.303872][ T878] macvtap0: entered promiscuous mode [ 782.316859][ T878] veth0_macvtap: left promiscuous mode [ 782.435915][ T878] macvtap0 (unregistering): left promiscuous mode [ 782.518384][ T890] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 782.747043][ T913] netlink: 'syz.0.7410': attribute type 1 has an invalid length. [ 782.800474][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.894254][ T916] bond4: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 782.907528][ T916] bond4: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 782.923195][ T916] bond4: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 782.962558][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.133897][ T954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.142966][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.213972][ T961] syzkaller1: entered promiscuous mode [ 783.233213][ T961] syzkaller1: entered allmulticast mode [ 784.093117][ T1026] __nla_validate_parse: 14 callbacks suppressed [ 784.093137][ T1026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7432'. [ 784.110369][ T1026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7432'. [ 784.361284][ T1044] netlink: 'syz.4.7437': attribute type 1 has an invalid length. [ 784.369231][ T1044] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7437'. [ 784.421739][ T1044] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7437'. [ 784.514414][ T1050] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7438'. [ 784.796097][ T1069] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7444'. [ 784.808955][ T1069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7444'. [ 784.880598][ T7806] net_ratelimit: 2 callbacks suppressed [ 784.880617][ T7806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.948452][ T1075] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 785.135595][ T1092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7451'. [ 785.212155][ T1098] nbd: couldn't find a device at index 0 [ 785.275022][ T1096] netlink: 'syz.2.7453': attribute type 2 has an invalid length. [ 785.362561][T27595] Bluetooth: hci1: command 0x0406 tx timeout [ 785.846308][ T1168] block nbd1: Possible stuck request ffff888026ac8000: control (read@0,1024B). Runtime 120 seconds [ 785.857221][ T1168] block nbd1: Possible stuck request ffff888026ac8200: control (read@1024,1024B). Runtime 120 seconds [ 785.868338][ T1168] block nbd1: Possible stuck request ffff888026ac8400: control (read@2048,1024B). Runtime 120 seconds [ 785.879938][ T1168] block nbd1: Possible stuck request ffff888026ac8600: control (read@3072,1024B). Runtime 120 seconds [ 785.922700][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.940719][ T1120] netlink: 80 bytes leftover after parsing attributes in process `syz.5.7461'. [ 786.000278][T32090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.080306][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.442433][ T1146] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7469'. [ 786.517718][ T1146] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 786.547303][ T1129] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 786.959872][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.093216][ T1184] IPVS: length: 147 != 8 [ 787.196591][ T1186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 787.222286][ T1195] tipc: Can't bind to reserved service type 1 [ 787.273489][ T1197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.282498][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.304210][ T1194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 787.597457][ T1215] netlink: 'syz.5.7492': attribute type 1 has an invalid length. [ 787.615927][ T1215] netlink: 'syz.5.7492': attribute type 1 has an invalid length. [ 787.631381][ T1215] netlink: 'syz.5.7492': attribute type 1 has an invalid length. [ 787.640521][ T1215] netlink: 'syz.5.7492': attribute type 1 has an invalid length. [ 787.655830][ T1215] netlink: 'syz.5.7492': attribute type 1 has an invalid length. [ 787.668016][ T1215] netlink: 'syz.5.7492': attribute type 1 has an invalid length. [ 787.887446][ T1236] ip6tnl0: Caught tx_queue_len zero misconfig [ 788.567118][ T1268] sctp: [Deprecated]: syz.0.7510 (pid 1268) Use of int in max_burst socket option deprecated. [ 788.567118][ T1268] Use struct sctp_assoc_value instead [ 788.904582][ T1291] syzkaller0: entered promiscuous mode [ 788.911965][ T1291] syzkaller0: entered allmulticast mode [ 788.914801][ T1294] sctp: [Deprecated]: syz.4.7518 (pid 1294) Use of int in maxseg socket option. [ 788.914801][ T1294] Use struct sctp_assoc_value instead [ 788.993656][ T1304] netlink: 'syz.4.7520': attribute type 83 has an invalid length. [ 789.027753][ T1304] netlink: 'syz.4.7520': attribute type 11 has an invalid length. [ 789.178144][ T1313] digital: digital_start_poll: Unknown protocol [ 789.392076][ T1328] __nla_validate_parse: 19 callbacks suppressed [ 789.392118][ T1328] netlink: 84 bytes leftover after parsing attributes in process `syz.5.7527'. [ 789.514629][ T1333] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7529'. [ 789.532411][ T1335] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7529'. [ 789.560013][ T1333] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7529'. [ 789.560932][ T1337] netlink: 176 bytes leftover after parsing attributes in process `syz.0.7530'. [ 789.579430][ T1335] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7529'. [ 789.613571][ T1337] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7530'. [ 789.958219][ T1352] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7534'. [ 789.994062][ T1352] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7534'. [ 790.003465][ C1] net_ratelimit: 13 callbacks suppressed [ 790.003497][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.003851][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.080244][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.190811][ T1369] netlink: 'syz.2.7539': attribute type 2 has an invalid length. [ 790.266099][ T1373] netlink: 'syz.4.7541': attribute type 9 has an invalid length. [ 790.392060][ T1381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7545'. [ 790.402337][ T1380] xt_cgroup: path and classid specified [ 790.412518][ T1380] netlink: 'syz.2.7544': attribute type 7 has an invalid length. [ 790.414223][ T1385] lo: Caught tx_queue_len zero misconfig [ 790.425235][ T1380] netlink: 'syz.2.7544': attribute type 1 has an invalid length. [ 790.533830][ T1387] dvmrp6: entered allmulticast mode [ 790.630411][ T1397] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 0, id = 0 [ 790.661133][ T1393] netlink: 'syz.4.7549': attribute type 1 has an invalid length. [ 790.715470][ T1400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 791.110427][ T1429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.127109][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.247855][ T1435] syzkaller0: entered allmulticast mode [ 791.295136][ T1433] syzkaller0: left allmulticast mode [ 791.601579][T27595] Bluetooth: hci4: command 0x0405 tx timeout [ 791.754199][ T1466] nbd: couldn't find a device at index 0 [ 791.879424][ T1468] ip_vti0: entered promiscuous mode [ 791.930981][ T1468] netlink: 'syz.4.7570': attribute type 1 has an invalid length. [ 792.082234][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.125507][ T1493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.134230][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.149209][ T1492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.209484][ T1496] IPv6: NLM_F_CREATE should be specified when creating new route [ 793.107446][ T1540] bond5: entered promiscuous mode [ 795.050879][ T1494] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 795.123304][ T5914] net_ratelimit: 6 callbacks suppressed [ 795.123323][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.281282][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.296375][ T1550] netlink: 'syz.4.7582': attribute type 17 has an invalid length. [ 795.309452][ T1550] __nla_validate_parse: 9 callbacks suppressed [ 795.309471][ T1550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7582'. [ 795.325231][ T1550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7582'. [ 795.342537][ T1550] gretap0: entered promiscuous mode [ 795.390195][ T1550] gretap0: left promiscuous mode [ 795.534963][ T1562] openvswitch: netlink: Key type 238 is out of range max 32 [ 795.608284][ T1569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7589'. [ 795.867075][ T1581] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.7593'. [ 795.895538][ T1581] netlink: 'syz.2.7593': attribute type 10 has an invalid length. [ 795.908960][ T1581] 8021q: adding VLAN 0 to HW filter on device ‡ [ 795.936375][ T1585] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.7594'. [ 795.970787][ T1585] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.7594'. [ 796.124458][ T1603] xt_hashlimit: size too large, truncated to 1048576 [ 796.180139][ T1598] netlink: 'syz.2.7598': attribute type 4 has an invalid length. [ 796.301796][ T1616] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 796.310018][ T1616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 796.325404][ T7806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.724856][ T1640] tunl0: Caught tx_queue_len zero misconfig [ 796.757691][ T1640] bond0: Caught tx_queue_len zero misconfig [ 796.814341][ T1645] netlink: 'syz.5.7611': attribute type 30 has an invalid length. [ 796.915196][ T1650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7612'. [ 796.925133][ T1650] openvswitch: netlink: EtherType 0 is less than min 600 [ 797.026855][ T1660] tipc: Enabling of bearer rejected, failed to enable media [ 797.228757][ T1676] bridge0: port 3(macsec0) entered blocking state [ 797.235968][ T1676] bridge0: port 3(macsec0) entered disabled state [ 797.242809][ T1676] macsec0: entered allmulticast mode [ 797.249565][ T1676] veth1_macvtap: entered allmulticast mode [ 797.258908][ T1676] macsec0: entered promiscuous mode [ 797.268207][ T1680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7621'. [ 797.281106][ T1680] netlink: 'syz.3.7621': attribute type 1 has an invalid length. [ 797.290670][ T1676] bridge0: port 3(macsec0) entered blocking state [ 797.297486][ T1676] bridge0: port 3(macsec0) entered forwarding state [ 797.360842][ T7806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.423134][ T1689] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20003 [ 797.433676][ T1687] bond8: (slave gretap2): making interface the new active one [ 797.435642][ T1689] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20003 [ 797.457541][ T1687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.466667][ T1687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.475757][ T1687] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 797.609572][ T1699] netlink: 116 bytes leftover after parsing attributes in process `syz.5.7623'. [ 797.666620][ T7337] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 797.686799][ T7337] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 797.716536][ T7337] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 797.728078][ T7337] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 799.480373][ T1716] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 800.158578][ T1670] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 800.345935][ T1721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7631'. [ 800.480713][ T5806] net_ratelimit: 4 callbacks suppressed [ 800.480732][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.518602][ T1737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 800.720917][T28575] Bluetooth: hci0: command 0x0406 tx timeout [ 800.759576][ T1756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7643'. [ 800.797611][ T1756] netlink: 'syz.2.7643': attribute type 3 has an invalid length. [ 800.808804][ T1756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7643'. [ 800.963199][ T1769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7645'. [ 801.213990][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.520586][ T7806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.694030][ T1785] xt_TPROXY: Can be used only with -p tcp or -p udp [ 802.560916][T31744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.476613][ T1737] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 803.602586][T31744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.714450][ T1792] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7651'. [ 803.740180][ T1792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7651'. [ 803.760927][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.773208][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.800028][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.914563][ T1808] netlink: 136 bytes leftover after parsing attributes in process `syz.3.7654'. [ 803.962563][ T1802] team0: Cannot enslave team device to itself [ 804.245370][ T1824] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7660'. [ 804.255199][ T1824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7660'. [ 804.265104][ T1823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7660'. [ 804.374749][ T1831] tipc: Enabling of bearer rejected, already enabled [ 804.642344][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.291435][ T1868] syzkaller0: entered promiscuous mode [ 805.307284][ T1868] syzkaller0: entered allmulticast mode [ 805.443656][ T1875] dvmrp6: left allmulticast mode [ 805.564063][ T1873] veth0: entered promiscuous mode [ 805.840444][ T1889] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7682'. [ 805.868455][ T1869] veth0: left promiscuous mode [ 806.036082][ T1903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7687'. [ 806.070336][ T1906] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7688'. [ 806.143511][ T1906] hsr_slave_1 (unregistering): left promiscuous mode [ 806.313374][ T1916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7690'. [ 806.345340][ T1922] netlink: 'syz.5.7693': attribute type 3 has an invalid length. [ 806.356383][ T1922] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7693'. [ 806.412577][ T1916] tipc: Enabling of bearer rejected, failed to enable media [ 806.492860][T19259] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 806.507257][T19259] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 806.542536][T19259] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 806.570833][T19259] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 806.733514][ T1943] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.7700'. [ 806.753125][ T1943] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 806.768666][ T1944] tipc: Started in network mode [ 806.778290][ T1944] tipc: Node identity 828b43331014, cluster identity 4711 [ 806.782035][ T1943] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7700'. [ 806.787075][ T1944] tipc: Enabled bearer , priority 0 [ 806.920561][ T1949] tipc: Disabling bearer [ 806.973718][ T1959] netlink: 'syz.5.7706': attribute type 1 has an invalid length. [ 807.156791][ T1959] 8021q: adding VLAN 0 to HW filter on device bond3 [ 807.643914][ T2006] netlink: 'syz.2.7720': attribute type 3 has an invalid length. [ 807.808535][ T2016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7722'. [ 807.835614][ T2016] netlink: 'syz.2.7722': attribute type 30 has an invalid length. [ 807.880965][T19244] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 807.891534][ T2012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7722'. [ 807.915347][T19244] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 807.939324][ T2012] netlink: 'syz.2.7722': attribute type 30 has an invalid length. [ 807.958711][T19244] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 807.980858][T19244] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 807.991867][ T2024] x_tables: unsorted underflow at hook 4 [ 808.098420][ T2029] syzkaller0: left promiscuous mode [ 808.104207][ T2029] syzkaller0: left allmulticast mode [ 808.139197][ T2031] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7729'. [ 808.216241][ T2033] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 808.240116][ T2031] syzkaller1: entered promiscuous mode [ 808.245928][ T2031] syzkaller1: entered allmulticast mode [ 808.580971][ T2050] syzkaller0: entered promiscuous mode [ 808.594340][ T2054] 0: reclassify loop, rule prio 0, protocol 800 [ 808.669142][ T2057] xt_CT: You must specify a L4 protocol and not use inversions on it [ 809.803652][ T2107] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 809.986460][ T2120] ipt_REJECT: TCP_RESET invalid for non-tcp [ 810.119545][ T2131] netlink: 'syz.4.7760': attribute type 1 has an invalid length. [ 810.184021][ T2131] bond4: entered promiscuous mode [ 810.190481][ T2131] bond4: entered allmulticast mode [ 810.196020][ T2131] 8021q: adding VLAN 0 to HW filter on device bond4 [ 810.265829][ T2134] tipc: Enabling of bearer rejected, failed to enable media [ 810.649184][ T2151] tipc: Enabled bearer , priority 10 [ 811.228583][ T2180] syzkaller1: entered promiscuous mode [ 811.241217][ T2180] syzkaller1: entered allmulticast mode [ 811.769747][ T5914] tipc: Node number set to 2459910963 [ 811.805763][ T2209] __nla_validate_parse: 9 callbacks suppressed [ 811.805780][ T2209] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7788'. [ 811.867410][ T2211] openvswitch: netlink: IP tunnel dst address not specified [ 811.878217][ T2211] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7789'. [ 812.133790][ T2232] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 812.159641][ T2229] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7791'. [ 812.224558][ T2236] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.7796'. [ 812.239251][ T2238] netlink: 232 bytes leftover after parsing attributes in process `syz.5.7795'. [ 812.286339][ T2223] bond4: option lp_interval: invalid value (0) [ 812.307991][ T2236] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7796'. [ 812.321966][ T2223] bond4: option lp_interval: allowed values 1 - 2147483647 [ 812.374315][ T2223] bond4 (unregistering): Released all slaves [ 812.432400][ T2246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7797'. [ 812.467405][ T2245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7798'. [ 812.553481][ T2245] bond7: entered promiscuous mode [ 812.568152][ T2245] 8021q: adding VLAN 0 to HW filter on device bond7 [ 812.734931][ T2245] 8021q: adding VLAN 0 to HW filter on device bond7 [ 812.750806][ T2245] bond7: (slave sit3): The slave device specified does not support setting the MAC address [ 812.767879][ T2245] bond7: (slave sit3): Error -95 calling set_mac_address [ 812.836709][ T2263] netlink: 'syz.0.7803': attribute type 1 has an invalid length. [ 812.844540][ T2263] netlink: 'syz.0.7803': attribute type 1 has an invalid length. [ 812.852866][ T2263] netlink: 9172 bytes leftover after parsing attributes in process `syz.0.7803'. [ 812.864565][ T2268] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7805'. [ 815.921821][ T1168] block nbd1: Possible stuck request ffff888026ac8000: control (read@0,1024B). Runtime 150 seconds [ 815.934117][ T1168] block nbd1: Possible stuck request ffff888026ac8200: control (read@1024,1024B). Runtime 150 seconds [ 815.945611][ T1168] block nbd1: Possible stuck request ffff888026ac8400: control (read@2048,1024B). Runtime 150 seconds [ 815.957072][ T1168] block nbd1: Possible stuck request ffff888026ac8600: control (read@3072,1024B). Runtime 150 seconds [ 815.979468][ T2275] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 816.635001][ T2381] netlink: 'syz.3.7840': attribute type 2 has an invalid length. [ 816.666022][ T2381] netlink: 'syz.3.7840': attribute type 2 has an invalid length. [ 816.754230][ T2386] netlink: 'syz.0.7841': attribute type 29 has an invalid length. [ 816.833117][ T2394] __nla_validate_parse: 3 callbacks suppressed [ 816.833135][ T2394] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7844'. [ 816.955241][ T2393] bond4: option fail_over_mac: invalid value (16) [ 816.965195][ T2393] bond4 (unregistering): Released all slaves [ 816.998955][ T2406] nbd: couldn't find a device at index 0 [ 817.086507][ T2418] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7849'. [ 817.126532][ T2418] netlink: 'syz.4.7849': attribute type 1 has an invalid length. [ 817.168306][ T2418] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7849'. [ 817.861124][ T2470] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7865'. [ 817.872053][ T2470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7865'. [ 817.884265][ T2470] netlink: 31 bytes leftover after parsing attributes in process `syz.3.7865'. [ 817.895145][ T2470] netlink: 'syz.3.7865': attribute type 3 has an invalid length. [ 817.904623][ T2470] netlink: 'syz.3.7865': attribute type 2 has an invalid length. [ 817.914381][ T2470] netlink: 31 bytes leftover after parsing attributes in process `syz.3.7865'. [ 817.927617][ T2472] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7865'. [ 817.945771][ T2472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7865'. [ 817.955543][ T2472] netlink: 31 bytes leftover after parsing attributes in process `syz.3.7865'. [ 817.965826][ T2472] netlink: 'syz.3.7865': attribute type 3 has an invalid length. [ 817.973917][ T2472] netlink: 'syz.3.7865': attribute type 2 has an invalid length. [ 818.031278][ T2482] openvswitch: netlink: IP tunnel dst address not specified [ 818.219028][ T2492] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 818.233015][ T2490] IPVS: set_ctl: invalid protocol: 0 172.20.20.44:20001 [ 818.680303][ T2532] netlink: 'syz.4.7876': attribute type 4 has an invalid length. [ 818.710620][ T2535] netlink: 'syz.5.7880': attribute type 15 has an invalid length. [ 818.749353][ T2532] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 818.907712][ T2554] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 818.954491][ T2554] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 818.971435][ T2554] gretap1: entered promiscuous mode [ 818.981004][ T2554] gretap1: entered allmulticast mode [ 819.061052][ T2567] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 819.254977][ T2569] netlink: 'syz.4.7888': attribute type 7 has an invalid length. [ 819.701548][ T2624] syz_tun: entered allmulticast mode [ 819.835899][ T2632] Cannot find map_set index 65533 as target [ 819.846820][ T2632] xt_hashlimit: size too large, truncated to 1048576 [ 819.862487][ T2631] netlink: 'syz.5.7905': attribute type 9 has an invalid length. [ 819.944343][ T2631] netlink: 'syz.5.7905': attribute type 11 has an invalid length. [ 819.969902][ T2631] netlink: 'syz.5.7905': attribute type 12 has an invalid length. [ 821.199693][T27595] Bluetooth: hci2: command 0x0419 tx timeout [ 821.361026][T31744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.062665][ T2801] __nla_validate_parse: 12 callbacks suppressed [ 822.062681][ T2801] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7948'. [ 822.308027][ T2805] IPv6: sit1: Disabled Multicast RS [ 822.331866][ T2805] sit1: entered allmulticast mode [ 822.396571][ T2826] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 822.408780][ T7806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.567911][ T2836] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.7956'. [ 822.734805][ T2850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7959'. [ 822.750214][ T2850] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7959'. [ 822.828610][ T2864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7963'. [ 822.902746][ T2864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7963'. [ 822.904060][ T2869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7965'. [ 822.914945][ T2874] syzkaller0: entered promiscuous mode [ 822.933802][ T2874] syzkaller0: entered allmulticast mode [ 823.009759][ T2866] validate_nla: 4 callbacks suppressed [ 823.009777][ T2866] netlink: 'syz.4.7964': attribute type 25 has an invalid length. [ 823.121980][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.442703][ T7806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.471689][ T2902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7971'. [ 823.521538][ T2902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 823.605698][ T2902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.768172][ T2911] netlink: 7 bytes leftover after parsing attributes in process `syz.2.7975'. [ 823.782012][ T2911] netlink: 7 bytes leftover after parsing attributes in process `syz.2.7975'. [ 823.864148][ T2914] geneve2: entered promiscuous mode [ 823.870094][ T2914] geneve2: entered allmulticast mode [ 824.241270][T32090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.620663][ T2946] ±ÿ: renamed from team_slave_1 (while UP) [ 824.627883][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.770060][ T2949] bond5: option xmit_hash_policy: invalid value (64) [ 824.781819][ T2949] bond5 (unregistering): Released all slaves [ 825.075024][ T2976] netlink: 'syz.2.7996': attribute type 10 has an invalid length. [ 825.113010][ T2970] bond6: entered promiscuous mode [ 825.118278][ T2970] 8021q: adding VLAN 0 to HW filter on device bond6 [ 825.136000][ T2979] SET target dimension over the limit! [ 825.142138][ T2980] SET target dimension over the limit! [ 825.263324][ T2977] bridge5: entered promiscuous mode [ 825.315090][ T2977] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 825.377667][ T2970] macvlan3: entered promiscuous mode [ 825.384842][ T2970] macvlan3: entered allmulticast mode [ 825.391387][ T2970] bond6: (slave macvlan3): Error -98 calling set_mac_address [ 825.446039][ T2992] netlink: 'syz.5.8000': attribute type 2 has an invalid length. [ 825.594311][ T3002] syzkaller0: entered allmulticast mode [ 825.680774][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.739453][ T3011] sctp: [Deprecated]: syz.4.8003 (pid 3011) Use of struct sctp_assoc_value in delayed_ack socket option. [ 825.739453][ T3011] Use struct sctp_sack_info instead [ 826.163517][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.394476][ T3049] syzkaller0: entered promiscuous mode [ 826.409675][ T3049] syzkaller0: entered allmulticast mode [ 826.491820][ T3056] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002 [ 826.713580][ T3075] lo: Caught tx_queue_len zero misconfig [ 826.726095][ T7806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.814365][ T3075] veth0: entered promiscuous mode [ 826.821697][ T3079] syzkaller1: entered promiscuous mode [ 826.827257][ T3079] syzkaller1: entered allmulticast mode [ 826.835701][ T3079] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 826.898388][ T3075] macvtap0: entered promiscuous mode [ 826.910518][ T3075] vlan0: entered promiscuous mode [ 826.920063][ T3075] macvtap0: entered allmulticast mode [ 826.925699][ T3075] vlan0: entered allmulticast mode [ 826.933191][ T3075] veth0_vlan: entered allmulticast mode [ 826.953331][ T3069] veth0: left promiscuous mode [ 827.100505][ T3093] syzkaller0: entered promiscuous mode [ 827.108824][ T3093] syzkaller0: entered allmulticast mode [ 827.129414][ T3095] IPVS: Unknown mcast interface: vcan0 [ 827.586374][ T3126] netlink: 'syz.5.8040': attribute type 1 has an invalid length. [ 827.613942][ T3126] 8021q: adding VLAN 0 to HW filter on device bond4 [ 827.631120][ T3126] bond4: (slave veth0_to_bond): making interface the new active one [ 827.641665][ T3126] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 827.655600][ T3126] bond4: entered promiscuous mode [ 827.661606][ T3126] veth0_to_bond: entered promiscuous mode [ 827.668333][ T3126] bond4: entered allmulticast mode [ 827.673799][ T3126] veth0_to_bond: entered allmulticast mode [ 827.760208][ T7806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.804664][ T3135] xt_l2tp: v2 doesn't support IP mode [ 828.044771][ T3152] netlink: 'syz.3.8045': attribute type 10 has an invalid length. [ 828.134282][ T3152] team0 (unregistering): Port device team_slave_0 removed [ 828.167629][ T3152] team0 (unregistering): Port device team_slave_1 removed [ 828.197909][ T3158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 828.344654][ T3165] syzkaller0: entered promiscuous mode [ 828.350932][ T3165] syzkaller0: entered allmulticast mode [ 828.571196][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.622100][ T7335] bond4: (slave bridge2): link status up again after 0 ms [ 828.651348][ T7335] bond4: (slave bridge2): link status up again after 0 ms [ 828.689859][T19273] bond4: (slave bridge2): link status up again after 0 ms [ 828.697130][T19273] bond4: (slave bridge2): failed to get link speed/duplex [ 828.749504][ T3193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.758710][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.802553][ T7806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.841621][T19273] bond4: (slave bridge2): failed to get link speed/duplex [ 829.047944][ T3211] netlink: 'syz.4.8061': attribute type 2 has an invalid length. [ 829.086376][ T3213] xt_policy: too many policy elements [ 829.094382][ T3209] __nla_validate_parse: 19 callbacks suppressed [ 829.094400][ T3209] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8060'. [ 829.349186][ T3220] syzkaller0: left promiscuous mode [ 829.358944][ T3220] syzkaller0: left allmulticast mode [ 829.371602][ T3220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8065'. [ 829.381332][ T3220] netlink: 'syz.2.8065': attribute type 1 has an invalid length. [ 829.389086][ T3220] netlink: 'syz.2.8065': attribute type 2 has an invalid length. [ 829.476885][ T3223] netlink: 'syz.0.8064': attribute type 2 has an invalid length. [ 829.770746][ T3252] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8074'. [ 829.945693][ T3263] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.8077'. [ 830.116158][ T3276] netlink: 'syz.4.8078': attribute type 10 has an invalid length. [ 830.754903][ T3276] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 831.030418][ T3302] netlink: 237 bytes leftover after parsing attributes in process `syz.5.8087'. [ 831.143427][ T3305] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8086'. [ 831.162288][ T3305] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8086'. [ 831.763473][ T3349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8099'. [ 831.807749][ T3352] xt_hashlimit: size too large, truncated to 1048576 [ 832.364273][ T3372] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8106'. [ 832.415863][ T3375] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8106'. [ 833.086220][ T3416] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 833.096139][ T3416] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 833.114892][ T3416] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 833.224547][ T3421] net_ratelimit: 35 callbacks suppressed [ 833.224567][ T3421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 833.329008][ T3424] bond5: option arp_all_targets: invalid value (18446744073709551613) [ 833.357247][ T3424] bond5 (unregistering): Released all slaves [ 833.412422][ T3431] x_tables: duplicate entry at hook 3 [ 833.430217][T19259] bond4: (slave bridge2): failed to get link speed/duplex [ 833.445381][ T3431] netlink: 'syz.3.8121': attribute type 3 has an invalid length. [ 833.544844][ T7335] bond4: (slave bridge2): failed to get link speed/duplex [ 833.674392][ T7335] bond4: (slave bridge2): failed to get link speed/duplex [ 833.701641][ T3438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 833.812367][ T7337] bond4: (slave bridge2): failed to get link speed/duplex [ 833.852658][T32090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.968972][ T3458] netlink: 'syz.0.8127': attribute type 2 has an invalid length. [ 833.997252][ T3458] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 834.007684][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.021540][ T7335] bond4: (slave bridge2): failed to get link speed/duplex [ 834.039400][ T3458] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 834.061193][ T3458] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 834.140092][ T36] bond4: (slave bridge2): failed to get link speed/duplex [ 834.416457][ T3488] team0: Port device bridge6 added [ 834.865532][ T3501] netlink: 'syz.4.8141': attribute type 1 has an invalid length. [ 834.999464][ T3507] __nla_validate_parse: 4 callbacks suppressed [ 834.999482][ T3507] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8144'. [ 835.022574][ T3507] netlink: 112 bytes leftover after parsing attributes in process `syz.2.8144'. [ 835.058845][ T3507] netlink: 112 bytes leftover after parsing attributes in process `syz.2.8144'. [ 835.231129][ T3527] netlink: 'syz.3.8147': attribute type 4 has an invalid length. [ 835.318529][ T3536] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8150'. [ 835.329496][ T3536] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8150'. [ 835.338824][ T3536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8150'. [ 835.469374][ T3543] bond8: Unable to set peer notification delay as MII monitoring is disabled [ 835.480405][ T3543] bond8 (unregistering): Released all slaves [ 835.571552][ T3548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8154'. [ 835.582336][ T3548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8154'. [ 835.593685][ T3548] syzkaller0: entered promiscuous mode [ 835.599518][ T3548] syzkaller0: entered allmulticast mode [ 838.052517][ T3514] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 838.181227][ T3558] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8157'. [ 838.282895][ T3560] vlan3: entered promiscuous mode [ 838.286090][ T3562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8160'. [ 838.320440][ T36] net_ratelimit: 35 callbacks suppressed [ 838.320457][ T36] bond4: (slave bridge2): failed to get link speed/duplex [ 838.396181][ T3562] tipc: Enabling of bearer rejected, already enabled [ 838.430925][ T3578] blkio.reset_stats is deprecated [ 838.452074][ T36] bond4: (slave bridge2): failed to get link speed/duplex [ 838.481661][ T3578] ip6tnl0: Caught tx_queue_len zero misconfig [ 838.554362][ T3590] nbd: must specify a size in bytes for the device [ 838.562848][ T7337] bond4: (slave bridge2): failed to get link speed/duplex [ 838.673455][ T3598] openvswitch: netlink: IP tunnel dst address not specified [ 838.762105][ T7335] bond4: (slave bridge2): failed to get link speed/duplex [ 838.792872][ T3598] openvswitch: netlink: IP tunnel dst address not specified [ 838.901657][ T7337] bond4: (slave bridge2): failed to get link speed/duplex [ 838.957676][ T3608] netlink: 'syz.0.8170': attribute type 26 has an invalid length. [ 839.009856][T19259] bond4: (slave bridge2): failed to get link speed/duplex [ 839.121461][T19259] bond4: (slave bridge2): failed to get link speed/duplex [ 839.230795][T19259] bond4: (slave bridge2): failed to get link speed/duplex [ 839.901160][ T3652] netlink: 'syz.5.8183': attribute type 11 has an invalid length. [ 839.968383][ T3657] ecn_mt_check4: 23 callbacks suppressed [ 839.968401][ T3657] xt_ecn: cannot match TCP bits for non-tcp packets [ 840.022505][ T3662] __nla_validate_parse: 11 callbacks suppressed [ 840.022524][ T3662] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.8186'. [ 840.234165][ T3671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8189'. [ 840.313740][ T3673] netlink: 'syz.0.8190': attribute type 1 has an invalid length. [ 840.326793][ T3673] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8190'. [ 840.395382][ T3674] netlink: 'syz.0.8190': attribute type 1 has an invalid length. [ 840.405544][ T3674] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8190'. [ 840.423199][ T3688] Cannot find set identified by id 3 to match [ 840.454371][ T3688] netlink: 'syz.4.8192': attribute type 2 has an invalid length. [ 840.626198][ T3695] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8196'. [ 840.677256][ T3699] netlink: 'syz.4.8197': attribute type 1 has an invalid length. [ 840.778941][ T3695] netlink: 13 bytes leftover after parsing attributes in process `syz.5.8196'. [ 840.871637][ T3710] netlink: 'syz.4.8202': attribute type 4 has an invalid length. [ 840.921687][ T3710] sctp: [Deprecated]: syz.4.8202 (pid 3710) Use of struct sctp_assoc_value in delayed_ack socket option. [ 840.921687][ T3710] Use struct sctp_sack_info instead [ 840.997195][ T3709] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 841.053301][ T3725] netlink: 'syz.4.8206': attribute type 10 has an invalid length. [ 841.092376][ T3725] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 841.495811][ T3747] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8213'. [ 841.693292][ T3758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8215'. [ 841.722156][ T3755] bond6: option resend_igmp: invalid value (32767) [ 841.728711][ T3755] bond6: option resend_igmp: allowed values 0 - 255 [ 841.733288][ T3758] netlink: 176 bytes leftover after parsing attributes in process `syz.2.8215'. [ 841.751245][ T3755] bond6 (unregistering): Released all slaves [ 841.769791][ T3758] netlink: 'syz.2.8215': attribute type 5 has an invalid length. [ 841.951147][ T3755] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8216'. [ 842.054011][ T3775] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 842.342021][ T3803] syzkaller0: entered promiscuous mode [ 842.357063][ T3803] syzkaller0: entered allmulticast mode [ 842.505400][ T3808] netlink: 'syz.2.8230': attribute type 1 has an invalid length. [ 842.614211][ T3808] 8021q: adding VLAN 0 to HW filter on device bond8 [ 842.626368][ T3810] bond8: entered allmulticast mode [ 842.653655][ T3815] bond8: (slave ip6gretap1): making interface the new active one [ 842.662202][ T3815] ip6gretap1: entered allmulticast mode [ 842.668783][ T3815] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 843.134434][ T3833] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 843.158651][ T3833] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 843.177290][ T3829] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 843.432445][ T7335] net_ratelimit: 32 callbacks suppressed [ 843.432466][ T7335] bond4: (slave bridge2): failed to get link speed/duplex [ 843.561594][ T145] bond4: (slave bridge2): failed to get link speed/duplex [ 843.683653][T19244] bond4: (slave bridge2): failed to get link speed/duplex [ 843.777333][ T3875] netlink: 'syz.3.8254': attribute type 1 has an invalid length. [ 843.850691][T19259] bond4: (slave bridge2): failed to get link speed/duplex [ 843.959721][ T145] bond4: (slave bridge2): failed to get link speed/duplex [ 844.061528][ T3894] netlink: Unknown conntrack attr (0) [ 844.089904][ T36] bond4: (slave bridge2): failed to get link speed/duplex [ 844.219741][ T145] bond4: (slave bridge2): failed to get link speed/duplex [ 844.346042][ T3913] xt_CT: You must specify a L4 protocol and not use inversions on it [ 844.357954][T19259] bond4: (slave bridge2): failed to get link speed/duplex [ 844.392455][ T3915] bond0: (slave gre0): Error: Device type is different from other slaves [ 844.412985][ T3913] netlink: 'syz.0.8264': attribute type 29 has an invalid length. [ 844.438171][ T3913] netlink: 'syz.0.8264': attribute type 29 has an invalid length. [ 844.490042][T19259] bond4: (slave bridge2): failed to get link speed/duplex [ 844.648611][ T3930] block nbd4: not configured, cannot reconfigure [ 844.655822][ T3930] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 844.923973][ T3947] syzkaller0: entered allmulticast mode [ 844.961239][ T3947] syzkaller0 (unregistering): left allmulticast mode [ 845.017151][ T3959] x_tables: unsorted entry at hook 1 [ 845.148091][ T7335] tipc: Subscription rejected, illegal request [ 845.279190][ T3974] veth1_to_bond: entered allmulticast mode [ 845.292620][ T3973] veth1_to_bond: left allmulticast mode [ 845.395965][ T3981] Unsupported ieee802154 address type: 0 [ 845.738451][ T4018] __nla_validate_parse: 176 callbacks suppressed [ 845.738471][ T4018] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8292'. [ 846.003019][ T1168] block nbd1: Possible stuck request ffff888026ac8000: control (read@0,1024B). Runtime 180 seconds [ 846.015124][ T1168] block nbd1: Possible stuck request ffff888026ac8200: control (read@1024,1024B). Runtime 180 seconds [ 846.026538][ T1168] block nbd1: Possible stuck request ffff888026ac8400: control (read@2048,1024B). Runtime 180 seconds [ 846.037991][ T1168] block nbd1: Possible stuck request ffff888026ac8600: control (read@3072,1024B). Runtime 180 seconds [ 846.421782][ T4050] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8301'. [ 846.450226][ T4052] netlink: 'syz.0.8301': attribute type 1 has an invalid length. [ 846.468512][ T4052] netlink: 'syz.0.8301': attribute type 1 has an invalid length. [ 846.478023][ T4009] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 846.484646][ T4052] netlink: 'syz.0.8301': attribute type 1 has an invalid length. [ 846.758005][ T4066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8305'. [ 846.832940][ T4072] IPVS: set_ctl: invalid protocol: 4 172.30.0.1:20000 [ 846.858361][ T4066] macvtap1: entered promiscuous mode [ 846.872798][ T4066] vlan0: entered promiscuous mode [ 846.880723][ T4066] macvtap1: entered allmulticast mode [ 846.890452][ T4066] vlan0: entered allmulticast mode [ 846.923369][ T4074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8305'. [ 846.932360][ T4066] veth0_vlan: entered allmulticast mode [ 847.142293][ T4091] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8309'. [ 847.595978][ T4105] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8315'. [ 847.680474][T28575] Bluetooth: hci4: command 0x0405 tx timeout [ 847.692413][ T4109] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8317'. [ 847.703171][ T4109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 847.749006][ T4109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.749019][ T4111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8316'. [ 847.859235][ T4108] erspan0: entered promiscuous mode [ 847.914155][ T4108] erspan0: entered allmulticast mode [ 847.959931][ T4111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8316'. [ 847.974029][ T4111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8316'. [ 848.004176][ T4119] bridge3: entered promiscuous mode [ 848.019438][ T4119] bridge3: entered allmulticast mode [ 848.130673][ T4121] netlink: 'syz.3.8320': attribute type 21 has an invalid length. [ 848.490142][T19244] net_ratelimit: 27 callbacks suppressed [ 848.490163][T19244] bond4: (slave bridge2): failed to get link speed/duplex [ 848.619850][ T3999] bond4: (slave bridge2): failed to get link speed/duplex [ 848.735924][T19244] bond4: (slave bridge2): failed to get link speed/duplex [ 848.757873][ T4146] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 848.784034][ T4146] sctp: [Deprecated]: syz.0.8328 (pid 4146) Use of int in maxseg socket option. [ 848.784034][ T4146] Use struct sctp_assoc_value instead [ 848.827875][ T4147] dvmrp6: entered allmulticast mode [ 848.856051][ T4148] netlink: 'syz.2.8329': attribute type 1 has an invalid length. [ 848.916003][ T4148] 8021q: adding VLAN 0 to HW filter on device bond9 [ 849.022947][ T4145] bond9: (slave veth7): Enslaving as an active interface with a down link [ 849.113084][ T4155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 849.130236][ T4155] bond9: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 849.283534][ T3991] bond4: (slave bridge2): failed to get link speed/duplex [ 849.400838][ T3991] bond4: (slave bridge2): failed to get link speed/duplex [ 849.509752][ T3999] bond4: (slave bridge2): failed to get link speed/duplex [ 849.629875][ T3999] bond4: (slave bridge2): failed to get link speed/duplex [ 849.771847][ T3991] bond4: (slave bridge2): failed to get link speed/duplex [ 850.070144][ T3991] bond4: (slave bridge2): failed to get link speed/duplex [ 850.211230][T19273] bond4: (slave bridge2): failed to get link speed/duplex [ 850.813391][ T4222] pim6reg1: entered promiscuous mode [ 850.818759][ T4222] pim6reg1: entered allmulticast mode [ 851.092630][ T4237] ip6tnl0: Caught tx_queue_len zero misconfig [ 851.232728][ T4242] netlink: 'syz.0.8353': attribute type 1 has an invalid length. [ 851.323216][ T4250] bond6: (slave gretap3): making interface the new active one [ 851.351114][ T4250] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 851.366569][ T4249] __nla_validate_parse: 8 callbacks suppressed [ 851.366587][ T4249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8355'. [ 851.452004][ T4249] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8355'. [ 851.507610][ T4249] geneve2: entered promiscuous mode [ 851.530044][ T4249] geneve2: entered allmulticast mode [ 851.543640][ T4255] xt_hashlimit: size too large, truncated to 1048576 [ 851.953331][ T4272] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8361'. [ 852.046162][ T4274] netlink: 'syz.5.8363': attribute type 1 has an invalid length. [ 852.092306][ T4274] netlink: 228 bytes leftover after parsing attributes in process `syz.5.8363'. [ 852.134031][ T4274] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8363'. [ 852.963860][ T4329] netlink: 'syz.2.8377': attribute type 1 has an invalid length. [ 853.072982][ T4329] bond10: (slave bridge7): making interface the new active one [ 853.139397][ T4329] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 853.181256][ T4329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8377'. [ 853.182148][ T4338] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8378'. [ 853.221665][ T4329] 8021q: adding VLAN 0 to HW filter on device bond10 [ 853.405859][ T4349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8383'. [ 853.444238][ T4349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8383'. [ 853.500742][T19273] net_ratelimit: 25 callbacks suppressed [ 853.500762][T19273] bond4: (slave bridge2): failed to get link speed/duplex [ 853.568230][ T4357] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.8386'. [ 853.650663][T19273] bond4: (slave bridge2): failed to get link speed/duplex [ 853.751886][ T145] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 853.761084][ T145] bond4: (slave bridge2): failed to get link speed/duplex [ 853.854628][ T4375] netlink: Unknown conntrack attr (0) [ 853.869860][ T7335] bond4: (slave bridge2): failed to get link speed/duplex [ 853.993165][ T7335] bond4: (slave bridge2): failed to get link speed/duplex [ 854.131691][ T7335] bond4: (slave bridge2): failed to get link speed/duplex [ 854.240044][ T7335] bond4: (slave bridge2): failed to get link speed/duplex [ 854.274479][ T4390] netlink: 'syz.4.8397': attribute type 5 has an invalid length. [ 854.349789][T19273] bond4: (slave bridge2): failed to get link speed/duplex [ 854.464881][ T4001] bond4: (slave bridge2): failed to get link speed/duplex [ 854.576610][ T4407] bond0: (slave gre0): Error: Device type is different from other slaves [ 854.941619][ T4414] netlink: 'syz.3.8402': attribute type 1 has an invalid length. [ 854.971769][ T4414] bond10: entered promiscuous mode [ 854.977298][ T4414] 8021q: adding VLAN 0 to HW filter on device bond10 [ 854.997066][ T4414] ipvlan2: entered allmulticast mode [ 855.002727][ T4414] bond10: entered allmulticast mode [ 855.025020][ T4414] bond10: (slave bridge6): making interface the new active one [ 855.032989][ T4414] bridge6: entered promiscuous mode [ 855.038314][ T4414] bridge6: entered allmulticast mode [ 855.047476][ T4414] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 856.638524][ T4365] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 856.854142][ T4429] netlink: 'syz.5.8406': attribute type 4 has an invalid length. [ 856.901416][ T4431] pim6reg527: entered allmulticast mode [ 857.104350][ T4450] vlan2: entered allmulticast mode [ 857.130606][ T4450] bond0: entered allmulticast mode [ 857.138720][ T4451] __nla_validate_parse: 5 callbacks suppressed [ 857.138738][ T4451] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8414'. [ 857.157938][ T4450] bond_slave_0: entered allmulticast mode [ 857.168424][ T4454] netlink: 'syz.4.8415': attribute type 1 has an invalid length. [ 857.179771][ T4450] bond_slave_1: entered allmulticast mode [ 857.185533][ T4450] bridge_slave_1: entered allmulticast mode [ 857.236238][ T4461] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8415'. [ 857.265078][ T4451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 857.274986][ T4451] bond_slave_0: left allmulticast mode [ 857.284405][ T4451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.296914][ T4451] bond_slave_1: left allmulticast mode [ 857.305490][ T4451] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 857.317011][ T4451] bridge_slave_1: left allmulticast mode [ 857.323381][ T4451] bond0 (unregistering): Released all slaves [ 857.342117][ T4460] veth0_to_bond: entered allmulticast mode [ 857.495847][ T4477] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8418'. [ 857.544365][ T4480] IPv6: sit4: Disabled Multicast RS [ 857.557610][ T4480] sit4: entered allmulticast mode [ 857.967237][ T4501] netlink: 'syz.5.8425': attribute type 6 has an invalid length. [ 858.580276][ T145] net_ratelimit: 34 callbacks suppressed [ 858.580299][ T145] bond4: (slave bridge2): failed to get link speed/duplex [ 858.700398][ T145] bond4: (slave bridge2): failed to get link speed/duplex [ 858.810086][ T4001] bond4: (slave bridge2): failed to get link speed/duplex [ 858.930084][ T3991] bond4: (slave bridge2): failed to get link speed/duplex [ 859.040309][ T3991] bond4: (slave bridge2): failed to get link speed/duplex [ 859.149998][ T4001] bond4: (slave bridge2): failed to get link speed/duplex [ 859.259955][ T7335] bond4: (slave bridge2): failed to get link speed/duplex [ 859.370042][ T7335] bond4: (slave bridge2): failed to get link speed/duplex [ 859.479899][ T7335] bond4: (slave bridge2): failed to get link speed/duplex [ 859.590029][T19273] bond4: (slave bridge2): failed to get link speed/duplex [ 860.226923][ T4459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 860.405433][ T4507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8426'. [ 860.570796][ T4517] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8428'. [ 861.187526][ T4572] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8440'. [ 861.361404][ T4581] rdma_op ffff888035e331f0 conn xmit_rdma 0000000000000000 [ 861.478085][ T4582] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 861.672716][ T4001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.697684][ T4001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.786111][ T4600] netlink: 'syz.4.8453': attribute type 1 has an invalid length. [ 861.822749][ T4600] netlink: 'syz.4.8453': attribute type 3 has an invalid length. [ 861.859501][ T4600] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8453'. [ 861.892870][ T4603] bond5: entered promiscuous mode [ 861.897976][ T4603] bond5: entered allmulticast mode [ 861.938303][ T4603] 8021q: adding VLAN 0 to HW filter on device bond5 [ 861.948861][ T4614] tunl0: entered promiscuous mode [ 861.956375][ T4614] netlink: 'syz.0.8457': attribute type 3 has an invalid length. [ 861.964318][ T4614] netlink: 9 bytes leftover after parsing attributes in process `syz.0.8457'. [ 862.085359][ T4622] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8459'. [ 862.096347][ T4624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8462'. [ 862.184049][ T4631] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8463'. [ 862.365211][ T4640] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8467'. [ 862.379291][ T4636] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8466'. [ 862.430036][ T4640] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8467'. [ 862.569763][ T4651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8470'. [ 862.599491][ T4658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8473'. [ 862.629104][ T4658] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 862.645092][ T4658] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 862.659887][ T4658] gretap1: entered promiscuous mode [ 862.671389][ T4658] gretap1: entered allmulticast mode [ 862.889111][ T4666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 862.909939][ T4669] veth0: entered promiscuous mode [ 862.916272][ T4670] veth0: left promiscuous mode [ 862.941740][ T4670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8474'. [ 862.971143][ T4676] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.8477'. [ 863.018634][ T4670] macvtap1: entered promiscuous mode [ 863.024920][ T4670] vlan0: entered promiscuous mode [ 863.038666][ T4670] macvtap1: entered allmulticast mode [ 863.056101][ T4670] vlan0: entered allmulticast mode [ 863.062424][ T4670] veth0_vlan: entered allmulticast mode [ 863.070522][ T4674] macvlan0: entered promiscuous mode [ 863.163691][ T4679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8480'. [ 863.177235][ T4683] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8479'. [ 863.454497][ T4694] team0: Device gtp2 is up. Set it down before adding it as a team port [ 863.501408][ T4699] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 863.555729][ T4696] syzkaller0: entered promiscuous mode [ 863.574479][ T4696] syzkaller0: entered allmulticast mode [ 863.609831][ T4001] net_ratelimit: 29 callbacks suppressed [ 863.609852][ T4001] bond4: (slave bridge2): failed to get link speed/duplex [ 863.655828][ T4696] simple: basic_1 [ 863.659935][ T4696] simple: basic_2 [ 863.663602][ T4696] simple: basic_3 [ 863.667267][ T4696] simple: basic_4 [ 863.670979][ T4696] simple: basic_5 [ 863.674641][ T4696] simple: basic_6 [ 863.678303][ T4696] simple: basic_7 [ 863.682025][ T4696] simple: basic_8 [ 863.685681][ T4696] simple: basic_9 [ 863.689343][ T4696] simple: basic_10 [ 863.693153][ T4696] simple: basic_11 [ 863.696914][ T4696] simple: basic_12 [ 863.700698][ T4696] simple: basic_13 [ 863.704521][ T4696] simple: basic_14 [ 863.708270][ T4696] simple: basic_15 [ 863.712049][ T4696] simple: basic_16 [ 863.715799][ T4696] simple: basic_17 [ 863.719598][ T4696] 0: reclassify loop, rule prio 0, protocol 800 [ 863.829661][ T145] bond4: (slave bridge2): failed to get link speed/duplex [ 864.229684][T19273] bond4: (slave bridge2): failed to get link speed/duplex [ 864.363968][ T145] bond4: (slave bridge2): failed to get link speed/duplex [ 864.544954][ T145] bond4: (slave bridge2): failed to get link speed/duplex [ 864.659752][ T4001] bond4: (slave bridge2): failed to get link speed/duplex [ 864.747585][ T4757] : entered promiscuous mode [ 864.826992][ T4001] bond4: (slave bridge2): failed to get link speed/duplex [ 864.872120][ T4763] x_tables: unsorted entry at hook 1 [ 864.972404][ T7335] bond4: (slave bridge2): failed to get link speed/duplex [ 865.114847][ T4774] IPv6: syztnl2: Disabled Multicast RS [ 865.150019][ T3995] bond4: (slave bridge2): failed to get link speed/duplex [ 865.338150][ T4783] bond7: entered promiscuous mode [ 865.376284][ T4776] xt_hashlimit: size too large, truncated to 1048576 [ 865.447533][ T4790] macvlan3: entered promiscuous mode [ 865.482544][ T4790] macvlan3: entered allmulticast mode [ 865.510148][ T4800] netlink: 'syz.5.8518': attribute type 1 has an invalid length. [ 865.534209][ T4790] bond7: (slave macvlan3): Opening slave failed [ 865.667738][ T4805] xt_hashlimit: size too large, truncated to 1048576 [ 866.252323][ T3999] tipc: Subscription rejected, illegal request [ 866.268866][ T4851] netlink: 'syz.3.8533': attribute type 3 has an invalid length. [ 866.427868][ T4866] netlink: 'syz.4.8536': attribute type 5 has an invalid length. [ 866.898273][ T4894] tipc: Enabled bearer , priority 0 [ 866.920274][ T4894] +: renamed from syzkaller0 (while UP) [ 866.929449][ T4894] tipc: Disabling bearer [ 867.245683][ T4917] __nla_validate_parse: 11 callbacks suppressed [ 867.246893][ T4917] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8552'. [ 867.377200][ T4935] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8554'. [ 867.397584][ T4935] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8554'. [ 867.415128][ T4933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8555'. [ 867.465127][ T4935] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8554'. [ 867.479752][ T4935] netlink: 'syz.4.8554': attribute type 9 has an invalid length. [ 867.886801][ T4964] bridge0: entered allmulticast mode [ 868.199889][ T4985] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.8570'. [ 868.327940][ T4992] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8573'. [ 868.353006][ T4995] netlink: 116 bytes leftover after parsing attributes in process `syz.3.8572'. [ 868.455029][ T4992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8573'. [ 868.458673][ T4996] dvmrp6: entered allmulticast mode [ 868.523515][ T4992] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8573'. [ 868.681743][T19273] net_ratelimit: 28 callbacks suppressed [ 868.681767][T19273] bond4: (slave bridge2): failed to get link speed/duplex [ 868.820488][T19273] bond4: (slave bridge2): failed to get link speed/duplex [ 868.951431][T19273] bond4: (slave bridge2): failed to get link speed/duplex [ 869.081864][ T7335] bond4: (slave bridge2): failed to get link speed/duplex [ 869.190259][ T3999] bond4: (slave bridge2): failed to get link speed/duplex [ 869.311955][ T4001] bond4: (slave bridge2): failed to get link speed/duplex [ 869.472940][ T7339] bond4: (slave bridge2): failed to get link speed/duplex [ 869.600911][ T7335] bond4: (slave bridge2): failed to get link speed/duplex [ 869.729699][ T3997] bond4: (slave bridge2): failed to get link speed/duplex [ 869.910532][ T3999] bond4: (slave bridge2): failed to get link speed/duplex [ 870.173809][ T5091] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 870.553225][ T5118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 870.607924][ T5118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 870.982425][ T5144] syzkaller0: entered promiscuous mode [ 870.987958][ T5144] syzkaller0: entered allmulticast mode [ 871.174658][ T5153] tipc: Invalid UDP bearer configuration [ 871.174719][ T5153] tipc: Enabling of bearer rejected, failed to enable media [ 871.679542][ T5194] sctp: [Deprecated]: syz.4.8628 (pid 5194) Use of struct sctp_assoc_value in delayed_ack socket option. [ 871.679542][ T5194] Use struct sctp_sack_info instead [ 872.128029][ T5223] netlink: 'syz.2.8637': attribute type 1 has an invalid length. [ 872.272459][ T5223] 8021q: adding VLAN 0 to HW filter on device bond11 [ 872.316541][ T5230] netlink: 'syz.4.8639': attribute type 1 has an invalid length. [ 872.345427][ T5228] bond11: entered allmulticast mode [ 872.400131][T27595] Bluetooth: hci3: command 0x0405 tx timeout [ 872.417872][ T5233] bond8: (slave gretap3): making interface the new active one [ 872.426732][ T5233] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 872.495421][ T5239] __nla_validate_parse: 49 callbacks suppressed [ 872.495441][ T5239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8642'. [ 872.534045][ T5242] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8643'. [ 872.592914][ T5242] ip6gre2: entered promiscuous mode [ 872.598184][ T5242] ip6gre2: entered allmulticast mode [ 872.662497][ T5256] netlink: 'syz.2.8647': attribute type 2 has an invalid length. [ 872.679411][ T145] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 872.687670][ T145] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 872.700165][ T7806] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 872.746018][ T5256] netlink: 'syz.2.8647': attribute type 1 has an invalid length. [ 872.825981][ T7806] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 872.881618][ T5265] IPVS: length: 239 != 24 [ 873.090033][ T5275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8652'. [ 873.110822][ T7806] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 873.124835][ T5275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8652'. [ 873.181927][ T5283] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8653'. [ 873.193965][ T5282] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 873.429970][ T5296] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8658'. [ 873.439481][ T5298] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8659'. [ 873.549208][ T5298] syzkaller0: entered promiscuous mode [ 873.568405][ T5298] syzkaller0: entered allmulticast mode [ 873.740096][ T3994] net_ratelimit: 23 callbacks suppressed [ 873.740117][ T3994] bond4: (slave bridge2): failed to get link speed/duplex [ 873.895907][ T5272] lec0: mtu less than device minimum [ 873.905714][ T5272] lec:lec_atm_send: lec0: change_mtu to 64 failed [ 873.940037][ T7335] bond4: (slave bridge2): failed to get link speed/duplex [ 874.079875][T19273] bond4: (slave bridge2): failed to get link speed/duplex [ 874.093930][ T5335] ip6gre0: Caught tx_queue_len zero misconfig [ 874.190410][ T3991] bond4: (slave bridge2): failed to get link speed/duplex [ 874.201919][ T5271] lec:lec_atm_close: lec0: Shut down! [ 874.797706][ T5367] tipc: Enabled bearer , priority 0 [ 874.830520][ T5367] gre0: Caught tx_queue_len zero misconfig [ 874.859728][ T7335] bond4: (slave bridge2): failed to get link speed/duplex [ 874.982584][ T5371] tipc: Disabling bearer [ 875.011911][ T3991] bond4: (slave bridge2): failed to get link speed/duplex [ 875.019961][ T7806] lec:lec_start_xmit: lec0:No lecd attached [ 875.141679][ T7335] bond4: (slave bridge2): failed to get link speed/duplex [ 875.242837][ T5393] xt_CT: You must specify a L4 protocol and not use inversions on it [ 875.250197][ T7335] bond4: (slave bridge2): failed to get link speed/duplex [ 875.420061][ T7335] bond4: (slave bridge2): failed to get link speed/duplex [ 875.502557][ T5403] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8682'. [ 875.565144][ T5402] netlink: 'syz.4.8683': attribute type 1 has an invalid length. [ 875.591203][ T5402] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8683'. [ 875.611212][ T5402] netlink: 658 bytes leftover after parsing attributes in process `syz.4.8683'. [ 875.726493][T27595] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 875.748941][T27595] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 875.763408][T27595] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 875.796252][T27595] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 875.812880][T27595] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 876.083882][ T1168] block nbd1: Possible stuck request ffff888026ac8000: control (read@0,1024B). Runtime 210 seconds [ 876.094744][ T1168] block nbd1: Possible stuck request ffff888026ac8200: control (read@1024,1024B). Runtime 210 seconds [ 876.107047][ T1168] block nbd1: Possible stuck request ffff888026ac8400: control (read@2048,1024B). Runtime 210 seconds [ 876.118382][ T1168] block nbd1: Possible stuck request ffff888026ac8600: control (read@3072,1024B). Runtime 210 seconds [ 876.364387][T27594] syz_tun (unregistering): left allmulticast mode [ 876.458690][ T5439] gre5: entered promiscuous mode [ 876.465078][ T5439] gre5: entered allmulticast mode [ 876.642971][ T5444] syzkaller1: entered promiscuous mode [ 876.648803][ T5444] syzkaller1: entered allmulticast mode [ 876.828234][ T5416] chnl_net:caif_netlink_parms(): no params data found [ 876.879910][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 876.933643][ T5453] xt_hashlimit: size too large, truncated to 1048576 [ 877.173048][ T5416] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.224989][ T5416] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.237528][ T5416] bridge_slave_0: entered allmulticast mode [ 877.247500][ T5416] bridge_slave_0: entered promiscuous mode [ 877.282231][ T5416] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.301761][ T5416] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.320728][ T5416] bridge_slave_1: entered allmulticast mode [ 877.328616][ T5416] bridge_slave_1: entered promiscuous mode [ 877.427271][ T5416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.442651][ T5416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.537533][ T5416] team0: Port device team_slave_0 added [ 877.566988][ T5416] team0: Port device team_slave_1 added [ 877.597053][ T5491] SET target dimension over the limit! [ 877.603233][ T5485] __nla_validate_parse: 4 callbacks suppressed [ 877.603251][ T5485] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8703'. [ 877.621493][ T5493] SET target dimension over the limit! [ 877.687230][ T5482] bond8 (unregistering): Released all slaves [ 877.766966][ T5416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.774349][ T5416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.824148][ T5416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.920966][T27595] Bluetooth: hci6: command tx timeout [ 877.926658][ T5416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.935895][ T5416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.967417][ T5510] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8706'. [ 877.981938][ T5416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.236864][ T5416] hsr_slave_0: entered promiscuous mode [ 878.257689][ T5416] hsr_slave_1: entered promiscuous mode [ 878.268231][ T5416] debugfs: 'hsr0' already exists in 'hsr' [ 878.277522][ T5533] netlink: 'syz.3.8709': attribute type 6 has an invalid length. [ 878.297302][ T5416] Cannot create hsr debugfs directory [ 878.304347][ T5534] netlink: 'syz.5.8712': attribute type 2 has an invalid length. [ 878.392489][ T5531] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 878.401593][ T5523] netlink: 'syz.3.8709': attribute type 1 has an invalid length. [ 878.755525][ T5556] net_ratelimit: 14 callbacks suppressed [ 878.755545][ T5556] openvswitch: netlink: IP tunnel dst address not specified [ 878.786174][ T5416] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 878.832622][ T5416] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.929801][ T3991] bond4: (slave bridge2): failed to get link speed/duplex [ 878.942117][ T5562] x_tables: ip_tables: udp match: only valid for protocol 17 [ 878.970161][ T5566] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8724'. [ 878.979262][ T5566] netlink: 'syz.4.8724': attribute type 7 has an invalid length. [ 878.991586][ T5566] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8724'. [ 879.092549][ T5568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8725'. [ 879.105509][ T5416] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 879.134915][ T5568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8725'. [ 879.152186][ T5416] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.194736][ T5572] veth0: entered promiscuous mode [ 879.215686][ T5572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8727'. [ 879.302055][ T5416] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 879.319445][ T5416] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.482124][ T5416] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 879.497848][ T5416] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.650507][ T3991] bond4: (slave bridge2): failed to get link speed/duplex [ 879.689029][ T5601] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8733'. [ 879.849373][ T145] bond4: (slave bridge2): failed to get link speed/duplex [ 879.886239][ T5607] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8735'. [ 879.902314][ T5608] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8735'. [ 879.942929][ T5610] netlink: 'syz.4.8735': attribute type 1 has an invalid length. [ 879.985318][ T5416] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 880.015500][T27595] Bluetooth: hci6: command tx timeout [ 880.024307][ T5416] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 880.063543][ T5416] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 880.077875][ T5416] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 880.143027][ T5617] ip6tnl0: Caught tx_queue_len zero misconfig [ 880.270226][T19244] bond4: (slave bridge2): failed to get link speed/duplex [ 880.414506][ T5416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 880.441226][ T5416] 8021q: adding VLAN 0 to HW filter on device team0 [ 880.484219][T19244] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.491452][T19244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 880.550111][T19244] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.557324][T19244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 880.567605][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5540 ms [ 880.576144][ C0] lec:lec_tx_timeout: lec0 [ 880.582283][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 880.723111][ T145] bond4: (slave bridge2): failed to get link speed/duplex [ 880.860084][ T3991] bond4: (slave bridge2): failed to get link speed/duplex [ 880.896648][ T5659] netlink: 'syz.3.8746': attribute type 10 has an invalid length. [ 881.026255][ T5658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 881.059897][ T3991] bond4: (slave bridge2): failed to get link speed/duplex [ 881.258951][ T5416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 881.332379][ T7335] bond4: (slave bridge2): failed to get link speed/duplex [ 881.498318][ T5416] veth0_vlan: entered promiscuous mode [ 881.530035][ T5416] veth1_vlan: entered promiscuous mode [ 881.623896][ T5416] veth0_macvtap: entered promiscuous mode [ 881.646824][ T5416] veth1_macvtap: entered promiscuous mode [ 881.706774][ T5416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 881.738038][ T5416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 881.772348][T19244] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.783770][ T5689] connsecmark_tg_check: 1 callbacks suppressed [ 881.783790][ T5689] xt_CONNSECMARK: invalid mode: 0 [ 881.787148][T19244] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.852883][T19244] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.864043][T19244] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.055307][ T5702] netlink: 'syz.4.8757': attribute type 32 has an invalid length. [ 882.074572][ T5704] netlink: 'syz.5.8758': attribute type 10 has an invalid length. [ 882.082909][T19244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.097102][T27595] Bluetooth: hci6: command tx timeout [ 882.123839][T19244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.154674][ T5704] veth0_macvtap: left promiscuous mode [ 882.185652][ T5709] IPVS: set_ctl: invalid protocol: 41 172.30.1.6:20002 [ 882.363290][ T3991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.380804][ T3991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.765416][ T5731] netlink: 'syz.2.8681': attribute type 29 has an invalid length. [ 882.796382][ T5731] netlink: 'syz.2.8681': attribute type 29 has an invalid length. [ 883.137421][ T5764] __nla_validate_parse: 12 callbacks suppressed [ 883.137441][ T5764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8772'. [ 883.311594][ T5768] [ 883.313981][ T5768] ====================================================== [ 883.321029][ T5768] WARNING: possible circular locking dependency detected [ 883.322275][ T5751] syzkaller0: entered promiscuous mode [ 883.328087][ T5768] syzkaller #0 Not tainted [ 883.328101][ T5768] ------------------------------------------------------ [ 883.328110][ T5768] syz.2.8772/5768 is trying to acquire lock: [ 883.328122][ T5768] ffff888026bbbed0 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 883.328255][ T5768] [ 883.328255][ T5768] but task is already holding lock: [ 883.328263][ T5768] ffff888026bbb990 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 883.328315][ T5768] [ 883.328315][ T5768] which lock already depends on the new lock. [ 883.328315][ T5768] [ 883.328324][ T5768] [ 883.328324][ T5768] the existing dependency chain (in reverse order) is: [ 883.328333][ T5768] [ 883.328333][ T5768] -> #6 [ 883.334167][ T5751] syzkaller0: entered allmulticast mode [ 883.338198][ T5768] (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 883.413963][ T5768] blk_alloc_queue+0x546/0x680 [ 883.419343][ T5768] __blk_mq_alloc_disk+0x197/0x390 [ 883.425044][ T5768] nbd_dev_add+0x499/0xb50 [ 883.430067][ T5768] nbd_init+0x168/0x1f0 [ 883.434859][ T5768] do_one_initcall+0x250/0x8d0 [ 883.440162][ T5768] do_initcall_level+0x104/0x190 [ 883.445657][ T5768] do_initcalls+0x59/0xa0 [ 883.450530][ T5768] kernel_init_freeable+0x2a6/0x3e0 [ 883.456272][ T5768] kernel_init+0x1d/0x1d0 [ 883.461197][ T5768] ret_from_fork+0x51e/0xb90 [ 883.466349][ T5768] ret_from_fork_asm+0x1a/0x30 [ 883.471663][ T5768] [ 883.471663][ T5768] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 883.478927][ T5768] fs_reclaim_acquire+0x71/0x100 [ 883.484405][ T5768] __kmalloc_cache_node_noprof+0x46/0x6b0 [ 883.490663][ T5768] create_worker+0x113/0x7e0 [ 883.495808][ T5768] workqueue_prepare_cpu+0xe4/0x170 [ 883.501667][ T5768] cpuhp_invoke_callback+0x445/0x860 [ 883.507504][ T5768] _cpu_up+0x2ce/0x5b0 [ 883.512116][ T5768] cpu_up+0x1d2/0x220 [ 883.516664][ T5768] cpuhp_bringup_mask+0xb2/0x1a0 [ 883.522198][ T5768] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 883.528553][ T5768] bringup_nonboot_cpus+0x17/0x30 [ 883.534115][ T5768] smp_init+0x32/0x110 [ 883.538772][ T5768] kernel_init_freeable+0x288/0x3e0 [ 883.544513][ T5768] kernel_init+0x1d/0x1d0 [ 883.549378][ T5768] ret_from_fork+0x51e/0xb90 [ 883.554510][ T5768] ret_from_fork_asm+0x1a/0x30 [ 883.559817][ T5768] [ 883.559817][ T5768] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 883.567573][ T5768] cpus_read_lock+0x42/0x160 [ 883.572708][ T5768] static_key_slow_inc+0x12/0x30 [ 883.578208][ T5768] nbd_genl_reconfigure+0x132f/0x1ea0 [ 883.584170][ T5768] genl_family_rcv_msg_doit+0x22a/0x330 [ 883.590327][ T5768] genl_rcv_msg+0x61c/0x7a0 [ 883.595370][ T5768] netlink_rcv_skb+0x232/0x4b0 [ 883.600705][ T5768] genl_rcv+0x28/0x40 [ 883.605221][ T5768] netlink_unicast+0x80f/0x9b0 [ 883.610526][ T5768] netlink_sendmsg+0x813/0xb40 [ 883.615831][ T5768] ____sys_sendmsg+0x972/0x9f0 [ 883.621173][ T5768] ___sys_sendmsg+0x2a5/0x360 [ 883.626397][ T5768] __x64_sys_sendmsg+0x1bd/0x2a0 [ 883.631874][ T5768] do_syscall_64+0x14d/0xf80 [ 883.637007][ T5768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.643438][ T5768] [ 883.643438][ T5768] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 883.651102][ T5768] __mutex_lock+0x19f/0x1300 [ 883.656234][ T5768] nbd_queue_rq+0x37b/0x1100 [ 883.661379][ T5768] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 883.667477][ T5768] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 883.674398][ T5768] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 883.680957][ T5768] blk_mq_run_hw_queue+0x348/0x4f0 [ 883.686648][ T5768] blk_mq_dispatch_list+0xd16/0xe10 [ 883.692385][ T5768] blk_mq_flush_plug_list+0x48d/0x570 [ 883.698292][ T5768] __blk_flush_plug+0x3ed/0x4d0 [ 883.703678][ T5768] __submit_bio+0x28d/0x580 [ 883.708715][ T5768] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 883.714884][ T5768] block_read_full_folio+0x599/0x830 [ 883.720729][ T5768] filemap_read_folio+0x137/0x3b0 [ 883.726298][ T5768] do_read_cache_folio+0x358/0x590 [ 883.731983][ T5768] read_part_sector+0xb6/0x2b0 [ 883.737328][ T5768] adfspart_check_ICS+0xa5/0xa40 [ 883.742799][ T5768] bdev_disk_changed+0x7ba/0x1550 [ 883.748361][ T5768] blkdev_get_whole+0x380/0x510 [ 883.753789][ T5768] bdev_open+0x31e/0xd30 [ 883.758577][ T5768] blkdev_open+0x470/0x610 [ 883.763530][ T5768] do_dentry_open+0x785/0x14e0 [ 883.768833][ T5768] vfs_open+0x3b/0x340 [ 883.773463][ T5768] path_openat+0x2e08/0x3860 [ 883.778595][ T5768] do_file_open+0x23e/0x4a0 [ 883.783625][ T5768] do_sys_openat2+0x113/0x200 [ 883.788855][ T5768] __x64_sys_openat+0x138/0x170 [ 883.794270][ T5768] do_syscall_64+0x14d/0xf80 [ 883.799391][ T5768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.805814][ T5768] [ 883.805814][ T5768] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 883.813042][ T5768] __mutex_lock+0x19f/0x1300 [ 883.818192][ T5768] nbd_queue_rq+0xc6/0x1100 [ 883.823256][ T5768] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 883.829329][ T5768] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 883.836189][ T5768] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 883.842714][ T5768] blk_mq_run_hw_queue+0x348/0x4f0 [ 883.848367][ T5768] blk_mq_dispatch_list+0xd16/0xe10 [ 883.854091][ T5768] blk_mq_flush_plug_list+0x48d/0x570 [ 883.859999][ T5768] __blk_flush_plug+0x3ed/0x4d0 [ 883.865482][ T5768] __submit_bio+0x28d/0x580 [ 883.870535][ T5768] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 883.876709][ T5768] block_read_full_folio+0x599/0x830 [ 883.882531][ T5768] filemap_read_folio+0x137/0x3b0 [ 883.888088][ T5768] do_read_cache_folio+0x358/0x590 [ 883.893730][ T5768] read_part_sector+0xb6/0x2b0 [ 883.899025][ T5768] adfspart_check_ICS+0xa5/0xa40 [ 883.904494][ T5768] bdev_disk_changed+0x7ba/0x1550 [ 883.910054][ T5768] blkdev_get_whole+0x380/0x510 [ 883.915453][ T5768] bdev_open+0x31e/0xd30 [ 883.920248][ T5768] blkdev_open+0x470/0x610 [ 883.925206][ T5768] do_dentry_open+0x785/0x14e0 [ 883.930506][ T5768] vfs_open+0x3b/0x340 [ 883.935104][ T5768] path_openat+0x2e08/0x3860 [ 883.940239][ T5768] do_file_open+0x23e/0x4a0 [ 883.945285][ T5768] do_sys_openat2+0x113/0x200 [ 883.950509][ T5768] __x64_sys_openat+0x138/0x170 [ 883.955899][ T5768] do_syscall_64+0x14d/0xf80 [ 883.961024][ T5768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.967448][ T5768] [ 883.967448][ T5768] -> #1 (set->srcu){.+.+}-{0:0}: [ 883.974588][ T5768] __synchronize_srcu+0xca/0x3e0 [ 883.980063][ T5768] elevator_switch+0x1e8/0x7a0 [ 883.985358][ T5768] elevator_change+0x2cc/0x450 [ 883.990669][ T5768] elevator_set_default+0x36c/0x430 [ 883.996399][ T5768] blk_register_queue+0x366/0x430 [ 884.001955][ T5768] __add_disk+0x677/0xd50 [ 884.006834][ T5768] add_disk_fwnode+0xfb/0x480 [ 884.012047][ T5768] nbd_dev_add+0x72c/0xb50 [ 884.017013][ T5768] nbd_init+0x168/0x1f0 [ 884.021709][ T5768] do_one_initcall+0x250/0x8d0 [ 884.027012][ T5768] do_initcall_level+0x104/0x190 [ 884.032487][ T5768] do_initcalls+0x59/0xa0 [ 884.037357][ T5768] kernel_init_freeable+0x2a6/0x3e0 [ 884.043101][ T5768] kernel_init+0x1d/0x1d0 [ 884.047969][ T5768] ret_from_fork+0x51e/0xb90 [ 884.053124][ T5768] ret_from_fork_asm+0x1a/0x30 [ 884.058437][ T5768] [ 884.058437][ T5768] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 884.066294][ T5768] __lock_acquire+0x15a5/0x2cf0 [ 884.071696][ T5768] lock_acquire+0xf0/0x2e0 [ 884.076648][ T5768] __mutex_lock+0x19f/0x1300 [ 884.081766][ T5768] elevator_change+0x1b3/0x450 [ 884.087055][ T5768] elevator_set_none+0xb5/0x140 [ 884.092442][ T5768] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 884.098774][ T5768] nbd_start_device+0x17f/0xb10 [ 884.104158][ T5768] nbd_genl_connect+0x165b/0x1cf0 [ 884.109714][ T5768] genl_family_rcv_msg_doit+0x22a/0x330 [ 884.115789][ T5768] genl_rcv_msg+0x61c/0x7a0 [ 884.120821][ T5768] netlink_rcv_skb+0x232/0x4b0 [ 884.126118][ T5768] genl_rcv+0x28/0x40 [ 884.130630][ T5768] netlink_unicast+0x80f/0x9b0 [ 884.135926][ T5768] netlink_sendmsg+0x813/0xb40 [ 884.141233][ T5768] ____sys_sendmsg+0x972/0x9f0 [ 884.146533][ T5768] ___sys_sendmsg+0x2a5/0x360 [ 884.151744][ T5768] __x64_sys_sendmsg+0x1bd/0x2a0 [ 884.157232][ T5768] do_syscall_64+0x14d/0xf80 [ 884.162347][ T5768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.168770][ T5768] [ 884.168770][ T5768] other info that might help us debug this: [ 884.168770][ T5768] [ 884.179012][ T5768] Chain exists of: [ 884.179012][ T5768] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#53 [ 884.179012][ T5768] [ 884.192780][ T5768] Possible unsafe locking scenario: [ 884.192780][ T5768] [ 884.200227][ T5768] CPU0 CPU1 [ 884.205590][ T5768] ---- ---- [ 884.210954][ T5768] lock(&q->q_usage_counter(io)#53); [ 884.216348][ T5768] lock(fs_reclaim); [ 884.222852][ T5768] lock(&q->q_usage_counter(io)#53); [ 884.230750][ T5768] lock(&q->elevator_lock); [ 884.235345][ T5768] [ 884.235345][ T5768] *** DEADLOCK *** [ 884.235345][ T5768] [ 884.243490][ T5768] 6 locks held by syz.2.8772/5768: [ 884.248602][ T5768] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 884.256798][ T5768] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 884.265773][ T5768] #2: ffff88801dbfb9d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60 [ 884.277186][ T5768] #3: ffff88801dbfb8d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60 [ 884.288198][ T5768] #4: ffff888026bbb990 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 884.298866][ T5768] #5: ffff888026bbb9c8 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 884.309812][ T5768] [ 884.309812][ T5768] stack backtrace: [ 884.315706][ T5768] CPU: 0 UID: 0 PID: 5768 Comm: syz.2.8772 Not tainted syzkaller #0 PREEMPT(full) [ 884.315724][ T5768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 884.315735][ T5768] Call Trace: [ 884.315742][ T5768] [ 884.315749][ T5768] dump_stack_lvl+0xe8/0x150 [ 884.315772][ T5768] print_circular_bug+0x2e1/0x300 [ 884.315798][ T5768] check_noncircular+0x12e/0x150 [ 884.315823][ T5768] __lock_acquire+0x15a5/0x2cf0 [ 884.315869][ T5768] lock_acquire+0xf0/0x2e0 [ 884.315888][ T5768] ? elevator_change+0x1b3/0x450 [ 884.315908][ T5768] __mutex_lock+0x19f/0x1300 [ 884.315925][ T5768] ? elevator_change+0x1b3/0x450 [ 884.315942][ T5768] ? rcu_is_watching+0x15/0xb0 [ 884.315966][ T5768] ? elevator_change+0x1b3/0x450 [ 884.315995][ T5768] ? __pfx___mutex_lock+0x10/0x10 [ 884.316009][ T5768] ? enable_work+0x17f/0x230 [ 884.316031][ T5768] ? lockdep_hardirqs_on+0x7a/0x110 [ 884.316057][ T5768] ? __cancel_work_sync+0xf7/0x110 [ 884.316081][ T5768] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 884.316099][ T5768] elevator_change+0x1b3/0x450 [ 884.316116][ T5768] elevator_set_none+0xb5/0x140 [ 884.316131][ T5768] ? __pfx_elevator_set_none+0x10/0x10 [ 884.316148][ T5768] ? xa_load+0x1db/0x210 [ 884.316231][ T5768] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 884.316256][ T5768] ? kernfs_add_one+0x477/0x5c0 [ 884.316281][ T5768] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 884.316304][ T5768] ? sysfs_add_file_mode_ns+0x259/0x300 [ 884.316325][ T5768] nbd_start_device+0x17f/0xb10 [ 884.316351][ T5768] ? device_create_file+0xf4/0x1b0 [ 884.316396][ T5768] nbd_genl_connect+0x165b/0x1cf0 [ 884.316423][ T5768] ? __pfx_nbd_genl_connect+0x10/0x10 [ 884.316448][ T5768] ? rcu_is_watching+0x15/0xb0 [ 884.316472][ T5768] ? __nla_parse+0x40/0x60 [ 884.316497][ T5768] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 884.316517][ T5768] genl_family_rcv_msg_doit+0x22a/0x330 [ 884.316536][ T5768] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 884.316557][ T5768] ? __lock_acquire+0x6b5/0x2cf0 [ 884.316578][ T5768] genl_rcv_msg+0x61c/0x7a0 [ 884.316595][ T5768] ? __pfx_genl_rcv_msg+0x10/0x10 [ 884.316609][ T5768] ? __pfx_nbd_genl_connect+0x10/0x10 [ 884.316631][ T5768] ? __lock_acquire+0x6b5/0x2cf0 [ 884.316654][ T5768] netlink_rcv_skb+0x232/0x4b0 [ 884.316674][ T5768] ? __pfx_genl_rcv_msg+0x10/0x10 [ 884.316689][ T5768] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 884.316716][ T5768] ? down_read+0x272/0x2e0 [ 884.316733][ T5768] ? genl_rcv+0xd/0x40 [ 884.316747][ T5768] genl_rcv+0x28/0x40 [ 884.316760][ T5768] netlink_unicast+0x80f/0x9b0 [ 884.316781][ T5768] ? __pfx_netlink_unicast+0x10/0x10 [ 884.316799][ T5768] ? netlink_sendmsg+0x650/0xb40 [ 884.316819][ T5768] ? skb_put+0x11b/0x210 [ 884.316866][ T5768] netlink_sendmsg+0x813/0xb40 [ 884.316890][ T5768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 884.316912][ T5768] ? aa_sock_msg_perm+0xf1/0x1b0 [ 884.316934][ T5768] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 884.316952][ T5768] ____sys_sendmsg+0x972/0x9f0 [ 884.316966][ T5768] ? futex_unqueue+0x211/0x240 [ 884.317005][ T5768] ? __pfx_____sys_sendmsg+0x10/0x10 [ 884.317023][ T5768] ? import_iovec+0x73/0xa0 [ 884.317074][ T5768] ___sys_sendmsg+0x2a5/0x360 [ 884.317090][ T5768] ? __pfx____sys_sendmsg+0x10/0x10 [ 884.317108][ T5768] ? futex_wait+0x29a/0x380 [ 884.317140][ T5768] ? __fget_files+0x2a/0x420 [ 884.317162][ T5768] ? __fget_files+0x3a0/0x420 [ 884.317188][ T5768] __x64_sys_sendmsg+0x1bd/0x2a0 [ 884.317204][ T5768] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 884.317251][ T5768] ? __sys_socketpair+0x4a8/0x560 [ 884.317276][ T5768] do_syscall_64+0x14d/0xf80 [ 884.317289][ T5768] ? trace_irq_disable+0x3b/0x150 [ 884.317312][ T5768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.317327][ T5768] ? clear_bhb_loop+0x40/0x90 [ 884.317344][ T5768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.317360][ T5768] RIP: 0033:0x7fcebb19c799 [ 884.317375][ T5768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.317389][ T5768] RSP: 002b:00007fceb93d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 884.317405][ T5768] RAX: ffffffffffffffda RBX: 00007fcebb416090 RCX: 00007fcebb19c799 [ 884.317416][ T5768] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 884.317427][ T5768] RBP: 00007fcebb232c99 R08: 0000000000000000 R09: 0000000000000000 [ 884.317437][ T5768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 884.317446][ T5768] R13: 00007fcebb416128 R14: 00007fcebb416090 R15: 00007ffff3bd7398 [ 884.317464][ T5768] [ 884.337482][ T5764] vxcan2: entered allmulticast mode [ 884.400083][T27595] Bluetooth: hci6: command tx timeout [ 884.785420][ T3994] net_ratelimit: 12 callbacks suppressed [ 884.785438][ T3994] bond4: (slave bridge2): failed to get link speed/duplex [ 884.900762][ T5768] nbd4: detected capacity change from 0 to 63 [ 884.910510][T19273] bond4: (slave bridge2): failed to get link speed/duplex [ 884.973868][T28575] block nbd4: Receive control failed (result -32) [ 884.973868][T27595] block nbd4: Receive control failed (result -104) [ 885.051484][ T3991] bond4: (slave bridge2): failed to get link speed/duplex [ 885.159945][ T3999] bond4: (slave bridge2): failed to get link speed/duplex [ 885.279983][T19273] bond4: (slave bridge2): failed to get link speed/duplex [ 885.391389][T19273] bond4: (slave bridge2): failed to get link speed/duplex [ 885.500096][ T3991] bond4: (slave bridge2): failed to get link speed/duplex [ 885.609691][ T3991] bond4: (slave bridge2): failed to get link speed/duplex [ 885.680285][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 885.731845][ T3991] bond4: (slave bridge2): failed to get link speed/duplex [ 885.840154][ T145] bond4: (slave bridge2): failed to get link speed/duplex [ 886.319612][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 886.327732][ C0] lec:lec_tx_timeout: lec0 [ 886.332384][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 888.455933][ T5193] udevd[5193]: worker [27613] /devices/virtual/block/nbd1 timeout; kill it [ 888.464656][ T5193] udevd[5193]: seq 33595 '/devices/virtual/block/nbd1' killed [ 889.810635][ T7339] net_ratelimit: 35 callbacks suppressed [ 889.810668][ T7339] bond4: (slave bridge2): failed to get link speed/duplex [ 889.930850][ T145] bond4: (slave bridge2): failed to get link speed/duplex [ 890.039831][ T145] bond4: (slave bridge2): failed to get link speed/duplex [ 890.150723][ T3991] bond4: (slave bridge2): failed to get link speed/duplex [ 890.261268][ T3999] bond4: (slave bridge2): failed to get link speed/duplex [ 890.371294][ T3991] bond4: (slave bridge2): failed to get link speed/duplex [ 890.481112][ T3999] bond4: (slave bridge2): failed to get link speed/duplex [ 890.589728][ T145] bond4: (slave bridge2): failed to get link speed/duplex [ 890.699878][ T145] bond4: (slave bridge2): failed to get link speed/duplex [ 890.810755][ T145] bond4: (slave bridge2): failed to get link speed/duplex [ 892.079621][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 892.087702][ C0] lec:lec_tx_timeout: lec0 [ 892.092930][ C0] lec:lec_start_xmit: lec0:No lecd attached