last executing test programs: 7m7.442778042s ago: executing program 1 (id=2177): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000880)={'veth0_macvtap\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b7050000000b00006110200000000000d40500002000000095000000000000009abb1723bf2c203831c9545b21c751ee4024f479cbe4b89f9807836ea5847c95ffc926c2e182c7a3221481f5009edaf5f542a715b99fb3d2a73dd02584a54ee68c70dbfbcdcea76ee541e318cbe84cd4f5381f522e258a4d9aeb9b16feb66bf40fdf73be95633dc5de907f2ffdcc18494f09c327abd3a76fee11357181f05f7ac06d6a9078df8bc21f00cd8ac4109850ce4aa147beacafecd5c7ccdeecb146ca1e7611f8b3adb41b39029c1b9b59fbf1b4a80167ca6b113a1600000000000000000000cdb7fe6d684423596ee2bdad7787936c24c84d4721327a695ed24946de35ff5e000091e0610ac2d72b9b6f453f98e7b5a25941905bd564aac36dbe7d1db9f5561ad6f7c2e79fb80b6949d626024b5fb96e3da0d7113b1c826f49a2cbc18001d315aaf280a8a762689f8c6fee958836002f48815ad19ee99d81c9e3cda430cef4a75e5c4dd14c3cbb6af58e3f3b3f8cbd858532b02995d79ca5dac0fd49aa150f6e212e3f46e4f37f372ee43f136e4d3af6cc4a0ce2379cc1010d8483b82e54feeefa1e89d6a3b74fbb4b619c43984223674b40fbe29ea5752c76a5e6a44d95382a9e04f9a51881aedb6d6242d0fe2e7dcf1f8b22f46c37fb010f8e86c62a4c72327c7eaaf720aff72529429aed45219cb1b6476e53b650927d193b4062c4640de2781643edc5e59280c59332e92b52675a02009db11b3829d8424fdf33ccdb7f89bfa14f9c2a17f9183cb48222e685f49340891845efdac175d90c116eaa013315165865f9a3785e21b41fd4b5eda7eb5a7462307fe72a3fe53eb02c75867e6eeebfc3037683f66d407fc28c4735a221bb5b78a6f966474a98ceceb20f0d4757b8e81ab14d29bad2b19aa5aff53ee333009688b401064898f58f88226f0e675cc74f0adaf4b97315e12e88b5eabd519e523a7f0e839fe91774f85a65068de244a78687c12e4e6dffb556c8d30b8ee73faaac455701569da7ae1a4e44fdd2cf28965a9f5e09acf476e07e5ea768c558a5622601742b27b91724dde6a0f96d3e53e67db57bbd0d3f2dd8439192dfc71f9e5f289c7f519e8b794fb09b64fb3c1bcd46731051de09510ebd717eb57655d447753fd2ff052a9d6889ddb5a5f68564bd00a5ff58a75805eadb00000000000000006a9af2471aada1ad164502199e0a668ad4daa53e5658f82733b3c7f36fcf3146adf7025dfd79c5a67c27395f5ca5a90d45402e58b42946b5a977a56385f31083a4b65d61ec4991cd6c91a02bd788825a"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', r6, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0xffffffffffffffff}, 0x94) r7 = socket$inet6(0xa, 0x5, 0x2) setsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000100), 0x4) sendto$inet6(r7, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002e00000008006301"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x9}}, 0x14}}, 0x4004804) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r5, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xd78, 0x80}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48014}, 0x2) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x38, 0x41, 0x1, 0x70bd28, 0x25dfdbfe, {0x1}, [@nested={0x4, 0x48}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0xd, 0x0, 0x0, @ipv6=@private0}]}]}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRESHEX=r4], 0x6c}}, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266"], 0x48}}, 0x0) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0xfc) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) 7m5.914156655s ago: executing program 1 (id=2182): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0x12) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) writev(r0, &(0x7f0000003740)=[{&(0x7f0000000040)="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", 0xfb}, {&(0x7f0000000480)="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", 0xef3}], 0x2) r1 = accept(r0, &(0x7f0000000180), &(0x7f0000000240)=0x80) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000400)={r0, &(0x7f0000000300)='\x00', 0x2800, &(0x7f0000000340)={@_ha_fsid={[0xd4, 0x1]}, {0x8, 0x81, 0x9, 0x5}}, 0x7, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@initr0, @alu={0x7, 0x1, 0xb}]}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x90) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$rds(0x15, 0x5, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc01000019000100000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="feffffffffffffff000000000000000000000000000000000000000001000000a80c00000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000004010500ac1414aa000000000000000000000000000004d53c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003c00000000000000fe8000000000000000000000000000bb00000000000000000008000000000000f6ffffffac1414bb000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000006d0000000a000000fc0100000000000000000000000000000000007c101ed600"/372], 0x1bc}}, 0x0) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000140)=0x1819) 7m4.713592344s ago: executing program 1 (id=2186): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010100, 0x1, 0x7fff, 0x4e23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x4, 0x3ff, 0x9, 0x400100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0xa, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x6, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x6}}, @var={0x1, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x61]}}, 0x0, 0x43, 0x0, 0x1, 0x4}, 0x20) r4 = socket(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e21, 0xa, @dev={0xfe, 0x80, '\x00', 0xa7}, 0x20000002}, 0x1c) getsockopt$sock_buf(r4, 0x1, 0x19, &(0x7f0000000000)=""/218, &(0x7f0000000280)=0xda) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480100001a000100feffffff00010000e0000002000000000000000000000000fc0100000000000000000000000000014e20071c4e210005020000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}}, 0x844) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 7m2.987738625s ago: executing program 1 (id=2192): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xffffffff}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x8) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @initdev}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e7f43201b000000000002000000"], 0x44}}, 0x0) 7m1.793343349s ago: executing program 1 (id=2197): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x19c, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x170, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x160, 0x1, [@m_tunnel_key={0x15c, 0xf, 0x0, 0x0, {{0xf}, {0x4}, {0x12c, 0x6, "49faabd009eada9d7be60c407dafa92f49e8cd3a8f4fa8421129f6125120e80ad1f39b81fe547f4b02f63246313a813a99ecef91e6d9ef24aa123d4ec0ae96adae785c4e501ba800b202cd14d8c0016fc9c4f3ebc53feced9d30abb38c8943dce2293b002415feb1aef9c5838b7441da572c3dbb88fe9a038660b5a726819d6ad3215a715506b990b3cb6a94b4814c025cfb8359678b0dd3a6886ec72652cec96df5e599c2c7d49b94ccd0116b5bcb9e6a48d3be2143e13600975b0c946fb2fcae25e81417995eedb102167ea7b317003e635164b818a467e27cc7199cf942f5ce1fa46815aff9391dd97ef585c6a244384e918cb59cb57e8933b341fe4c47a93b970842d403ebafcc2c43fdc932f5c96503c9b7354bfc53891f3452f1fc67fe898e2944506206f2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0xffffffff, 0x4}, &(0x7f0000000300)=0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="581300004100070127bd7000fefdffff047c000008004280040008000c000180060006"], 0x1358}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fcdbdf250500000014000380040004000400010008000200000000000c00018008000100", @ANYRES32=r7, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={r1, 0x0, 0x3}, 0x8) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_inet6_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f0000000080)) r9 = socket(0x10, 0x2, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) r13 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r15 = socket(0x10, 0x803, 0x0) sendto(r15, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$OSF_MSG_REMOVE(r8, &(0x7f0000002b40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002b00)={&(0x7f0000002180)={0x964, 0x1, 0x5, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [{{0x254, 0x1, {{0x1, 0x5bec}, 0xf0, 0xa8, 0x8, 0xf20, 0x6, 'syz1\x00', "408d23bed87036912744c4f1ec4132110d9619938d92aa528ec3055255aad853", "a4a6de046b53fb0263b709c3c1f158ee05146de95ff40b9c99c2d4b08c38c999", [{0x400, 0x4, {0x2, 0x4}}, {0xffff, 0x92, {0x3, 0x7}}, {0x6a, 0x848, {0x3, 0x5}}, {0x5, 0x909b, {0x3, 0x101}}, {0xfff8, 0xc951, {0x0, 0x7}}, {0x0, 0x2, {0x1, 0xb1af}}, {0xb10, 0x1000, {0x1, 0x7}}, {0x1, 0x100, {0x2, 0x5}}, {0x0, 0x240, {0x3, 0x101}}, {0x8, 0x7, {0x1, 0x8}}, {0xee61, 0xf123, {0x3, 0x8}}, {0x9, 0x5, {0x1, 0x2}}, {0x9, 0x9, {0x0, 0x3}}, {0x9, 0x3, {0x2, 0x7}}, {0x1, 0x2, {0x2, 0xd8}}, {0x7f, 0x7, {0x0, 0x4}}, {0x3, 0x0, {0x0, 0xe}}, {0x9e47, 0x43f6, {0x3, 0xf}}, {0x2, 0x5, {0x0, 0x40}}, {0x339, 0x1, {0x2}}, {0x8, 0xf3, {0x1, 0x100}}, {0x5e, 0x7fff, {0x0, 0x98}}, {0x9, 0x101, {0x1, 0x32d5}}, {0xff80, 0xe}, {0x0, 0x5, {0x1, 0x4}}, {0x2, 0x5, {0x3, 0x400}}, {0x5, 0x5, {0x2, 0x1}}, {0x7, 0x3, {0x3, 0x5}}, {0xfffd, 0x8, {0x0, 0x7}}, {0xfff, 0x200, {0x3, 0x9}}, {0xfff, 0x7fff, {0x3, 0x2}}, {0x8a7, 0x4, {0x3, 0x8}}, {0x3ff, 0x2f0, {0x1, 0x4}}, {0x0, 0x9, {0x1, 0x3}}, {0x5, 0x8000, {0x1, 0x38}}, {0x3d2, 0x3, {0x0, 0x80}}, {0x4, 0x5, {0x1, 0x1}}, {0x107, 0x4, {0x1, 0x2}}, {0x6, 0x5}, {0x80, 0x8001, {0x3, 0x6}}]}}}, {{0x254, 0x1, {{0x0, 0xffff}, 0x1, 0x81, 0x5820, 0xfff, 0x8, 'syz1\x00', "24fa1d16a1bc13b14b8ad637e6dcab193129f8e310e5172061a516eb643b0435", "907b8703a372c44e49bda1bf907bd45cf30a0a55de123e87d8d88fa90f2b2bb0", [{0xa8a, 0x9, {0x1, 0x4}}, {0x5, 0x1, {0x3, 0x4}}, {0x2, 0x40, {0x1, 0x1}}, {0x800, 0x2, {0x2, 0x2}}, {0xc8, 0xff, {0x3, 0xbcb2}}, {0x0, 0x3e, {0x0, 0x7}}, {0x0, 0xfff8, {0x3}}, {0x400, 0x8, {0x0, 0x9}}, {0x7, 0x8001, {0x2, 0x3}}, {0x0, 0x1000, {0x1, 0x4569}}, {0x2, 0x0, {0x0, 0xfffffff8}}, {0x2, 0x7, {0x3, 0x40}}, {0x4523, 0x8, {0x3, 0xf214}}, {0x6, 0xb, {0x1, 0x6}}, {0x6, 0x1, {0x1, 0x9efe}}, {0x0, 0x8, {0x1, 0x9}}, {0xf8, 0x6, {0x1, 0xdbb}}, {0x1, 0x1, {0x0, 0x400}}, {0xf453, 0x60f, {0x3, 0x45}}, {0x2, 0x7fff, {0x3, 0xa}}, {0x9, 0x1, {0x0, 0x9}}, {0x9, 0x6, {0x3, 0x5}}, {0xaf1, 0x2, {0x1, 0x1c}}, {0x2, 0x3, {0x1, 0xe}}, {0x3, 0xbd3, {0x3, 0xd4b}}, {0x7ff, 0x10, {0x1, 0x9fa6}}, {0x0, 0x9, {0x1, 0x7}}, {0x1, 0x5, {0x2, 0x8}}, {0x3, 0x5, {0x0, 0x7}}, {0xc3cb, 0x9, {0x2, 0x10000}}, {0xf, 0xb6, {0x0, 0x3}}, {0x68, 0x8, {0x3, 0x80000000}}, {0x5, 0xfff8, {0x0, 0x401}}, {0x9, 0x2, {0x0, 0x5}}, {0xa, 0xd05, {0x0, 0x7}}, {0x9, 0x9, {0x0, 0x401}}, {0x3ff, 0x3, {0x0, 0x9}}, {0x3, 0x7, {0x1, 0xdeab}}, {0x2, 0x4, {0x0, 0x5}}, {0x8, 0x0, {0x2, 0x8}}]}}}, {{0x254, 0x1, {{0x1, 0x78}, 0x9, 0x2, 0x1, 0x1, 0x1, 'syz0\x00', "199eb2db34d5822cbeb63711f2196ad20714e6d001b377203e92f04dd7df57a2", "8c7e63c578bfadc2bcb8b1f22ff8baeaf5ac64433782f8ba4961901a124bc5d1", [{0xfffa, 0x101, {0x3, 0x3}}, {0x6, 0x2, {0x2}}, {0x4, 0x800, {0x2, 0xfffffffd}}, {0x8, 0x7ff, {0x1, 0x6}}, {0x1, 0xf, {0x1, 0xd}}, {0x6, 0x5, {0x2, 0x1b1}}, {0x2, 0x6, {0x1, 0x9}}, {0x81, 0x1, {0x2, 0x10}}, {0x1ff, 0x8000, {0x2, 0x6}}, {0x400, 0x100, {0x2, 0x800}}, {0x7, 0x9, {0x1, 0x9}}, {0x5, 0x80, {0x0, 0xe73}}, {0x7, 0x1, {0x0, 0x9}}, {0x6, 0x2}, {0x12, 0x6, {0x1, 0x7fffffff}}, {0x5, 0x6, {0x3, 0x3}}, {0x4, 0x9, {0x1, 0x2bc}}, {0xfff4, 0x8c87, {0x0, 0x5}}, {0x1, 0x401, {0x3, 0x2}}, {0x8, 0x5, {0x2, 0x66c}}, {0x2324, 0x6d5e, {0x2, 0x6595}}, {0x2, 0x8, {0x1}}, {0x9, 0x0, {0x0, 0x7}}, {0x2, 0xfff, {0x1, 0x30}}, {0x3, 0x400, {0x0, 0x8}}, {0x4, 0x0, {0x0, 0x93}}, {0x450, 0x14b1, {0x2, 0x1}}, {0x1ff, 0x9, {0x2, 0x981}}, {0x80, 0xfffa, {0x0, 0x4e3}}, {0x0, 0x2, {0x2e7ca1f3da841870, 0x5}}, {0x7, 0x40, {0x3, 0xffffa35b}}, {0x8, 0x9, {0x2, 0x8000}}, {0x97b3, 0xd8c6, {0x2, 0x6}}, {0x0, 0xacc, {0x2, 0x3ff}}, {0x401, 0x7, {0x1, 0xb}}, {0xffff, 0x3, {0x3, 0x7}}, {0xf, 0xe, {0x3, 0x80000000}}, {0x8, 0xaf, {0x0, 0x5}}, {0xf, 0xffff, {0x0, 0x7d}}, {0x5, 0x3, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x2, 0x5}, 0x60, 0x1, 0x6, 0x1, 0x13, 'syz1\x00', "578e4c8e6c899e22677e507089fc06a8f721c97c68edac61886e12dd5f862ad8", "8972acfa191f8dcd2b65a34b65ce1604042089e2fa63daa5375e8c012488ae25", [{0xfff8, 0xe, {0x2, 0x7}}, {0x7, 0xa2a, {0x3, 0x6}}, {0x84, 0x80, {0x2, 0xfffffffd}}, {0x8, 0x6a, {0x2, 0x2}}, {0x3, 0x0, {0x2, 0x291}}, {0x4, 0xa, {0x3, 0x6}}, {0x8, 0x6, {0x2, 0x4c8a3e24}}, {0x0, 0x1, {0x3, 0x7}}, {0x2, 0x2, {0x2, 0x6e8}}, {0x80, 0x6, {0x2, 0x7}}, {0x8, 0xe, {0x2, 0xfffeffff}}, {0x4ef3, 0xe793, {0x2, 0x1}}, {0x7fff, 0x3, {0x3, 0x54a}}, {0x4ab, 0x4d4, {0x0, 0xffffff1d}}, {0x3ff, 0x1, {0x2, 0xfffffff7}}, {0x9, 0x3, {0x3, 0x10000}}, {0x3, 0xa, {0x0, 0xffffffff}}, {0x5, 0x7, {0x2, 0x9}}, {0x9, 0x6, {0x1, 0x800}}, {0x5ad, 0x4, {0x3, 0x7ff}}, {0x7, 0xd9, {0x0, 0x4f}}, {0x7, 0x5, {0x2, 0x3}}, {0x6, 0x1ff, {0x3, 0x60e}}, {0x9, 0x4, {0x0, 0x401}}, {0x4, 0xc, {0x2, 0x1000}}, {0x8, 0x0, {0x1, 0x8}}, {0xf, 0x8, {0x2, 0x2}}, {0x8001, 0xe, {0x2, 0x400}}, {0x7, 0xe, {0x2, 0x80000000}}, {0x9, 0x8, {0x0, 0x200}}, {0x1bb, 0x6, {0x2, 0x1}}, {0x9, 0x401, {0x1, 0x3}}, {0x3, 0x2, {0x0, 0x9}}, {0xc554, 0xfff, {0x0, 0x3}}, {0x0, 0xb, {0x1, 0x4}}, {0x4, 0x3, {0x3}}, {0xfff6, 0x7, {0x2, 0x3}}, {0x0, 0x1000, {0x0, 0x3}}, {0x8, 0xffff, {0x2, 0x8}}, {0x3, 0x8, {0x0, 0x8b43}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_generic(r16, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002f00090000000000000000000400000004001d0004001e"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 6m46.185445074s ago: executing program 32 (id=2197): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x19c, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x170, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x160, 0x1, [@m_tunnel_key={0x15c, 0xf, 0x0, 0x0, {{0xf}, {0x4}, {0x12c, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0xffffffff, 0x4}, &(0x7f0000000300)=0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="581300004100070127bd7000fefdffff047c000008004280040008000c000180060006"], 0x1358}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fcdbdf250500000014000380040004000400010008000200000000000c00018008000100", @ANYRES32=r7, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={r1, 0x0, 0x3}, 0x8) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_inet6_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f0000000080)) r9 = socket(0x10, 0x2, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) r13 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r15 = socket(0x10, 0x803, 0x0) sendto(r15, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$OSF_MSG_REMOVE(r8, &(0x7f0000002b40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002b00)={&(0x7f0000002180)={0x964, 0x1, 0x5, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [{{0x254, 0x1, {{0x1, 0x5bec}, 0xf0, 0xa8, 0x8, 0xf20, 0x6, 'syz1\x00', "408d23bed87036912744c4f1ec4132110d9619938d92aa528ec3055255aad853", "a4a6de046b53fb0263b709c3c1f158ee05146de95ff40b9c99c2d4b08c38c999", [{0x400, 0x4, {0x2, 0x4}}, {0xffff, 0x92, {0x3, 0x7}}, {0x6a, 0x848, {0x3, 0x5}}, {0x5, 0x909b, {0x3, 0x101}}, {0xfff8, 0xc951, {0x0, 0x7}}, {0x0, 0x2, {0x1, 0xb1af}}, {0xb10, 0x1000, {0x1, 0x7}}, {0x1, 0x100, {0x2, 0x5}}, {0x0, 0x240, {0x3, 0x101}}, {0x8, 0x7, {0x1, 0x8}}, {0xee61, 0xf123, {0x3, 0x8}}, {0x9, 0x5, {0x1, 0x2}}, {0x9, 0x9, {0x0, 0x3}}, {0x9, 0x3, {0x2, 0x7}}, {0x1, 0x2, {0x2, 0xd8}}, {0x7f, 0x7, {0x0, 0x4}}, {0x3, 0x0, {0x0, 0xe}}, {0x9e47, 0x43f6, {0x3, 0xf}}, {0x2, 0x5, {0x0, 0x40}}, {0x339, 0x1, {0x2}}, {0x8, 0xf3, {0x1, 0x100}}, {0x5e, 0x7fff, {0x0, 0x98}}, {0x9, 0x101, {0x1, 0x32d5}}, {0xff80, 0xe}, {0x0, 0x5, {0x1, 0x4}}, {0x2, 0x5, {0x3, 0x400}}, {0x5, 0x5, {0x2, 0x1}}, {0x7, 0x3, {0x3, 0x5}}, {0xfffd, 0x8, {0x0, 0x7}}, {0xfff, 0x200, {0x3, 0x9}}, {0xfff, 0x7fff, {0x3, 0x2}}, {0x8a7, 0x4, {0x3, 0x8}}, {0x3ff, 0x2f0, {0x1, 0x4}}, {0x0, 0x9, {0x1, 0x3}}, {0x5, 0x8000, {0x1, 0x38}}, {0x3d2, 0x3, {0x0, 0x80}}, {0x4, 0x5, {0x1, 0x1}}, {0x107, 0x4, {0x1, 0x2}}, {0x6, 0x5}, {0x80, 0x8001, {0x3, 0x6}}]}}}, {{0x254, 0x1, {{0x0, 0xffff}, 0x1, 0x81, 0x5820, 0xfff, 0x8, 'syz1\x00', "24fa1d16a1bc13b14b8ad637e6dcab193129f8e310e5172061a516eb643b0435", "907b8703a372c44e49bda1bf907bd45cf30a0a55de123e87d8d88fa90f2b2bb0", [{0xa8a, 0x9, {0x1, 0x4}}, {0x5, 0x1, {0x3, 0x4}}, {0x2, 0x40, {0x1, 0x1}}, {0x800, 0x2, {0x2, 0x2}}, {0xc8, 0xff, {0x3, 0xbcb2}}, {0x0, 0x3e, {0x0, 0x7}}, {0x0, 0xfff8, {0x3}}, {0x400, 0x8, {0x0, 0x9}}, {0x7, 0x8001, {0x2, 0x3}}, {0x0, 0x1000, {0x1, 0x4569}}, {0x2, 0x0, {0x0, 0xfffffff8}}, {0x2, 0x7, {0x3, 0x40}}, {0x4523, 0x8, {0x3, 0xf214}}, {0x6, 0xb, {0x1, 0x6}}, {0x6, 0x1, {0x1, 0x9efe}}, {0x0, 0x8, {0x1, 0x9}}, {0xf8, 0x6, {0x1, 0xdbb}}, {0x1, 0x1, {0x0, 0x400}}, {0xf453, 0x60f, {0x3, 0x45}}, {0x2, 0x7fff, {0x3, 0xa}}, {0x9, 0x1, {0x0, 0x9}}, {0x9, 0x6, {0x3, 0x5}}, {0xaf1, 0x2, {0x1, 0x1c}}, {0x2, 0x3, {0x1, 0xe}}, {0x3, 0xbd3, {0x3, 0xd4b}}, {0x7ff, 0x10, {0x1, 0x9fa6}}, {0x0, 0x9, {0x1, 0x7}}, {0x1, 0x5, {0x2, 0x8}}, {0x3, 0x5, {0x0, 0x7}}, {0xc3cb, 0x9, {0x2, 0x10000}}, {0xf, 0xb6, {0x0, 0x3}}, {0x68, 0x8, {0x3, 0x80000000}}, {0x5, 0xfff8, {0x0, 0x401}}, {0x9, 0x2, {0x0, 0x5}}, {0xa, 0xd05, {0x0, 0x7}}, {0x9, 0x9, {0x0, 0x401}}, {0x3ff, 0x3, {0x0, 0x9}}, {0x3, 0x7, {0x1, 0xdeab}}, {0x2, 0x4, {0x0, 0x5}}, {0x8, 0x0, {0x2, 0x8}}]}}}, {{0x254, 0x1, {{0x1, 0x78}, 0x9, 0x2, 0x1, 0x1, 0x1, 'syz0\x00', "199eb2db34d5822cbeb63711f2196ad20714e6d001b377203e92f04dd7df57a2", "8c7e63c578bfadc2bcb8b1f22ff8baeaf5ac64433782f8ba4961901a124bc5d1", [{0xfffa, 0x101, {0x3, 0x3}}, {0x6, 0x2, {0x2}}, {0x4, 0x800, {0x2, 0xfffffffd}}, {0x8, 0x7ff, {0x1, 0x6}}, {0x1, 0xf, {0x1, 0xd}}, {0x6, 0x5, {0x2, 0x1b1}}, {0x2, 0x6, {0x1, 0x9}}, {0x81, 0x1, {0x2, 0x10}}, {0x1ff, 0x8000, {0x2, 0x6}}, {0x400, 0x100, {0x2, 0x800}}, {0x7, 0x9, {0x1, 0x9}}, {0x5, 0x80, {0x0, 0xe73}}, {0x7, 0x1, {0x0, 0x9}}, {0x6, 0x2}, {0x12, 0x6, {0x1, 0x7fffffff}}, {0x5, 0x6, {0x3, 0x3}}, {0x4, 0x9, {0x1, 0x2bc}}, {0xfff4, 0x8c87, {0x0, 0x5}}, {0x1, 0x401, {0x3, 0x2}}, {0x8, 0x5, {0x2, 0x66c}}, {0x2324, 0x6d5e, {0x2, 0x6595}}, {0x2, 0x8, {0x1}}, {0x9, 0x0, {0x0, 0x7}}, {0x2, 0xfff, {0x1, 0x30}}, {0x3, 0x400, {0x0, 0x8}}, {0x4, 0x0, {0x0, 0x93}}, {0x450, 0x14b1, {0x2, 0x1}}, {0x1ff, 0x9, {0x2, 0x981}}, {0x80, 0xfffa, {0x0, 0x4e3}}, {0x0, 0x2, {0x2e7ca1f3da841870, 0x5}}, {0x7, 0x40, {0x3, 0xffffa35b}}, {0x8, 0x9, {0x2, 0x8000}}, {0x97b3, 0xd8c6, {0x2, 0x6}}, {0x0, 0xacc, {0x2, 0x3ff}}, {0x401, 0x7, {0x1, 0xb}}, {0xffff, 0x3, {0x3, 0x7}}, {0xf, 0xe, {0x3, 0x80000000}}, {0x8, 0xaf, {0x0, 0x5}}, {0xf, 0xffff, {0x0, 0x7d}}, {0x5, 0x3, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x2, 0x5}, 0x60, 0x1, 0x6, 0x1, 0x13, 'syz1\x00', "578e4c8e6c899e22677e507089fc06a8f721c97c68edac61886e12dd5f862ad8", "8972acfa191f8dcd2b65a34b65ce1604042089e2fa63daa5375e8c012488ae25", [{0xfff8, 0xe, {0x2, 0x7}}, {0x7, 0xa2a, {0x3, 0x6}}, {0x84, 0x80, {0x2, 0xfffffffd}}, {0x8, 0x6a, {0x2, 0x2}}, {0x3, 0x0, {0x2, 0x291}}, {0x4, 0xa, {0x3, 0x6}}, {0x8, 0x6, {0x2, 0x4c8a3e24}}, {0x0, 0x1, {0x3, 0x7}}, {0x2, 0x2, {0x2, 0x6e8}}, {0x80, 0x6, {0x2, 0x7}}, {0x8, 0xe, {0x2, 0xfffeffff}}, {0x4ef3, 0xe793, {0x2, 0x1}}, {0x7fff, 0x3, {0x3, 0x54a}}, {0x4ab, 0x4d4, {0x0, 0xffffff1d}}, {0x3ff, 0x1, {0x2, 0xfffffff7}}, {0x9, 0x3, {0x3, 0x10000}}, {0x3, 0xa, {0x0, 0xffffffff}}, {0x5, 0x7, {0x2, 0x9}}, {0x9, 0x6, {0x1, 0x800}}, {0x5ad, 0x4, {0x3, 0x7ff}}, {0x7, 0xd9, {0x0, 0x4f}}, {0x7, 0x5, {0x2, 0x3}}, {0x6, 0x1ff, {0x3, 0x60e}}, {0x9, 0x4, {0x0, 0x401}}, {0x4, 0xc, {0x2, 0x1000}}, {0x8, 0x0, {0x1, 0x8}}, {0xf, 0x8, {0x2, 0x2}}, {0x8001, 0xe, {0x2, 0x400}}, {0x7, 0xe, {0x2, 0x80000000}}, {0x9, 0x8, {0x0, 0x200}}, {0x1bb, 0x6, {0x2, 0x1}}, {0x9, 0x401, {0x1, 0x3}}, {0x3, 0x2, {0x0, 0x9}}, {0xc554, 0xfff, {0x0, 0x3}}, {0x0, 0xb, {0x1, 0x4}}, {0x4, 0x3, {0x3}}, {0xfff6, 0x7, {0x2, 0x3}}, {0x0, 0x1000, {0x0, 0x3}}, {0x8, 0xffff, {0x2, 0x8}}, {0x3, 0x8, {0x0, 0x8b43}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_generic(r16, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002f00090000000000000000000400000004001d0004001e"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 4m52.554075274s ago: executing program 5 (id=2559): r0 = socket$inet6_sctp(0xa, 0x2, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r1, 0x8}, &(0x7f00000000c0)=0x8) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000100)) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @broadcast}}, 0x0, 0x0, 0x28, 0x0, "f4c6c2bf6cfea647a0a097e39c00ef6f38dd79d66f9f13fce39c934f906896f7a8219febec90fed5d6b511caecd2268e6848fb0d6816ecf8da3f9ff296b26e079ecf1608d827dcd5864d3a2900601d57"}, 0xd8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@private1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000000500)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0)={0x0}, &(0x7f0000000600)=0xc) r8 = gettid() r9 = getpid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001a00)={0x0, 0x0, 0x0}, &(0x7f0000001a40)=0xc) r12 = getgid() r13 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001a80), 0x4) r14 = openat$cgroup(r2, &(0x7f0000001ac0)='syz1\x00', 0x200002, 0x0) r15 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$netlink(r4, &(0x7f0000001b80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0xc, &(0x7f0000001980)=[{&(0x7f00000003c0)={0x24, 0x3d, 0x4, 0x6, 0x25dfdbfd, "", [@typed={0x14, 0x7b, 0x0, 0x0, @ipv6=@empty}, @generic]}, 0x24}, {&(0x7f0000000540)={0x80, 0x1d, 0x800, 0x70bd2c, 0x25dfdbfe, "", [@typed={0xc, 0x14e, 0x0, 0x0, @u64=0x8000000000000000}, @generic="abec4a4b3dffa12a9a64c5c927c8eaf539f7f2fb4260d04cd3838a6920b96fbce8d2b037624c8483514a4cadd1daaab95a7408a669a0c8f3f79cb3e8ae742ea7180034e8512f3168ec6c11af202e2ade5782ec434b2e51e9fda0f954", @typed={0x8, 0x6c, 0x0, 0x0, @uid=r6}]}, 0x80}, {&(0x7f0000000640)={0x1274, 0x12, 0x28, 0x70bd2d, 0x25dfdbfb, "", [@nested={0xe4, 0xf, 0x0, 0x1, [@nested={0x4, 0xc2}, @nested={0x4, 0x102}, @generic="e22429bcb8984f8c6a39cf9053f4d037561106c54df70489ef0404af0d0db21fe615c6eca892dd64ad0afe8d82a9ab3db2d17211835a9d043720e922ac288f15e150bbcf5101abaa8fa304efaf5455e1befdbff2a6bdcb04c7e6b45d82bf269188f75bab5eb0b55ed44afe6f965bdf6792368c495764c1ec6819822bc22b4bd8ec1d14d1768a4b9c364e0e5112262309dba3a6be4f2d610221089971e3c076531f9bab1af3a6621fe9ccfd5652ee44d1c8cc086c5070197145347778db2e1e6adc3c8821011312b29c7fe88d24691a9111b4d3137e4bac06"]}, @typed={0x8, 0x6b, 0x0, 0x0, @fd=r4}, @nested={0x10, 0x13, 0x0, 0x1, [@typed={0xc, 0x153, 0x0, 0x0, @u64=0x3}]}, @typed={0x8, 0x6a, 0x0, 0x0, @pid=r7}, @typed={0x8, 0x6c, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="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", @generic="20c3cd3c8c70f4d8c1ddf7f98fda395755e567a128986ec6158ec569f70a10059a4a7e26847c5c6a5d04069c7e8209a3342a0c267f8c8ba1d63fbf15f06b0e9dd1856a9f2f15031ca498082dc6132828da0b3e83b31d53048aeab902a1e4ad0556366fc6750516813206dfe8ef236744ee9654cf65ddcd97cf29c6b52439649793f212e68675c7952f15be7ab834581c8d42786a213445ceae2786fabe63820b73f62a873075b4840c20a5b02899f58d7310a33c787fc8c8a82b817cf2799f8b76b0", @typed={0x6, 0x65, 0x0, 0x0, @str='\x86\x00'}, @generic="05282ffece3f81e5d98cbd7ceb242b07e178d26b1bb85ed52e3b8cfea2437491cdb5282ee82cb26aa2130c1e7c0d3a63aaaeaecf8fe231c4e5ae10d3ef2004efb7d48239e4081687b5247e6910e6df00dbe3198cca5a084b0182dbe2372c1af0927613190c2b0e268cedbc047993fac8270c467fcccd1d7383c555df8e8d2aad4f3f109311d188fa698cb9ccd7"]}, 0x1274}, {&(0x7f00000018c0)={0x4c, 0x19, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x34, 0x140, 0x0, 0x0, @binary="0760ff09fa0c085060fb837d8cf7883f0f383ff75df0ed68842da238ea639a73913bc5ec00b88aab56d7909ce16d2d50"}, @typed={0x8, 0x7, 0x0, 0x0, @pid=r8}]}, 0x4c}, {&(0x7f0000001940)={0x18, 0x41, 0x728, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x8, 0x40, 0x0, 0x0, @u32=0xe}]}, 0x18}], 0x5, &(0x7f0000001b00)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r12}}}, @rights={{0x2c, 0x1, 0x1, [r13, r4, r14, r15, r2, r2, r3]}}], 0x50, 0x400c010}, 0x50) r16 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_RTHDR(r16, 0x29, 0x39, &(0x7f0000001bc0)={0x2c, 0x6, 0x2, 0x6, 0x0, [@rand_addr=' \x01\x00', @private1, @private1]}, 0x38) pipe(&(0x7f0000001c00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000001c40)={0x0}, &(0x7f0000001c80)=0xc) ioctl$TUNSETGROUP(r18, 0x400454ce, r11) ioctl$sock_SIOCGPGRP(r17, 0x8904, &(0x7f0000001cc0)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000001d00)=r19) close(r17) r20 = syz_genetlink_get_family_id$devlink(&(0x7f0000001d80), r17) sendmsg$DEVLINK_CMD_TRAP_SET(r18, &(0x7f0000001ec0)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x98, r20, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000050) 4m50.889463492s ago: executing program 5 (id=2566): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0}, 0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(0xffffffffffffffff, 0x200) socket$netlink(0x10, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r2, 0x215eb000) socket$kcm(0x10, 0x400000002, 0x0) r3 = socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) bind$bt_rfcomm(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000040)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, 'team0\x00'}}, 0x1e) connect$pppoe(r6, &(0x7f0000000b00)={0x18, 0x0, {0x0, @random="e0c14410b9dc", 'ip6gretap0\x00'}}, 0x1e) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x50, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x14080803) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2711, @host}, 0x10) recvfrom(r7, &(0x7f0000000380)=""/49, 0xfec6, 0x10022, 0x0, 0x0) close(0x3) 4m50.142823609s ago: executing program 0 (id=2570): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb5, &(0x7f0000000100)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x12, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf7, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x7a, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000680)=@abs, &(0x7f0000000700)=0x6e, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r3, &(0x7f0000000880)={&(0x7f0000000780), 0x10, &(0x7f0000000840)={&(0x7f00000007c0)={0x5, 0x0, 0x7, {0x77359400}, {0x77359400}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x22, 0x0, 0x0, 0x0, "9628b78fd8f6c9e3da4046a979ed925cea5bdcc2d12782327f0bcef2abc5431a16cda9b0d47c4bb73a46e5bf6d97f72b5b8eca79f6a52ec30324b9906b622454"}}, 0x80}, 0x1, 0x0, 0x0, 0x8001}, 0x20040001) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000940)={r0, r4}, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) (async) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000b00)={&(0x7f00000009c0)={0x1d, r5}, 0x10, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x2, 0x0, 0x8f, {r6, r7/1000+60000}, {0x77359400}, {0x1, 0x1}, 0x1, @can={{0x6, 0x1, 0x1, 0x1}, 0x6, 0x3, 0x0, 0x0, "122039db108c2fe0"}}, 0x48}, 0x1, 0x0, 0x0, 0x844}, 0x40) (async) pselect6(0x40, &(0x7f0000000b40)={0x9, 0x3, 0x9a7, 0x39d, 0x3, 0x9, 0x7fffffff, 0xfffffffffffffff0}, &(0x7f0000000b80)={0x25, 0x7, 0x7, 0x8001, 0x101, 0x8000000000000001, 0xac, 0x3}, &(0x7f0000000bc0)={0xe7e, 0x81, 0x0, 0x0, 0x6, 0x3, 0xfffffffffffffff9, 0xa5f}, &(0x7f0000000c00), &(0x7f0000000c80)={&(0x7f0000000c40)={[0x2]}, 0x8}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000d00), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000e00)={'ip6tnl0\x00', &(0x7f0000000d80)={'ip6_vti0\x00', r1, 0x2f, 0x8, 0xff, 0x6, 0x0, @remote, @remote, 0x7800, 0x8, 0x14db, 0x4}}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000001000)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x154, r9, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r10}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x10, 0xfa, 0x7f}, {0x7, 0x8, 0x51, 0x6}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x880) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000001040), &(0x7f0000001080)=0x30) sendmsg(r8, &(0x7f00000014c0)={&(0x7f00000010c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x3, 0x4, 0x3, 0x1, {0xa, 0x4e21, 0x9, @loopback, 0x1}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001140)="8c85bd0206eae53997b1911b8171a4d7161a71f19bfc165a3d3dfc48c41b9b1951bef346772325f647b77f75463b8fec42d8850d9f0b451dccff5d909c3e6d632d1139989681374fc5751cd24b9ab087d9f7ab6dac134c4284a3aa6b5bdd18a4ceeeca9cf02ddc20846bd9a2", 0x6c}, {&(0x7f00000011c0)="632e90dedb43d8e6a08fd2ca8a983ad51a0a8b877536761589a726b443baecda1f775aa55c10ad04fd4c33e7e73b7c8d793ec907124fa94812d02d5b02f6606bcbcd8c9be3c6cfdd4b834cfd1540fd8f5dfc07fbcb0a2fc44668e1eeb784b5a1d37781490740a0b78b2a2f4ae7f9f78ce6ea97c07e39d0cb11642ab12db0946c5f6bdd039d2485b5ed17fc8702cc8e0c3ee30076031dfc44b0f52a4b", 0x9c}, {&(0x7f0000001280)="e1fbc9519c67f9106ce2b7d826833db5cb31e6a76dbdef2f26d99d277413499443208c3cc571ad84f8836ee505200257fc530bd660c6e601dbf3ebdf4c5be7dae23f0e32d5ed54a5f14a53e082d7ac2b6f0ed5848e55b78e4b2e671241176e93a0b9758b1aeb8bf20ac50b3c91ff3353ba03760c7defefdd48d346adf1d4bd488f", 0x81}, {&(0x7f0000001340)="8b9040b0e3810f5921e5f8176f57ef5284959cc9cf1135cc30f2266f0b7f901ab1df9fd30e5b16613a9e91e763209182661fe9aa037d6e4aa00f2df615686b806ba58e87c6d02eaf0f332ed54bc60dc7bce5a3a2634d63d91721365552a226805b0133f68c422f8f1fc7524d77f1fc9dd6499fd20cbbc4191fe3f2a5e5e039eda2f8b0998d4accb41f27fc29d15632567196df10662650823ac4c8c5200d1675cdcd72503a0ff410d90c6d70629809de", 0xb0}], 0x4, &(0x7f0000001440)=[{0x50, 0x102, 0xd, "147e083f9a7337d19a86517f60466ec5cb34dbd839de88fbe5fc03485102862846752a51cde9896b635a053209acf17769d2910fb0e8517c8ab1d73ac3"}, {0x28, 0x116, 0x3, "d3a43d8e132babbd90684921127700a8f72b2b6c"}], 0x78}, 0xd0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0xe8b9481f5e41cb41}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)=@delnexthop={0x58, 0x69, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001640)={0x4, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001680)=r13, 0x4) (async) nanosleep(&(0x7f00000016c0), &(0x7f0000001700)) (async) r14 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r14, 0x8983, &(0x7f0000001740)={0x7, 'bond_slave_0\x00', {0x9}, 0x9}) (async) r15 = accept$packet(0xffffffffffffffff, &(0x7f0000001780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000017c0)=0x14) ioctl$FS_IOC_READ_VERITY_METADATA(r15, 0xc0286687, &(0x7f0000001900)={0x1, 0x1, 0xde, &(0x7f0000001800)=""/222}) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000002a00)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001940)=""/164, 0xa4, 0x0, &(0x7f0000001a00)=""/4096, 0x1000}, &(0x7f0000002a40)=0x40) 4m48.480162387s ago: executing program 0 (id=2573): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112bd000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @loopback, 0x4}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000001740)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x18, 0x3a, 0xff, @mcast1, @private2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x3, '\x00', @empty}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x8c, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x84890}, 0x41) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYBLOB="1b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x118, r4, 0x0, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x42}}}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x3f2}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xe0, 0xac, "b54b7a1fcf200e55dd03dbb255bf9f57601f35d20eedc5352675e5a2ddc79111498b6019150100bc0e9b42749dec6e0dd6fa6541c4faaf3afcb46efe4686f575acf7318c8ce76fde9387443f89c3dcd7aa19ce23d42bb6e415eb6c60013beb50bcc72266f2670fa9d4287f09ec2eb0e5e6a1ae9f784c40b4f8c66436dc5df8d3ccb41cc219e047d425288273eeb977062df5052d6dfc249b0ffbd2b5995a2709c8d4bcdb803b531c1c182ff0860ffbb8c406bb24c1ba9a6348031bcba9c119d586dbbb47956032b38bca598d7165778da723a4ff3b84b8753cef9d7b"}]}, 0x118}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r4, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x3d}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x4) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0f2ff02ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10002, 0xf2b70000}}}}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, "4526000000927650", '\x00', "c406b192"}, 0x28) 4m48.337620158s ago: executing program 4 (id=2574): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000040)) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xfff2, 0xffff}, {0xa}}}, 0x24}}, 0x0) recvmsg(r0, &(0x7f0000000900)={&(0x7f0000000080)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000100)=""/175, 0xaf}, {&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/113, 0x71}, {&(0x7f0000000540)=""/240, 0xf0}, {&(0x7f0000000640)=""/153, 0x99}, {&(0x7f0000000700)=""/88, 0x58}], 0x6, &(0x7f0000000800)=""/210, 0xd2}, 0x40000100) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000040)) (async) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xfff2, 0xffff}, {0xa}}}, 0x24}}, 0x0) (async) recvmsg(r0, &(0x7f0000000900)={&(0x7f0000000080)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000100)=""/175, 0xaf}, {&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/113, 0x71}, {&(0x7f0000000540)=""/240, 0xf0}, {&(0x7f0000000640)=""/153, 0x99}, {&(0x7f0000000700)=""/88, 0x58}], 0x6, &(0x7f0000000800)=""/210, 0xd2}, 0x40000100) (async) 4m48.020446704s ago: executing program 2 (id=2575): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x6, [@func={0x4, 0x0, 0x0, 0xc, 0x4}, @restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}, @func_proto]}, {0x0, [0x0, 0x0, 0x0, 0x3a6f5491e0ad3b4f]}}, 0x0, 0x56}, 0x20) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200001400490005ac0f000cac0f0004ac0f00fcab0f00"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket(0x1a, 0x3, 0x2) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001600156f000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="140006"], 0x2c}}, 0x0) 4m47.057555346s ago: executing program 2 (id=2577): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811005000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) syz_emit_ethernet(0x36, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r3, @ANYBLOB="14000100ff05000000000000dfce000000000001"], 0x34}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) connect(r2, &(0x7f0000000940)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x4, 0x3, 0x0, {0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}}, 0x80) r6 = socket$kcm(0x11, 0x2, 0x0) ioctl$XFS_IOC_INUMBERS(r1, 0x80405880, &(0x7f0000000880)={{0x81, 0x2, 0x1, 0x0, 0x8ac}, [{0x0, 0x1, 0x6, 0xff}, {0x6, 0x200, 0x2, 0x3}, {0x7fff, 0x3, 0x5, 0x1}, {0x315b, 0x1, 0x1, 0x9}, {0x80000001, 0x7, 0x1, 0xf8}]}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x26, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000900000000001c550d0100000000009500000000000000181200"/60, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000185a00000b000000000000000000000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000185900000b00000000000000000000009500000000000000851000000800000085100000f9ffffff1800000006000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000010000008500000000000000b7000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0xb, 0x6b, &(0x7f0000000300)=""/107, 0x41000, 0x8, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xc, 0x6f, 0x10}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000400)=[{0x1, 0x2, 0x7, 0xa}, {0x2, 0x1, 0x10, 0x6}, {0x0, 0x5, 0x2, 0x5}], 0x10, 0x9}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r7, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540), &(0x7f00000005c0)=[0x0], 0x0, 0x6e, &(0x7f0000000640)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x8b, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) sendmsg$sock(r6, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) recvmsg$kcm(r6, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[], 0x34}}, 0x4000004) 4m47.057268726s ago: executing program 3 (id=2578): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448dd, &(0x7f0000000940)={0x0, 0x0}) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) (async, rerun: 32) close(0x3) (rerun: 32) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000000c0)={r3, r3, 0x3, 0x0, 0x0, 0xe, 0x4, 0x8, 0x9, 0x3, 0x3, 0x2, 'syz1\x00'}) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 4m46.930596676s ago: executing program 4 (id=2579): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711214000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7e45, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) 4m46.83195279s ago: executing program 0 (id=2580): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000080)=0x3, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f0000000280)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="7c000029d8000000000000000000000500000000", @ANYRES32=r1, @ANYBLOB="080009000100000008000a0000000000080008004401000008000a0001000000080008008000000014000100fe8000000000000000000000000000371400060006000000830500008e000000060f000014000600ffffff7f0200"/100], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2) tee(r0, r0, 0x8, 0x10) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000300)={@dev, @private, 0x0}, &(0x7f0000000340)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000380)={'tunl0\x00', r1, 0x40, 0x700, 0x4, 0x8, {{0x6, 0x4, 0x2, 0x22, 0x18, 0x65, 0x0, 0x35, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1f}, {[@ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000400)={'sit0\x00', r1, 0x8, 0x8, 0x5, 0xfff, {{0x2c, 0x4, 0x2, 0x8, 0xb0, 0x64, 0x0, 0x5a, 0x6, 0x0, @remote, @local, {[@timestamp={0x44, 0x14, 0xca, 0x0, 0x5, [0x1, 0xfffffff8, 0xd613, 0x3]}, @generic={0x44, 0x10, "9174ec0c984ecb5859d4aca4ba6f"}, @cipso={0x86, 0xf, 0xffffffffffffffff, [{0x0, 0x9, "88879f80342bed"}]}, @timestamp_prespec={0x44, 0x44, 0x89, 0x3, 0x5, [{@remote, 0x1}, {@loopback, 0x2}, {@local, 0x9}, {@multicast2, 0x6}, {@private=0xa010100}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@multicast2, 0x1}, {@multicast2, 0x4}]}, @cipso={0x86, 0x1b, 0x1, [{0x0, 0x2}, {0x6, 0xf, "272861875bd199c13dff7925d0"}, {0x0, 0x4, '!~'}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000c40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="b8050000", @ANYRES16=r4, @ANYBLOB="000825bd7000fedbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="bc0102805c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c0004000800024002000000090006083ef600007f00090605000000030006ff661c0000390142800700000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400050000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000200000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400d9000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400c82eb31108000600", @ANYRES32=r5, @ANYBLOB="1c000100e1988d91ac888c7c8c95fd01df17425905bd3ec85adeeb1cd8bda0fee1d81b1aba884ffa0782103970fdecd1eb3b9d5c3ebdbbf559c28de8ad11c29ae1b110b0482c4c5ca36ab19546b8a51cb407d07d145c3bb2627c2cc8cb3658cd69c53307c425b7697939e03f76fcc2be61b1dd15ef1d7f0a31d40d731838ab524cc037bcf49e08d5c34ec558c217aae12d9c32d62b17c8d797ca904937e97583a3ec4bc4f88753e1c71e", @ANYRES32=r1, @ANYBLOB="a801028064000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000340004000010028b040000000d00090c0900000003000009350a00000000520201040000090007c9cc130e7888210c22060000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400cff6000008000600", @ANYRES32=r1, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400090000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r1, @ANYBLOB="080007000000000008000100", @ANYRES32=r1, @ANYBLOB="280202803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r1, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000001000008000600", @ANYRES32=r1, @ANYBLOB="3c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c000400160006090100000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040030020000"], 0x5b8}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000008) ioctl$XFS_IOC_SET_RESBLKS(0xffffffffffffffff, 0xc0105872, &(0x7f0000000200)={0x0, 0x3ff}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc04132478543c0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x83e29f5c14b60d7e) 4m46.057770263s ago: executing program 2 (id=2581): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x1d}, {0x6}]}, 0x10) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 4m46.057383091s ago: executing program 5 (id=2582): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000340), &(0x7f00000003c0)=0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r4, 0x800, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4040) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x54d, 0x20}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x4, 0x8, 0x0, 0x5, 0x759c067c, 0x401, 0x8000, 0x7, r5}, 0x20) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000240)=0x8) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001005010000e2f66c3b7fde7b4a58edf7e01dce000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000018001680140001801000060001000080000000000000000008001b0000000000"], 0x40}}, 0x0) 4m46.057033057s ago: executing program 4 (id=2583): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x37}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e640000a356e2d4103d67ca17db32765e3b632e00"/57], 0x4c}}, 0x0) 4m45.472180173s ago: executing program 3 (id=2584): mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x4031, 0xffffffffffffffff, 0x9efbf000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r0, 0x0, 0xd0, 0x0, &(0x7f0000000700)="8e5f2ab3b9fc5beeb8bc46e92bcaf066aa53c4979174548178b0a4d064fd80e6612a9d2142fb2b27318afda17bf98d319459e8df866dcfa1b0f28eaec24d544328258bddecff7b0950c70b8ebec3bdb33ad4955bcdef1d1a39f00586611968d0cdf065027d58c56407c00de00c386c9d180dba8b602d208920a017b22ac680847d44a2019e91cc331b457bc82aa9271fee3d77a51b12f273db7c27cde817082eb1f6bd8ce84cd5a1d4f3067c5575f2e716462b8d861a3325901d83ebbce3ab4e2e7ef8b03f31e490b23410835d015660", &(0x7f0000000180), 0x36bb, 0x0, 0x1c8, 0x2b, &(0x7f0000000500)="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", &(0x7f0000000440)="cc3d0d1c837d2711a4c9304ead3de5b83910cca53cf2a9ef4e7f6fea519bb959aa674e3e7cded030a52285", 0x4, 0x0, 0x6}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a000000000440000000060a0104000000ffeb0000000a0000000900010073797a31000000000900020073797a320000d54b90a40480100001800c000100636f756e746572006c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000100000000001c0002801800028008000100fffffffd0900020073797a320000000014000000110001"], 0x15c}}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000180)=0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 4m45.306170896s ago: executing program 2 (id=2585): r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = socket(0x2c, 0x3, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000040)="c1", 0xfe41) poll(&(0x7f0000000180)=[{r2, 0x4}], 0x1, 0x0) accept$unix(r2, &(0x7f00000002c0), &(0x7f0000000340)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fddbdf2501000000050004000200000008000600ac1414d408000b0074"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14, 0x800) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000009c0)={0x9, &(0x7f0000000940)=[{0x0, 0x4, 0xdf, 0x5}, {0xffff, 0x40, 0x8, 0x8}, {0x899, 0x7, 0x1, 0x4}, {0x4, 0x3, 0x6, 0x4}, {0x5, 0x47, 0xff, 0x20000}, {0x0, 0x80, 0x7}, {0x3, 0x2, 0x1b, 0x1}, {0x6, 0x1, 0x4, 0x3ff}, {0x9, 0x8, 0xf9}]}, 0x10) getsockopt$bt_hci(r0, 0x0, 0x63, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x1e) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x19a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60eaff0201642c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000e"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(r1, &(0x7f0000000380)={0x1f, 0x2}, 0x6) socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x4, 0x91, [0xc38, 0x3, 0x3, 0x8e35, 0x7, 0x7], 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000100)=""/145}, &(0x7f0000000240)=0x78) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x50}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r10, 0x29, 0x37, &(0x7f0000000a00)={0x3a, 0x9, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x5, 0x1, [0x3, 0x0, 0x2, 0x29, 0x3, 0x1]}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x3f}, @enc_lim={0x4, 0x1, 0xff}]}, 0x58) sendmsg$TIPC_NL_KEY_FLUSH(r9, &(0x7f0000000900)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f00000005c0)={0x2dc, 0x0, 0x12, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6dd7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2b11e982}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0x120, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc2, 0x3, "d1161ffc8a2a80df71dd163fddd5e8e3c34e4855fe605265d45b2f2a2f86404ec89d7c994e169fb9469431cb4546a8fa77410c32d9927b8476c6746878a01e60b12a126840dab0a288f432f5c04fc0f7c4dd363ac81b64971e5020d4e6a8c243b0f3df55ea46a296c048db12172ac33cf9214b83307ae4bcb78da7aa1a71734f6b7b2673a5996ccce98f47344393ade3515f5a2a8f1230ddd6651e5d4661107e51764acc8317c48ca28df7c33251be405aca3f5d84d99f2f0b0863233d58"}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "ea900912c9daa005e0543b3c03d2c92192ef676e54591a2baa92e4c81c"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x24}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x28}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x34c2017a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x1}, 0x4) ioctl$sock_SIOCETHTOOL(r9, 0x89f1, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39}}) getsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f00000003c0)={@loopback, @remote, @multicast1}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="a400000010000100efff00004000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006c0016801400018010000200010000807502000004010000540001800c0005005306000007000000100002000900000036000000090000000c00090000000000000800001000020010000000170f00000200000018000c80140001000000ff01490700000080000088a8000008001b0000000000050027000100000008002900a60d"], 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) 4m45.057425633s ago: executing program 5 (id=2586): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000440)=[{&(0x7f0000000880)="d80000001e0081054e81f78206000000000000000a0014260360cf9808000f00245bde1625fcb8b20800094014000000035c0461c1d67f6f94007134cf6efb8000d74748420a963aa007a290457f01898102e807ad522a4807f13af8030ab316277ce07bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8716a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1ca9781ed0bffece0b42a9eca0200e6d5d40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x40800) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) (async) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4dff000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) 4m44.730268294s ago: executing program 3 (id=2587): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f00000000c0)={0x0, 0x0}) (rerun: 32) 4m44.385739721s ago: executing program 0 (id=2588): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0x14, 0x1, 0x2, 0x0, {0x10}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "e80cc3779a80befaa3"}]}, 0x24}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r7, r5}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x1d, 0x17, 0x9}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140)={0x3, 0x4, 0x4, 0x101}, 0x14) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x3) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540040003730da17d8e91efbae7bfa3dcbbc84918b93ecc66f314fc17c26b3fcacdfd79ff113421d5d937e0b322cea1155d9f71ab9fcafcaf4461ebd8aa2ea2f77477073504b069bc2bd34b9509f781307f72473b5f4176c8940b67047c2c9dcfcfc06cbd6cbc9bb18a4a4723762968d66e4b58d97bcaac4c0653dfee83830d4e8ccc1ffc11539590ec1ef123922541aabe434326babb2e6a76875aedcd2917dcdbfb21ded3072a804a13becb00b967e4d1ecefb", @ANYRES16=r8, @ANYBLOB="9fe60000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c009b0000000000000000000c0090000000000000000000"], 0x54}}, 0x0) 4m44.297674725s ago: executing program 4 (id=2589): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000600780ea8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b31d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed1bffece0b42a9ecbee5de603000000e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}, {&(0x7f0000000400)="78fd6572a2c6de032aab6643e7c7c211a8a423aabb6c5da2751e0bc2a4870d21f5493d42997d0c92e33013ebe0926ed81b23ead7a361a72c404518999b37c37382379b11871b37006483acaca22899a99cb639ac784ea9a1214ebbfe84db4b1c4831c88fcf0b7473674a9fa100b80d6c597e7bc18a86b13bacb4cf84f0c3ec0cb835913d70f805a75e09e2ee1aa351c49933ed0352ed55eadd989aab090d0506fc7a03bd8298a3b5967b1dd28d0a089c43c815e5e8f2e34784e34c0feb448ef048125dd45ea97db8dd14f51b2e73cbf14a1fbe4d5fb88b69d0d8ca0d536300c33940", 0xe2}, {&(0x7f0000000140)="8d26c9ad8874348c7afd75b99011b7efeee1a881cdc734587d0603a877b5c546a8ee7ca05a86c3c4f08a38652ec8c9e15ab56571fe30b3cb8417600bf3848724b31701e80ce039fd7be97577c43945be18417f32cb00d3da11b3cf7a03b7b17cf95ae06bc347baaa08841f5c3b60ecfdefabb24a19e14139a64c7026c1541043106a2a621f249c63d5cfc799f51b92fbf126beb6086f3c4b8c6211d419ee856c25919314f92467e67c38c0be190decd6cc352d54e0f87eca280d6fb49629150ef351b63668fd9e2c3253bad983ac60a770d4331314eb7240eda9d6cccbd91e880ebcc2f6117c6b213f1c9bb1e7", 0xed}], 0x3, 0x0, 0x0, 0x4a0f0000}, 0x40052) 4m43.740286142s ago: executing program 2 (id=2590): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') mmap(&(0x7f0000a70000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x8010, 0xffffffffffffffff, 0x215eb000) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) 4m43.725812419s ago: executing program 3 (id=2591): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xaf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="00000000000000005530f64a3ed90d3dc29b70b3676987c8b7080000000000007b8af8ff8717ea00001624f2490d1b3d6d2f59ee047ce80000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095800000001700006da1b9235441f535d14a79946e5d85405441ab185f024febd5666242d328d74b0e48fc3ca3b6de8473fefeb46ea41d0b7eb6"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4m43.670256627s ago: executing program 5 (id=2592): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_getaddrlabel={0x30, 0x4a, 0x200, 0x70bd28, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, r0, 0x40}, [@IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008095}, 0x48091) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000)=0xd938, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r3 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='A', 0x1}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_getaddrlabel={0x30, 0x4a, 0x200, 0x70bd28, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, r0, 0x40}, [@IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008095}, 0x48091) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000)=0xd938, 0x4) (async) socket$netlink(0x10, 0x3, 0x4) (async) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='A', 0x1}], 0x1}}], 0x1, 0x0) (async) 4m43.058391592s ago: executing program 4 (id=2593): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010427bd70000000000000", @ANYRES32=0x0, @ANYBLOB="01480000195301001c00128009000100626f6e64000000000c00028005001100b3000000"], 0x3c}, 0x1, 0x0, 0x0, 0x44840}, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYRESOCT=r1], 0x10b8}, 0x80e0) vmsplice(r0, &(0x7f0000000b00)=[{&(0x7f00000001c0)="925078d211079f45555d7929b5bf5593c65bff3905fb81ca3ee61a13d1e53b1f630314655149be31afc00b7cbc114c06bd0c760d9b3fd076b1471a805dd87ebd7545ba16031b72229bcf292f0807c669dc8319d657621b2841568be7f7f2f8237bad5f32bd9b2c084496229a3e5280bcce51d53bf70d7fcc258762587bc9daeca8672cc66bbdfa22ea5c7f763a8662702c882208c201e4", 0x97}, {&(0x7f00000002c0)="e47ede29e9a9f4a206cbf7c0f4ff688f0247772b7fa7", 0x16}, {&(0x7f0000000400)="dc77be99717d367e59c47268435cdaba4e4de5445c77df55c770b9a03435f430f2b0b47458ca7ee0d360965d98250af7e49a4a7689c9642d22a7009d026fba1a98321099cf5a75f8e458d7ded982474a5c462b7807ad9eff7087ffaf5b5d66731b3341e6896d19afb5e853e405364f35a7f91ef51bc1523449d4c4c4c4473c7ecf0105aea89d39a13b3c35dce037afba7ea1053234c7d11f707d0be17abacf1f40a9ad46a49df9e51af621c0b7d820e65b84f5820a133bbdd52ddae6805328", 0xbf}, {&(0x7f00000004c0)="d36bf382c465c003ef5c9cff6673d197c6bc11a36f4775fd49a89c82991cea136ef607771bfd6e2b36d515ac2d55bec8f1eb47446bbe6cdc168f48e98c909c3b8d4dcf675c509ce38667a34d11c49aff13789d9d59d82baa6519dc7ce20c01bfe01e8feab09a1cf78cbef18e94f26f00f8e17b370681d8722e32245f88b52c187f9c2851d230868ee81aeb546c6450ede327d8eb5c9054502841ec5841936b59de688c018393df0cc59a0bb36712c5f7d55f10aafdff83588c9d32", 0xbb}, {&(0x7f0000000580)="a263b4960fb53b4fa75df35a965f41763707553003d7887f9ec9c578138388554e7435d98780c9f24a688ca373cb32a2304748f39c0217229ada4bb58712d759ec5705c0c0f12d4e", 0x48}, {&(0x7f00000006c0)="fa4a84688e819279041bb48e4022d24ff51aa876730e10683c6d58bdf0a44e7b071ee13daf2006859191d6a14a0576f19fb198c603ac21e3192d9dcf53b55fd43a0af549bf4e376895916589f78fee644336f4224cbba77fe09e2500b153f58452c144a9a877bfb9", 0x68}, {&(0x7f0000000900)="6927d4a25afcea79b19cb570e52ee5921b845f015bd726c76554acec0d7f05b75319a8b10d8f04261448dc0e8655a50e6ab554c6b96c9dc61390e1509e3bdf6c564b0499adf9d000e35ac2796c2e298f8ad05f19b624c23cfabde2ecd93e6073e35df7a7faf6c95179d9a947a0258b78cf6cd775a79efa5acee49c79ec3d87268039794a17e700d93e4dd5722ed260b5b1cc0aedbe51ebd6487f530a4c218113267723537f2d4286023890874122a25455c97d58ae302cc962f41514439d043f772e6eaf2ff6c1ee017d58ce4d292e8abcbb412737a877d17e2188a1a3ee2c685aa5809046558d3326927a", 0xeb}, {&(0x7f0000000a00)="1856cb4afa7e4b00429c67f4e4816490830e6c76af9d9e21d55a6194bbe5b5c17b24e8d8520a776fa818ce6f64a65c2c73505088617690a4c0b35801903a3adce76108f0fd2e19b1dc15eaaf48f08724f2ffe69660badf95e97fd2", 0x5b}], 0x8, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400050000000000000000000000000000010c00028005000100000000000800074000000000040006"], 0x98}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400000000000000000000000000000000010c0002800500010000000020440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000600034000000000080007400000000018000680140004"], 0xb4}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002c80)="c1e20180c5ce0000000059dc94c7ffdf1c", 0x11}, 0x1, 0x0, 0x0, 0x24044014}, 0x40000050) recvmmsg(r6, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe72}, 0x1}], 0x1, 0xe88e164663c85842, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r7 = socket(0x10, 0x80002, 0x0) socket$packet(0x11, 0x3, 0x300) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "85f32f0a887130ebcad580f09d2604bb988cab295c5c7527d853d26cd74e83dd", "1cdde36751077a0258c5398b1f749e8f84542562f9023beb958bbe8fd36ccfb9", "28dd038b866b5ce68575f1eafc63bf169b1959a0718b9254945e6539a6af90e3", "b1148921ee9dd79fb881abd54c7e275e6c5b0273215b6ca5887aa46c91cbd211", "52b289bfc4d317e1e36be35d98d657ccbce94bf4f44b9aa90640146c0542331d", "0993d43fc40f59b0f334108b", 0x2, 0x1, 0x0, 0x9, 0x6}}) sendmsg(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x5, 0x0, 0x0, 0xf, 0x0, 0x1000000}]}, {0x0, [0x5f, 0x0, 0x0, 0x0, 0x3]}}, 0x0, 0x2b, 0x0, 0xa}, 0x28) r9 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_xfrm(r9, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000017c0)=ANY=[@ANYBLOB="500000002100200029bd7000fbdbdf25ac1414bb000000f7ffffff"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x800) close(r1) 4m42.882431037s ago: executing program 0 (id=2594): r0 = socket(0x2, 0x2, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="f4000000290001000000000000000000fc020000000000000000000000000001fe8000000000000000000000000000200000000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="be6b6e000000000050001100ac1414aa000000000000000000000000ffffffff0000000000000000fc020000000000000000000000000001ff0200000000000000000000000000013c040000080000000a000a00280020"], 0xf4}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000003000000000000000d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008518000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000e15a790e06f562b3a98f5d9e3479a66bc5d6958c9d2049c522291b7febe85bffd555183de61a3d6988d901be6a21145e88c5f557977f97a2d6c2c4fe3feb6cefc8e5c953a8389cfbd2bd1ed16ad1c5cdd991be5c8f990447409f71be5e1158dd111623ede6f25a677617a041b4840f91e1c9"], &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x0, 0x1, 0x9}, 0x10, 0x30d33, r3, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket(0x2, 0x2, 0x1) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="f4000000290001000000000000000000fc020000000000000000000000000001fe8000000000000000000000000000200000000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="be6b6e000000000050001100ac1414aa000000000000000000000000ffffffff0000000000000000fc020000000000000000000000000001ff0200000000000000000000000000013c040000080000000a000a00280020"], 0xf4}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000003000000000000000d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008518000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000e15a790e06f562b3a98f5d9e3479a66bc5d6958c9d2049c522291b7febe85bffd555183de61a3d6988d901be6a21145e88c5f557977f97a2d6c2c4fe3feb6cefc8e5c953a8389cfbd2bd1ed16ad1c5cdd991be5c8f990447409f71be5e1158dd111623ede6f25a677617a041b4840f91e1c9"], &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x0, 0x1, 0x9}, 0x10, 0x30d33, r3, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) 4m42.479688708s ago: executing program 3 (id=2595): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd602e5cea00403c0020010000000000000000000000000002ff02"], 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xfe16, 0xa}}}]}]}, 0x84}}, 0x0) 4m42.226606294s ago: executing program 5 (id=2596): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000250000000000000000f6000076000100250000000100000000000095000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) mmap(0x0, 0x480000000000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 4m40.816373057s ago: executing program 3 (id=2597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000000)={0xc, @broadcast, 0x4e21, 0x3, 'lblc\x00', 0x20, 0x9, 0x71}, 0x2c) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000003080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4m36.469740472s ago: executing program 2 (id=2598): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x0, @loopback}}) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="4c00000011000f140011000200000f0002000000200000", 0x17) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0xfffffffffffffe74, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 4m33.224560588s ago: executing program 0 (id=2599): socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet6(r0, &(0x7f00000078c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40016) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000800)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70fd27, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x29, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x4}]}}}]}, 0x3c}}, 0x0) 4m29.869747142s ago: executing program 4 (id=2600): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000022003b32f5e8812800000096954c3eb02b59b43e2ce04b99443b2c6ab967967598f95a2bf5108e1aa3ed49e1299e6553933fc1993843dd3ea8ca8c8cc07bca53e4b1d6d70b5ec7ec0baf8ef62936db58c4fe73d1"], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r3, 0x305, 0x70bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0xf0ffff}, 0x24044080) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000080)=0x7fffffffffffffff, 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00000000000000108000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000f9319e50000300000000000000000000000000000000a86f1a54b03d0413b65cf648fb839d0b03615f7a1af09a0f28aba8f7d4f4aac6c256e142455a5ac5822fea085eeed5bf111dbd0f05bf15c19651cc943a9daff93b7e5960d6c2917e6efa54770fb89588b68a1d217b57cc574fcfe325e43284f642218d079089e5bd9dad92b0352ac6c77f24cd147cc71206f8be0fd1b724192ae0e3c3c13a832f96e09d9599ddfdc9e22bb575f855489756d41f7baee21588db4c6ea27e8a4816efe9b0"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 4m23.223438941s ago: executing program 33 (id=2596): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000250000000000000000f6000076000100250000000100000000000095000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) mmap(0x0, 0x480000000000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 4m17.890232825s ago: executing program 34 (id=2598): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x0, @loopback}}) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="4c00000011000f140011000200000f0002000000200000", 0x17) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0xfffffffffffffe74, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 4m14.273150645s ago: executing program 35 (id=2597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000000)={0xc, @broadcast, 0x4e21, 0x3, 'lblc\x00', 0x20, 0x9, 0x71}, 0x2c) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000003080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4m8.982843748s ago: executing program 36 (id=2599): socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet6(r0, &(0x7f00000078c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40016) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000800)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70fd27, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x29, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x4}]}}}]}, 0x3c}}, 0x0) 4m4.081142508s ago: executing program 37 (id=2600): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000022003b32f5e8812800000096954c3eb02b59b43e2ce04b99443b2c6ab967967598f95a2bf5108e1aa3ed49e1299e6553933fc1993843dd3ea8ca8c8cc07bca53e4b1d6d70b5ec7ec0baf8ef62936db58c4fe73d1"], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r3, 0x305, 0x70bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0xf0ffff}, 0x24044080) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000080)=0x7fffffffffffffff, 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00000000000000108000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000f9319e50000300000000000000000000000000000000a86f1a54b03d0413b65cf648fb839d0b03615f7a1af09a0f28aba8f7d4f4aac6c256e142455a5ac5822fea085eeed5bf111dbd0f05bf15c19651cc943a9daff93b7e5960d6c2917e6efa54770fb89588b68a1d217b57cc574fcfe325e43284f642218d079089e5bd9dad92b0352ac6c77f24cd147cc71206f8be0fd1b724192ae0e3c3c13a832f96e09d9599ddfdc9e22bb575f855489756d41f7baee21588db4c6ea27e8a4816efe9b0"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 32.301236325s ago: executing program 7 (id=2602): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c003780"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xd, 0x200, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000affc21dc000000100000001800018014000200776c616e300000000000000000000800080006"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040010) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 1 (id=2605): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000640)={0x2ddf11b3, {{0xa, 0x4e23, 0x1, @remote, 0x780}}}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r2], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) kernel console output (not intermixed with test programs): ered allmulticast mode [ 264.398082][T10219] netlink: 'syz.0.1086': attribute type 11 has an invalid length. [ 264.485517][T10216] 8021q: adding VLAN 0 to HW filter on device bond6 [ 264.549402][T10220] macvlan2: entered promiscuous mode [ 264.549606][T10220] macvlan2: entered allmulticast mode [ 264.564965][T10220] bond6: (slave macvlan2): Error -22 calling dev_set_mtu [ 264.599895][T10224] netlink: 'syz.1.1087': attribute type 1 has an invalid length. [ 264.833122][T10224] 8021q: adding VLAN 0 to HW filter on device bond3 [ 264.906727][T10235] netlink: 'syz.2.1090': attribute type 12 has an invalid length. [ 265.058867][T10240] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 265.061673][T10240] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 265.081020][T10240] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 265.087794][T10240] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 265.091887][T10240] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 265.101452][T10240] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 265.103638][T10240] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 265.105920][T10240] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 265.108099][T10240] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 265.163971][T10240] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 268.919303][T10224] bond3: (slave geneve2): making interface the new active one [ 268.940062][T10224] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 269.547167][T10284] netlink: 'syz.1.1097': attribute type 2 has an invalid length. [ 269.604972][T10284] : entered promiscuous mode [ 269.629835][T10286] netlink: 'syz.1.1097': attribute type 2 has an invalid length. [ 269.668140][T10283] __nla_validate_parse: 4 callbacks suppressed [ 269.668162][T10283] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1098'. [ 269.718202][T10283] netlink: 'syz.4.1098': attribute type 1 has an invalid length. [ 269.816349][T10283] bond0: (slave veth0_to_bond): Releasing backup interface [ 269.837564][T10283] veth0_to_bond: left promiscuous mode [ 269.967805][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1102'. [ 270.358653][T10317] netlink: 'syz.0.1106': attribute type 3 has an invalid length. [ 270.744487][T10333] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1111'. [ 270.802150][T10289] net_ratelimit: 55 callbacks suppressed [ 270.802170][T10289] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 270.802203][T10289] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 270.802232][T10289] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 270.802262][T10289] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 270.802298][T10289] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 270.802331][T10289] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 270.802357][T10289] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 270.802491][T10289] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 270.802522][T10289] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 270.802552][T10289] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 271.074923][T10337] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1112'. [ 271.489265][T10338] syzkaller1: entered promiscuous mode [ 271.489293][T10338] syzkaller1: entered allmulticast mode [ 271.551995][T10337] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1112'. [ 272.680356][T10376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1124'. [ 273.074470][T10384] netlink: 'syz.3.1125': attribute type 12 has an invalid length. [ 273.363668][T10401] netlink: 'syz.1.1127': attribute type 1 has an invalid length. [ 273.427752][T10390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1127'. [ 273.428210][T10390] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1127'. [ 274.036927][T10412] smc: adding net device veth1_to_team with user defined pnetid S [ 274.156254][T10412] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1132'. [ 274.156282][T10412] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1132'. [ 274.324356][ T52] Bluetooth: hci2: unexpected event for opcode 0x0005 [ 274.776849][T10432] __nla_validate_parse: 1 callbacks suppressed [ 274.776871][T10432] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1136'. [ 275.227320][T10436] syzkaller1: entered promiscuous mode [ 275.227346][T10436] syzkaller1: entered allmulticast mode [ 276.665824][T10406] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 277.229363][T10488] net_ratelimit: 195 callbacks suppressed [ 277.229386][T10488] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 277.366851][T10496] IPVS: length: 8 != 1152 [ 277.392378][T10487] syzkaller1: entered promiscuous mode [ 277.392407][T10487] syzkaller1: entered allmulticast mode [ 277.440089][T10499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.443466][T10497] ieee802154 phy1 wpan1: encryption failed: -22 [ 277.495377][T10507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.049431][T10518] veth0: mtu less than device minimum [ 278.146112][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1158'. [ 278.347866][T10531] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 278.616366][T10538] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 278.616692][T10538] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 278.617002][T10538] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 278.617325][T10538] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 278.617638][T10538] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 278.910692][T10550] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 280.136147][T10595] netlink: 'syz.0.1172': attribute type 12 has an invalid length. [ 280.549315][T10585] syzkaller0: entered promiscuous mode [ 280.549518][T10585] syzkaller0: entered allmulticast mode [ 284.341483][T10641] netlink: 'syz.2.1177': attribute type 11 has an invalid length. [ 284.587085][T10652] netlink: 'syz.2.1177': attribute type 11 has an invalid length. [ 284.974985][T10661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 284.975006][T10661] IPv6: NLM_F_CREATE should be set when creating new route [ 284.975054][T10661] IPv6: NLM_F_CREATE should be set when creating new route [ 284.975080][T10661] IPv6: NLM_F_CREATE should be set when creating new route [ 285.015711][T10661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 285.684337][T10674] netlink: 5120 bytes leftover after parsing attributes in process `syz.4.1186'. [ 286.414006][T10697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1191'. [ 286.567333][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1194'. [ 287.262338][T10724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1200'. [ 287.425856][T10726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1201'. [ 287.595860][T10726] nbd: must specify a size in bytes for the device [ 287.620783][T10734] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 288.614081][T10769] block nbd0: Unsupported socket: should be TCP or UNIX. [ 289.019309][T10777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1216'. [ 289.084135][T10782] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 289.320519][T10789] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1220'. [ 289.395618][T10787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1220'. [ 289.470046][T10792] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1222'. [ 289.486936][T10792] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1222'. [ 290.685748][T10828] bond2: entered allmulticast mode [ 290.800840][T10832] __nla_validate_parse: 3 callbacks suppressed [ 290.808906][T10832] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1230'. [ 290.822790][T10832] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1230'. [ 290.947908][T10837] A link change request failed with some changes committed already. Interface 04±ÿª¨úrBº“€ may have been left with an inconsistent configuration, please check. [ 291.098054][T10837] openvswitch: netlink: Message has 4 unknown bytes. [ 291.246380][T10844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1233'. [ 291.306251][T10853] openvswitch: netlink: Flow actions attr not present in new flow. [ 291.339542][T10842] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1234'. [ 291.354343][T10842] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1234'. [ 291.354369][T10842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.354571][T10842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.391126][T10842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.391348][T10842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.539904][T10859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1235'. [ 292.030490][T10873] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 292.072482][T10879] netlink: 'syz.3.1239': attribute type 21 has an invalid length. [ 292.072513][T10879] IPv6: NLM_F_CREATE should be specified when creating new route [ 292.716685][T10897] netlink: 'syz.1.1244': attribute type 9 has an invalid length. [ 292.717816][T10898] netlink: 'syz.1.1244': attribute type 9 has an invalid length. [ 292.754131][T10897] bond0: invalid NS target ff00:: specified for addition [ 292.754165][T10897] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 293.169860][T10912] netlink: 'syz.2.1248': attribute type 39 has an invalid length. [ 293.255307][T10915] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1250'. [ 293.917313][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1255'. [ 293.975831][T10936] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1258'. [ 294.472299][T10935] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 294.525643][T10951] team0: Cannot enslave team device to itself [ 294.907904][T10967] nftables ruleset with unbound set [ 294.981656][T10969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1266'. [ 295.334632][T10982] x_tables: duplicate underflow at hook 2 [ 295.399048][T10984] x_tables: duplicate underflow at hook 2 [ 295.955137][T11001] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 296.106953][T11001] batman_adv: batadv0: Adding interface: syzkaller0 [ 296.106977][T11001] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.131376][T11001] batman_adv: batadv0: Interface activated: syzkaller0 [ 296.257432][T11011] __nla_validate_parse: 1 callbacks suppressed [ 296.257455][T11011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1273'. [ 296.319268][T11012] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1273'. [ 296.323465][T11007] netlink: 'syz.2.1272': attribute type 3 has an invalid length. [ 296.340140][T10998] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 296.508313][T10998] batman_adv: batadv0: Removing interface: syzkaller0 [ 296.774916][T11019] IPVS: set_ctl: invalid protocol: 43 172.20.20.39:20003 [ 297.545715][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1280'. [ 297.667255][T11057] Bluetooth: hci0: unsupported parameter 5161 [ 297.667314][T11057] Bluetooth: hci0: unsupported parameter 8192 [ 297.667330][T11057] Bluetooth: hci0: unsupported parameter 5161 [ 297.667344][T11057] Bluetooth: hci0: unsupported parameter 8192 [ 297.811887][T11061] 8021q: adding VLAN 0 to HW filter on device bond7 [ 298.155687][T11078] netlink: 'syz.3.1288': attribute type 2 has an invalid length. [ 298.680647][T11094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1292'. [ 299.064706][T11107] syzkaller0: entered promiscuous mode [ 299.064732][T11107] syzkaller0: entered allmulticast mode [ 299.168705][T11112] openvswitch: netlink: EtherType 2 is less than min 600 [ 299.457401][T11120] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1297'. [ 299.618760][T11123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1297'. [ 299.827629][T11121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1297'. [ 299.827844][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1297'. [ 300.108898][T11134] xt_hashlimit: size too large, truncated to 1048576 [ 300.354223][T11138] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1300'. [ 300.354256][T11138] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1300'. [ 300.406357][T11139] SET target dimension over the limit! [ 300.501874][T11143] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20000 [ 301.015666][T11154] netlink: 'syz.3.1304': attribute type 2 has an invalid length. [ 301.630654][T11163] __nla_validate_parse: 2 callbacks suppressed [ 301.630692][T11163] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1308'. [ 301.953938][T11183] netlink: 'syz.4.1312': attribute type 1 has an invalid length. [ 303.205240][T11238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1318'. [ 304.875245][T11188] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 305.244656][T11246] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1321'. [ 305.244691][T11246] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1321'. [ 306.186178][T11269] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1330'. [ 306.266473][T11276] tipc: Enabling of bearer rejected, media not registered [ 306.582580][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'. [ 306.768702][T11288] netlink: 'syz.0.1334': attribute type 1 has an invalid length. [ 306.980344][T11288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.015992][T11298] bond0: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 307.066740][T11298] bond0: entered allmulticast mode [ 307.316006][T11301] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 307.404691][T11308] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1338'. [ 307.628304][T11316] netlink: 'syz.2.1340': attribute type 1 has an invalid length. [ 309.510375][T11283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 310.643779][T11376] netlink: 'syz.1.1353': attribute type 8 has an invalid length. [ 311.300416][T11379] geneve2: entered promiscuous mode [ 311.348107][ T6343] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 54228 - 0 [ 311.348707][T10252] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 54228 - 0 [ 311.348751][T10252] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 54228 - 0 [ 311.348787][T10252] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 54228 - 0 [ 312.435604][T11393] Cannot find map_set index 135 as target [ 312.919540][T11395] bond9: invalid ARP target 0.0.0.0 specified for addition [ 312.919571][T11395] bond9: option arp_ip_target: invalid value (0) [ 312.997927][T11404] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1361'. [ 313.104873][T11395] bond9 (unregistering): Released all slaves [ 313.762687][T11420] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1365'. [ 313.788118][T11418] netlink: 'syz.0.1366': attribute type 7 has an invalid length. [ 313.808646][T11418] netlink: 'syz.0.1366': attribute type 1 has an invalid length. [ 313.939951][T11428] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1365'. [ 314.023395][T11432] netlink: 'syz.2.1368': attribute type 24 has an invalid length. [ 314.289115][T11418] bridge7: entered promiscuous mode [ 314.351216][T11418] bond9: (slave bridge7): making interface the new active one [ 314.354308][T11418] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 314.415690][T11433] bridge8: entered promiscuous mode [ 314.440347][T11433] bond9: (slave bridge8): Enslaving as a backup interface with an up link [ 315.226156][T11452] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1372'. [ 317.425403][T11492] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1379'. [ 317.426073][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.716595][T11503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1382'. [ 318.720650][T11500] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 318.866891][T11503] hsr_slave_0: left promiscuous mode [ 318.985959][T11503] hsr_slave_1: left promiscuous mode [ 320.161800][T11533] ksmbd: Unknown IPC event: 1, ignore. [ 320.310038][T11533] ksmbd: Unknown IPC event: 1, ignore. [ 321.596020][T11566] x_tables: duplicate underflow at hook 4 [ 321.898363][T11570] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 322.146715][T11575] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1396'. [ 322.146773][T11575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1396'. [ 322.146789][T11575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1396'. [ 322.867958][T11584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1398'. [ 322.956211][T11591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1398'. [ 323.120670][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1399'. [ 323.368576][T11584] bond11 (unregistering): Released all slaves [ 323.607950][T11606] netlink: 'syz.2.1401': attribute type 21 has an invalid length. [ 323.607979][T11606] IPv6: NLM_F_CREATE should be specified when creating new route [ 323.608316][T11606] netlink: 'syz.2.1401': attribute type 1 has an invalid length. [ 323.857739][T11610] netlink: 'syz.1.1403': attribute type 15 has an invalid length. [ 323.857772][T11610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1403'. [ 324.012655][T11591] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 324.997351][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1407'. [ 324.997380][T11618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1407'. [ 325.760484][T11632] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1409'. [ 325.772982][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1409'. [ 327.225862][T11635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1410'. [ 327.456220][T11639] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1412'. [ 327.616851][T11639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1412'. [ 328.896611][T11658] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1418'. [ 328.979637][T11658] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1418'. [ 329.015043][T11658] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1418'. [ 329.015073][T11658] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1418'. [ 329.371693][T11672] netlink: 'syz.0.1416': attribute type 21 has an invalid length. [ 329.371719][T11672] netlink: 'syz.0.1416': attribute type 22 has an invalid length. [ 329.371734][T11672] netlink: 'syz.0.1416': attribute type 23 has an invalid length. [ 329.371748][T11672] netlink: 'syz.0.1416': attribute type 25 has an invalid length. [ 329.371762][T11672] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1416'. [ 330.147455][T11667] veth1_vlan: left promiscuous mode [ 330.387703][T11667] netlink: 'syz.1.1420': attribute type 2 has an invalid length. [ 330.453967][T11683] ip_tables: iptables: counters copy to user failed while replacing table [ 330.523997][T11683] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 330.524016][T11683] IPv6: NLM_F_CREATE should be set when creating new route [ 330.793563][T11689] netlink: 'syz.2.1421': attribute type 10 has an invalid length. [ 330.793590][T11689] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1421'. [ 330.990820][T11693] IPv6: Can't replace route, no match found [ 331.418165][T11701] netlink: 'syz.3.1426': attribute type 1 has an invalid length. [ 331.418192][T11701] netlink: 'syz.3.1426': attribute type 4 has an invalid length. [ 331.418215][T11701] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1426'. [ 331.425199][T11703] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1425'. [ 331.632784][T11701] netlink: 'syz.3.1426': attribute type 1 has an invalid length. [ 331.632813][T11701] netlink: 'syz.3.1426': attribute type 4 has an invalid length. [ 331.632828][T11701] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1426'. [ 331.979045][T11707] x_tables: duplicate underflow at hook 1 [ 332.297370][T11712] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1430'. [ 332.517803][T11716] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 332.518034][T11716] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 333.697953][T11736] batman_adv: batadv0: Adding interface: syzkaller0 [ 333.697974][T11736] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.714010][T11736] batman_adv: batadv0: Interface activated: syzkaller0 [ 333.775359][T11735] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 334.060294][T11735] batman_adv: batadv0: Removing interface: syzkaller0 [ 334.994187][T11752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1441'. [ 336.276801][T11782] netlink: 'syz.2.1448': attribute type 2 has an invalid length. [ 336.502366][T11785] SET target dimension over the limit! [ 336.612641][T11788] netlink: 'syz.3.1450': attribute type 1 has an invalid length. [ 337.624082][T11802] netlink: 'syz.4.1453': attribute type 3 has an invalid length. [ 337.694734][T11818] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 337.879377][T11813] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 337.962727][T11804] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 338.177748][T11804] bond4 (unregistering): Released all slaves [ 340.282073][T11855] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1463'. [ 341.642877][T11863] ip6t_rt: unknown flags 36 [ 341.788658][T11851] pim6reg: entered allmulticast mode [ 342.060490][T11866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.190636][T11878] netlink: 'syz.4.1469': attribute type 8 has an invalid length. [ 342.190664][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1469'. [ 342.211621][T11871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.954063][T11866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.058732][T11866] 8021q: adding VLAN 0 to HW filter on device bond3 [ 343.145161][T11866] 8021q: adding VLAN 0 to HW filter on device bond4 [ 343.165102][T11866] 8021q: adding VLAN 0 to HW filter on device bond5 [ 343.207454][T11866] gretap0: entered promiscuous mode [ 343.273569][T11866] 8021q: adding VLAN 0 to HW filter on device bond6 [ 343.279359][T11866] 8021q: adding VLAN 0 to HW filter on device bond7 [ 343.313424][T11866] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 343.317873][ T9448] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.326574][T11896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1472'. [ 343.326604][T11896] block nbd2: Unsupported socket: should be TCP or UNIX. [ 343.409158][T10253] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.409277][T10253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.790827][T11878] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.797988][T11878] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.877319][T11861] netlink: 'syz.0.1466': attribute type 1 has an invalid length. [ 343.877346][T11861] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1466'. [ 344.161832][ T6343] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.169712][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.170711][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.997765][T11914] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1475'. [ 345.845443][T11925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1479'. [ 345.845489][T11925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1479'. [ 345.904488][T11926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1479'. [ 345.904531][T11926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1479'. [ 347.303881][T11950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1485'. [ 347.818717][T11968] netlink: 'syz.0.1491': attribute type 15 has an invalid length. [ 348.109314][T11968] netlink: 'syz.0.1491': attribute type 15 has an invalid length. [ 349.497819][T11992] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1496'. [ 351.176246][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1501'. [ 351.390836][T12011] netlink: 'syz.2.1501': attribute type 11 has an invalid length. [ 351.391149][T12011] netlink: 4320 bytes leftover after parsing attributes in process `syz.2.1501'. [ 351.523500][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1502'. [ 351.587343][T12015] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1502'. [ 351.682711][T12016] netlink: zone id is out of range [ 351.682731][T12016] netlink: zone id is out of range [ 351.682921][T12016] netlink: zone id is out of range [ 352.001549][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1503'. [ 352.001681][T12030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1503'. [ 352.144589][T12031] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 352.144823][T12031] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 352.171371][T12032] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 352.171510][T12032] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 352.182590][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1505'. [ 352.208701][T12031] hsr_slave_0: left promiscuous mode [ 352.244697][T12031] hsr_slave_1: left promiscuous mode [ 352.423447][T12036] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1507'. [ 352.597770][T12040] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1507'. [ 353.414583][T12056] xt_CT: You must specify a L4 protocol and not use inversions on it [ 354.339309][T12073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1518'. [ 355.377496][T12090] netlink: 'syz.3.1520': attribute type 2 has an invalid length. [ 355.377635][T12090] netlink: 'syz.3.1520': attribute type 2 has an invalid length. [ 357.125689][T12106] bond8: option fail_over_mac: invalid value (16) [ 357.303110][T12106] bond8 (unregistering): Released all slaves [ 358.023181][T12123] veth1_to_bond: entered allmulticast mode [ 358.023772][T12123] veth1_to_bond: entered promiscuous mode [ 358.028912][T12123] veth1_to_bond: left promiscuous mode [ 358.070201][T12123] veth1_to_bond: left allmulticast mode [ 359.653874][T12159] IPv6: NLM_F_CREATE should be specified when creating new route [ 359.659184][T12157] __nla_validate_parse: 65 callbacks suppressed [ 359.659238][T12157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1538'. [ 360.415518][T12169] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1541'. [ 361.788641][T12197] IPv6: sit1: Disabled Multicast RS [ 362.387648][T12196] netlink: 'syz.0.1547': attribute type 1 has an invalid length. [ 362.387674][T12196] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1547'. [ 362.389198][T12204] netlink: 'syz.0.1547': attribute type 1 has an invalid length. [ 362.389216][T12204] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1547'. [ 363.096373][T12216] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1550'. [ 363.203194][T12212] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 365.042534][T12249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1560'. [ 365.344827][T12250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.201712][T12276] netlink: 'syz.0.1564': attribute type 1 has an invalid length. [ 366.201745][T12276] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1564'. [ 366.716248][T12281] wg0 speed is unknown, defaulting to 1000 [ 366.716427][T12281] wg0 speed is unknown, defaulting to 1000 [ 367.190334][T12281] wg0 speed is unknown, defaulting to 1000 [ 367.312425][T12281] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 367.312473][T12281] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 367.312518][T12281] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 367.527067][T12281] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 367.669718][T12281] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 367.929049][T12281] wg0 speed is unknown, defaulting to 1000 [ 367.963469][T12281] wg0 speed is unknown, defaulting to 1000 [ 368.077733][T12298] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1569'. [ 368.077767][T12298] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1569'. [ 368.114754][T12281] wg0 speed is unknown, defaulting to 1000 [ 368.128909][T12281] wg0 speed is unknown, defaulting to 1000 [ 368.138172][T12281] wg0 speed is unknown, defaulting to 1000 [ 368.772043][T12286] netlink: 'syz.2.1567': attribute type 1 has an invalid length. [ 368.881205][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1573'. [ 369.033652][T12286] 8021q: adding VLAN 0 to HW filter on device bond4 [ 369.156543][T12318] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1574'. [ 369.228435][T12296] bond4: (slave gretap2): making interface the new active one [ 369.242431][T12296] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 369.361887][T12322] x_tables: duplicate entry at hook 2 [ 369.714250][T12324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1576'. [ 369.714291][T12324] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 369.719926][T12325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1576'. [ 369.719962][T12325] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 372.431444][T12364] netlink: 'syz.0.1588': attribute type 10 has an invalid length. [ 372.470072][T12362] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1587'. [ 372.470222][T12362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1587'. [ 373.111719][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 373.813899][T12383] netlink: 'syz.0.1591': attribute type 1 has an invalid length. [ 374.464258][T12383] 8021q: adding VLAN 0 to HW filter on device bond11 [ 374.629861][T12390] bond11: (slave bridge9): making interface the new active one [ 374.647174][T12390] bond11: (slave bridge9): Enslaving as an active interface with an up link [ 375.056882][T12403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1594'. [ 375.244165][T12407] bridge10: entered promiscuous mode [ 375.244271][T12407] bridge10: entered allmulticast mode [ 375.431949][T12418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1598'. [ 376.105211][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1600'. [ 376.399986][T12418] hsr_slave_1 (unregistering): left promiscuous mode [ 376.664888][T12419] ip6tnl2: entered promiscuous mode [ 376.666091][T12419] ip6tnl2: entered allmulticast mode [ 377.141687][ T52] Bluetooth: hci1: unexpected cc 0x2003 length: 10 > 9 [ 377.141736][ T52] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 378.866355][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.128156][T12461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1609'. [ 379.551631][T12456] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 380.457467][T12482] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 380.646049][T12482] xt_hashlimit: size too large, truncated to 1048576 [ 382.086570][T12499] sctp: [Deprecated]: syz.2.1618 (pid 12499) Use of int in max_burst socket option deprecated. [ 382.086570][T12499] Use struct sctp_assoc_value instead [ 382.652409][T12509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1621'. [ 382.727601][T12516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1622'. [ 383.477193][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1626'. [ 383.788722][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1626'. [ 384.016813][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1626'. [ 384.746114][T12552] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 384.762372][T12552] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 385.101792][T12557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1632'. [ 385.128487][T12557] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1632'. [ 385.606851][T12564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.787908][T12567] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1637'. [ 385.816510][T12573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.899401][T12573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.946650][T12575] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1637'. [ 385.946925][T12575] bond0: left allmulticast mode [ 386.081362][T12577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.438667][T12586] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1641'. [ 387.711407][T12592] netlink: Invalid conntrack timeout [ 387.711444][T12592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.960032][T12595] xt_hashlimit: size too large, truncated to 1048576 [ 388.084801][T12596] netlink: 'syz.0.1645': attribute type 10 has an invalid length. [ 388.233526][T12604] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1646'. [ 388.349545][T12603] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 389.039168][T12613] ipt_ECN: cannot use operation on non-tcp rule [ 389.157015][T12621] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1649'. [ 389.453509][T12618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1650'. [ 389.526705][T12618] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1650'. [ 390.203177][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1653'. [ 390.777866][T12646] ip_tables: iptables: counters copy to user failed while replacing table [ 390.888585][T12649] ip_tables: iptables: counters copy to user failed while replacing table [ 391.481587][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1659'. [ 391.481627][T12661] netlink: 'syz.3.1659': attribute type 5 has an invalid length. [ 391.481644][T12661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1659'. [ 391.814775][T12666] netlink: 'syz.0.1661': attribute type 5 has an invalid length. [ 391.814801][T12666] netlink: 'syz.0.1661': attribute type 9 has an invalid length. [ 391.814817][T12666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1661'. [ 392.012907][T12669] No such timeout policy "s" [ 392.012930][T12669] netlink: Failed to associated timeout policy 's' [ 392.103976][T12661] geneve3: entered promiscuous mode [ 392.104203][T12661] geneve3: entered allmulticast mode [ 392.151290][ T32] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 392.151346][ T32] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 392.151388][ T32] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 392.151429][ T32] netdevsim netdevsim3 : set [1, 1] type 2 family 0 port 256 - 0 [ 393.726303][T12692] xt_SECMARK: invalid mode: 9 [ 395.709387][T12716] netlink: 'syz.4.1671': attribute type 4 has an invalid length. [ 396.122539][T12721] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1671'. [ 396.272012][T12717] nbd: socks must be embedded in a SOCK_ITEM attr [ 404.602628][T12738] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1674'. [ 405.762937][T12758] sock: sock_timestamping_bind_phc: sock not bind to device [ 405.776251][T12757] tunl0: entered promiscuous mode [ 405.930885][T12757] netlink: 'syz.3.1680': attribute type 4 has an invalid length. [ 405.930917][T12757] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1680'. [ 406.225311][T12761] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 407.021788][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 407.110349][T12767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1683'. [ 407.110383][T12767] block nbd2: Unsupported socket: should be TCP or UNIX. [ 407.294102][T12779] netlink: 'syz.4.1685': attribute type 10 has an invalid length. [ 407.322387][T12779] syz_tun: entered promiscuous mode [ 407.515657][T12779] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 407.819088][T12791] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1688'. [ 408.151806][T12793] bond6: option downdelay: invalid value (18446744073709551615) [ 408.151838][T12793] bond6: option downdelay: allowed values 0 - 2147483647 [ 408.280471][T12793] bond6 (unregistering): Released all slaves [ 408.700856][T12799] sctp: [Deprecated]: syz.0.1691 (pid 12799) Use of struct sctp_assoc_value in delayed_ack socket option. [ 408.700856][T12799] Use struct sctp_sack_info instead [ 408.709909][T12810] sctp: [Deprecated]: syz.0.1691 (pid 12810) Use of struct sctp_assoc_value in delayed_ack socket option. [ 408.709909][T12810] Use struct sctp_sack_info instead [ 409.168916][T12815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1694'. [ 409.808698][T12826] ip_tables: iptables: counters copy to user failed while replacing table [ 411.260035][T12843] Bluetooth: hci0: unsupported parameter 5135 [ 411.260066][T12843] Bluetooth: hci0: unsupported parameter 8192 [ 411.260109][T12843] Bluetooth: hci0: unsupported parameter 5135 [ 411.260124][T12843] Bluetooth: hci0: unsupported parameter 8192 [ 411.409233][T12846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1701'. [ 411.410323][T12847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1701'. [ 411.496439][T12847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1701'. [ 412.373474][T12854] netlink: 'syz.3.1703': attribute type 5 has an invalid length. [ 412.948621][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1707'. [ 414.544636][T12899] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1716'. [ 415.336528][T12911] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1720'. [ 415.465267][T12910] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1719'. [ 415.731556][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1722'. [ 416.194815][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1723'. [ 416.194858][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1723'. [ 416.248839][T12922] tipc: MTU too low for tipc bearer [ 417.894056][T12947] 0: reclassify loop, rule prio 0, protocol 03 [ 418.307185][T12955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1729'. [ 418.452903][T12955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1729'. [ 418.657650][ T9448] IPVS: starting estimator thread 0... [ 418.771972][T12962] IPVS: using max 24 ests per chain, 57600 per kthread [ 418.817793][T12966] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1733'. [ 418.852225][T12971] C: renamed from lo (while UP) [ 418.904974][T12971] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 419.005824][T12969] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1732'. [ 419.005883][T12969] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1732'. [ 419.005900][T12969] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1732'. [ 419.056466][T12969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1732'. [ 419.104031][T12975] macvlan0: entered promiscuous mode [ 421.730497][T13012] vcan0: tx address claim with different name [ 421.745950][T13014] netlink: 'syz.2.1746': attribute type 9 has an invalid length. [ 421.956030][T13008] bond10 (unregistering): Released all slaves [ 422.179328][T13022] ip6t_frag: unknown flags 6 [ 422.559691][T13025] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1748'. [ 423.611455][T13035] syzkaller0: entered promiscuous mode [ 423.611671][T13035] syzkaller0: entered allmulticast mode [ 424.862639][T13075] netlink: 10124 bytes leftover after parsing attributes in process `syz.1.1758'. [ 424.904142][T13063] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 425.206604][T13063] bond8 (unregistering): Released all slaves [ 426.138572][T13100] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 427.718415][T13121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1769'. [ 427.718443][T13121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1769'. [ 427.718473][T13121] netlink: 'syz.0.1769': attribute type 14 has an invalid length. [ 427.718489][T13121] netlink: 'syz.0.1769': attribute type 13 has an invalid length. [ 428.093873][T13129] netlink: 'syz.4.1772': attribute type 21 has an invalid length. [ 428.248116][T13130] netlink: 'syz.4.1772': attribute type 32 has an invalid length. [ 428.248144][T13130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1772'. [ 428.691730][T13137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1773'. [ 428.691771][T13137] netlink: 'syz.1.1773': attribute type 29 has an invalid length. [ 428.691787][T13137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1773'. [ 428.788426][T13137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1773'. [ 428.788466][T13137] netlink: 'syz.1.1773': attribute type 29 has an invalid length. [ 428.788482][T13137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1773'. [ 428.881791][T13145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1773'. [ 428.881831][T13145] netlink: 'syz.1.1773': attribute type 29 has an invalid length. [ 428.881847][T13145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1773'. [ 428.937055][T13130] bond8: option coupled_control: invalid value (128) [ 429.034924][T13130] bond8 (unregistering): Released all slaves [ 429.234517][T13142] netlink: 'syz.1.1773': attribute type 29 has an invalid length. [ 430.041690][T13165] ipt_ah: unknown flags FF [ 430.042237][T13165] ipt_ah: unknown flags FF [ 430.042778][T13165] ipt_ah: unknown flags FF [ 430.043301][T13165] ipt_ah: unknown flags FF [ 430.043812][T13165] ipt_ah: unknown flags FF [ 430.044329][T13165] ipt_ah: unknown flags FF [ 430.044976][T13165] ipt_ah: unknown flags FF [ 430.045475][T13165] ipt_ah: unknown flags FF [ 430.045975][T13165] ipt_ah: unknown flags FF [ 430.046367][T13165] ipt_ah: unknown flags FF [ 430.320031][T13165] __nla_validate_parse: 3 callbacks suppressed [ 430.320057][T13165] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1777'. [ 430.320075][T13165] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 432.717227][T13198] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 435.589302][T13268] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1794'. [ 436.635515][T13271] netlink: 'syz.4.1795': attribute type 7 has an invalid length. [ 436.635545][T13271] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1795'. [ 437.449934][T13286] ipvlan2: entered allmulticast mode [ 437.449964][T13286] virt_wifi0: entered allmulticast mode [ 437.489961][T13286] batman_adv: batadv0: Adding interface: ipvlan2 [ 437.489988][T13286] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.490026][T13286] batman_adv: batadv0: Interface activated: ipvlan2 [ 438.954099][T13317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1802'. [ 440.233451][T13330] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1810'. [ 440.236249][T13329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1810'. [ 440.282221][T13328] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1809'. [ 440.305920][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.160333][T13358] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1817'. [ 441.169627][T13357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1816'. [ 441.568717][T13366] tipc: Can't bind to reserved service type 0 [ 441.811459][T13365] sctp: [Deprecated]: syz.0.1815 (pid 13365) Use of int in max_burst socket option. [ 441.811459][T13365] Use struct sctp_assoc_value instead [ 441.981831][ T8366] page_pool_release_retry() stalled pool shutdown: id 61, 1 inflight 60 sec [ 442.072197][T13363] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 442.074546][T13363] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 443.037480][T13383] netlink: Invalid conntrack helper [ 443.037519][T13383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.111949][T13382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1823'. [ 443.119603][T13350] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1814'. [ 443.193639][T13382] batadv0: entered promiscuous mode [ 443.217733][T13383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1822'. [ 443.224163][T13382] macsec2: entered promiscuous mode [ 443.272680][T13382] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 444.038787][T13391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1825'. [ 444.123371][T13396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1827'. [ 444.221523][T13397] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1826'. [ 444.255524][T13400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1828'. [ 446.053094][T13435] netlink: 'syz.4.1832': attribute type 5 has an invalid length. [ 446.222435][T13435] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 446.604079][T13437] netlink: 'syz.3.1830': attribute type 1 has an invalid length. [ 446.616704][T13450] macvlan0: entered promiscuous mode [ 448.845071][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1842'. [ 449.909117][T13515] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1846'. [ 449.909169][T13515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1846'. [ 449.974885][T13515] openvswitch: netlink: Missing key (keys=40, expected=100) [ 450.352038][T13497] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 450.514772][T13497] bond10 (unregistering): Released all slaves [ 451.261267][T13533] sock: sock_timestamping_bind_phc: sock not bind to device [ 451.447151][T13535] netlink: 'syz.2.1851': attribute type 13 has an invalid length. [ 452.175494][T13553] netlink: 'syz.2.1857': attribute type 12 has an invalid length. [ 452.792156][T13562] IPVS: Error connecting to the multicast addr [ 453.124175][T13562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1859'. [ 453.125796][T13562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1859'. [ 453.272632][T13571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1862'. [ 453.894600][T13575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1865'. [ 455.260884][T13606] netlink: 'syz.4.1872': attribute type 10 has an invalid length. [ 456.939680][T13625] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1879'. [ 457.090685][T13628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1876'. [ 457.210911][T13625] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.668916][T13629] bond5: entered promiscuous mode [ 457.669613][T13629] bond5: entered allmulticast mode [ 457.877766][T13632] bond6: entered promiscuous mode [ 457.877999][T13632] bond6: entered allmulticast mode [ 457.898386][T13632] 8021q: adding VLAN 0 to HW filter on device bond6 [ 458.679253][T13659] netlink: 'syz.2.1885': attribute type 11 has an invalid length. [ 459.009504][T13658] openvswitch: netlink: IPv6 tunnel dst address is zero [ 459.029633][T13666] syzkaller0: entered promiscuous mode [ 459.029897][T13666] syzkaller0: entered allmulticast mode [ 459.178636][T13658] erspan0: entered promiscuous mode [ 459.896812][T13674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1889'. [ 459.896853][T13674] netlink: 'syz.2.1889': attribute type 7 has an invalid length. [ 459.897131][T13674] netlink: 'syz.2.1889': attribute type 8 has an invalid length. [ 459.897147][T13674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1889'. [ 460.920234][T13689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1893'. [ 461.017440][T13693] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1894'. [ 461.660370][T13698] netlink: 'syz.2.1896': attribute type 1 has an invalid length. [ 461.660400][T13698] netlink: 'syz.2.1896': attribute type 2 has an invalid length. [ 461.660416][T13698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1896'. [ 462.132044][T13703] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 462.290705][T13707] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1900'. [ 462.290739][T13707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1900'. [ 462.409943][T13716] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 462.458163][T13718] siw: device registration error -23 [ 463.458428][T13751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1907'. [ 463.524101][T13750] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1906'. [ 463.601246][ T1401] IPVS: starting estimator thread 0... [ 463.898794][T13759] IPVS: using max 27 ests per chain, 64800 per kthread [ 464.451953][T13765] netlink: 'syz.3.1909': attribute type 10 has an invalid length. [ 464.622457][T13765] .`: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 465.734730][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1917'. [ 466.103264][T13794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1916'. [ 466.952370][T13813] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1919'. [ 468.378307][T13853] netlink: 'syz.0.1926': attribute type 11 has an invalid length. [ 468.514422][T13844] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.514652][T13844] bridge0: port 2(bridge_slave_1) entered listening state [ 468.523179][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1926'. [ 468.625484][T13844] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.777696][T13844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.011140][T13848] netlink: Failed to add  helper -22 [ 469.011198][T13848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.857130][T13844] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 470.035277][T13844] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 470.047515][T13840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1924'. [ 470.930185][T13869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1929'. [ 472.990093][T13918] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1936'. [ 473.107698][T13918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1936'. [ 473.212159][T13922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.798496][T13942] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1940'. [ 473.798541][T13942] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1940'. [ 473.857275][T13942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1940'. [ 474.979158][T13962] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1943'. [ 474.979209][T13962] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 475.385246][T13970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1945'. [ 475.564845][T13970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.997063][T13970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.151972][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 476.588810][T13987] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 476.619045][T13987] ipt_REJECT: ECHOREPLY no longer supported. [ 476.706613][T13989] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 476.740355][T13993] ipt_REJECT: ECHOREPLY no longer supported. [ 477.935804][T14001] 8021q: adding VLAN 0 to HW filter on device bond12 [ 477.945127][T14004] : renamed from ipvlan1 (while UP) [ 478.873280][T14016] syzkaller0: entered promiscuous mode [ 478.873497][T14016] syzkaller0: entered allmulticast mode [ 479.442586][T14034] netlink: Setting conntrack mark requires 'commit' flag. [ 479.442627][T14034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.018449][T14042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1960'. [ 491.152383][T14043] netlink: 'syz.2.1961': attribute type 2 has an invalid length. [ 491.895216][T14059] netlink: 'syz.0.1966': attribute type 1 has an invalid length. [ 491.895243][T14059] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1966'. [ 491.962554][T14054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1965'. [ 491.991644][T14052] netlink: 'syz.3.1964': attribute type 2 has an invalid length. [ 492.211850][T14064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1965'. [ 492.348489][T14049] ip_tables: iptables: counters copy to user failed while replacing table [ 493.012112][T14070] Bluetooth: hci0: unsupported parameter 5135 [ 493.012146][T14070] Bluetooth: hci0: unsupported parameter 8192 [ 493.012163][T14070] Bluetooth: hci0: unsupported parameter 5135 [ 493.012177][T14070] Bluetooth: hci0: unsupported parameter 8192 [ 493.277175][T14075] x_tables: duplicate entry at hook 2 [ 493.873857][T14077] netlink: 380 bytes leftover after parsing attributes in process `syz.0.1970'. [ 493.955268][T14077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1970'. [ 493.955310][T14077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1970'. [ 493.955329][T14077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1970'. [ 494.041725][T14077] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1970'. [ 494.343303][T14087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1975'. [ 494.632685][T13222] IPVS: starting estimator thread 0... [ 494.714617][T14094] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:12147 [ 494.743948][T14092] IPVS: using max 24 ests per chain, 57600 per kthread [ 495.528902][T14114] netlink: 'syz.4.1982': attribute type 1 has an invalid length. [ 495.529098][T14114] NCSI netlink: No device for ifindex 0 [ 495.537439][T14114] netlink: 'syz.4.1982': attribute type 1 has an invalid length. [ 495.950315][T14117] bond8: (slave geneve3): making interface the new active one [ 495.963243][T14117] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 496.885862][T14133] __nla_validate_parse: 1 callbacks suppressed [ 496.885886][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1985'. [ 496.909464][T14133] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1985'. [ 497.807226][T14144] netlink: 'syz.0.1989': attribute type 1 has an invalid length. [ 497.846987][T14143] netlink: 'syz.0.1989': attribute type 1 has an invalid length. [ 497.930299][T14143] netlink: 'syz.0.1989': attribute type 1 has an invalid length. [ 497.976957][T14152] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1991'. [ 498.447982][T14156] xfrm1: entered allmulticast mode [ 498.541799][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 498.951365][T14161] batman_adv: batadv0: Adding interface: veth0 [ 498.951392][T14161] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.951430][T14161] batman_adv: batadv0: Interface activated: veth0 [ 499.026526][T14161] openvswitch: netlink: Multiple metadata blocks provided [ 500.359794][T14177] ip6t_rt: unknown flags 36 [ 500.651818][T14190] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1999'. [ 500.680411][T14188] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1999'. [ 500.769386][T14187] netlink: 'syz.3.1999': attribute type 2 has an invalid length. [ 500.886881][T14196] netlink: 'syz.0.2000': attribute type 1 has an invalid length. [ 501.258168][T14196] 8021q: adding VLAN 0 to HW filter on device bond13 [ 501.383008][T14206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2002'. [ 501.518117][T14199] bond13: (slave geneve3): making interface the new active one [ 501.556892][T14199] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 501.746535][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.879566][T14202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2001'. [ 502.319874][T14216] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 503.222179][T14239] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2010'. [ 503.354407][T13222] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 503.375997][T13222] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 503.383536][ T8365] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 503.823250][ T8367] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 503.988768][T14245] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2012'. [ 504.200009][T14250] netlink: 'syz.1.2014': attribute type 34 has an invalid length. [ 504.200042][T14250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2014'. [ 504.231739][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 504.420423][T14252] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2014'. [ 504.544476][T14249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2013'. [ 504.800633][T14259] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2015'. [ 504.800662][T14259] IPv6: NLM_F_CREATE should be specified when creating new route [ 506.369178][T14269] geneve4: entered allmulticast mode [ 506.852319][T14286] netlink: 'syz.4.2021': attribute type 21 has an invalid length. [ 506.852414][T14286] netlink: 'syz.4.2021': attribute type 6 has an invalid length. [ 506.852430][T14286] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2021'. [ 507.124897][T14288] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 507.181209][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 507.874130][T14302] netlink: 'syz.3.2024': attribute type 21 has an invalid length. [ 507.874160][T14302] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2024'. [ 507.874247][T14302] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2024'. [ 508.680856][T14320] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2027'. [ 508.680886][T14320] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2027'. [ 508.755006][T14319] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2027'. [ 508.755037][T14319] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2027'. [ 509.518274][T14279] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 511.025968][T14318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 512.302842][T14372] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2033'. [ 512.537933][T14363] netlink: 'syz.0.2033': attribute type 1 has an invalid length. [ 514.796747][T14407] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 514.800554][T14407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2040'. [ 515.183015][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 516.396621][T14434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2047'. [ 516.678798][T14441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2048'. [ 517.508104][T14447] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2050'. [ 517.527615][T14447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2050'. [ 517.622199][T14450] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2050'. [ 517.882239][T14462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2052'. [ 517.999413][T14461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2051'. [ 518.078014][T14465] netlink: 'syz.4.2053': attribute type 1 has an invalid length. [ 518.138410][T14471] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2053'. [ 519.246473][T14480] netlink: 'syz.3.2056': attribute type 1 has an invalid length. [ 519.436945][T14491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2059'. [ 519.436979][T14491] netlink: 'syz.1.2059': attribute type 1 has an invalid length. [ 519.635924][T14482] bond10: option mode: invalid value (10) [ 519.769267][T14482] bond10 (unregistering): Released all slaves [ 519.973491][T14497] batadv_slave_0: entered promiscuous mode [ 520.100410][T14499] batadv_slave_0: left promiscuous mode [ 520.745277][T14508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2061'. [ 522.397704][T14529] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2067'. [ 522.741051][T14524] 8021q: adding VLAN 0 to HW filter on device bond10 [ 522.826813][T14531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2068'. [ 522.828398][T14524] bond0: (slave bond10): Enslaving as an active interface with a down link [ 523.110907][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 13 (since boot) is 1051 jiffies old. [ 523.458833][T14538] ip_tables: iptables: counters copy to user failed while replacing table [ 523.473437][T14539] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20001 [ 523.475001][T14539] gre0: entered promiscuous mode [ 523.475196][T14539] gre0: entered allmulticast mode [ 525.104974][ T31] audit: type=1800 audit(1789938515.674:4): pid=14563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2077" name="memory.events" dev="tmpfs" ino=2231 res=0 errno=0 [ 526.188950][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2082'. [ 526.195496][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2082'. [ 526.196874][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2082'. [ 526.197925][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2082'. [ 526.199182][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2082'. [ 526.200589][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2082'. [ 526.212773][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2082'. [ 526.269241][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2082'. [ 526.273601][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2082'. [ 526.327103][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2082'. [ 526.357534][T14577] netlink: 'syz.1.2082': attribute type 11 has an invalid length. [ 526.527645][T14584] ip6t_rt: unknown flags 36 [ 527.180285][T14581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.058614][T14581] veth1_vlan: entered promiscuous mode [ 528.622298][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.622330][ C0] bridge0: topology change detected, propagating [ 528.659175][T14581] bridge0: port 1(batadv1) entered blocking state [ 528.659320][T14581] bridge0: port 1(batadv1) entered forwarding state [ 528.679189][T14581] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 528.885172][T14581] veth0_to_team: entered promiscuous mode [ 528.932086][T14581] 8021q: adding VLAN 0 to HW filter on device bond4 [ 528.963129][T14581] 8021q: adding VLAN 0 to HW filter on device bond5 [ 529.033261][ T8365] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 529.034811][T14581] 8021q: adding VLAN 0 to HW filter on device bond7 [ 529.421114][T14595] Bluetooth: hci3: command 0x0405 tx timeout [ 529.620456][T14612] 8021q: VLANs not supported on ip6tnl0 [ 529.758668][ T8367] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 530.348807][ T147] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 530.590099][T14620] tipc: Enabling of bearer rejected, failed to enable media [ 530.611596][T13234] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 3 [ 531.182073][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 531.427273][T14637] openvswitch: netlink: Key type 30 is not supported [ 531.439308][T14636] __nla_validate_parse: 26 callbacks suppressed [ 531.439350][T14636] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2094'. [ 531.449594][T14640] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2094'. [ 531.942400][T14652] ip6t_srh: unknown srh match flags 4000 [ 532.133710][T14653] ip6t_srh: unknown srh match flags 4000 [ 534.202586][T14666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2097'. [ 534.202750][T14666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.301816][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 534.471325][ C0] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 3 [ 534.857233][T14666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.390203][T14717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2106'. [ 536.490624][T14721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2106'. [ 537.797409][T14743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2112'. [ 537.869408][T14747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2112'. [ 537.950250][T14741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.010751][T14743] bond8: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 538.233137][T14743] bond8 (unregistering): Released all slaves [ 538.780019][T14747] bond8: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 538.947116][T14747] bond8 (unregistering): Released all slaves [ 542.702365][ C0] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 3 [ 542.702632][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 558.062689][ C0] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 3 [ 559.340978][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 560.461798][T14759] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 560.860617][T14767] netlink: 'syz.2.2118': attribute type 7 has an invalid length. [ 560.861787][T14767] netlink: 'syz.2.2118': attribute type 7 has an invalid length. [ 562.510113][T14786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2123'. [ 562.541237][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 563.057494][T14793] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 563.081506][T14793] batman_adv: batadv0: Adding interface: gretap0 [ 563.081529][T14793] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.095137][T14793] batman_adv: batadv0: Interface activated: gretap0 [ 563.185783][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.235707][T14802] netlink: 'syz.3.2126': attribute type 1 has an invalid length. [ 563.357777][T14807] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2129'. [ 564.171946][T14802] 8021q: adding VLAN 0 to HW filter on device bond11 [ 565.205511][T14824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2132'. [ 565.572127][T14829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2133'. [ 565.764003][T14830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2133'. [ 565.932422][T14837] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.133268][T14837] bond0: (slave gretap0): Opening slave failed [ 566.148767][T14845] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2137'. [ 566.148793][T14845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2137'. [ 566.148815][T14845] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2137'. [ 566.148831][T14845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2137'. [ 566.148848][T14845] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2137'. [ 567.000049][T14856] openvswitch: netlink: IP tunnel TTL not specified. [ 568.356195][T14870] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2145'. [ 568.407352][T14870] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2145'. [ 569.657903][T14888] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2149'. [ 569.680289][T14890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2151'. [ 570.325696][T14896] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2153'. [ 572.452860][T14936] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 572.558475][T14950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2166'. [ 572.558518][T14950] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 572.776597][T14936] bond6 (unregistering): Released all slaves [ 573.068850][T14958] xt_hl: Unknown Hop Limit match mode: 206 [ 573.189662][T14960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2166'. [ 573.259941][T14933] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 573.280477][T14933] batman_adv: batadv0: Adding interface: gretap2 [ 573.280497][T14933] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.280531][T14933] batman_adv: batadv0: Interface activated: gretap2 [ 573.497275][T14959] netlink: 'syz.0.2167': attribute type 1 has an invalid length. [ 573.677017][T14960] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 573.688307][T14960] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2166'. [ 573.711197][T14964] bond0: invalid NS target ff00:: specified for addition [ 573.711233][T14964] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 573.719671][T13233] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 573.803013][T13233] bond0: (slave syz_tun): link status definitely down, disabling slave [ 573.943016][T14968] netlink: 'syz.3.2169': attribute type 17 has an invalid length. [ 573.943045][T14968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2169'. [ 573.943077][T14968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2169'. [ 575.426259][T14992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2174'. [ 576.506121][T14999] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 576.590821][T15003] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 576.922726][T15009] veth1_to_bond: entered allmulticast mode [ 576.964114][T15009] veth1_to_bond: left allmulticast mode [ 577.075749][T15012] openvswitch: netlink: IP tunnel TTL not specified. [ 577.128601][T15012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2177'. [ 577.130590][T15012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2177'. [ 577.466558][T15020] netlink: 'syz.4.2180': attribute type 11 has an invalid length. [ 577.507562][T15021] tipc: Enabled bearer , priority 10 [ 579.555061][T15044] netlink: 'syz.1.2186': attribute type 3 has an invalid length. [ 580.345091][T15037] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 580.354859][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2188'. [ 580.483373][T15053] macvlan0: left promiscuous mode [ 580.665116][T15053] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2188'. [ 581.222322][T15059] batman_adv: batadv0: Adding interface: gretap1 [ 581.222345][T15059] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.222497][T15059] batman_adv: batadv0: Interface activated: gretap1 [ 581.853184][T15071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2194'. [ 581.989066][T15069] team0: Port device dummy0 removed [ 582.094723][T15069] bridge_slave_0: left allmulticast mode [ 582.095239][T15069] bridge_slave_0: left promiscuous mode [ 582.096338][T15069] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.260468][T15083] netlink: 4384 bytes leftover after parsing attributes in process `syz.1.2197'. [ 582.380465][T15069] bridge_slave_1: left allmulticast mode [ 582.462408][T15069] bridge_slave_1: left promiscuous mode [ 582.463491][T15069] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.703365][T15069] bond0: (slave bond_slave_0): Releasing backup interface [ 582.842267][T15069] bond0: (slave bond_slave_1): Releasing backup interface [ 583.075708][T15096] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2198'. [ 583.163821][T15069] team0: Port device team_slave_0 removed [ 583.191389][T15069] team0: Port device team_slave_1 removed [ 583.197576][T15069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.198946][T15069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.540953][T15069] bond4: (slave gretap2): Releasing active interface [ 583.667758][T15069] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 583.668004][T15069] batman_adv: batadv0: Removing interface: ipvlan2 [ 583.894151][T15097] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2198'. [ 583.894181][T15097] nbd: device at index 64 is going down [ 584.406127][T15106] af_packet: tpacket_rcv: packet too big, clamped from 204 to 4294967272. macoff=96 [ 584.536553][T15089] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 584.792447][T14859] udevd[14859]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 584.995420][T14769] udevd[14769]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 585.162641][T15113] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2202'. [ 586.667315][T15128] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2206'. [ 586.696363][T15124] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2206'. [ 589.005129][ T52] Bluetooth: hci4: ISO packet too small [ 589.023467][T15141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2210'. [ 589.075313][T15145] netlink: 'syz.4.2212': attribute type 1 has an invalid length. [ 589.075341][T15145] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2212'. [ 589.075360][T15145] netlink: 'syz.4.2212': attribute type 1 has an invalid length. [ 589.431201][ C0] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 3 [ 590.673835][T15160] syzkaller0: entered promiscuous mode [ 590.674150][T15160] syzkaller0: entered allmulticast mode [ 591.917448][T15177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2220'. [ 592.156491][T15181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2220'. [ 592.411649][T15182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2220'. [ 592.416822][T15182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2220'. [ 592.425479][T15182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2220'. [ 592.450814][T15182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2220'. [ 592.452093][T15182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2220'. [ 592.452814][T15182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2220'. [ 592.453930][T15182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2220'. [ 592.456592][T15182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2220'. [ 592.621136][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 592.792001][T15178] ip6tnl2: entered promiscuous mode [ 593.683196][T15202] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 594.639935][T15216] bond2: left allmulticast mode [ 597.598702][T15247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 598.461658][T15256] __nla_validate_parse: 5 callbacks suppressed [ 598.461683][T15256] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2244'. [ 599.105447][T14595] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 599.131282][T14595] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 599.159204][T14595] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 599.184640][T14595] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 599.207065][T14595] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 601.341035][T14595] Bluetooth: hci5: command tx timeout [ 602.896436][T15321] Bluetooth: MGMT ver 1.23 [ 603.125069][T15323] netlink: 'syz.2.2258': attribute type 4 has an invalid length. [ 603.436154][T14595] Bluetooth: hci5: command tx timeout [ 603.659904][T15270] wg0 speed is unknown, defaulting to 1000 [ 604.051830][T15331] netlink: 'syz.2.2260': attribute type 83 has an invalid length. [ 605.520883][T14595] Bluetooth: hci5: command tx timeout [ 606.110059][T15354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2265'. [ 606.161979][T15333] netlink: 'syz.2.2260': attribute type 4 has an invalid length. [ 606.162006][T15333] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2260'. [ 606.163829][T15333] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 606.529300][T15368] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 606.754449][T15370] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2267'. [ 607.590837][T14595] Bluetooth: hci5: command tx timeout [ 608.191842][T15270] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.192618][T15270] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.193007][T15270] bridge_slave_0: entered allmulticast mode [ 608.235642][T15270] bridge_slave_0: entered promiscuous mode [ 608.255917][T15270] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.256484][T15270] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.256864][T15270] bridge_slave_1: entered allmulticast mode [ 608.271137][T15270] bridge_slave_1: entered promiscuous mode [ 608.569463][T15391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2271'. [ 608.750369][T15270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.360831][T15392] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2271'. [ 609.386933][T15270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.338987][T15270] team0: Port device team_slave_0 added [ 610.412969][T15270] team0: Port device team_slave_1 added [ 610.829953][T15405] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 610.830826][T15405] IPVS: set_ctl: invalid protocol: 12 100.1.1.0:20004 [ 611.016371][T15270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.016392][T15270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.016425][T15270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.100916][T15270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.100938][T15270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.101658][T15270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.527996][T15401] syzkaller0: entered promiscuous mode [ 611.564582][T15401] syzkaller0: entered allmulticast mode [ 612.992569][T15270] hsr_slave_0: entered promiscuous mode [ 613.015150][T15270] hsr_slave_1: entered promiscuous mode [ 613.027926][T15270] debugfs: 'hsr0' already exists in 'hsr' [ 613.027954][T15270] Cannot create hsr debugfs directory [ 614.192351][T15435] netlink: 'syz.2.2280': attribute type 10 has an invalid length. [ 614.203371][T15441] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2282'. [ 614.367180][T15444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2283'. [ 615.807444][T15461] netlink: 'syz.0.2287': attribute type 2 has an invalid length. [ 615.874213][T15459] tipc: Enabled bearer , priority 0 [ 615.884557][T15462] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 615.885158][T15462] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 615.963266][T15459] netlink: Only one type of NAT may be specified [ 615.963306][T15459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 618.195464][T15491] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2292'. [ 618.347536][T15483] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 618.439251][T15270] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 618.455916][T15494] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.2293'. [ 618.519554][T15270] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 618.555031][T15270] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 618.560059][T15494] netlink: 'syz.2.2293': attribute type 1 has an invalid length. [ 618.647322][T15270] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 618.817912][T15270] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 618.859833][T15270] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 618.875677][T15270] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 618.927271][T15270] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 618.995436][ T9450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.995466][ T9450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.114508][T15519] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2295'. [ 620.525068][T15527] xt_l2tp: unknown flags: 43 [ 620.892184][T15270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.215308][T15270] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.404946][T13222] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.405066][T13222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.609680][T13234] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.609798][T13234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.635756][T15534] Bluetooth: hci0: unsupported parameter 5135 [ 621.635782][T15534] Bluetooth: hci0: unsupported parameter 8192 [ 621.635797][T15534] Bluetooth: hci0: unsupported parameter 5135 [ 621.635811][T15534] Bluetooth: hci0: unsupported parameter 8192 [ 623.195986][T15552] netlink: 'syz.3.2306': attribute type 10 has an invalid length. [ 623.308503][T15557] ip6t_hbh: unknown flags 38 [ 623.446078][T15547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2303'. [ 623.446120][T15547] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2303'. [ 623.448412][T15543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2303'. [ 623.448452][T15543] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2303'. [ 623.678477][T15552] veth0_vlan: entered allmulticast mode [ 624.400569][T15543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2303'. [ 624.400612][T15543] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2303'. [ 624.660432][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.841713][T15547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2303'. [ 624.841754][T15547] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2303'. [ 625.463265][T15576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2309'. [ 625.920243][T15569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2307'. [ 626.078090][T15570] veth1_to_bond: entered allmulticast mode [ 626.078671][T15570] veth1_to_bond: left allmulticast mode [ 627.161489][T15576] .`: (slave bond_slave_1): Releasing backup interface [ 627.769219][T15595] netlink: 'syz.2.2311': attribute type 83 has an invalid length. [ 628.380838][T15603] vlan0: entered promiscuous mode [ 628.572929][T15612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2312'. [ 629.388764][T15604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.614996][T15607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.742567][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 630.792473][T15617] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2317'. [ 630.793824][T15617] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2317'. [ 630.954745][T15611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 631.279054][T15626] netlink: 'syz.0.2318': attribute type 28 has an invalid length. [ 631.279083][T15626] netlink: 'syz.0.2318': attribute type 3 has an invalid length. [ 631.279098][T15626] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2318'. [ 631.724000][T15630] IPv6: sit1: Disabled Multicast RS [ 632.182303][T15270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.613682][T15635] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2321'. [ 633.150143][T15647] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2324'. [ 633.951998][T15656] xt_hashlimit: size too large, truncated to 1048576 [ 636.786551][T15270] veth0_vlan: entered promiscuous mode [ 636.991373][T15270] veth1_vlan: entered promiscuous mode [ 637.009289][T15693] netlink: 'syz.3.2334': attribute type 10 has an invalid length. [ 637.187478][T15694] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2332'. [ 637.372383][T15698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2335'. [ 638.025720][T15270] veth0_macvtap: entered promiscuous mode [ 638.151620][T15270] veth1_macvtap: entered promiscuous mode [ 638.530283][T15270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.651318][T15270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.050137][T15713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2338'. [ 639.448490][ T1401] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.461951][T13219] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.467055][ T1401] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.467112][ T1401] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.461741][T13219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.461773][T13219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.845945][T15744] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2345'. [ 642.885104][T13218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.885130][T13218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.906973][T15755] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 644.088003][T15761] veth1_macvtap: left promiscuous mode [ 644.088263][T15761] macsec0: entered promiscuous mode [ 645.014226][T15771] syzkaller0: entered promiscuous mode [ 645.014494][T15771] syzkaller0: entered allmulticast mode [ 645.065194][T13219] IPVS: starting estimator thread 0... [ 645.414191][T15778] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2350'. [ 645.567307][T15780] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2350'. [ 645.588721][T15767] IPVS: Scheduler module ip_vs_mh not found [ 645.599358][T15777] IPVS: using max 27 ests per chain, 64800 per kthread [ 645.995516][T15778] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.186712][T15799] bond10: option mode: invalid value (10) [ 648.503284][T15820] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 648.631550][T15820] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 648.807882][T15812] tipc: Enabled bearer , priority 10 [ 648.886448][T15823] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 649.499576][T15832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 650.290112][T15840] bond0: Error: Cannot enslave bond to itself. [ 650.799732][T15842] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2368'. [ 650.799773][T15842] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2368'. [ 651.017063][T15842] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2368'. [ 651.017094][T15842] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2368'. [ 651.034626][T15848] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2369'. [ 651.845519][T15851] veth7: entered allmulticast mode [ 651.930855][T15855] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 652.695374][T15874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2373'. [ 653.508436][T15881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2376'. [ 653.561439][T15881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2376'. [ 653.656043][T15886] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2378'. [ 653.656076][T15886] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2378'. [ 655.342489][ C0] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 3 [ 656.099856][T15923] __nla_validate_parse: 3 callbacks suppressed [ 656.099883][T15923] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2385'. [ 656.102810][T15923] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2385'. [ 656.989671][T15935] xt_TCPMSS: Only works on TCP SYN packets [ 657.117908][T15938] netlink: 'syz.5.2389': attribute type 15 has an invalid length. [ 657.117938][T15938] netlink: 'syz.5.2389': attribute type 7 has an invalid length. [ 657.164839][T15936] digital: digital_start_poll: Unknown protocol [ 657.810410][T15951] syzkaller0: entered promiscuous mode [ 657.810654][T15951] syzkaller0: entered allmulticast mode [ 658.543326][T15957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2393'. [ 659.347265][T15967] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2395'. [ 659.347916][T15968] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2395'. [ 660.461598][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 661.837841][T15994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2400'. [ 661.839385][T15994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2400'. [ 663.610203][T16010] erspan0: entered promiscuous mode [ 664.778366][T16022] A link change request failed with some changes committed already. Interface 04±ÿª¨úrBº“€ may have been left with an inconsistent configuration, please check. [ 665.155658][T16036] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 665.277865][T16036] netlink: 'syz.3.2411': attribute type 1 has an invalid length. [ 665.607985][T16036] bond12: entered promiscuous mode [ 665.630752][T16036] 8021q: adding VLAN 0 to HW filter on device bond12 [ 666.481409][T16039] 8021q: adding VLAN 0 to HW filter on device bond12 [ 666.482894][T16039] bond12: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 666.482919][T16039] bond12: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 666.716403][T16039] bond12: (slave ip6gre2): making interface the new active one [ 666.716435][T16039] ip6gre2: entered promiscuous mode [ 666.748957][T16039] bond12: (slave ip6gre2): Enslaving as an active interface with an up link [ 667.236951][T16051] netlink: 'syz.0.2415': attribute type 13 has an invalid length. [ 667.341873][T15733] page_pool_release_retry() stalled pool shutdown: id 71, 1 inflight 60 sec [ 667.732789][T16028] ip_tables: iptables: counters copy to user failed while replacing table [ 667.984597][T16063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2418'. [ 668.009345][T16063] xt_l2tp: missing protocol rule (udp|l2tpip) [ 669.184539][T16075] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2422'. [ 669.202056][T16074] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2421'. [ 669.338959][T16080] netlink: 'syz.2.2422': attribute type 10 has an invalid length. [ 670.533717][T16080] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 670.624702][T16082] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 671.208491][T16094] pim6reg: entered allmulticast mode [ 671.461229][T16094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2426'. [ 671.926513][T16107] netlink: 'syz.3.2429': attribute type 1 has an invalid length. [ 673.029743][T16107] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 673.738286][T16119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2431'. [ 673.774242][T16119] netlink: 'syz.2.2431': attribute type 2 has an invalid length. [ 673.774274][T16119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2431'. [ 674.349079][T16135] IPv6: NLM_F_CREATE should be specified when creating new route [ 674.462017][T16135] openvswitch: netlink: Flow actions attr not present in new flow. [ 674.706818][T16140] ip6t_rpfilter: unknown options [ 676.850647][T16171] netlink: Failed to add %pB helper -22 [ 676.852566][T16171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 677.558013][T16184] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2447'. [ 679.625607][T16220] syzkaller0: entered promiscuous mode [ 679.625842][T16220] syzkaller0: entered allmulticast mode [ 680.235775][T16235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2459'. [ 680.309785][T16231] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2459'. [ 680.309819][T16231] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2459'. [ 680.309837][T16231] netlink: 'syz.4.2459': attribute type 6 has an invalid length. [ 680.309851][T16231] netlink: 'syz.4.2459': attribute type 5 has an invalid length. [ 680.309866][T16231] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2459'. [ 680.370053][T16233] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2459'. [ 680.370085][T16233] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2459'. [ 680.370102][T16233] netlink: 'syz.4.2459': attribute type 6 has an invalid length. [ 680.370117][T16233] netlink: 'syz.4.2459': attribute type 5 has an invalid length. [ 680.370130][T16233] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2459'. [ 681.976981][T16254] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2463'. [ 682.030868][T14595] Bluetooth: hci5: link tx timeout [ 682.031095][T14595] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 682.099015][ T52] Bluetooth: hci5: link tx timeout [ 682.099042][ T52] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 682.779661][T16263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.328961][T16270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2466'. [ 684.071319][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 685.248641][T16284] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2472'. [ 685.626337][T16294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.743114][T16294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.893285][T16294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 686.108027][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.335959][T16291] bond13 (unregistering): Released all slaves [ 686.506398][T16307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 687.766040][T16318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2481'. [ 687.822501][T16318] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.372892][T16328] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2484'. [ 689.204208][T16333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2485'. [ 689.284888][T16332] bond11: option lp_interval: invalid value (0) [ 689.284918][T16332] bond11: option lp_interval: allowed values 1 - 2147483647 [ 689.469135][T16332] bond11 (unregistering): Released all slaves [ 689.608238][T16330] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2485'. [ 689.608270][T16330] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2485'. [ 689.859290][T16346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2489'. [ 690.188896][T16351] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2489'. [ 691.240435][T16378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2495'. [ 691.816344][T16384] veth0: entered promiscuous mode [ 692.240232][T16397] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2498'. [ 692.313316][T16382] veth0: left promiscuous mode [ 692.341903][T16397] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2498'. [ 692.475940][T16399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2498'. [ 692.589601][T16400] ip6t_srh: unknown srh match flags 5F28 [ 692.590517][T16397] ip6gre2: entered promiscuous mode [ 692.590753][T16397] ip6gre2: entered allmulticast mode [ 695.602087][T16437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2509'. [ 695.609261][T16437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2509'. [ 698.843366][T16481] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2515'. [ 699.175891][T16489] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2515'. [ 699.250576][T16486] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2517'. [ 699.519192][T14595] Bluetooth: hci5: ACL packet too small [ 700.952775][T16529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2526'. [ 701.338976][T16529] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2526'. [ 701.505661][T16541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2528'. [ 701.505980][T16541] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 703.512142][T16557] netlink: 'syz.2.2532': attribute type 1 has an invalid length. [ 705.140018][T16576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2535'. [ 705.140051][T16576] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2535'. [ 706.627099][T16607] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2540'. [ 706.720902][T16605] netlink: 'syz.2.2541': attribute type 1 has an invalid length. [ 707.245343][T16611] netlink: 'syz.4.2540': attribute type 58 has an invalid length. [ 707.245373][T16611] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2540'. [ 707.415741][T16615] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2540'. [ 707.807448][T16617] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2543'. [ 707.935077][T16617] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2543'. [ 710.011574][T16645] netlink: 'syz.0.2550': attribute type 1 has an invalid length. [ 710.012627][T16645] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 710.012894][T16645] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 710.843647][T16661] Cannot find map_set index 135 as target [ 712.010509][T16678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2560'. [ 712.542570][T16686] netlink: 344 bytes leftover after parsing attributes in process `syz.3.2564'. [ 712.676304][T16690] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2562'. [ 713.716292][T16703] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 713.856156][T16708] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2569'. [ 714.191682][T16711] syzkaller0: entered promiscuous mode [ 714.191954][T16711] syzkaller0: entered allmulticast mode [ 715.348110][T16728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2574'. [ 715.621888][T16732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2574'. [ 716.652298][T16745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2577'. [ 717.044057][T16749] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 717.210767][T16752] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 717.839530][T16757] netlink: 'syz.0.2580': attribute type 10 has an invalid length. [ 718.058175][T16767] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2583'. [ 718.275151][T16769] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2584'. [ 718.647394][T16774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2585'. [ 718.813566][T16767] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 719.032135][T16778] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.2586'. [ 719.032454][T16778] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 719.417645][T16778] 0ªX¹¦Dö»: entered allmulticast mode [ 719.478291][T16779] A link change request failed with some changes committed already. Interface 04±ÿª¨úrBº“€ may have been left with an inconsistent configuration, please check. [ 719.661668][T16787] netlink: 'syz.4.2589': attribute type 21 has an invalid length. [ 719.661699][T16787] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2589'. [ 719.661796][T16787] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2589'. [ 721.004535][T16810] netlink: 'syz.0.2594': attribute type 32 has an invalid length. [ 721.004572][T16810] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2594'. [ 721.018995][T16809] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2593'. [ 721.143189][T16809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 721.198930][T16818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2594'. [ 721.278958][T16824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2594'. [ 731.501837][ C0] sched: DL replenish lagged too much [ 747.834175][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.632083][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 761.856772][T13224] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.889139][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 764.000903][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 764.083175][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 765.351751][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 765.480934][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 770.868170][T14595] Bluetooth: hci2: command tx timeout [ 772.391668][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 772.591395][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 773.060216][T16849] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 773.094075][ T4933] Bluetooth: hci2: command tx timeout [ 773.094193][ T4933] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 773.117501][ T4933] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 773.119172][ T4933] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 773.522265][T16873] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 773.551189][T16873] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 773.633125][T16873] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 773.827353][T16873] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 773.855159][T16873] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 775.155052][ T52] Bluetooth: hci2: command tx timeout [ 775.421112][T16873] Bluetooth: hci6: command tx timeout [ 777.240858][T16873] Bluetooth: hci2: command tx timeout [ 777.240937][T16873] Bluetooth: hci7: command tx timeout [ 777.606022][ T52] Bluetooth: hci6: command tx timeout [ 779.260931][T16873] Bluetooth: hci7: command tx timeout [ 779.661008][T16873] Bluetooth: hci6: command tx timeout [ 781.460922][T16871] Bluetooth: hci7: command tx timeout [ 781.461703][T16871] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 781.620940][T16871] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 781.661340][T16871] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 781.750787][T16871] Bluetooth: hci6: command tx timeout [ 781.762296][T16871] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 781.861305][T16871] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 782.630837][T16873] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 783.112105][T16873] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 783.600739][T16873] Bluetooth: hci7: command tx timeout [ 783.651187][T16873] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 783.866617][T16873] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 784.316631][T16873] Bluetooth: hci9: command tx timeout [ 785.742391][T16873] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 785.884494][T16873] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 786.473997][T16873] Bluetooth: hci9: command tx timeout [ 788.461388][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 788.463806][ C0] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 3 [ 788.600843][T16871] Bluetooth: hci9: command tx timeout [ 790.122554][T13224] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.631334][T16871] Bluetooth: hci9: command tx timeout [ 798.151200][T16873] Bluetooth: hci8: command tx timeout [ 800.680826][T16873] Bluetooth: hci8: command tx timeout [ 802.715305][ T52] Bluetooth: hci8: command tx timeout [ 804.833839][ T52] Bluetooth: hci8: command tx timeout [ 808.945674][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 822.421960][T16873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 822.618438][T16873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 822.620616][T16873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 823.251004][T16873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 823.431353][T16873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 825.723290][ T52] Bluetooth: hci0: command tx timeout [ 827.740762][T16873] Bluetooth: hci0: command tx timeout [ 829.782452][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 829.831824][ T52] Bluetooth: hci0: command tx timeout [ 830.418987][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 830.896178][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 832.031031][ T52] Bluetooth: hci0: command tx timeout [ 832.031640][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 832.622152][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 834.621606][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 834.741383][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 834.743467][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 834.763063][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 834.903183][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 835.581515][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 835.750844][ T52] Bluetooth: hci1: command tx timeout [ 836.690100][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 836.786834][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 836.789715][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 836.791281][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 837.430999][ T52] Bluetooth: hci3: command tx timeout [ 837.930951][ T52] Bluetooth: hci1: command tx timeout [ 839.141307][ T52] Bluetooth: hci4: command tx timeout [ 839.504646][T16873] Bluetooth: hci3: command tx timeout [ 839.982924][T16873] Bluetooth: hci1: command tx timeout [ 841.259076][T16873] Bluetooth: hci4: command tx timeout [ 841.610704][T16873] Bluetooth: hci3: command tx timeout [ 842.070945][T16873] Bluetooth: hci1: command tx timeout [ 843.261032][T16873] Bluetooth: hci4: command tx timeout [ 843.661340][T16873] Bluetooth: hci3: command tx timeout [ 845.001586][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 845.334011][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 845.379050][ T52] Bluetooth: hci4: command tx timeout [ 845.411302][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 845.542080][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 845.568388][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 850.650834][T16873] Bluetooth: hci5: command tx timeout [ 852.710985][T16873] Bluetooth: hci5: command tx timeout [ 854.797427][T16873] Bluetooth: hci5: command tx timeout [ 856.860843][T16873] Bluetooth: hci5: command tx timeout [ 860.362368][ T5625] bond0: (slave syz_tun): Releasing backup interface [ 870.385688][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 886.240159][T13224] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.332206][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 886.398786][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 886.400098][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 886.403629][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 886.405284][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 888.460982][T16873] Bluetooth: hci2: command tx timeout [ 888.701709][T16873] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 888.981012][T16873] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 889.097899][T16873] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 889.341452][T16873] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 889.431759][T16873] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 890.830850][ T52] Bluetooth: hci2: command tx timeout [ 891.941421][ T52] Bluetooth: hci7: command tx timeout [ 892.868315][ T52] Bluetooth: hci2: command tx timeout [ 894.030911][T16873] Bluetooth: hci7: command tx timeout [ 894.941123][T16873] Bluetooth: hci2: command tx timeout [ 895.952599][T16873] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 896.015711][T16873] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 896.023677][T16873] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 896.026214][T16873] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 896.027878][T16873] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 896.090708][T16873] Bluetooth: hci7: command tx timeout [ 898.060840][T16873] Bluetooth: hci6: command 0x0406 tx timeout [ 898.210849][T16873] Bluetooth: hci7: command tx timeout [ 898.233500][T16873] Bluetooth: hci8: command tx timeout [ 900.300835][T16873] Bluetooth: hci8: command tx timeout [ 902.381375][T16871] Bluetooth: hci8: command tx timeout [ 904.780695][T16873] Bluetooth: hci8: command tx timeout [ 907.322102][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 907.642421][ T52] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 907.793110][ T52] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 907.876561][ T52] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 907.880459][ T52] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 907.882007][ T52] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 908.240262][ T4933] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 908.253793][ T4933] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 908.259206][ T4933] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 908.415504][ T4933] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 917.557328][T13224] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.636782][T16871] Bluetooth: hci6: command tx timeout [ 917.900776][T16871] Bluetooth: hci9: command tx timeout [ 919.660776][T16871] Bluetooth: hci6: command tx timeout [ 919.983327][T16871] Bluetooth: hci9: command tx timeout [ 921.740853][T16871] Bluetooth: hci6: command tx timeout [ 922.070804][T16871] Bluetooth: hci9: command tx timeout [ 923.885482][T16871] Bluetooth: hci6: command tx timeout [ 924.190766][T16871] Bluetooth: hci9: command tx timeout [ 931.825096][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 953.615545][T16873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 954.690913][T16873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 954.731679][T16873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 955.461093][T16873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 955.621393][T16873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 956.507486][T13224] batadv1: left allmulticast mode [ 956.508127][T13224] batadv1: left promiscuous mode [ 956.511696][T13224] bridge0: port 1(batadv1) entered disabled state [ 959.030868][T16873] Bluetooth: hci0: command tx timeout [ 960.371131][T16871] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 961.181331][T16871] Bluetooth: hci0: command tx timeout [ 963.269312][T16871] Bluetooth: hci0: command tx timeout [ 964.552082][T16873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 965.341081][T16873] Bluetooth: hci0: command tx timeout [ 966.021034][T16873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 966.143651][T16873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 966.159551][T16873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 966.168392][T16873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 972.380509][T13224] pim6reg: left allmulticast mode [ 972.910012][T13224] batman_adv: batadv0: Interface deactivated: gretap0 [ 974.220736][T16873] Bluetooth: hci3: command tx timeout [ 976.300736][T16873] Bluetooth: hci3: command tx timeout [ 978.471002][T16871] Bluetooth: hci3: command tx timeout [ 978.601571][T16871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 978.701351][T16871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 978.836218][T16871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 978.838814][T16871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 978.843232][T16871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 980.549567][T16873] Bluetooth: hci3: command tx timeout [ 982.780733][T16873] Bluetooth: hci1: command tx timeout [ 984.540863][T16871] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 984.866265][T16871] Bluetooth: hci1: command tx timeout [ 986.941412][T16871] Bluetooth: hci1: command tx timeout [ 989.020829][T16871] Bluetooth: hci1: command tx timeout [ 993.265533][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1017.042071][T16873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1017.892786][T16873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1017.922655][T16873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1017.925209][T16873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1017.926869][T16873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1020.580690][T16871] Bluetooth: hci2: command tx timeout [ 1022.641136][T16871] Bluetooth: hci2: command tx timeout [ 1024.700751][T16873] Bluetooth: hci2: command tx timeout [ 1024.707952][T16873] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1024.831230][T16873] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1024.880824][T16873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1025.041079][T16873] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1025.060255][T16873] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1026.791167][T16873] Bluetooth: hci2: command tx timeout [ 1028.780738][T16873] Bluetooth: hci4: command tx timeout [ 1030.860986][T16873] Bluetooth: hci4: command tx timeout [ 1033.040662][T16873] Bluetooth: hci4: command tx timeout [ 1035.180650][ T52] Bluetooth: hci4: command tx timeout [ 1036.570910][ T52] Bluetooth: hci9: command 0x0406 tx timeout [ 1036.570957][ T52] Bluetooth: hci6: command 0x0406 tx timeout [ 1040.618941][T16873] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1040.628745][T16873] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1040.674660][T16873] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1041.029954][T16873] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1041.032842][T16873] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1043.435178][ T4933] Bluetooth: hci5: command tx timeout [ 1044.302730][T16873] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1044.621305][T16873] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1044.808725][T16873] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1045.004238][T16873] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1045.141253][T16873] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1045.509740][T16873] Bluetooth: hci5: command tx timeout [ 1046.791691][T16871] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1046.796457][T16871] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1046.797683][T16871] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1047.150973][T16871] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1047.538429][T16871] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1047.580739][T16871] Bluetooth: hci5: command tx timeout [ 1048.630638][ T4933] Bluetooth: hci7: command tx timeout [ 1049.662048][ T4933] Bluetooth: hci5: command tx timeout [ 1050.070726][ T4933] Bluetooth: hci8: command tx timeout [ 1050.746328][ T4933] Bluetooth: hci7: command tx timeout [ 1052.140761][ T4933] Bluetooth: hci8: command tx timeout [ 1052.780966][ T4933] Bluetooth: hci7: command tx timeout [ 1054.280649][ T4933] Bluetooth: hci8: command tx timeout [ 1054.713150][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.921198][ T4933] Bluetooth: hci7: command tx timeout [ 1056.300891][ T4933] Bluetooth: hci8: command tx timeout [ 1082.412810][T16871] Bluetooth: hci0: command 0x0406 tx timeout [ 1085.990441][T16871] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1086.212912][T16871] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1086.520848][T16873] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1086.940783][T16873] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1087.001171][T16873] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1088.381388][ T4933] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1088.431205][ T4933] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1088.491038][ T4933] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1089.340679][ T4933] Bluetooth: hci10: command tx timeout [ 1090.155351][ T4933] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1090.261602][ T4933] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1091.460833][ T4933] Bluetooth: hci10: command tx timeout [ 1093.500670][T16873] Bluetooth: hci10: command tx timeout [ 1094.300955][T16873] Bluetooth: hci11: command tx timeout [ 1095.580702][T16873] Bluetooth: hci10: command tx timeout [ 1096.380963][ T4933] Bluetooth: hci11: command tx timeout [ 1097.805490][ T4933] Bluetooth: hci3: command 0x0406 tx timeout [ 1098.530608][ T4933] Bluetooth: hci11: command tx timeout [ 1100.760737][T16873] Bluetooth: hci11: command tx timeout [ 1102.858977][T16871] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1102.871880][T16871] Bluetooth: hci1: command 0x0406 tx timeout [ 1102.875009][T16871] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1102.877215][T16871] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1102.879722][T16871] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1102.881621][T16871] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1104.837451][T13224] batman_adv: batadv0: Removing interface: gretap0 [ 1104.940703][T16873] Bluetooth: hci12: command tx timeout [ 1107.023219][T16873] Bluetooth: hci12: command tx timeout [ 1107.180892][ T33] INFO: task dhcpcd:5279 blocked for more than 143 seconds. [ 1107.180925][ T33] Not tainted syzkaller #0 [ 1107.180938][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1107.180949][ T33] task:dhcpcd state:D stack:21384 pid:5279 tgid:5279 ppid:5278 task_flags:0x400140 flags:0x00080000 [ 1107.181030][ T33] Call Trace: [ 1107.181120][ T33] [ 1107.181176][ T33] __schedule+0x17db/0x58f0 [ 1107.181389][ T33] ? __pfx___schedule+0x10/0x10 [ 1107.181462][ T33] ? schedule+0x90/0x2b0 [ 1107.181492][ T33] schedule+0x164/0x2b0 [ 1107.181521][ T33] schedule_preempt_disabled+0x13/0x30 [ 1107.181547][ T33] __mutex_lock+0x7c1/0x1550 [ 1107.181583][ T33] ? __mutex_lock+0x5d4/0x1550 [ 1107.181617][ T33] ? rtnl_newlink+0xc10/0x1c30 [ 1107.181713][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 1107.181755][ T33] ? ns_capable+0x89/0xe0 [ 1107.181831][ T33] ? rtnl_nets_add+0x16c/0x300 [ 1107.181861][ T33] ? rtnl_newlink+0x905/0x1c30 [ 1107.181893][ T33] rtnl_newlink+0xc10/0x1c30 [ 1107.181937][ T33] ? __pfx_rtnl_newlink+0x10/0x10 [ 1107.181968][ T33] ? __lock_acquire+0x747/0x2de0 [ 1107.182019][ T33] ? __lock_acquire+0x747/0x2de0 [ 1107.182062][ T33] ? lock_acquire+0x115/0x350 [ 1107.182094][ T33] ? lock_acquire+0x115/0x350 [ 1107.182129][ T33] ? is_bpf_text_address+0x26/0x2b0 [ 1107.182189][ T33] ? __lock_acquire+0x747/0x2de0 [ 1107.182221][ T33] ? __kernel_text_address+0xd/0x30 [ 1107.182254][ T33] ? unwind_get_return_address+0x4d/0x90 [ 1107.182294][ T33] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1107.182330][ T33] ? arch_stack_walk+0xfb/0x150 [ 1107.182370][ T33] ? lock_acquire+0x115/0x350 [ 1107.182394][ T33] ? __pfx_rtnl_newlink+0x10/0x10 [ 1107.182438][ T33] ? __pfx_rtnl_newlink+0x10/0x10 [ 1107.182466][ T33] rtnetlink_rcv_msg+0x802/0xc00 [ 1107.182495][ T33] ? netlink_sendmsg+0x5d4/0xb40 [ 1107.182607][ T33] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1107.182636][ T33] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1107.182666][ T33] ? __lock_acquire+0x747/0x2de0 [ 1107.182706][ T33] netlink_rcv_skb+0x226/0x4a0 [ 1107.182743][ T33] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1107.182775][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1107.182825][ T33] ? netlink_deliver_tap+0x2e/0x1b0 [ 1107.182861][ T33] ? netlink_deliver_tap+0x2e/0x1b0 [ 1107.182903][ T33] netlink_unicast+0x7bd/0x940 [ 1107.182957][ T33] netlink_sendmsg+0x813/0xb40 [ 1107.183005][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1107.183051][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 1107.183150][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1107.183193][ T33] sock_sendmsg_nosec+0x13a/0x180 [ 1107.183246][ T33] ____sys_sendmsg+0x54e/0x850 [ 1107.183309][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1107.183353][ T33] ? import_iovec+0x73/0xa0 [ 1107.183427][ T33] ___sys_sendmsg+0x2a5/0x360 [ 1107.183459][ T33] ? __asan_memcpy+0x40/0x70 [ 1107.183512][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 1107.183571][ T33] ? vfs_read+0x804/0xa80 [ 1107.183635][ T33] ? __pfx_set_user_sigmask+0x10/0x10 [ 1107.183677][ T33] __x64_sys_sendmsg+0x1b1/0x290 [ 1107.183714][ T33] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1107.183772][ T33] do_syscall_64+0x166/0x520 [ 1107.183847][ T33] ? trace_irq_disable+0x3b/0x140 [ 1107.183878][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.183930][ T33] ? clear_bhb_loop+0x70/0xc0 [ 1107.183959][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.183984][ T33] RIP: 0033:0x7f54c0cd6407 [ 1107.184038][ T33] RSP: 002b:00007ffeff962d60 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 1107.184093][ T33] RAX: ffffffffffffffda RBX: 00007f54c0c4c780 RCX: 00007f54c0cd6407 [ 1107.184112][ T33] RDX: 0000000000000000 RSI: 00007ffeff976f40 RDI: 0000000000000004 [ 1107.184128][ T33] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1107.184142][ T33] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffeff987170 [ 1107.184157][ T33] R13: 00007f54c0c4c708 R14: 0000000000000030 R15: 00007ffeff976f40 [ 1107.184203][ T33] [ 1107.184255][ T33] INFO: task kworker/1:64:8367 blocked for more than 143 seconds. [ 1107.184273][ T33] Not tainted syzkaller #0 [ 1107.184285][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1107.184296][ T33] task:kworker/1:64 state:D stack:24264 pid:8367 tgid:8367 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1107.184362][ T33] Workqueue: events switchdev_deferred_process_work [ 1107.184435][ T33] Call Trace: [ 1107.184443][ T33] [ 1107.184457][ T33] __schedule+0x17db/0x58f0 [ 1107.184506][ T33] ? do_raw_spin_lock+0x12b/0x2f0 [ 1107.184547][ T33] ? __pfx___schedule+0x10/0x10 [ 1107.184584][ T33] ? schedule+0x90/0x2b0 [ 1107.184614][ T33] schedule+0x164/0x2b0 [ 1107.184642][ T33] schedule_preempt_disabled+0x13/0x30 [ 1107.184668][ T33] __mutex_lock+0x7c1/0x1550 [ 1107.184703][ T33] ? __mutex_lock+0x5d4/0x1550 [ 1107.184737][ T33] ? switchdev_deferred_process_work+0xe/0x20 [ 1107.184770][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 1107.184801][ T33] ? lock_acquire+0x115/0x350 [ 1107.184835][ T33] ? rcu_is_watching+0x16/0xb0 [ 1107.184865][ T33] ? process_scheduled_works+0x97a/0x1630 [ 1107.184898][ T33] switchdev_deferred_process_work+0xe/0x20 [ 1107.184928][ T33] process_scheduled_works+0xc3d/0x1630 [ 1107.184996][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 1107.185035][ T33] ? assign_work+0x3cf/0x5d0 [ 1107.185073][ T33] worker_thread+0xa47/0xfb0 [ 1107.185122][ T33] ? __kthread_parkme+0x71/0x1f0 [ 1107.185174][ T33] kthread+0x38b/0x480 [ 1107.185198][ T33] ? __pfx_worker_thread+0x10/0x10 [ 1107.185229][ T33] ? __pfx_kthread+0x10/0x10 [ 1107.185254][ T33] ret_from_fork+0x514/0xb70 [ 1107.185281][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 1107.185305][ T33] ? __switch_to+0xc89/0x1420 [ 1107.185364][ T33] ? __pfx_kthread+0x10/0x10 [ 1107.185390][ T33] ret_from_fork_asm+0x1a/0x30 [ 1107.185458][ T33] [ 1107.185484][ T33] INFO: task kworker/u8:39:13211 blocked for more than 143 seconds. [ 1107.185501][ T33] Not tainted syzkaller #0 [ 1107.185513][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1107.185524][ T33] task:kworker/u8:39 state:D stack:25704 pid:13211 tgid:13211 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1107.185590][ T33] Workqueue: events_unbound linkwatch_event [ 1107.185651][ T33] Call Trace: [ 1107.185659][ T33] [ 1107.185674][ T33] __schedule+0x17db/0x58f0 [ 1107.185723][ T33] ? __lock_acquire+0x747/0x2de0 [ 1107.185754][ T33] ? __pfx___schedule+0x10/0x10 [ 1107.185791][ T33] ? schedule+0x90/0x2b0 [ 1107.185820][ T33] schedule+0x164/0x2b0 [ 1107.185849][ T33] schedule_preempt_disabled+0x13/0x30 [ 1107.185875][ T33] __mutex_lock+0x7c1/0x1550 [ 1107.185909][ T33] ? __mutex_lock+0x5d4/0x1550 [ 1107.185943][ T33] ? linkwatch_event+0xe/0x60 [ 1107.185981][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 1107.186011][ T33] ? lock_acquire+0x115/0x350 [ 1107.186045][ T33] ? rcu_is_watching+0x16/0xb0 [ 1107.186075][ T33] ? process_scheduled_works+0x97a/0x1630 [ 1107.186107][ T33] linkwatch_event+0xe/0x60 [ 1107.186141][ T33] process_scheduled_works+0xc3d/0x1630 [ 1107.186215][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 1107.186255][ T33] ? assign_work+0x3cf/0x5d0 [ 1107.186292][ T33] worker_thread+0xa47/0xfb0 [ 1107.186356][ T33] kthread+0x38b/0x480 [ 1107.186380][ T33] ? __pfx_worker_thread+0x10/0x10 [ 1107.186410][ T33] ? __pfx_kthread+0x10/0x10 [ 1107.186436][ T33] ret_from_fork+0x514/0xb70 [ 1107.186462][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 1107.186485][ T33] ? __switch_to+0xc89/0x1420 [ 1107.186521][ T33] ? __pfx_kthread+0x10/0x10 [ 1107.186547][ T33] ret_from_fork_asm+0x1a/0x30 [ 1107.186601][ T33] [ 1107.186633][ T33] INFO: task syz-executor:16974 blocked for more than 143 seconds. [ 1107.186649][ T33] Not tainted syzkaller #0 [ 1107.186661][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1107.186671][ T33] task:syz-executor state:D stack:25576 pid:16974 tgid:16974 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1107.186736][ T33] Call Trace: [ 1107.186743][ T33] [ 1107.186758][ T33] __schedule+0x17db/0x58f0 [ 1107.186799][ T33] ? __lock_acquire+0x747/0x2de0 [ 1107.186838][ T33] ? __pfx___schedule+0x10/0x10 [ 1107.186874][ T33] ? schedule+0x90/0x2b0 [ 1107.186903][ T33] schedule+0x164/0x2b0 [ 1107.186932][ T33] schedule_preempt_disabled+0x13/0x30 [ 1107.186957][ T33] __mutex_lock+0x7c1/0x1550 [ 1107.186992][ T33] ? __mutex_lock+0x5d4/0x1550 [ 1107.187026][ T33] ? inet_rtm_newaddr+0x470/0x19f0 [ 1107.187134][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 1107.187186][ T33] ? __nla_parse+0x40/0x60 [ 1107.187269][ T33] inet_rtm_newaddr+0x470/0x19f0 [ 1107.187305][ T33] ? __kernel_text_address+0xd/0x30 [ 1107.187333][ T33] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1107.187366][ T33] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1107.187427][ T33] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1107.187460][ T33] rtnetlink_rcv_msg+0x802/0xc00 [ 1107.187493][ T33] ? netlink_sendmsg+0x5d4/0xb40 [ 1107.187533][ T33] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1107.187561][ T33] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1107.187597][ T33] ? __lock_acquire+0x747/0x2de0 [ 1107.187636][ T33] netlink_rcv_skb+0x226/0x4a0 [ 1107.187673][ T33] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1107.187705][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1107.187756][ T33] ? netlink_deliver_tap+0x2e/0x1b0 [ 1107.187791][ T33] ? netlink_deliver_tap+0x2e/0x1b0 [ 1107.187833][ T33] netlink_unicast+0x7bd/0x940 [ 1107.187880][ T33] netlink_sendmsg+0x813/0xb40 [ 1107.187928][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1107.187973][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 1107.188003][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1107.188038][ T33] sock_sendmsg_nosec+0x13a/0x180 [ 1107.188070][ T33] __sys_sendto+0x408/0x5a0 [ 1107.188107][ T33] ? __pfx___sys_sendto+0x10/0x10 [ 1107.188133][ T33] ? lockdep_hardirqs_on+0x7b/0x110 [ 1107.188183][ T33] ? fput_close_sync+0x11f/0x240 [ 1107.188213][ T33] ? kmem_cache_free+0x471/0x650 [ 1107.188258][ T33] ? __pfx_fput_close_sync+0x10/0x10 [ 1107.188300][ T33] __x64_sys_sendto+0xde/0x100 [ 1107.188333][ T33] do_syscall_64+0x166/0x520 [ 1107.188361][ T33] ? trace_irq_disable+0x3b/0x140 [ 1107.188384][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.188408][ T33] ? clear_bhb_loop+0x70/0xc0 [ 1107.188437][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.188461][ T33] RIP: 0033:0x7f807415e98e [ 1107.188481][ T33] RSP: 002b:00007fff01e548e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1107.188506][ T33] RAX: ffffffffffffffda RBX: 000055558859f500 RCX: 00007f807415e98e [ 1107.188523][ T33] RDX: 0000000000000028 RSI: 00007f8074f54670 RDI: 0000000000000003 [ 1107.188539][ T33] RBP: 0000000000000001 R08: 00007fff01e54964 R09: 000000000000000c [ 1107.188554][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1107.188568][ T33] R13: 0000000000000000 R14: 00007f8074f54670 R15: 0000000000000000 [ 1107.188604][ T33] [ 1107.188614][ T33] INFO: task syz-executor:16975 blocked for more than 143 seconds. [ 1107.188631][ T33] Not tainted syzkaller #0 [ 1107.188643][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1107.188653][ T33] task:syz-executor state:D stack:26616 pid:16975 tgid:16975 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1107.188719][ T33] Call Trace: [ 1107.188728][ T33] [ 1107.188741][ T33] __schedule+0x17db/0x58f0 [ 1107.188783][ T33] ? __lock_acquire+0x747/0x2de0 [ 1107.188821][ T33] ? __pfx___schedule+0x10/0x10 [ 1107.188857][ T33] ? schedule+0x90/0x2b0 [ 1107.188886][ T33] schedule+0x164/0x2b0 [ 1107.188915][ T33] schedule_preempt_disabled+0x13/0x30 [ 1107.188941][ T33] __mutex_lock+0x7c1/0x1550 [ 1107.188974][ T33] ? __mutex_lock+0x5d4/0x1550 [ 1107.189008][ T33] ? inet_rtm_newaddr+0x470/0x19f0 [ 1107.189046][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 1107.189089][ T33] ? __nla_parse+0x40/0x60 [ 1107.189124][ T33] inet_rtm_newaddr+0x470/0x19f0 [ 1107.189159][ T33] ? __kernel_text_address+0xd/0x30 [ 1107.189196][ T33] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1107.189228][ T33] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1107.189288][ T33] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1107.189322][ T33] rtnetlink_rcv_msg+0x802/0xc00 [ 1107.189350][ T33] ? netlink_sendmsg+0x5d4/0xb40 [ 1107.189389][ T33] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1107.189418][ T33] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1107.189448][ T33] ? __lock_acquire+0x747/0x2de0 [ 1107.189487][ T33] netlink_rcv_skb+0x226/0x4a0 [ 1107.189525][ T33] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1107.189556][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1107.189606][ T33] ? netlink_deliver_tap+0x2e/0x1b0 [ 1107.189641][ T33] ? netlink_deliver_tap+0x2e/0x1b0 [ 1107.189683][ T33] netlink_unicast+0x7bd/0x940 [ 1107.189728][ T33] netlink_sendmsg+0x813/0xb40 [ 1107.189776][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1107.189822][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 1107.189851][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1107.189886][ T33] sock_sendmsg_nosec+0x13a/0x180 [ 1107.189913][ T33] __sys_sendto+0x408/0x5a0 [ 1107.189949][ T33] ? __pfx___sys_sendto+0x10/0x10 [ 1107.189975][ T33] ? lockdep_hardirqs_on+0x7b/0x110 [ 1107.190017][ T33] ? fput_close_sync+0x11f/0x240 [ 1107.190046][ T33] ? kmem_cache_free+0x471/0x650 [ 1107.190081][ T33] ? __pfx_fput_close_sync+0x10/0x10 [ 1107.190122][ T33] __x64_sys_sendto+0xde/0x100 [ 1107.190155][ T33] do_syscall_64+0x166/0x520 [ 1107.190189][ T33] ? trace_irq_disable+0x3b/0x140 [ 1107.190213][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.190237][ T33] ? clear_bhb_loop+0x70/0xc0 [ 1107.190267][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.190290][ T33] RIP: 0033:0x7fe75ab5e98e [ 1107.190310][ T33] RSP: 002b:00007fffa2daf798 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1107.190334][ T33] RAX: ffffffffffffffda RBX: 0000555585460500 RCX: 00007fe75ab5e98e [ 1107.190351][ T33] RDX: 0000000000000028 RSI: 00007fe75b954670 RDI: 0000000000000003 [ 1107.190367][ T33] RBP: 0000000000000001 R08: 00007fffa2daf814 R09: 000000000000000c [ 1107.190382][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1107.190396][ T33] R13: 0000000000000000 R14: 00007fe75b954670 R15: 0000000000000000 [ 1107.190432][ T33] [ 1107.190458][ T33] [ 1107.190458][ T33] Showing all locks held in the system: [ 1107.190476][ T33] locks held by kworker/0:1/10: 3, on CPU#0: [ 1109.180744][T16873] Bluetooth: hci12: command tx timeout [ 1110.340130][ T33] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.340332][ T33] #1: ffffc900000f7c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.340396][ T33] #2: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x6f/0x770 [ 1110.340792][ T33] locks held by pr/ttyS0/16: 1, last CPU#0: [ 1110.340843][ T33] #0: ffffffff8ec364f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1110.340908][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 1110.340925][ T33] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1110.341030][ T33] locks held by dhcpcd/5279: 1, on CPU#0: [ 1110.341047][ T33] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1110.341110][ T33] locks held by getty/5375: 2, on CPU#1: [ 1110.341126][ T33] #0: ffff888022bfc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1110.341273][ T33] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1110.341336][ T33] locks held by syz-executor/5605: 1, last CPU#1: [ 1110.341352][ T33] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1110.341422][ T33] locks held by kworker/1:64/8367: 3, on CPU#1: [ 1110.341438][ T33] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.341502][ T33] #1: ffffc9001afd7c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.341566][ T33] #2: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1110.341632][ T33] locks held by kworker/u8:13/9444: 4, last CPU#0: [ 1110.341648][ T33] #0: ffff888067a88140 ((wq_completion)krds_cp_wq#4/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.341713][ T33] #1: ffffc9001bf7fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.341778][ T33] #2: ffff88807e578f80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1110.341921][ T33] #3: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1110.341985][ T33] locks held by kworker/u8:19/9450: 3, on CPU#1: [ 1110.342002][ T33] #0: ffff8880310ea940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.342067][ T33] #1: ffffc9001c01fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.342132][ T33] #2: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1110.342239][ T33] locks held by kworker/u8:24/9458: 3, last CPU#0: [ 1110.342256][ T33] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.342321][ T33] #1: ffffc9001c09fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.342388][ T33] #2: ffff888029ae2258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1110.342552][ T33] locks held by kworker/u8:25/10244: 3, last CPU#0: [ 1110.342569][ T33] #0: ffff888079943140 ((wq_completion)krds_cp_wq#0/4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.342634][ T33] #1: ffffc9001a607c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.342699][ T33] #2: ffff888066d08680 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1110.342768][ T33] locks held by kworker/u8:38/13210: 4, last CPU#0: [ 1110.342785][ T33] #0: ffff888033b67940 ((wq_completion)krds_cp_wq#0/6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.342849][ T33] #1: ffffc9000354fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.342913][ T33] #2: ffff888066d08080 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1110.342987][ T33] #3: ffff888055296e60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1110.343100][ T33] locks held by kworker/u8:39/13211: 3, on CPU#1: [ 1110.343117][ T33] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.343183][ T33] #1: ffffc9000353fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.343247][ T33] #2: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1110.343314][ T33] locks held by kworker/u8:43/13215: 3, last CPU#0: [ 1110.343331][ T33] #0: ffff888079941140 ((wq_completion)krds_cp_wq#0/5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.343395][ T33] #1: ffffc900052e7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.343459][ T33] #2: ffff888066d08380 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1110.343525][ T33] locks held by kworker/u8:44/13216: 2, last CPU#0: [ 1110.343542][ T33] #0: ffff888032b44140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.343606][ T33] #1: ffffc900034dfc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.343672][ T33] locks held by kworker/u8:46/13218: 4, last CPU#1: [ 1110.343689][ T33] #0: ffff888076539940 ((wq_completion)krds_cp_wq#0/1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.343752][ T33] #1: ffffc900058a7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.343818][ T33] #2: ffff888066d08f80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1110.343883][ T33] #3: ffff88802c4ae0e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1110.343950][ T33] locks held by kworker/u8:48/13221: 3, last CPU#0: [ 1110.343973][ T33] #0: ffff888076539140 ((wq_completion)krds_cp_wq#0/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.344038][ T33] #1: ffffc900034bfc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.344103][ T33] #2: ffff888066d09280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1110.344170][ T33] locks held by kworker/u8:49/13222: 2, on CPU#0: [ 1110.344186][ T33] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.344250][ T33] #1: ffffc9000349fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.344316][ T33] locks held by kworker/u8:51/13224: 4, last CPU#0: [ 1110.344333][ T33] #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.344396][ T33] #1: ffffc9000347fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.344458][ T33] #2: ffffffff90244b88 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1110.344551][ T33] #3: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 1110.344613][ T33] locks held by kworker/u8:54/13228: 4, last CPU#0: [ 1110.344630][ T33] #0: ffff888033b67140 ((wq_completion)krds_cp_wq#0/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.344701][ T33] #1: ffffc9000324fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.344766][ T33] #2: ffff888066ef3c80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1110.344831][ T33] #3: ffff888055290fe0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1110.344897][ T33] locks held by kworker/u8:55/13229: 2, on CPU#0: [ 1110.344914][ T33] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.344986][ T33] #1: ffffc9000323fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.345052][ T33] locks held by kworker/u8:61/13237: 3, last CPU#0: [ 1110.345069][ T33] #0: ffff888079944140 ((wq_completion)krds_cp_wq#0/2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.345134][ T33] #1: ffffc90002e7fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.345198][ T33] #2: ffff888066d08c80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1110.345269][ T33] locks held by syz-executor/16974: 1, on CPU#0: [ 1110.345285][ T33] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1110.345354][ T33] locks held by syz-executor/16975: 1, on CPU#0: [ 1110.345370][ T33] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1110.345437][ T33] locks held by syz-executor/17010: 1, on CPU#1: [ 1110.345454][ T33] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1110.345520][ T33] locks held by syz-executor/17017: 1, on CPU#1: [ 1110.345537][ T33] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1110.345604][ T33] locks held by syz-executor/17023: 1, on CPU#1: [ 1110.345620][ T33] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1110.345687][ T33] locks held by syz-executor/17032: 1, on CPU#0: [ 1110.345704][ T33] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1110.345771][ T33] locks held by syz-executor/17037: 1, on CPU#1: [ 1110.345788][ T33] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1110.345855][ T33] locks held by syz-executor/17047: 1, on CPU#1: [ 1110.345871][ T33] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1110.345938][ T33] locks held by syz-executor/17052: 1, on CPU#0: [ 1110.345954][ T33] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1110.346028][ T33] locks held by syz-executor/17055: 1, on CPU#1: [ 1110.346044][ T33] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1110.346113][ T33] locks held by syz-executor/17064: 1, on CPU#0: [ 1110.346129][ T33] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1110.346196][ T33] locks held by syz-executor/17068: 1, on CPU#1: [ 1110.346212][ T33] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1110.346279][ T33] locks held by syz-executor/17076: 4, last CPU#1: [ 1110.346296][ T33] #0: ffffffff8ee363b0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 1110.346359][ T33] #1: ffff88807e949078 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1110.346448][ T33] #2: ffff88807e949d38 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1110.346521][ T33] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1110.346586][ T33] locks held by modprobe/17082: 2, last CPU#0: [ 1110.346610][ T33] #0: ffff8880299329f8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 1110.346675][ T33] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1110.346742][ T33] [ 1110.346749][ T33] ============================================= [ 1110.346749][ T33] [ 1110.346772][ T33] NMI backtrace for cpu 0 [ 1110.346796][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1110.346821][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1110.346835][ T33] Call Trace: [ 1110.346848][ T33] [ 1110.346858][ T33] dump_stack_lvl+0xe8/0x150 [ 1110.346894][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 1110.346995][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1110.347035][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1110.347076][ T33] sys_info+0x135/0x170 [ 1110.347107][ T33] watchdog+0xfd7/0x1030 [ 1110.347139][ T33] ? watchdog+0x1c7/0x1030 [ 1110.347170][ T33] kthread+0x38b/0x480 [ 1110.347194][ T33] ? __pfx_watchdog+0x10/0x10 [ 1110.347214][ T33] ? __pfx_kthread+0x10/0x10 [ 1110.347238][ T33] ret_from_fork+0x514/0xb70 [ 1110.347265][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 1110.347286][ T33] ? __switch_to+0xc89/0x1420 [ 1110.347322][ T33] ? __pfx_kthread+0x10/0x10 [ 1110.347346][ T33] ret_from_fork_asm+0x1a/0x30 [ 1110.347398][ T33] [ 1110.347407][ T33] Sending NMI from CPU 0 to CPUs 1: [ 1110.347483][ C1] NMI backtrace for cpu 1 [ 1110.347497][ C1] CPU: 1 UID: 0 PID: 13218 Comm: kworker/u8:46 Not tainted syzkaller #0 PREEMPT(full) [ 1110.347518][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1110.347531][ C1] Workqueue: krds_cp_wq#0/1 rds_connect_worker [ 1110.347554][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 1110.347581][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc 89 f6 31 d2 e9 a6 ba a6 03 66 0f 1f 44 00 [ 1110.347630][ C1] RSP: 0018:ffffc90000a18d30 EFLAGS: 00000046 [ 1110.347645][ C1] RAX: 000000000002f012 RBX: ffff8880b8723c80 RCX: 0000000000000838 [ 1110.347659][ C1] RDX: 0000000000000000 RSI: 000000000002f012 RDI: 0000000000000838 [ 1110.347671][ C1] RBP: ffffc90000a18df0 R08: 0000000000000100 R09: 0000000000000001 [ 1110.347683][ C1] R10: 0000000000000003 R11: ffffffff81754510 R12: 000000000002f012 [ 1110.347695][ C1] R13: dffffc0000000000 R14: 00000000100053e2 R15: 0000000000000020 [ 1110.347709][ C1] FS: 0000000000000000(0000) GS:ffff888124dce000(0000) knlGS:0000000000000000 [ 1110.347724][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1110.347737][ C1] CR2: 00005654c1474320 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 1110.347754][ C1] Call Trace: [ 1110.347761][ C1] [ 1110.347767][ C1] lapic_next_event+0x11/0x20 [ 1110.347787][ C1] clockevents_program_event+0x385/0x630 [ 1110.347828][ C1] ? __pfx_clockevents_program_event+0x10/0x10 [ 1110.347857][ C1] ? tick_program_event+0x8f/0x120 [ 1110.347877][ C1] __hrtimer_rearm_deferred+0x36c/0x4b0 [ 1110.347907][ C1] irqentry_exit+0x8d3/0x910 [ 1110.347933][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1110.347954][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1110.348016][ C1] Code: f7 e8 2d 68 bb f5 f7 c3 00 02 00 00 74 05 e8 90 b2 e7 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 94 75 ac f5 65 48 8b 05 0c b1 ac 07 48 85 c0 74 18 5b 41 5e e9 [ 1110.348031][ C1] RSP: 0018:ffffc90000a18f40 EFLAGS: 00000206 [ 1110.348046][ C1] RAX: 0000000000000006 RBX: 0000000000000283 RCX: 8000000000000102 [ 1110.348058][ C1] RDX: 0000000000000002 RSI: ffffffff8e413ed7 RDI: 0000000000000001 [ 1110.348071][ C1] RBP: 0000000000000003 R08: ffffffff907a417f R09: 1ffffffff20f482f [ 1110.348084][ C1] R10: dffffc0000000000 R11: fffffbfff20f4830 R12: 0000000000000009 [ 1110.348097][ C1] R13: 0000000000000008 R14: ffff8880b8728280 R15: 0000000000000100 [ 1110.348120][ C1] handle_softirqs+0x226/0x860 [ 1110.348147][ C1] ? do_softirq+0x77/0xd0 [ 1110.348174][ C1] ? __inet6_bind+0x386/0xf30 [ 1110.348201][ C1] do_softirq+0x77/0xd0 [ 1110.348229][ C1] [ 1110.348235][ C1] [ 1110.348242][ C1] __local_bh_enable_ip+0x100/0x140 [ 1110.348267][ C1] __inet6_bind+0x386/0xf30 [ 1110.348300][ C1] kernel_bind+0x13e/0x1c0 [ 1110.348330][ C1] ? __pfx_kernel_bind+0x10/0x10 [ 1110.348365][ C1] ? rds_tcp_conn_path_connect+0x336/0x920 [ 1110.348395][ C1] rds_tcp_conn_path_connect+0x53b/0x920 [ 1110.348428][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1110.348464][ C1] ? lock_acquire+0x115/0x350 [ 1110.348489][ C1] rds_connect_worker+0x1d8/0x290 [ 1110.348509][ C1] ? process_scheduled_works+0x97a/0x1630 [ 1110.348534][ C1] process_scheduled_works+0xc3d/0x1630 [ 1110.348576][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1110.348604][ C1] ? assign_work+0x3cf/0x5d0 [ 1110.348631][ C1] worker_thread+0xa47/0xfb0 [ 1110.348672][ C1] kthread+0x38b/0x480 [ 1110.348689][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1110.348713][ C1] ? __pfx_kthread+0x10/0x10 [ 1110.348731][ C1] ret_from_fork+0x514/0xb70 [ 1110.348749][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1110.348766][ C1] ? __switch_to+0xc89/0x1420 [ 1110.348793][ C1] ? __pfx_kthread+0x10/0x10 [ 1110.348811][ C1] ret_from_fork_asm+0x1a/0x30 [ 1110.348848][ C1] [ 1110.349450][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 1112.508106][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1112.517245][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1112.527414][ T33] Call Trace: [ 1112.530721][ T33] [ 1112.533678][ T33] vpanic+0x56d/0xa60 [ 1112.537701][ T33] ? __pfx_vpanic+0x10/0x10 [ 1112.542437][ T33] ? console_srcu_read_unlock+0x3a/0x60 [ 1112.548044][ T33] panic+0xc5/0xd0 [ 1112.551898][ T33] ? __pfx_panic+0x10/0x10 [ 1112.556354][ T33] ? wq_watchdog_touch+0xf9/0x160 [ 1112.561459][ T33] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1112.567646][ T33] watchdog+0x1030/0x1030 [ 1112.572012][ T33] ? watchdog+0x1c7/0x1030 [ 1112.576453][ T33] kthread+0x38b/0x480 [ 1112.580547][ T33] ? __pfx_watchdog+0x10/0x10 [ 1112.585252][ T33] ? __pfx_kthread+0x10/0x10 [ 1112.589864][ T33] ret_from_fork+0x514/0xb70 [ 1112.594475][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 1112.599604][ T33] ? __switch_to+0xc89/0x1420 [ 1112.604328][ T33] ? __pfx_kthread+0x10/0x10 [ 1112.608973][ T33] ret_from_fork_asm+0x1a/0x30 [ 1112.613801][ T33] [ 1112.617467][ T33] Kernel Offset: disabled [ 1112.621853][ T33] Rebooting in 86400 seconds..