last executing test programs: 5m56.417822233s ago: executing program 2 (id=2993): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb4, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0xd2, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x12, 0x12, &(0x7f00000004c0)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @generic={0x1, 0xb, 0x5, 0x4, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f0000000580)='GPL\x00', 0xffff, 0xdb, &(0x7f00000005c0)=""/219, 0x41000, 0x2, '\x00', r0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0xb, 0x5, 0x1}, 0x10, r1, 0xffffffffffffffff, 0xa, &(0x7f0000000740)=[r2, r2, r2], &(0x7f0000000780)=[{0x0, 0x2, 0x6, 0x6}, {0x2, 0x1, 0xa, 0x8}, {0x3, 0x2, 0xc, 0x2}, {0x2, 0x3, 0x0, 0x7}, {0x2, 0x5, 0x4, 0x7}, {0x5, 0x3, 0x9, 0x6}, {0x2, 0x1, 0xf, 0x1}, {0x4, 0x4, 0x9, 0xc}, {0x5, 0x2, 0x9, 0x7}, {0x2, 0x1, 0xd, 0x9}], 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x0, 0x91, 0x3e, &(0x7f0000000900)="a2b2549a7fac06b8dff2e55f88480773d2753b3d5b41ab1abc912066fa5009aab75186205c2fe056b44e5fb0e77a12003cca2eb61d97bb075087cec7769641faaead8fa6c3d2b3a4f99cbac86d0747b97dbbbbd8dc2da3f93827cc314aeaf9eeb9efb42a0f5825730e8f42cbbb6ffe7910302056f0f95fb15622e271a3d7796c0b45dd033241ad94b4689d4150d64415ca", &(0x7f00000009c0)=""/62, 0x5, 0x0, 0xc4, 0x7b, &(0x7f0000000a00)="4f78734204551682a19c8edfbf730023b706553aa2a0bbc83bf083cd26d864ab30781f0c6e56ecec64ea1c2a5ff1adcadddddde4c285a829a67771696ab25afa39b418a7be93bdff8a91e148ad93242c879d7caadf6a5fbc5027d15efeb49250091cf37eab289604c81c7977ae74107cf64d616fedfa3003dc6395d1a9a0a9af45c833ac3a6d657a3031c6fd7a25d7903407937e0317d2359fcddf82473b256981c5537efbec4f5b64d0504e03241e0b1a5ed45f9983ea83d8f07acffb9e73c189f8d0a6", &(0x7f0000000b00)="593c792060d45d3cf639ab19997a6cfaba7155c02ebc3552374a79210ae7d19206add2e324d1b8da27cf9dfa8b60c93b3d46e6a067ad044c5d0da0e4b70264c303ae98db761e52e526d31b628662014b6cb400b7c30f8197ae5f754cb87176f6b89045bb9ac9089376db90806a0c10757355370d69f29b7c6d6ba4", 0x6, 0x0, 0x5}, 0x50) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000000), 0x0}, 0x20) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000003c40)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x18, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020c31af8ffa1000000bfa10000000000000701000000feffffb702000008000000b7030000000000008500000076000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085010400a50000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) 5m55.862457408s ago: executing program 2 (id=2998): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}, 0xfffffffe}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0xe0}}], 0x1, 0x20008000) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) 5m55.497671429s ago: executing program 2 (id=2999): r0 = socket(0xa, 0x3, 0xff) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xec0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594012124fc60", 0x14}], 0x1}, 0x1000000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x2, @empty, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1575ca80000000b007f49e5e04026e01000000001cab406c929200000000ef250633e3179397c042", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="78000000000000002900000037000000451b"], 0x78}}], 0x2, 0x24044040) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x1, 0x0, 0x25dfdbfc, {{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0xc0, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe, 0x0, 0xc6}, 0x9, 0x6e6bb6, 0x1, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r9 = socket$inet6(0xa, 0x5, 0x0) socket$netlink(0x10, 0x3, 0xc) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x902}, 0x1c) 5m54.422792409s ago: executing program 2 (id=3009): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast2, @broadcast}, &(0x7f0000000080)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'erspan0\x00', r2, 0x7800, 0x20, 0x1, 0x7, {{0x6, 0x4, 0x2, 0x1c, 0x18, 0x46b, 0x0, 0xe, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x0, 0x2f, [@multicast2]}]}}}}}) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x1}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e00040002802d54cfe626595299f27b3c58239fdfa0e70b54593ccbda56ef7a20cb70f950fe9b4a2aac132f17b79d9d2e0725f57b04cfa640b59e7d3748f9fc3c0679c17779e1a835e3d05832f4f39e750fb717b4381cb43e6fcedf6d593abfb3ae3ab8272f8d737072336d0216dbf2a1148497408b233b5a1c5050"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f00000000c0)={0x1, 0xdf7c}) 5m54.157439063s ago: executing program 2 (id=3011): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r1) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000000540)=""/150, 0x8d}, {&(0x7f0000003f00)=""/4100, 0x1004}, {&(0x7f0000000300)=""/101, 0x65}, {&(0x7f0000000280)=""/112, 0x39}], 0x4}, 0x40002080) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x2, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f0000000140)=""/155, 0x9b}], 0x2}, 0x2021) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000100, 0x0, 0x0) getsockopt$bt_hci(r5, 0x84, 0x7d, 0x0, &(0x7f0000000000)) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x1}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_OIF={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x440a}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000480)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000000240)=0xe8) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f00000002c0)=0x0) sendmsg$nl_generic(r6, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)={0x218, 0x24, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@nested={0x70, 0x51, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @uid=r8}, @nested={0x4, 0xa4}, @generic="da5341130694ca1dbfd6020b7f5b47e63dfe329c63b439ec6f684670c7e406252e47553ca46d54f261395e3c7d3bb1291fb6c828", @typed={0x8, 0x159, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0xdd}, @typed={0x14, 0x1e, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x142}, @typed={0x8, 0x12, 0x0, 0x0, @u32=0x200}]}, @nested={0xdc, 0x13e, 0x0, 0x1, [@typed={0x8, 0xd1, 0x0, 0x0, @pid=r9}, @typed={0xc9, 0x120, 0x0, 0x0, @binary="3427b4a934b25e8eba66c6748e61ad0ec04c86be827aecd4a51cd7967cd270f2391771e4f53b0751a64d7221506da3a70791b01cf93aada2c1db21ebf53f5d0cfbeced2e94d8c126fdf397ba576f5b67032a4f75153e61cf33bf699a008435ad93f42e5b544a67def2b899e9b94bc3a19751c1678eb207c9e57224a9e1f8d5da48ebd8d60a9c9976575bf11931ebb84000d1cc7eaee21819183c9718245e26c6f610516859dfc8a2e1781aeea50846c832f5f0929a8a40b07eab6a024e50bb677a42545712"}, @nested={0x4, 0xa5}]}, @nested={0xb8, 0x8, 0x0, 0x1, [@generic="990c9d7b56d0c26428c5f0eaee1a9406544abb2b18ed0a4d54348b9908db2cc64df38b35c52c893e1afdecbafbf3fe8b548f1f6ff7f6c29dc6d1757394d1cad305b604ab6440dff0718b5803425f4287070821ab09efad0fa7498f16cabe53c5d15a59728c26324b68a965add4ca3a541864211935e86cc57e0a7ae3e24cad75cc5c577d5188635f5d9bbea766db4f24d74a15ee002cd42606c8f477a70724cf752df8fcabbcc456687e49377232cf14a88f114f"]}]}, 0x218}}, 0x40804) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x9) sendmsg$tipc(r3, &(0x7f0000000b40)={&(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2}}, 0x10, &(0x7f0000000400)=[{&(0x7f00000007c0)="61d179a2e79de19bef2323e8101491fb0fb45e766b6bdab603becbd6fe3f93f79a7f427a6441f2b5a2f67aa32343006c0e82d2a12630f4d2da76e05390cbebefb93425dd1199ba0878e0ffd81f49d8af9503ed14b8cc1ab0105196b73594247e6833d594bbf29e14078b512dbf81eb0386be4c22c200e8f6fed447235836ba442ae2fc7fe389cbc3b0d39caee053e0b889a42ed36bf846492c226e5ffadb2f0bb0e17d4c341a125166954e9ff577746b9b7e38b740c9b0da9bbd87ddaf4ca8db55335f1ffea98150384cf092271205bf8f7900268262b176bd0ec1896b5fdc9a87e38b45176f00041225c250d1c630cf06779a95", 0xf4}, {&(0x7f00000008c0)="7fa26fe5718c419dc39801edb01831f716b6503698725977a23462a346219680f9b4085fba003573b8c206c4afdfc44ba258e537e5c4a447d9c0cc74330cffcc336621a2e4a57193bbd488c526f938e17a3c8f31174b23f35e2ddee112958dd11503b1a5ff461f813ad7038ea2aec46a9607e014fadffa850f6c83c7dce905adca2df4969f82f40d850c61ea126fb68b1dbb2a5d853d562274401ee087d473a83bbaa6963a75b2c9534c5a6f01d922fdf2ae6c025ed18534324e102405533c3cbd5a56425e473f078b3559d1fd889b222266c1f0d34559b155b0206db43863ca9b8620b9b511328de8a1", 0xea}, {&(0x7f00000009c0)="f2deba2ec8457220e7071d84016233b01c6184ef053efae95699baa8760d9b6a0b45d7e72b5e333bda0a8ad436cbd10259a7424713b1bdf12dd681ed780c6ef0b935835bfcd5d9be13660ec34fd9c1e0657cf87ead0ecd44c9cf092722947dc56b84d855a5b4040289932f4cbdaccaeb817679da55e3", 0x76}, {&(0x7f0000000a40)="3517542fa680c8b07728c1382699b614d71b90ee357afa0d887b6e54d2b7133972f21f8faffd2b1ddcbb4fc0a797b9e282601b07de031143648865949c7eed502945dca866fbf2208f7c211bba7eb5834d615e56396f27cef3d30d43442338f3f6039d6624a5dff7f2504349ac8302df32428e49827b94fe709221f7ade54809ff9edc38ada0513d03267a6f23cf9909f1ea168dd0af926e3927e65137a56cfc1613ce", 0xa3}], 0x4, 0x0, 0x0, 0x20000010}, 0x890) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c010000160001000000000000000000ffffffff000000000000000000000000e00000020000000000000000000000000000000000000000000000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000006c000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e00000000000000000400000000000000000000000000000000000000000000000000000000000000ff0f000000000000000000800000000000000000000000000000000000000000000000000000000100000000000000000000000032100000080022"], 0x12c}}, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0xbffe, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 5m53.181742194s ago: executing program 2 (id=3023): r0 = socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB="00000000000000a66d01000000456c0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400a00142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x1d, r4}, 0x10, &(0x7f0000000240)={&(0x7f0000000180)={0x1, 0x30, 0x6, {}, {0x77359400}, {0x0, 0x0, 0x1, 0x1}, 0x1, @can={{0x3, 0x0, 0x1, 0x1}, 0x0, 0x1, 0x0, 0x0, "cf005e895979fa26"}}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x1) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r8 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r8, &(0x7f0000000280)="1b780951b3642685992ddc96fb019ba67a536706e73e646f53c2cbbafa351ed37eba", 0x22, 0x80, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) r9 = accept4$tipc(r0, 0x0, &(0x7f0000000140), 0x0) setsockopt$TIPC_DEST_DROPPABLE(r9, 0x10f, 0x81, &(0x7f00000001c0)=0x8f, 0x4) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) accept4(r8, 0x0, 0x0, 0x800) write(r7, &(0x7f0000000340)="08000000010000", 0x7) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x3e8, 0xf, 0x0, &(0x7f0000000240)="c1df07000000d30a298ee688655887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 5m38.12244263s ago: executing program 32 (id=3023): r0 = socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB="00000000000000a66d01000000456c0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400a00142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x1d, r4}, 0x10, &(0x7f0000000240)={&(0x7f0000000180)={0x1, 0x30, 0x6, {}, {0x77359400}, {0x0, 0x0, 0x1, 0x1}, 0x1, @can={{0x3, 0x0, 0x1, 0x1}, 0x0, 0x1, 0x0, 0x0, "cf005e895979fa26"}}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x1) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r8 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r8, &(0x7f0000000280)="1b780951b3642685992ddc96fb019ba67a536706e73e646f53c2cbbafa351ed37eba", 0x22, 0x80, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) r9 = accept4$tipc(r0, 0x0, &(0x7f0000000140), 0x0) setsockopt$TIPC_DEST_DROPPABLE(r9, 0x10f, 0x81, &(0x7f00000001c0)=0x8f, 0x4) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) accept4(r8, 0x0, 0x0, 0x800) write(r7, &(0x7f0000000340)="08000000010000", 0x7) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x3e8, 0xf, 0x0, &(0x7f0000000240)="c1df07000000d30a298ee688655887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2m42.969493944s ago: executing program 1 (id=5600): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000280)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x130, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_USERDATA={0xc8, 0xd, 0x1, 0x0, "7e5634ce52bb240dd4255ab760777741c39496d2fa5a3c76523a4cbc1cf9f735a1b56ae5e552d7bd0fa4e76728eaff29ecd691fce0a8ce89a76023d9ac3c8fc8ba2ef232994b44ec074666c91684010d8cd781868a0a77421ed4aebb62cb58a716ea64715a09688c76e8d8e6e4ec4f1e60a6bb0a9dc0402ac84eba06548743c63d4f2ff0efe1655fad54524e46ec9513292b251472bd8f57002f39ea5e9ce8646e41ea4e63b60ba7827826809ae7d65a24ebc074d342293ee04be6b09eabb6c44d673e3d"}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x35}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @masq={{0x9}, @void}}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x194}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) socket$inet6(0xa, 0x1, 0x60000) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newnexthop={0x34, 0x68, 0x1, 0x3, 0x80000000, {0x0, 0x0, 0x4}, [@NHA_GROUP={0x1c, 0x2, [{0x3, 0x6}, {0x2, 0x4}, {0x1, 0x1}]}]}, 0x34}}, 0x40000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r2, 0x7}, 0x20) close(r2) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 2m42.857829182s ago: executing program 1 (id=5602): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r1, &(0x7f00000001c0)="bc918bffb3771c2bae5d0e57c3164d2be5", 0xffffffffffffffea, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockname$llc(r5, 0x0, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x548, 0xe, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x508, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x3c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x4}]}]}, {0x4b0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @osf={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x5}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x114, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xff, 0x1, "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"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x21c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x98, 0x1, "089dce18179ec07307ace46e6c21f588e80c821781ddcdfdcc7b6bb898b5ec154a498b973ed3dbb5a3ca39e31c901bc8be1265fed79b67325f535f655aa56f5155031d0580a90a3dc41012990cf7dc6f890b5c8647c025d85e2747d27ecca1eab1712556256c49e19614570c74663cf07ae6bdbd8f35baa61860f0779d334c26882ca6a6bf20d9807f2da59121979f654ae32af5"}, @NFTA_DATA_VALUE={0x91, 0x1, "689ee6785b5cea92d8fe7d17febc5b8ea37f1b42c7b5ff8e1370d52ba6f6ffafb75e0e14fbaf20ecdda2301175582b600b5ccf67eb6b294af96f180d95f512056491ed51c759de83a738da7e766108dfff89817f80ceb175972e1536569fd0d986368630177321007ebca644b6d507ff84f865cd7eb25389b5d0ba0a468457dcca1c539ee59735e25afad97e6f"}, @NFTA_DATA_VALUE={0x84, 0x1, "1949784514c0df2462dcca6ccbfd456bedef51bc616682fe9b48c0586f4f68c64d9b57a60266e41fc928709d84827377924bbee87030b7fd273954b30c5fe9f5eb2570741c86fd08a96a8afc17ff93c32fa82bda812b317a7be885f027f630583e8f43c1807c340f22771067c89921654acc27786f72936c40b5e05a92cf9379"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY={0x98, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x92, 0x1, "68602c7c0d31b318f6cd4c96a269775b9b31bd9ed53d257193c7a35482ed658ad2df15767f0e54596292b0780f3262403499f6f47e2441e28b6c611c53246a081fa77a44cfda467da9bce8d3160092b2aa39196cea68897f5971f5e3d04ec5f9739196150091231af03c8edc4ed5a1c9a3e9944080388707d6fb33650e31008ee104e85e03f51033996885c736b5"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x7c, 0xb, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x584}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close(r8) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {0x7}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) bind$bt_l2cap(r0, &(0x7f00000004c0)={0x1f, 0x4, @none, 0x0, 0x2}, 0xe) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0xff, @fixed, 0x0, 0x1}, 0xe) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x4}, @NFTA_QUEUE_NUM={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 2m42.682767876s ago: executing program 1 (id=5607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x812, r1, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r2, 0x101, 0x0, &(0x7f0000000000)=0x2, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x68, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000e80000000000000a50000000120a09050000000000000000020000000900020073797a3100000000080004400000000f0900010073797a30000000000800034000000001"], 0x74}}, 0x0) 2m42.515051887s ago: executing program 1 (id=5609): syz_emit_ethernet(0x62, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a002c2c00fe8000000000000000000000000000bbfe8000000000000000050000000000aa3a00000000000000010000000100000000000000000000005c0000810000000000000000000000000000004000100000000000000000000000000000000000012001000000000000000002000000000001fe8000000000000000000000000000210000000000000000000000000000000000000000000000000000ffff7f000001ff010000000000000000000000000001fe8800000000000000000000000000012c0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b00000009078fffe03037f05d500000003000024b30000000400000013000000"], 0x0) (async) syz_emit_ethernet(0x62, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a002c2c00fe8000000000000000000000000000bbfe8000000000000000050000000000aa3a00000000000000010000000100000000000000000000005c0000810000000000000000000000000000004000100000000000000000000000000000000000012001000000000000000002000000000001fe8000000000000000000000000000210000000000000000000000000000000000000000000000000000ffff7f000001ff010000000000000000000000000001fe8800000000000000000000000000012c0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b00000009078fffe03037f05d500000003000024b30000000400000013000000"], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x0, 0x2a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={r8, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000e40)={'syztnl2\x00', &(0x7f0000000dc0)={'ip6tnl0\x00', 0x0, 0x74cde24da3ede938, 0xc, 0x5c, 0x4, 0x3c, @ipv4={'\x00', '\xff\xff', @broadcast}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x40, 0xffffffff, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000ec0)={'tunl0\x00', &(0x7f0000000e80)={'sit0\x00', 0x0, 0x1, 0x10, 0x1, 0x8, {{0x6, 0x4, 0x1, 0x7, 0x18, 0x64, 0x0, 0x81, 0x4, 0x0, @loopback, @broadcast, {[@end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001400)={'syztnl2\x00', &(0x7f00000012c0)={'sit0\x00', 0x0, 0x700, 0x1, 0x1, 0x8, {{0x3f, 0x4, 0x1, 0x3, 0xfc, 0x65, 0x0, 0x1, 0x29, 0x0, @multicast1, @empty, {[@ssrr={0x89, 0x17, 0x92, [@local, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x1d, 0x3, [{0x2, 0xc, "1e2688aa4ffd28713704"}, {0x1, 0xb, "89971f7a63e90707ee"}]}, @noop, @timestamp_addr={0x44, 0x54, 0x1a, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}, {@empty, 0x9}, {@multicast1, 0xffff0000}, {@multicast1, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@private=0xa010100, 0x80}, {@rand_addr=0x64010101, 0x8}, {@multicast1, 0x7}, {@local, 0xeebe}, {@rand_addr=0x64010101, 0x3}]}, @cipso={0x86, 0x8, 0x2, [{0x3, 0x2}]}, @cipso={0x86, 0x44, 0xffffffffffffffff, [{0x6, 0xb, "ecbae0f4830326937e"}, {0x6, 0xb, "27133c1070e6d78e3b"}, {0x1, 0x10, "7b40ffdce7bbac44419c2e0d5b13"}, {0x2, 0xb, "99a3cdc6c9a4beb5eb"}, {0x2, 0xd, "88ea981438b93de36c1971"}]}, @timestamp={0x44, 0x10, 0xf4, 0x0, 0x0, [0x7fff, 0x3, 0x1000]}, @noop]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001400)={'syztnl2\x00', &(0x7f00000012c0)={'sit0\x00', 0x0, 0x700, 0x1, 0x1, 0x8, {{0x3f, 0x4, 0x1, 0x3, 0xfc, 0x65, 0x0, 0x1, 0x29, 0x0, @multicast1, @empty, {[@ssrr={0x89, 0x17, 0x92, [@local, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x1d, 0x3, [{0x2, 0xc, "1e2688aa4ffd28713704"}, {0x1, 0xb, "89971f7a63e90707ee"}]}, @noop, @timestamp_addr={0x44, 0x54, 0x1a, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}, {@empty, 0x9}, {@multicast1, 0xffff0000}, {@multicast1, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@private=0xa010100, 0x80}, {@rand_addr=0x64010101, 0x8}, {@multicast1, 0x7}, {@local, 0xeebe}, {@rand_addr=0x64010101, 0x3}]}, @cipso={0x86, 0x8, 0x2, [{0x3, 0x2}]}, @cipso={0x86, 0x44, 0xffffffffffffffff, [{0x6, 0xb, "ecbae0f4830326937e"}, {0x6, 0xb, "27133c1070e6d78e3b"}, {0x1, 0x10, "7b40ffdce7bbac44419c2e0d5b13"}, {0x2, 0xb, "99a3cdc6c9a4beb5eb"}, {0x2, 0xd, "88ea981438b93de36c1971"}]}, @timestamp={0x44, 0x10, 0xf4, 0x0, 0x0, [0x7fff, 0x3, 0x1000]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000001440)={'wg1\x00', 0x0}) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$igmp(0x2, 0x3, 0x2) (async) r14 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r15], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r16 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r17 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r18, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) sendmmsg$inet(r7, &(0x7f0000002b00)=[{{&(0x7f0000000380)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000780)=[{&(0x7f00000003c0)}, {&(0x7f00000005c0)="c412e9a2816cc837170ca8f8f3b9892c9cdd11c8f6b5fb569eb9351de59a9b22702f5ba2aa9fd7a5f2cef3ad98ab258a7da1ffbba20bc88fb4ed6b1da3a8425f25cea92ca8062299c7f3b0e8725a5a7c609406dde55ef72ce89229625129e511830f0bd4a3c62a25a501ce97aa7207ddfcb71c65a525a27b8ccbc37736413a02863c20705ea5ceda782d58c0e0024e118c686404c94ccdc2f4c66c76155c5a434ab819d9e62899831343d072baea9e481ce5ab7d72722195463170a00dfdce7a2cac36dde8f701ee2956", 0xca}, {&(0x7f0000000400)="2cc153fd6a45a7af808b2cc8c13daadcbd0af628", 0x14}, {&(0x7f00000006c0)="3beae45e8a46a4783a2d16fed709d9d14aaa5ddc", 0x14}, {&(0x7f0000000700)="dadc0402f83be5aa392ecbd38ff2afeff059430511349fabef25725b110117bff2770c2f8fdccd7c238b61965cfafdd494fd62605f3c7e684f57ecaf7c665bef294714cc74c41a0b7b78ff5fd6c5", 0x4e}], 0x5}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000800)="52103762a65d485157f5b8cba1736d7aa1ca04806a57579653532344b4e365aa6ea634cf9a6bfed0e74ad1cdef9715689698f20b21988648db79184bc421c8ea8ab9ccb132381b28213828ff9bb872165396b0adb9a2bb267ee1d9882a54f447efde3944ec2a6be6728879d053ac7f8d8024cf8af3f57292a23fa15c80ef427513e00521a06cb9e2fd7615abddcd9620400674b7882da0832b7f3a53d5e729c8f05e85e69bfaa8d9e2b866c760fe0bd64f409bc29ba526c217f969898c204f74d728f36840d3170fa448e91e03f84acc75", 0xd1}, {&(0x7f0000000900)="c86a04d4a485dd122907c1163f6c02d6062e5ad813026b68a386ad80c7f0f544bc88b570133daa9eeb0230c1a06196688199f7c5af8afea874987585e43cb2b9ce6f95605dffeeac842ba00a58b392fa3565aef650887009de5005d6dac948de6e7211f09fdbf869781522930995549516ea283a364696bcf40680eeb833e675b854d1e21bd1219b59f634d2aa5973950cb0cea4b9a8432ab10f657856fbb3dd0b164f11e8401f23435a897c459d8975b09570ff5d65b7d79ebbf2c8b1345064c76f46320f5637f5ad2cde2288a50a3e0355f095", 0xd4}, {&(0x7f0000000a00)="50af302b748109376b0e357dbb1cb32a21b1ff4628bbfbbd0e34bc3b6df3879976865a9a7c210e06db6041c1406549c3fd4ac54c4836ba945a555396cc95e22fb9d034fee97ce5813ec0eb8ce41fb77ba595b9848589a0c23fee1a65f8fe621787a2eefa6ba74b9bc5335528e9759e7a58eb7aaaa9248f2cd82c298096771cf265b8b4bb7cd7d4d61e5cccc2a8f3241c6e6b3faf42544219a0ca1dee774b8f053f7e4489e7ae1511cc9475c1ed629995d867b5d7d3fef0968dd301a529d8d49dc30fc671d69caedadeed644721f7dcecf80e17bad31e8bca4d4909e7375cb90e0fbb58c3201438a8ab0d36de4b7876b17cf966a57d82", 0xf6}, {&(0x7f0000000b00)="9ce297676a3856d3ae1f4231b93953c4e1bf7c6e76222020a4a4771a53bb4e23967a1cf04395847dcd318dc74c8b85b103a74eddad94e41a66c9d0ae5c272fa7471a24bfb77bf4a1cbe1e58c4eab721d87f6d6c14cd03505a1fafdef4702cc1d3968c46f9d857edba4a190d4c525635de415dc7cf168eba3a7f263d2939ab4dc984b64", 0x83}, {&(0x7f0000000bc0)="bd7e5136461f97ce64f44231fd251b542f1c6d7acbfae9d9abdd4cb7a4d5ab5f8dc0f419bf76334987d528808e02b5f62df042ae062a48447d92658b3b707860420a71dd3abc0fb0aa64fc68610328c68021eeafd1c9892fa90f449b5a97", 0x5e}, {&(0x7f0000000c40)="ca4813ed949d676938bf5afa861254238624deecccb669cdbf96357114920e32a58279555db068f39ed76ec4b3388cd4b0c9e2f2ec8b2dcf6074af633517ba4dd2300a1dce1506985a39e58b043062b9c7d857add264d600364674a6ac43656c82d5599181e2ad8cf7168e4c3415ee71a2cda9046e3259ea7672778b20594220e535cc6f7ff97f6dda52b624e122c8a730dbebc94ccf833497191f82d0048bde72fe416f85e19976141e598bca16f55c08439d7f7cda2c28b948d9fd93074b0e00506b6448e06a186bc8d99bc38c2605227a799f4917f58976ef8d788d64cc7dd0df3d1aad", 0xe5}], 0x6, &(0x7f0000000f00)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r9, @ANYBLOB="000000010000000000000000", @ANYRES32=r10, @ANYBLOB="ac1414bbac1414aa0000000014000000000000000000000001000000f0000000000000001100000000000000000000000100000083000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1e0201ac14142b000000002400000000000000000000000700000044149cf3ffffffff00000040ac1e00010000000000000000110000000000000000000000010000000100000000000000"], 0xd0}}, {{&(0x7f0000001000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001280)=[{&(0x7f0000001040)="4986c96bc96f888c5f8c31b5e4b0873b4308d650d2d90ee05f5a9ced70c89c34f032587695165c04f8acf12e0181c06308f73e92480542bd44754f571f547ac2f7cefc6ed67f7ba3c317143b5da7303be1c596530c682d2bd9cc1844dd38522d549a63df3ed8877cf46608969d612d43411c8c01b4fb67ea77e6927a9824fdbc8f4b94cfa77afbc9d2a1dbe9e074d7ca306e1ecb0f3b17ecd78b7bace6144095d16a7c9ecd50d2793808574c7b", 0xad}, {&(0x7f0000001100)="b7ad63d1ed985c2712c2bc283b3ff48c8422867b69cc532ab787da08f96e6a01f03cde948c561de8a4126c8d0e9c0ef6d3c2", 0x32}, {&(0x7f0000001140)="c7f148be3edefb8817719c6cd4b5a7e448154a566978a5051faa653c4f880517ea857e9ab5077358446816b26c01420a1386", 0x32}, {&(0x7f0000001180)="7cbf2d711554b913e7136a7f4ef2e911422a6221d78eed1eb774fdf362988ecf3a6e2ddaa1db8f41cee8bef0a3a30b4952559c6d10419749d7f4c4195632acf76dc20ea3bd48cf82914518a84af5613b016f68b1e67a14eef5be2d9226ce71ba06862e3ae903922593c7ba4297ccf633ab4f4cf336016feb357fade3d4da1eb405fc06c732163ca68eba43d147246ee5f89f6c053635763754f774e0519aaa61e1054133e49bf4d66f72adaa40e345ddf7ab0f3d816eef49ac32612c079bcdbbdc49af60e51147659e4647a22d731cdd51d48b3e01", 0xd5}], 0x4, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @broadcast, @dev={0xac, 0x14, 0x14, 0xa}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x44, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0x9f, [@private=0xa010100, @rand_addr=0x64010101, @private=0xa010102, @empty, @multicast2]}, @timestamp={0x44, 0xc, 0x6b, 0x0, 0x9, [0x2, 0x3]}, @generic={0x86, 0xd, "7fc984feebf737f63d1e01"}]}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x1b, 0x11, [@dev={0xac, 0x14, 0x14, 0x3d}, @empty, @local, @broadcast, @remote, @broadcast]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @empty, @local}}}, @ip_ttl={{0x14}}], 0xe8}}, {{&(0x7f0000001580)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, &(0x7f00000028c0)=[{&(0x7f00000015c0)="36946f1a3c25f97e95d7402b6aa263308b728ed0904558f92d7dd4efa50cbc2af5d4352d38ec9c3ded8565722bedae76ec63", 0x32}, {&(0x7f0000001600)="e5cdfdc921ad93c4b393ca7ae9907d9f49ea7fc57ce35eea9add55293a47493e5e82b12b68ccb3520ed1af2b48c46cca0b1a113bb26994e762cf7969d13738cb17b55d84632e966d96e7b5dd4f6dcebc154532e90f401556436eda0427169067e124d1753fca6b3a33ded456fb01efbe192a487ea549e288047b3bb5a944e57dea758515cd10b671a9d1242348e0280824c2d5086a4c7a93a39774c3be7829eb6edcf6b8acca4b8c695c4e", 0xab}, {&(0x7f00000016c0)="27d7848c654c54e82b0ffeb74114fcc198ee93200b8e9df96882bb2f44", 0x1d}, {&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000002700)="559b4d11dc6e3bc24726c62a8e88f325553845cac99c903dabee925ded05ff33710b1807983cfb4317e9296eae", 0x2d}, {&(0x7f0000002740)="57e63f435de635c8cdb53e37fb749e83d46d19bd2f3aa28d49be92ae06448edf9050be668b41188a8b08aceae538bd", 0x2f}, {&(0x7f0000002780)="9d21a059aa2c0140077849a5dcf932cd19f8ee71505456caac5059ffe96c0afbc553dde15bb554921bc6e672144458ecd46cc56e44abcfc5ff0b00d3c46d7e12d6eb30544655d7151a58559215d1c8651f353a4a8eebb79ab29271e85d9ba20036f4ba23775e7364fc09a950ed117f8a9eddfac244f5448c865b962fd3986e11bbea7b794ecf39e6dcf7ae3d0ef6d6209bde2f652a4b7bb5ee9a980b0d9722da237575a2cc", 0xa5}, {&(0x7f0000002840)="108db37595dae781b848575be849aa6f7f23263ecd7c8b4aff46b206675c834db5e83c88e57b9604a386ce182d831ccca246b9c5b9d3e1bea3a1d8e1333710fe5f04305a3d0a932693648350a93d5af2c5bf35febfda083dd2e6841ea1c564a89fc22c3471f9be797b027847b50b0ef9def7c1fac70e31e0b7a2ff86a2dcf1", 0x7f}], 0x8, &(0x7f0000002940)}}, {{&(0x7f0000002980)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000002a00)=[{&(0x7f00000029c0)}], 0x1, &(0x7f0000002a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @local, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r18, @local, @dev={0xac, 0x14, 0x14, 0x40}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8000}}], 0xa0}}], 0x5, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000500)={0x0, 0x87, "339090c1d9755a47c0fba7dbd86fc7410a4748b4d86f59bced131cb43e98ecab93802b1244434def743500e0f194ef3708e9de758200700cf870ece0e244a798b458eac284c1e10f4dbe0562b96a5eed080a71e17e20f7ffb779152a0a6cbefa351f3f87bebdf4842e1f22e8c4dec0506892e9c95b7c643ab7db3ab1434b72dfed0ebe06a44b3b"}, &(0x7f0000000080)=0x8f) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000500)={0x0, 0x87, "339090c1d9755a47c0fba7dbd86fc7410a4748b4d86f59bced131cb43e98ecab93802b1244434def743500e0f194ef3708e9de758200700cf870ece0e244a798b458eac284c1e10f4dbe0562b96a5eed080a71e17e20f7ffb779152a0a6cbefa351f3f87bebdf4842e1f22e8c4dec0506892e9c95b7c643ab7db3ab1434b72dfed0ebe06a44b3b"}, &(0x7f0000000080)=0x8f) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000440)={r8, 0x2, 0x400, 0x1, 0xdd7, 0x9, 0x22, 0x8, {r19, @in={{0x2, 0x4e24, @multicast1}}, 0xfffffffa, 0x7, 0x7fff, 0x18, 0x7}}, &(0x7f00000000c0)=0xb0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0000e6d98a655985cc6f7dd02ce7b8a25a535d4495ef816b3e24960c61c12ff5e073f31272992a78419329a62c61885e559e4455d9b36449133ac9b4ae927719d02ee3a8317146681409f4ee2a721f84de0eaa648083c08cb238b6ef04b67d8c559f3fe1a64cc0a53accd9312a6b42", @ANYRES16=r1, @ANYBLOB="20002abd7000ffdbdf250800000008000500ac1414aa14000200200100000000000000000000000000021400060067656e6576653100000000000000000008000500ac1414bb"], 0x4c}, 0x1, 0x0, 0x0, 0x20000840}, 0x8000) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0000e6d98a655985cc6f7dd02ce7b8a25a535d4495ef816b3e24960c61c12ff5e073f31272992a78419329a62c61885e559e4455d9b36449133ac9b4ae927719d02ee3a8317146681409f4ee2a721f84de0eaa648083c08cb238b6ef04b67d8c559f3fe1a64cc0a53accd9312a6b42", @ANYRES16=r1, @ANYBLOB="20002abd7000ffdbdf250800000008000500ac1414aa14000200200100000000000000000000000000021400060067656e6576653100000000000000000008000500ac1414bb"], 0x4c}, 0x1, 0x0, 0x0, 0x20000840}, 0x8000) 2m42.321970841s ago: executing program 1 (id=5613): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x8920, &(0x7f0000000200)={'sit0\x00', 0x0}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) r2 = socket$inet6(0xa, 0x2, 0x3a) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000140)={@loopback, r4}, 0x12) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000"], 0x48) r5 = socket$igmp(0x2, 0x3, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4854}, 0x20004000) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet6(r2, &(0x7f0000000000)="80edcf5d860000ce", 0x8, 0x801, &(0x7f00000001c0)={0xa, 0x0, 0x2000000, @local}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'vlan0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) 2m41.346691344s ago: executing program 1 (id=5628): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000480)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000a40)={{r2}, r3, 0x6, @inherit={0x78, &(0x7f0000000280)={0x1, 0x6, 0x1, 0x414b, {0x55, 0xfffffffffffffffd, 0x7, 0x2, 0x9}, [0x80000001, 0x3f, 0x6, 0x4, 0x2, 0x7ff]}}, @subvolid=0x9f0b55}) unshare(0x20020400) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r4, 0x847b0dac5bec178f, &(0x7f00000000c0)}, 0x10) setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000180), 0x4) getsockopt$inet6_int(r2, 0x29, 0x10, 0x0, &(0x7f0000000080)) (async) getsockopt$inet6_int(r2, 0x29, 0x10, 0x0, &(0x7f0000000080)) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x5}, {0xf, 0x6}, {0x9, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x28, r8, 0x1, 0x70bd25, 0x25dfdbf7, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4000}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000850}, 0x20044004) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x2041) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r10 = accept4(r1, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000240), r10) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000240), r10) sendto$l2tp6(r10, &(0x7f0000000000)="fd2e", 0x2, 0x88c0, 0x0, 0x0) sendmsg$alg(r10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) (async) sendmsg$alg(r10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) 2m26.336041081s ago: executing program 33 (id=5628): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000480)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000a40)={{r2}, r3, 0x6, @inherit={0x78, &(0x7f0000000280)={0x1, 0x6, 0x1, 0x414b, {0x55, 0xfffffffffffffffd, 0x7, 0x2, 0x9}, [0x80000001, 0x3f, 0x6, 0x4, 0x2, 0x7ff]}}, @subvolid=0x9f0b55}) unshare(0x20020400) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r4, 0x847b0dac5bec178f, &(0x7f00000000c0)}, 0x10) setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000180), 0x4) getsockopt$inet6_int(r2, 0x29, 0x10, 0x0, &(0x7f0000000080)) (async) getsockopt$inet6_int(r2, 0x29, 0x10, 0x0, &(0x7f0000000080)) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x5}, {0xf, 0x6}, {0x9, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x28, r8, 0x1, 0x70bd25, 0x25dfdbf7, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4000}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000850}, 0x20044004) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x2041) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r10 = accept4(r1, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000240), r10) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000240), r10) sendto$l2tp6(r10, &(0x7f0000000000)="fd2e", 0x2, 0x88c0, 0x0, 0x0) sendmsg$alg(r10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) (async) sendmsg$alg(r10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) 2.282830619s ago: executing program 4 (id=6965): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) splice(r0, &(0x7f0000000080)=0x6, r1, &(0x7f00000002c0)=0x10, 0x5, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r13, 0x1, 0xf, &(0x7f0000000180)=0x6, 0x4) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) close(r13) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000900)={0x0, 0xfffffffffffffd09, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r14, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800010280000000fcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x2e88db8cb1d3d0f, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010003b150000000000000000000000004d04553a62e5dadcb73f8b54902df7db8cd9c86679a1dd578dadc101f8ac0a76ac29cfc887daf940bc01d7e447ede9bdce94dab916477f19811425bb6a18a6f411e6819a28544a302c521ebde561455f52a264f60c2d45a660213e57996790ba089a46722d249cd3ca7ce38415ceef03bbf84ec5116cd5978be123e8f2f88823bedae673522aec0ec5ce98dde33bcae7b244d8664334662eb071245efcb29b874119d72ef37d92f0a716", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800500160002000000050017000000000004001200"], 0x48}}, 0x0) r15 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendto$packet(r15, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c", 0x1f, 0x0, &(0x7f0000000540)={0xc9, 0x0, r16, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) 2.118683295s ago: executing program 5 (id=6967): syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x81, 0xb, 0x7, 0x3, 0x800}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={r2, @in6={{0xa, 0x4e23, 0x10000, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf15}}, 0x0, 0x0, 0x8000000, 0x0, 0x8}, 0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001c00)={0x0, @in, 0x0, 0x0, 0xffffffff}, &(0x7f0000001cc0)=0x9c) 1.920084492s ago: executing program 5 (id=6969): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000000", @ANYRES32], 0x48}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x80000000, 0x1}}, 0x20) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x50, 0x29, 0x3e}}, @ip_tos_u8={{0x24, 0x29, 0x3b}}, @ip_tos_u8], 0x50}, 0x0) r4 = socket(0x10, 0x803, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001040)={0x577}, 0x8) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}]}, 0x44}}, 0x0) 1.728899827s ago: executing program 4 (id=6973): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r1, 0x0) (async) listen(r1, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000001c40)=@bpq0, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x7, 0x0, {0x2, 0x3}, [@typed={0x9, 0x1, 0x0, 0x0, @str='bpq0\x00'}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000010a000000000010000000000000", @ANYRES32=0x0, @ANYBLOB="29b000004a04000008001b000000000014001680100001800c00090009000080"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x40) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000010a000000000010000000000000", @ANYRES32=0x0, @ANYBLOB="29b000004a04000008001b000000000014001680100001800c00090009000080"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x40) 1.592254318s ago: executing program 5 (id=6977): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x2004088}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x2004088}, 0x0) (async) 1.548107596s ago: executing program 4 (id=6978): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) r1 = socket(0x2, 0x2, 0x0) (async) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x7d, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r2, &(0x7f0000000340), &(0x7f0000000200)=@tcp6=r1}, 0x20) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl(r3, 0x2, &(0x7f0000001a80)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r2, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r1}, 0x20) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2c385aa3d46c9f4752209d5cc1cb0f040500000000000000601b06e26feadf3bc6c9b5e7815ff7a1a93876d017b84233373069eb30bc42b9c5a10a19fef3df12e28a29699e9eba9538285494c213022d2afaa51fea1e2cef8325d9ee651d805c", 0x0) r4 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) (async) writev(r4, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0x105}], 0x1) 1.460441537s ago: executing program 5 (id=6981): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x2, 0x1}, 0x6) recvmmsg(r1, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x88b1}], 0x1, 0x40000120, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) write$bt_hci(r1, &(0x7f0000000000)=ANY=[], 0x6) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000040)) 1.411295841s ago: executing program 6 (id=6982): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r6, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r6, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r4, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) (async) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r6, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r6, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r4, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) (async) 1.365916051s ago: executing program 4 (id=6983): r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000480)) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000480)=0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000003140)=0x0) r3 = getpid() sendmsg$nl_route(r0, &(0x7f0000003200)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)=@RTM_NEWNSID={0x2c, 0x58, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r1}, @NETNSA_PID={0x8, 0x2, r2}, @NETNSA_PID={0x8, 0x2, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'xfrm0\x00'}) (async) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'xfrm0\x00'}) write(r0, &(0x7f0000000000)="fd9207d2899bef6a0a745f04e677a237622825c329b7065503acc9e13ec13d4edb380b47548474d0a9e8d08cf41df55e0369ab8f963bc3debdafd3fbd923a5a474f209f5410ff96e7add5229d3fddf0dd8bdeec5", 0x54) (async) write(r0, &(0x7f0000000000)="fd9207d2899bef6a0a745f04e677a237622825c329b7065503acc9e13ec13d4edb380b47548474d0a9e8d08cf41df55e0369ab8f963bc3debdafd3fbd923a5a474f209f5410ff96e7add5229d3fddf0dd8bdeec5", 0x54) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0xf22, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r5, &(0x7f0000000380)="075fdaf9"}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) (async) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) unshare(0x20400) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x10, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000240)={r0, &(0x7f0000000140)='*]\x00', 0x484820, &(0x7f0000000180)={@align=0xfffffffffffff001, {0x0, 0x3, 0x9, 0x56d}}, 0x0, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x40}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000600)={{r0, &(0x7f00000004c0)='xfrm0\x00', 0x119481, &(0x7f0000000500)={@align=0x9, {0x8, 0x6, 0x4, 0x9}}, 0x3, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x9df}, {[0x2, 0x40, 0x101, 0x4]}, 0x10001, 0x1f, &(0x7f00000005c0)=""/31}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000600)={{r0, &(0x7f00000004c0)='xfrm0\x00', 0x119481, &(0x7f0000000500)={@align=0x9, {0x8, 0x6, 0x4, 0x9}}, 0x3, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x9df}, {[0x2, 0x40, 0x101, 0x4]}, 0x10001, 0x1f, &(0x7f00000005c0)=""/31}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000006c0)={0x5, 0x0}, 0x8) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000002f80)={{r0, &(0x7f0000000700)='xfrm0\x00', 0x309540, &(0x7f0000000740)={@_ha_fsid={[0x2, 0xfffffffc]}, {0xf6, 0x4, 0x4, 0xfffffffffffffffe}}, 0x9, &(0x7f0000000780), &(0x7f00000007c0)=0xfffffff9}, 0x9, &(0x7f0000002e40)=[{0x2, 0x7, &(0x7f0000000800)='\x92/-\\,&$\xa0&@}/:)#,\'$,.[\x00', &(0x7f0000000840)="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", 0x1000, 0x10}, {0x1, 0xea, &(0x7f0000001840)='xfrm0\x00', &(0x7f0000000280)="8cdadc67804e57cb66034a3f493f4089d76025b74532f031a059abd65ac5f47b4faf8de25f5cbcbf3b97037cb7f253129808f5565467776f8de22bf1081ee8e4b9943545862ebe72164f940add5a42590f8352903ee0ca730a19947fccf7705e04a727c378685963fa8dc4c967d21383c15cf93bf6e0de3b278b8665d0a959b0f2932e7fec7483fb34f2132578", 0x8d, 0xa}, {0x3, 0x6, &(0x7f0000001940)='xfrm0\x00', &(0x7f0000001980)="5f50944c715945926cff9554e6f69ae05fce98a3f40717085d3e522c", 0x1c}, {0x2, 0x58, &(0x7f00000019c0)='{\x93\\(/!\'T:&\x00', &(0x7f0000001a00)="9108da4a259944f88fbae6383d3ab915e42c6a3afa97eee0f72cbdf5ad25869fe08005635776c7422ca8c28c59389c93149b1668ed259f712722e60d177d99d2ef82f296cdfb8f0ee0cb8e6b1140750591ab36cb787edf386cf4a7fd19be01831e756726b314fa5c18f6c396e58b3aec54370dc26a2d37b0c98ff451eba245c2dd2b9e5df19605e2b42973070b4518b14c4e37eb91d1", 0x96, 0x10}, {0x2, 0x7, &(0x7f0000001ac0)='[\x00', &(0x7f0000001b00)="763e28c943895955a7dc73c64ce9166d68ecfeb87abe72ef7210d6bd0481e1c66bbae4a4997bac0e21e0b2af13ec0729dd12fc2cfff3438fd9af510dedf7a9e80b8224f51ec715b9608d7f5ed86f806c1142fd589a170876bc5d9f54149c74d489dd0d30103d6e0801284bac3500a88522628c823f7772dda080834de98930fbeb3787f9575642fd81f613965a480a33f1", 0x91, 0x40}, {0x2, 0x80000001, &(0x7f0000001bc0)='xfrm0\x00', &(0x7f0000001c00)="4913ff56ca637a45d0d3a6e423cc1352437d567b130fe179d9874c399fa29460e299abb6c11872661653d586658ed13181f012ce34dbc3031e4a4dc46fed0bd5b1b90fef68835bf5a593e5572d42e5395dd69208fc82b539ef32fe8eff07f18b8ac2ff7406d5e316118aa0f990b9072354cd5fc171f292445974710f14c231e218d5eaffd59f25d6956488c8b3209b7959e736ac66187fbc46b81c70407c1874763ec3cbc2768532125c11a514bacf9fb68b0ade76c160747905c42ea14eede68962bb4eca9fea68836b6f6a3ddbc8b331751f0a8689ff614a9b45de755b3322b19a32a4aab1d143", 0xe8, 0x10}, {0x1, 0x5, &(0x7f0000001d00)='xfrm0\x00', &(0x7f0000001d40)="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", 0x1000, 0x20}, {0x3, 0x9, &(0x7f0000002d40)='xfrm0\x00', &(0x7f0000002d80)="e6ee535f9832fc89c8a1096c0c2e1e58a24ad2dc8c5a93f2a334f0716b", 0x1d, 0x12}, {0x2, 0x20, &(0x7f0000002dc0)='xfrm0\x00', &(0x7f0000002e00)="fc692017ec881097263e497113b2cdbfc4140edb7f3e925053a4c8d9e2f8c5da272507ac91d84bb3f6565ff5c430789df60d73e221c8f5", 0x37, 0x2}]}) bpf$PROG_LOAD(0x5, &(0x7f0000003080)={0xc, 0x29, &(0x7f0000003240)=ANY=[@ANYBLOB="18000000e5060000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018210000", @ANYRES32=0x1, @ANYBLOB="000000000000000085000000ca00000018160000", @ANYRES32=r5, @ANYBLOB="000000000000000018100000", @ANYRES32=r6, @ANYBLOB="00000000000000001801007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000095ba495fa44c74ca378e3759bcd50000000000000018630000090000000000e200ed00000018360000020000000000000000000000181100"/129, @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000018350000040000000000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x3ff, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x2f, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x3, 0xc, 0x1, 0x5}, 0x10, r10, r11, 0x5, 0x0, &(0x7f0000003000)=[{0x3, 0x2, 0xb, 0xb}, {0x1, 0x5, 0x3, 0x4}, {0x0, 0x3, 0x6, 0x7}, {0x2, 0x3, 0x1}, {0x0, 0x1, 0x4, 0x3}], 0x10, 0x6}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000003080)={0xc, 0x29, &(0x7f0000003240)=ANY=[@ANYBLOB="18000000e5060000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018210000", @ANYRES32=0x1, @ANYBLOB="000000000000000085000000ca00000018160000", @ANYRES32=r5, @ANYBLOB="000000000000000018100000", @ANYRES32=r6, @ANYBLOB="00000000000000001801007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000095ba495fa44c74ca378e3759bcd50000000000000018630000090000000000e200ed00000018360000020000000000000000000000181100"/129, @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000018350000040000000000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x3ff, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x2f, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x3, 0xc, 0x1, 0x5}, 0x10, r10, r11, 0x5, 0x0, &(0x7f0000003000)=[{0x3, 0x2, 0xb, 0xb}, {0x1, 0x5, 0x3, 0x4}, {0x0, 0x3, 0x6, 0x7}, {0x2, 0x3, 0x1}, {0x0, 0x1, 0x4, 0x3}], 0x10, 0x6}, 0x94) 1.27076743s ago: executing program 0 (id=6985): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="f00000001200130700000000fc25e0000001000000000000000000000000ff020000000000000000000000000001000400004e21000200000000870000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f00000000000000000100000000000000ffffffff00000000000000002cbd7000fd340000020000005000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1.205842705s ago: executing program 3 (id=6986): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) socket(0x5, 0x1, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000bc0)={0x0, 0x5, 0x2bb3, 0xe3, 0x94b, 0x7fff}, &(0x7f0000000c00)=0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x20, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700009e0dc5cf1d66fff2fcffff8100632f0806", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.118533969s ago: executing program 6 (id=6987): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x1113, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) socket$kcm(0x2, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc0200000000000000000000000000000002000000000000040100010100c20476"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x80802, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r4, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) shutdown(r3, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x34, r5, 0x1, 0x70bd27, 0x1, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc015}, 0x20000000) close(r2) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008041) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b05, &(0x7f0000000880)={'wlan1\x00'}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, 0x0, 0x0) r9 = openat$cgroup_devices(r6, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a340977770a89"], 0xa) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001b80)={'bridge0\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705e, 0x65ef}, {0xb, 0x1203}]}}) 1.034658333s ago: executing program 0 (id=6988): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {0x0, 0x2}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x4000007, 0x4) bind$llc(r0, &(0x7f0000000040), 0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r9, &(0x7f0000003500)=[{{&(0x7f0000000140)={0xa, 0x0, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)="81", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000300)="8c", 0x1}], 0x1}}], 0x2, 0x4004851) setsockopt(r9, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000050000000000000001000084000000000300000002000000000000210000000000000005000000000000005f", @ANYRES8=0x0, @ANYRES16], &(0x7f0000000280)=""/265, 0x41, 0x109, 0x1}, 0x28) 1.034379263s ago: executing program 4 (id=6989): r0 = socket(0x5, 0xa, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_int(r1, 0x29, 0x14, 0x0, 0xfff3) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket(0x15, 0xa85d0f8c28ace266, 0x9) getpeername$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x400}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x9}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x9}]}, &(0x7f00000001c0)='GPL\x00', 0x1, 0xcf, &(0x7f0000000440)=""/207, 0x41000, 0x0, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0xb, 0x6, 0x401}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f00000005c0)=[{0x4, 0x5, 0x9, 0x9}, {0x400004, 0x5, 0x4, 0x4}, {0x4, 0x2, 0x7, 0xb}, {0x2, 0x4, 0x3, 0xa}, {0x4, 0x1, 0xa}, {0x3, 0x4, 0x2, 0x3}, {0x3, 0x1, 0x2, 0xa}, {0x4, 0x4, 0x4}, {0x1, 0x5, 0x6, 0x1}], 0x10, 0x1}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003ec0)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xfff3}, {}, {0xc, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @empty}}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @remote}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x840) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001208000440000000040900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 955.549151ms ago: executing program 3 (id=6990): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={&(0x7f0000000240)="97", 0x0, 0x0, 0x0, 0x8, r1}, 0x38) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8}]}, 0x20}}, 0x0) 881.918414ms ago: executing program 3 (id=6991): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xd, 0x800, 0x7}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x1a, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) 830.614131ms ago: executing program 6 (id=6992): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x0, 0xb4, 0xa7, &(0x7f00000005c0)="a792ef2ea6a221ff66c8198c08b1fc83dd01fc4de615dd629d0e7f619996c56b0015f1110ade322d4fe75ef3da2916790d2e5b3e0be07ecb54e5913de91350f816e5179cc47e8f18862c480b65aceedb9e007e60ecd0fcc9190b74031ca38da1a3bcfb272be6a3b9fdba534c090fa210cb995f81f167442bc61e5ece8fa00c2bda312e5488011076eea952292f1296aba27081f6da951eda0b7e9a149507a674ca5dc81f2c55ff7004b9805162d2087705e142f9", &(0x7f0000000a00)=""/167, 0xa96, 0x0, 0xb9, 0xfe, &(0x7f0000000b80)="50e88c2a61800cfc411c82b39e1e6a67894fb630cc2329d9f143a014dc3cfd21de6c50372a48e2328c4f3205e33c36b1bd1c4cb6693d517dbbd465f966036ac8b82c5f8654c909a67b965f74700c5bbbd1bdbe51700d8ee1d9a320e7354fc2295c71c67fcb7b58aef0b95852030db0b51b18888778e1b8556d47f94d98512358bd42759fe013f75f16619beb0d40faf29da3298e37fe9ee355e59f075812c16493ac8f789ab457469af1a8128b735f268b1a4b4d30699f980a", &(0x7f0000000c40)="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", 0x2, 0x0, 0xffffff08}, 0x50) (async) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) (async, rerun: 32) r4 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r4}, 0x8) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0xa, 0x0, 0x0, 0xa, 0x1}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x10000, @value=r6}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x8, &(0x7f0000000440)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000040000000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) (async) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x74, &(0x7f0000000100)={r9, 0x0, 0x10, 0x20000000006, 0xb1aa}, &(0x7f0000000040)=0x18) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'sit0\x00', 0x0, 0x0, 0xa000, 0x0, 0x40000000, {{0x5, 0x4, 0x0, 0x10, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @rand_addr=0x3}}}}) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000480)=""/56, 0x38}, {&(0x7f0000000000)=""/38, 0x26}, {&(0x7f00000004c0)=""/244, 0xf4}, {&(0x7f0000000700)=""/207, 0xcf}, {&(0x7f0000000800)=""/222, 0xde}, {&(0x7f00000000c0)=""/116, 0x74}, {&(0x7f0000000940)=""/135, 0x87}, {&(0x7f0000000240)=""/191, 0xbf}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x9}, 0x22120) 783.188203ms ago: executing program 3 (id=6993): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000005f00000000000000180000001800000000000000000000009500000000000000640300000000000095"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x44000000}, 0x94) 755.401892ms ago: executing program 0 (id=6994): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000001c0)=0x6bd, 0x4) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25}, 0x48) (rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r3, &(0x7f0000000180), 0x0}, 0x20) (async) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="82000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000fddbdf25140000001800018014000200766574683100"/38], 0x2c}, 0x1, 0x0, 0x0, 0xc1}, 0x40) bind$tipc(r1, 0x0, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x30, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x80, 0xcb, r8}, [@IFA_BROADCAST={0x8, 0x4, @local}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044014}, 0x4000000) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001f80)=[{{&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x86}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x3e}, @dev={0xac, 0x14, 0x14, 0xb}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x90}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40) 682.852725ms ago: executing program 6 (id=6995): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4893a, 0x904a}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="e10931d8640a00000000000086dd600141000010880020010000000000000000000000000000fe8000000000000000000000000000aa00000000000790"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x1800, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect(r2, &(0x7f00000002c0)=@pptp={0x18, 0x2, {0x3, @private=0xa010100}}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x9c, 0x10, 0x503, 0x70bd26, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r3}, @IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1000009, 0x81}}]}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80000001}}]}]}}}, @IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x9c}}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) unshare(0x2040400) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSNPMODE(r5, 0x4008744b, &(0x7f00000000c0)={0xc023, 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 682.405545ms ago: executing program 3 (id=6996): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xffff0000, 0x24, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'erspan0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x2c, 0x10, 0x1}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@deltaction={0x7c, 0x31, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xc4, 0x1, 'mirred\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x115, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48801}, 0x40) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e80), r2) sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f80)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8e054) 475.118983ms ago: executing program 0 (id=6997): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000003340), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000003340), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 465.845631ms ago: executing program 5 (id=6998): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000640), 0x4) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x24040051) 402.719513ms ago: executing program 3 (id=6999): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {}, {0x7, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100003052abd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="18800300a0010200140012800b0001006d616373656300000400028008000500", @ANYRES32=r8, @ANYBLOB="080003"], 0x44}}, 0x800) socket$nl_route(0x10, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) (async) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) (async) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) (async) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r4}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {}, {0x7, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100003052abd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="18800300a0010200140012800b0001006d616373656300000400028008000500", @ANYRES32=r8, @ANYBLOB="080003"], 0x44}}, 0x800) (async) 204.311722ms ago: executing program 6 (id=7000): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r0, &(0x7f0000000080), 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) writev(r0, &(0x7f0000000080), 0x0) (async) 175.659525ms ago: executing program 0 (id=7001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x2, 0x0) getsockopt$inet_mreqn(r1, 0x29, 0x20, 0x0, &(0x7f0000000040)=0x2000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xe1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000000) 42.886873ms ago: executing program 5 (id=7002): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x2}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth0_to_bond\x00', 0x400}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'batadv0\x00', @multicast}) (async) close(r0) 42.307878ms ago: executing program 4 (id=7003): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x8927, &(0x7f0000000000)={0x9, 0x80000001, 0x0, 0x0, 0x0, [0x2]}) 41.189605ms ago: executing program 6 (id=7004): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockname$packet(r1, 0x0, &(0x7f0000000640)) (async) getsockname$packet(r1, 0x0, &(0x7f0000000640)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r2, &(0x7f0000000380)=[{&(0x7f00000011c0)="c8", 0x1}], 0x1) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'dummy0\x00', {0x2, 0x0, @multicast2}}) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'dummy0\x00', {0x2, 0x0, @multicast2}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x7e, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r7, 0x11, 0xc, 0x0, &(0x7f0000000740)) getsockopt(r6, 0x200000000114, 0x8, 0x0, &(0x7f0000000240)) (async) getsockopt(r6, 0x200000000114, 0x8, 0x0, &(0x7f0000000240)) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r8, @ANYBLOB="83040500010000003000128008000100677265002400028008000700ac"], 0x50}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r8, @ANYBLOB="83040500010000003000128008000100677265002400028008000700ac"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x1}}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc811}, 0x8000) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x1}}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc811}, 0x8000) 0s ago: executing program 0 (id=7005): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x4b}, 0x48) (async) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000480)={0x28, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x4d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) kernel console output (not intermixed with test programs): ft promiscuous mode [ 556.118023][T18852] dummy0: left promiscuous mode [ 556.120866][ T29] audit: type=1800 audit(1771652672.396:5): pid=24025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5029" name="memory.events" dev="tmpfs" ino=1792 res=0 errno=0 [ 556.145494][T18852] bridge0: port 3(team0) entered disabled state [ 556.156445][T18852] bridge_slave_1: left allmulticast mode [ 556.162451][T18852] bridge_slave_1: left promiscuous mode [ 556.168418][T18852] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.177691][T18852] bridge_slave_0: left allmulticast mode [ 556.183719][T18852] bridge_slave_0: left promiscuous mode [ 556.189574][T18852] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.209184][ T29] audit: type=1804 audit(1771652672.486:6): pid=24029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.5029" name="/newroot/349/memory.events" dev="tmpfs" ino=1792 res=1 errno=0 [ 556.518075][T18852] bond8 (unregistering): (slave gretap3): Releasing active interface [ 556.533425][ T5192] udevd[5192]: worker [20573] /devices/virtual/block/nbd2 is taking a long time [ 556.645960][T18852] team0: Port device bridge2 removed [ 556.728149][T18852] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 556.736996][T18852] bridge4 (unregistering): left promiscuous mode [ 557.028950][T18852]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 557.040473][T18852]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 557.050364][T18852]  (unregistering): (slave wlan1): Releasing backup interface [ 557.059187][T18852]  (unregistering): Released all slaves [ 557.075866][T18852] bond0 (unregistering): Released all slaves [ 557.089578][T18852] bond1 (unregistering): Released all slaves [ 557.109202][T18852] bond2 (unregistering): Released all slaves [ 557.124242][T18852] bond3 (unregistering): Released all slaves [ 557.138159][T18852] bond4 (unregistering): Released all slaves [ 557.153208][T18852] bond5 (unregistering): Released all slaves [ 557.175958][T18852] bond6 (unregistering): Released all slaves [ 557.189555][T18852] bond7 (unregistering): (slave lo): Releasing backup interface [ 557.199040][T18852] bond7 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 557.210829][T18852] bond7 (unregistering): Released all slaves [ 557.229293][T18852] bond8 (unregistering): Released all slaves [ 557.246644][T18852] bond9 (unregistering): Released all slaves [ 557.259795][T18852] bond10 (unregistering): Released all slaves [ 557.466396][T24035] __nla_validate_parse: 8 callbacks suppressed [ 557.466419][T24035] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5030'. [ 557.484200][T24035] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5030'. [ 557.517275][T18852] : left promiscuous mode [ 557.648073][T24042] syzkaller0: entered promiscuous mode [ 557.712435][T24042] syzkaller0: entered allmulticast mode [ 557.726265][T24050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5033'. [ 557.736935][T18852] tipc: Left network mode [ 557.741382][T24052] batadv_slave_1: default FDB implementation only supports local addresses [ 557.750045][T24054] validate_nla: 5 callbacks suppressed [ 557.750064][T24054] netlink: 'syz.3.5036': attribute type 21 has an invalid length. [ 557.766989][T24054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5036'. [ 557.770400][T24050] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5033'. [ 557.870511][T24050] geneve3: entered promiscuous mode [ 557.876609][T24050] geneve3: entered allmulticast mode [ 557.876754][T24054] netlink: 'syz.3.5036': attribute type 21 has an invalid length. [ 557.885365][T24047] tipc: Enabled bearer , priority 0 [ 557.908973][T24054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5036'. [ 557.974627][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.990117][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.029924][T24041] tipc: Resetting bearer [ 558.103362][T24041] tipc: Disabling bearer [ 558.140052][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.146577][T24073] sock: sock_set_timeout: `syz.0.5043' (pid 24073) tries to set negative timeout [ 558.196344][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.234942][T24071] netlink: 'syz.4.5042': attribute type 13 has an invalid length. [ 558.265896][T24071] netlink: 'syz.4.5042': attribute type 58 has an invalid length. [ 558.286500][T24071] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5042'. [ 558.512732][T24090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5046'. [ 558.594225][T24094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 558.654934][T24094] team_slave_1: Caught tx_queue_len zero misconfig [ 558.687314][T24092] syzkaller0: entered promiscuous mode [ 558.695560][T24083] "syz.0.5046" (24083) uses obsolete ecb(arc4) skcipher [ 558.713208][T24092] syzkaller0: entered allmulticast mode [ 558.898914][T24107] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 558.906405][T24107] IPv6: NLM_F_CREATE should be set when creating new route [ 559.073256][T24110] netlink: 'syz.0.5052': attribute type 2 has an invalid length. [ 559.103635][T24110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5052'. [ 559.149911][T18852] hsr_slave_0: left promiscuous mode [ 559.159897][T18852] hsr_slave_1: left promiscuous mode [ 559.425604][T24132] netlink: 'syz.1.5060': attribute type 6 has an invalid length. [ 559.526675][T18852] team0 (unregistering): Port device team_slave_1 removed [ 559.543204][T18852] team0 (unregistering): Port device team_slave_0 removed [ 559.645362][T18852] team0 (unregistering): Port device dummy0 removed [ 559.828543][T24141] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5062'. [ 559.944790][T24145] netlink: 'syz.4.5064': attribute type 9 has an invalid length. [ 559.967370][T24145] netlink: 'syz.4.5064': attribute type 11 has an invalid length. [ 559.992070][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5530 ms [ 560.000192][ C0] lec:lec_tx_timeout: lec0 [ 560.028532][T24145] netlink: 'syz.4.5064': attribute type 12 has an invalid length. [ 560.205666][T18852] IPVS: stop unused estimator thread 0... [ 560.217338][T24157] tipc: Enabled bearer , priority 0 [ 560.245104][T24157] syzkaller0: MTU too low for tipc bearer [ 560.250886][T24157] tipc: Disabling bearer [ 560.449391][T24171] : entered promiscuous mode [ 560.601479][T24178] netlink: 'syz.1.5074': attribute type 3 has an invalid length. [ 560.738140][T24188] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 560.761403][T24188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.929301][T24199] can: request_module (can-proto-4) failed. [ 561.199993][T24218] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 561.360401][T24227] bridge_slave_1: left allmulticast mode [ 561.368823][T24227] bridge_slave_1: left promiscuous mode [ 561.376598][T24227] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.417523][T24227] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 561.734194][ T29] audit: type=1107 audit(1771652678.016:7): pid=24243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 562.187617][T24272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.352997][T24272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.677150][T24286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.040158][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 563.118077][T24318] __nla_validate_parse: 12 callbacks suppressed [ 563.118100][T24318] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5121'. [ 563.422269][T24336] bond11: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 563.438614][T24336] bond11 (unregistering): Released all slaves [ 563.474298][T24341] !: renamed from dummy0 [ 563.586755][T24336] bond11: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 563.605672][T24336] bond11 (unregistering): Released all slaves [ 563.739940][T24336] bond11: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 563.785098][T24336] bond11 (unregistering): Released all slaves [ 563.934708][T24369] validate_nla: 4 callbacks suppressed [ 563.934727][T24369] netlink: 'syz.1.5132': attribute type 1 has an invalid length. [ 563.989945][T24369] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5132'. [ 564.017348][T24336] bond11: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 564.030753][T24336] bond11 (unregistering): Released all slaves [ 564.060826][T24377] netlink: 'syz.0.5136': attribute type 1 has an invalid length. [ 564.113511][T24383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5136'. [ 564.122736][T24383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5136'. [ 564.219772][T24377] bond3: entered promiscuous mode [ 564.236760][T24377] 8021q: adding VLAN 0 to HW filter on device bond3 [ 564.245660][T24336] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 564.267376][T24385] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 564.339374][T24388] bond3: (slave bridge4): making interface the new active one [ 564.368309][T24388] bridge4: entered promiscuous mode [ 564.393243][T24388] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 564.443011][T24396] bond7: option lp_interval: invalid value (0) [ 564.449501][T24396] bond7: option lp_interval: allowed values 1 - 2147483647 [ 564.498605][T24396] bond7 (unregistering): Released all slaves [ 564.594121][T24411] netlink: 'syz.0.5144': attribute type 13 has an invalid length. [ 564.771276][T24420] netlink: 'syz.5.5151': attribute type 11 has an invalid length. [ 564.868956][T24425] 8021q: adding VLAN 0 to HW filter on device bond5 [ 565.005330][T24444] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5154'. [ 565.015135][T24444] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5154'. [ 565.027372][T24444] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5154'. [ 565.119177][T24447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5156'. [ 565.518545][T24472] tipc: Enabled bearer , priority 10 [ 565.563981][T24480] ªªªªª9oïß+Œü4€: Caught tx_queue_len zero misconfig [ 565.575720][T24482] netlink: 416 bytes leftover after parsing attributes in process `syz.3.5166'. [ 565.761471][T24501] bond0: Caught tx_queue_len zero misconfig [ 566.322834][T24534] ip6tnl0: Caught tx_queue_len zero misconfig [ 566.814229][T24569] bridge0: entered allmulticast mode [ 567.101395][T24585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5196'. [ 567.148816][T24584] sit0: Caught tx_queue_len zero misconfig [ 567.573195][T24609] netlink: 'syz.4.5203': attribute type 1 has an invalid length. [ 567.618528][T24605] bond7 (unregistering): Released all slaves [ 567.680999][T24609] 8021q: adding VLAN 0 to HW filter on device bond11 [ 567.707327][T24616] vlan2: entered promiscuous mode [ 567.716504][T24616] bond11: entered promiscuous mode [ 567.722431][T24616] vlan2: entered allmulticast mode [ 567.727678][T24616] bond11: entered allmulticast mode [ 567.746217][T24601] geneve1: Caught tx_queue_len zero misconfig [ 567.755887][T24618] bond0: Caught tx_queue_len zero misconfig [ 567.834687][T24609] bond11: (slave bridge6): making interface the new active one [ 567.860237][T24609] bridge6: entered promiscuous mode [ 567.867761][T24609] bridge6: entered allmulticast mode [ 567.879929][T24609] bond11: (slave bridge6): Enslaving as an active interface with an up link [ 568.052042][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 568.060306][ C0] lec:lec_tx_timeout: lec0 [ 568.069851][T24634] tipc: Enabled bearer , priority 0 [ 568.087715][T24640] netlink: 'syz.1.5212': attribute type 4 has an invalid length. [ 568.100571][T24640] netlink: 'syz.1.5212': attribute type 4 has an invalid length. [ 568.167651][T24637] tipc: Disabling bearer [ 568.193303][T24646] __nla_validate_parse: 4 callbacks suppressed [ 568.193323][T24646] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5214'. [ 568.209750][T24644] syzkaller0: entered promiscuous mode [ 568.219217][T24644] syzkaller0: entered allmulticast mode [ 568.475135][T24651] 8021q: adding VLAN 0 to HW filter on device bond4 [ 568.493303][T24661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5220'. [ 568.588353][T24665] Unknown options in mask b7f2 [ 568.838887][T24681] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5225'. [ 568.856001][T24681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5225'. [ 569.237036][T24703] netlink: 'syz.0.5230': attribute type 10 has an invalid length. [ 569.279603][T24703] bond0: (slave wlan1): Opening slave failed [ 569.306038][T24700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.600950][T24724] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5235'. [ 569.613024][T24724] netlink: 'syz.3.5235': attribute type 6 has an invalid length. [ 569.874538][T24740] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 569.925991][T24746] netlink: 'syz.0.5244': attribute type 13 has an invalid length. [ 570.080521][T24751] netlink: 'syz.4.5246': attribute type 12 has an invalid length. [ 570.114744][T24751] netlink: 'syz.4.5246': attribute type 29 has an invalid length. [ 570.123785][T24751] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5246'. [ 570.135625][T24751] netlink: 'syz.4.5246': attribute type 1 has an invalid length. [ 570.145058][T24756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5246'. [ 570.157108][T24751] netlink: 'syz.4.5246': attribute type 2 has an invalid length. [ 570.268488][T24760] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5248'. [ 570.315919][T24763] netlink: 'syz.4.5249': attribute type 1 has an invalid length. [ 570.331804][T24763] netlink: 'syz.4.5249': attribute type 4 has an invalid length. [ 570.347422][T24763] netlink: 9379 bytes leftover after parsing attributes in process `syz.4.5249'. [ 570.413524][T24773] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5252'. [ 570.504347][T24776] macvtap1: entered promiscuous mode [ 570.510661][T24776] macvtap1: entered allmulticast mode [ 570.519017][T24776] veth1_vlan: entered allmulticast mode [ 570.534302][T24780] bond0: Caught tx_queue_len zero misconfig [ 571.414303][T24831] netlink: 'syz.1.5271': attribute type 2 has an invalid length. [ 571.449158][T24831] 9: entered promiscuous mode [ 571.701022][T24840] syzkaller1: entered promiscuous mode [ 571.732853][T24840] syzkaller1: entered allmulticast mode [ 572.113886][T24862] tipc: Enabling of bearer rejected, already enabled [ 572.955148][T24909] syzkaller1: entered promiscuous mode [ 572.961095][T24909] syzkaller1: entered allmulticast mode [ 573.114639][T24917] syzkaller0: entered promiscuous mode [ 573.172418][T24917] syzkaller0: entered allmulticast mode [ 573.292986][T24915] 8021q: adding VLAN 0 to HW filter on device bond6 [ 573.366171][T24925] bond5: invalid ARP target 0.0.0.0 specified for addition [ 573.375770][T24925] bond5: option arp_ip_target: invalid value (0) [ 573.384764][T24925] bond5 (unregistering): Released all slaves [ 573.547326][T24939] __nla_validate_parse: 11 callbacks suppressed [ 573.547351][T24939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5303'. [ 573.592428][T24939] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5303'. [ 573.754539][T24948] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5307'. [ 573.770918][T24953] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5310'. [ 573.804280][T24954] bond4: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 573.817448][T24954] bond4: entered promiscuous mode [ 573.827658][T24954] bond4: entered allmulticast mode [ 573.833621][T24954] 8021q: adding VLAN 0 to HW filter on device bond4 [ 573.869177][T24951] 8021q: adding VLAN 0 to HW filter on device bond5 [ 573.889672][T24956] bond5: (slave gretap1): making interface the new active one [ 573.900262][T24956] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 574.096909][T24975] syzkaller1: entered promiscuous mode [ 574.107454][T24975] syzkaller1: entered allmulticast mode [ 574.320544][T24986] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.5319'. [ 574.333992][T24986] bridge_slave_1: default FDB implementation only supports local addresses [ 574.419856][T24996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5322'. [ 574.503923][T24996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5322'. [ 574.687738][T25008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5325'. [ 574.713154][T25019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.836879][T25027] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5331'. [ 574.963698][T25034] validate_nla: 40 callbacks suppressed [ 574.963718][T25034] netlink: 'syz.4.5334': attribute type 10 has an invalid length. [ 575.015795][T25032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5333'. [ 575.279167][T25044] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 575.417224][T25023] x_tables: duplicate underflow at hook 2 [ 575.733811][T25069] syzkaller0: entered promiscuous mode [ 575.749429][T25069] syzkaller0: entered allmulticast mode [ 575.773227][T25071] macvtap1: entered promiscuous mode [ 575.778877][T25071] team_slave_0: entered promiscuous mode [ 575.852768][T25076] netlink: 'syz.1.5348': attribute type 13 has an invalid length. [ 576.066079][T25092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.447270][T25109] netlink: 'syz.5.5357': attribute type 21 has an invalid length. [ 576.455902][T25108] netlink: 'syz.5.5357': attribute type 21 has an invalid length. [ 576.464792][T25108] netlink: 'syz.5.5357': attribute type 4 has an invalid length. [ 576.483092][T25108] netlink: 'syz.5.5357': attribute type 5 has an invalid length. [ 576.520986][T25114] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 576.523954][T25109] netlink: 'syz.5.5357': attribute type 4 has an invalid length. [ 576.572817][T25108] netlink: 'syz.5.5357': attribute type 21 has an invalid length. [ 576.602658][T25109] netlink: 'syz.5.5357': attribute type 5 has an invalid length. [ 576.690982][T25121] netlink: 'syz.1.5362': attribute type 13 has an invalid length. [ 576.984598][T25139] sctp: [Deprecated]: syz.4.5365 (pid 25139) Use of int in max_burst socket option deprecated. [ 576.984598][T25139] Use struct sctp_assoc_value instead [ 577.440880][T25165] openvswitch: netlink: Key 2 has unexpected len 8 expected 4 [ 577.986763][T25189] ip6tnl0: Caught tx_queue_len zero misconfig [ 578.362930][ T5142] block nbd3: Receive control failed (result -32) [ 578.658311][T25223] tipc: Enabling of bearer rejected, failed to enable media [ 578.923821][T25233] No such timeout policy "syz0" [ 578.925096][T25235] __nla_validate_parse: 18 callbacks suppressed [ 578.925114][T25235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5396'. [ 578.955919][T25235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5396'. [ 578.960756][T25233] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5395'. [ 579.014576][T25233] vxcan1: entered promiscuous mode [ 579.021713][T25237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5397'. [ 579.131679][T25235] tc_dump_action: action bad kind [ 579.279663][T25254] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5402'. [ 579.541145][T25273] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5407'. [ 579.679646][T25281] dvmrp8: entered allmulticast mode [ 579.691586][T25281] dvmrp8: left allmulticast mode [ 579.714506][T25275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5408'. [ 579.724786][T25275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5408'. [ 580.244176][T25313] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5420'. [ 580.411067][T25321] validate_nla: 8 callbacks suppressed [ 580.411088][T25321] netlink: 'syz.3.5422': attribute type 13 has an invalid length. [ 580.420662][T25295] lec:lec_atm_close: lec0: Shut down! [ 580.560777][T25329] bridge3: entered promiscuous mode [ 580.583417][T25329] bridge3: entered allmulticast mode [ 580.816422][T25338] x_tables: duplicate underflow at hook 2 [ 581.218653][T25349] bond7: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 581.307062][T25349] bond7 (unregistering): Released all slaves [ 581.334558][T25373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5434'. [ 581.529941][T25354] syzkaller0: entered promiscuous mode [ 581.543904][T25354] syzkaller0: entered allmulticast mode [ 581.751463][T25392] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 581.875868][T25401] nbd: must specify a size in bytes for the device [ 582.336926][T25427] IPVS: length: 135 != 24 [ 583.451194][T25489] mac80211_hwsim hwsim30 ÿ: renamed from wlan1 [ 583.575833][T25496] openvswitch: netlink: EtherType 50a is less than min 600 [ 583.785836][T25504] SET target dimension over the limit! [ 584.252731][T25521] __nla_validate_parse: 46 callbacks suppressed [ 584.252755][T25521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5469'. [ 584.302660][T25536] netlink: 'syz.5.5475': attribute type 1 has an invalid length. [ 584.321050][T25534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5474'. [ 584.326562][T25536] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5475'. [ 584.684339][T25547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 584.744477][T25560] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5483'. [ 584.765803][T25547] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5478'. [ 584.843273][T25566] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5481'. [ 584.981572][T25576] netlink: 'syz.0.5487': attribute type 1 has an invalid length. [ 585.076840][T25580] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5488'. [ 585.102938][T25583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5489'. [ 585.130462][T25578] wireguard0: entered promiscuous mode [ 585.145424][T25583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5489'. [ 585.156369][T25578] wireguard0: entered allmulticast mode [ 585.428365][T25601] SET target dimension over the limit! [ 585.489427][T25608] netlink: 'syz.4.5495': attribute type 3 has an invalid length. [ 585.731353][T25629] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5500'. [ 585.755891][T25631] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 585.871630][T25624] netlink: 'syz.0.5497': attribute type 1 has an invalid length. [ 585.958067][T25645] siw: device registration error -23 [ 585.992155][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5580 ms [ 586.000255][ C0] lec:lec_tx_timeout: lec0 [ 586.073190][ T1762] block nbd2: Possible stuck request ffff888026700000: control (read@0,1024B). Runtime 90 seconds [ 586.084368][ T1762] block nbd2: Possible stuck request ffff888026700200: control (read@1024,1024B). Runtime 90 seconds [ 586.095774][ T1762] block nbd2: Possible stuck request ffff888026700400: control (read@2048,1024B). Runtime 90 seconds [ 586.107134][ T1762] block nbd2: Possible stuck request ffff888026700600: control (read@3072,1024B). Runtime 90 seconds [ 586.394766][T25661] netlink: 'syz.5.5504': attribute type 9 has an invalid length. [ 586.424877][T25661] netlink: 'syz.5.5504': attribute type 6 has an invalid length. [ 586.436289][T25668] SET target dimension over the limit! [ 586.451605][T25661] netlink: 'syz.5.5504': attribute type 7 has an invalid length. [ 587.751777][T25732] netlink: 'syz.1.5524': attribute type 1 has an invalid length. [ 587.764234][T25726] bond6: entered promiscuous mode [ 587.893792][T25726] macvlan4: entered promiscuous mode [ 587.899248][T25726] macvlan4: entered allmulticast mode [ 587.944529][T25726] bond6: (slave macvlan4): Opening slave failed [ 587.962536][T25748] netlink: 'syz.3.5530': attribute type 13 has an invalid length. [ 588.259383][T25764] ip6tnl0: Caught tx_queue_len zero misconfig [ 588.324181][T25764] x_tables: duplicate underflow at hook 2 [ 588.493456][T25788] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 589.094785][T25819] tipc: Trying to set illegal importance in message [ 589.168381][T25819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.328158][T25830] lo: Caught tx_queue_len zero misconfig [ 589.606052][T25846] IPVS: fo: FWM 3 0x00000003 - no destination available [ 590.118738][T25873] SET target dimension over the limit! [ 590.530744][T25899] macvlan0: entered promiscuous mode [ 590.869260][T25919] __nla_validate_parse: 16 callbacks suppressed [ 590.869305][T25919] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5576'. [ 590.988154][T25923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5578'. [ 591.240415][T25935] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5582'. [ 591.249826][T25935] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5582'. [ 591.431389][T25943] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5584'. [ 591.452556][T25943] bridge_slave_1: default FDB implementation only supports local addresses [ 591.513765][T25943] siw: device registration error -23 [ 591.526392][T25943] netlink: 'syz.3.5584': attribute type 3 has an invalid length. [ 592.018263][T25984] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5597'. [ 592.052678][T25990] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5599'. [ 592.268487][T26000] syzkaller0: entered promiscuous mode [ 592.284018][T26000] syzkaller0: entered allmulticast mode [ 592.296460][T26000] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5605'. [ 592.336134][T26006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5607'. [ 592.460247][T26013] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 592.539178][T26014] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 592.706835][T26030] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5612'. [ 592.716288][T26029] netlink: 'syz.1.5613': attribute type 4 has an invalid length. [ 593.211210][T26056] syzkaller0: entered promiscuous mode [ 593.217221][T26056] syzkaller0: entered allmulticast mode [ 593.990362][T26101] netlink: 'syz.0.5633': attribute type 13 has an invalid length. [ 594.037979][T26107] veth0_macvtap: left promiscuous mode [ 594.052694][T26107] veth0_macvtap: entered promiscuous mode [ 594.072288][T26107] veth0_macvtap: entered allmulticast mode [ 594.213331][T26105] bridge0: entered promiscuous mode [ 594.219184][T26105] bridge0: entered allmulticast mode [ 594.412512][T26123] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 594.801616][T26139] bond0: Caught tx_queue_len zero misconfig [ 594.833983][T26142] Cannot find add_set index 0 as target [ 595.031328][T26155] sctp: [Deprecated]: syz.4.5651 (pid 26155) Use of int in max_burst socket option. [ 595.031328][T26155] Use struct sctp_assoc_value instead [ 595.080117][T26155] sctp: [Deprecated]: syz.4.5651 (pid 26155) Use of int in max_burst socket option. [ 595.080117][T26155] Use struct sctp_assoc_value instead [ 595.097717][T26155] sctp: [Deprecated]: syz.4.5651 (pid 26155) Use of int in max_burst socket option. [ 595.097717][T26155] Use struct sctp_assoc_value instead [ 595.117843][T26155] sctp: [Deprecated]: syz.4.5651 (pid 26155) Use of int in max_burst socket option. [ 595.117843][T26155] Use struct sctp_assoc_value instead [ 595.237836][T26160] netlink: 'syz.0.5652': attribute type 13 has an invalid length. [ 595.420845][T26162] syzkaller0: entered promiscuous mode [ 595.428644][T26162] syzkaller0: entered allmulticast mode [ 595.449958][T26162] tipc: Enabled bearer , priority 0 [ 595.464129][T26161] tipc: Resetting bearer [ 595.491905][T26161] tipc: Disabling bearer [ 595.689265][T26182] tipc: Enabled bearer , priority 0 [ 595.698397][T26182] openvswitch: : Dropping previously announced user features [ 595.713598][T26182] syzkaller0: MTU too low for tipc bearer [ 595.719542][T26182] tipc: Disabling bearer [ 595.780644][T26186] xt_hashlimit: max too large, truncated to 1048576 [ 596.135118][T26213] SET target dimension over the limit! [ 596.260131][T26210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.270326][T26223] vlan0: Caught tx_queue_len zero misconfig [ 596.354013][T26227] __nla_validate_parse: 11 callbacks suppressed [ 596.354035][T26227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5672'. [ 596.525831][T26233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5675'. [ 596.996148][T26259] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5682'. [ 597.094242][T26264] x_tables: duplicate underflow at hook 3 [ 597.113405][T26270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5687'. [ 597.126085][T26270] netlink: 'syz.0.5687': attribute type 3 has an invalid length. [ 597.239096][T26281] IPv6: sit2: Disabled Multicast RS [ 597.591853][T26301] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 597.603632][T26301] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 597.621940][T26301] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 597.630407][T26301] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 597.639663][T26301] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 597.699931][ T5142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 597.711108][ T5142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 597.718931][ T5142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 597.730068][ T5142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 597.742788][ T5142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 597.984833][T16815] syz_tun (unregistering): left allmulticast mode [ 597.991409][T16815] syz_tun (unregistering): left promiscuous mode [ 598.018156][T16815] bridge0: port 3(syz_tun) entered disabled state [ 598.062515][T26320] bridge0: port 2(gretap0) entered blocking state [ 598.069601][T26320] bridge0: port 2(gretap0) entered disabled state [ 598.076981][T26320] gretap0: entered allmulticast mode [ 598.085957][T26320] gretap0: entered promiscuous mode [ 598.095001][T26320] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5700'. [ 598.409842][T26339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5706'. [ 598.420723][T26340] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5705'. [ 598.516990][T26339] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 598.600308][T26346] Cannot find add_set index 0 as target [ 598.857870][T26359] syzkaller0: entered promiscuous mode [ 598.864263][T26359] syzkaller0: entered allmulticast mode [ 598.872909][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 598.955309][T26296] chnl_net:caif_netlink_parms(): no params data found [ 599.114116][T26296] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.121805][T26296] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.129958][T26296] bridge_slave_0: entered allmulticast mode [ 599.138649][T26296] bridge_slave_0: entered promiscuous mode [ 599.148688][T26296] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.156304][T26296] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.164278][T26296] bridge_slave_1: entered allmulticast mode [ 599.172632][T26296] bridge_slave_1: entered promiscuous mode [ 599.222976][T26296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.236831][T26296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.295559][T26389] netlink: 'syz.5.5718': attribute type 3 has an invalid length. [ 599.344628][T26296] team0: Port device team_slave_0 added [ 599.376885][T26296] team0: Port device team_slave_1 added [ 599.454896][T26396] netlink: 'syz.5.5720': attribute type 29 has an invalid length. [ 599.476324][T26296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.485129][T26296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.533102][T26401] netlink: 500 bytes leftover after parsing attributes in process `syz.5.5720'. [ 599.538048][T26296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.555393][T26396] netlink: 'syz.5.5720': attribute type 29 has an invalid length. [ 599.568081][T26402] veth0_to_team: Caught tx_queue_len zero misconfig [ 599.587176][T26296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.596744][T26296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.629142][T26296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.747203][T26296] hsr_slave_0: entered promiscuous mode [ 599.756002][T26296] hsr_slave_1: entered promiscuous mode [ 599.779294][T26411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5724'. [ 599.804448][T26411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5724'. [ 599.822975][T26411] netlink: 'syz.0.5724': attribute type 14 has an invalid length. [ 599.834692][ T5142] Bluetooth: hci0: command tx timeout [ 599.847490][T26411] netlink: 'syz.0.5724': attribute type 13 has an invalid length. [ 599.958071][T26424] openvswitch: netlink: Multiple metadata blocks provided [ 599.973134][T26424] netlink: 'syz.5.5728': attribute type 2 has an invalid length. [ 600.273877][T26442] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 600.296982][T26438] bridge_slave_1: entered promiscuous mode [ 600.303341][T26438] bridge_slave_1: entered allmulticast mode [ 600.674808][T26456] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 600.691620][T26456] bond8: (slave lo): Enslaving as an active interface with an up link [ 600.707944][T26462] netlink: 'syz.0.5741': attribute type 3 has an invalid length. [ 600.711114][T26456] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 600.733246][T26296] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 600.745769][T26296] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 600.765212][T26296] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 600.790469][T26296] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 600.929231][T26296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.955606][T26296] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.969474][T18845] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.976739][T18845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.998088][T18845] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.005436][T18845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.288799][T26296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.623512][T26490] __nla_validate_parse: 4 callbacks suppressed [ 601.623534][T26490] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5745'. [ 601.688355][T26296] veth0_vlan: entered promiscuous mode [ 601.700389][T26296] veth1_vlan: entered promiscuous mode [ 601.731011][T26296] veth0_macvtap: entered promiscuous mode [ 601.741412][T26296] veth1_macvtap: entered promiscuous mode [ 601.761854][T26296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 601.778576][T26296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 601.794679][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.804994][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.815916][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.825603][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.914122][ T5142] Bluetooth: hci0: command tx timeout [ 601.945919][T18848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.964435][T18848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.994306][T18845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.006619][T18845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.161014][T26513] x_tables: unsorted entry at hook 3 [ 602.207899][T26517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5750'. [ 602.324778][T26523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5753'. [ 602.325765][T26524] netlink: 'syz.4.5753': attribute type 1 has an invalid length. [ 602.676364][T26545] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5759'. [ 602.906392][T26559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5763'. [ 602.929318][T26563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5764'. [ 602.940397][T26559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5763'. [ 602.950137][T26559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5763'. [ 602.969113][T26563] netlink: 596 bytes leftover after parsing attributes in process `syz.3.5764'. [ 602.979546][T26563] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5764'. [ 603.179722][T26575] netlink: 'syz.4.5768': attribute type 12 has an invalid length. [ 603.191215][T26574] openvswitch: netlink: Tunnel attr 67 out of range max 16 [ 603.206414][T26574] openvswitch: netlink: Tunnel attr 67 out of range max 16 [ 603.215087][T26574] openvswitch: netlink: Tunnel attr 67 out of range max 16 [ 603.223728][T26574] openvswitch: netlink: Tunnel attr 67 out of range max 16 [ 603.245430][T26574] openvswitch: netlink: Tunnel attr 67 out of range max 16 [ 603.257302][T26574] openvswitch: netlink: Tunnel attr 67 out of range max 16 [ 603.258506][T26575] bond1: option primary_reselect: invalid value (255) [ 603.275554][T26575] bond1 (unregistering): Released all slaves [ 603.283020][T26574] openvswitch: netlink: Tunnel attr 67 out of range max 16 [ 603.355155][T26575] netlink: 'syz.4.5768': attribute type 12 has an invalid length. [ 603.430504][T26575] bond1: option primary_reselect: invalid value (255) [ 603.447458][T26575] bond1 (unregistering): Released all slaves [ 603.488001][T26592] syzkaller0: entered promiscuous mode [ 603.496313][T26592] syzkaller0: entered allmulticast mode [ 603.545978][T26575] netlink: 'syz.4.5768': attribute type 12 has an invalid length. [ 603.608312][T26575] bond1: option primary_reselect: invalid value (255) [ 603.628283][T26575] bond1 (unregistering): Released all slaves [ 603.745397][T26575] netlink: 'syz.4.5768': attribute type 12 has an invalid length. [ 603.793720][T26575] bond1: option primary_reselect: invalid value (255) [ 603.804941][T26575] bond1 (unregistering): Released all slaves [ 603.896097][T26610] syzkaller0: entered promiscuous mode [ 603.901654][T26610] syzkaller0: entered allmulticast mode [ 603.911365][T26575] netlink: 'syz.4.5768': attribute type 12 has an invalid length. [ 603.976392][T26575] bond1: option primary_reselect: invalid value (255) [ 603.996509][T26575] bond1 (unregistering): Released all slaves [ 604.004829][ T5142] Bluetooth: hci0: command tx timeout [ 604.106956][T26622] only policy match revision 0 supported [ 604.106979][T26622] unable to load match [ 604.156350][T26624] lo: Caught tx_queue_len zero misconfig [ 604.744614][T26659] sctp: [Deprecated]: syz.4.5790 (pid 26659) Use of int in maxseg socket option. [ 604.744614][T26659] Use struct sctp_assoc_value instead [ 604.877622][T26668] : entered promiscuous mode [ 605.164829][T26685] netlink: 'syz.5.5798': attribute type 1 has an invalid length. [ 605.869114][T26706] xfrm2: entered promiscuous mode [ 605.875514][T26706] xfrm2: entered allmulticast mode [ 605.944965][T26713] wg1: entered promiscuous mode [ 605.950189][T26713] wg1: entered allmulticast mode [ 606.072733][T26301] Bluetooth: hci0: command tx timeout [ 606.267626][T26727] Cannot find add_set index 0 as target [ 606.487328][T26739] netlink: 'syz.5.5815': attribute type 5 has an invalid length. [ 606.522557][T26742] macvlan2: entered promiscuous mode [ 606.544514][T26742] macvlan2: entered allmulticast mode [ 606.674035][T26749] __nla_validate_parse: 14 callbacks suppressed [ 606.674056][T26749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5819'. [ 606.854782][T26760] Cannot find add_set index 0 as target [ 606.891688][T26766] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5826'. [ 606.901774][T26766] net_ratelimit: 26 callbacks suppressed [ 606.901793][T26766] netlink: Unknown conntrack attr (0) [ 606.940902][T26772] x_tables: duplicate entry at hook 1 [ 606.947852][T26771] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5827'. [ 607.019243][T26774] netlink: 'syz.3.5828': attribute type 13 has an invalid length. [ 607.078785][T26774] erspan0: refused to change device tx_queue_len [ 607.086647][T26774] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 607.136302][T26779] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5830'. [ 607.501412][T26813] 8021q: VLANs not supported on ip_vti0 [ 607.557149][T26817] Bluetooth: MGMT ver 1.23 [ 607.658678][T26823] syzkaller0: entered allmulticast mode [ 607.679121][T26826] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5845'. [ 607.690674][T26817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5843'. [ 607.707167][T26826] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5845'. [ 607.951158][T26847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5850'. [ 608.038511][T26842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5850'. [ 608.064011][T26842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5850'. [ 608.152372][T26301] Bluetooth: hci0: command 0x0405 tx timeout [ 608.256230][T26865] netlink: 'syz.4.5853': attribute type 13 has an invalid length. [ 608.269829][T26865] netlink: 'syz.4.5853': attribute type 17 has an invalid length. [ 608.330347][T26865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 608.373936][T26866] syzkaller0: entered promiscuous mode [ 608.380449][T26866] syzkaller0: entered allmulticast mode [ 608.925447][T26301] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 608.939159][T26301] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 608.950203][T26301] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 608.965161][T26301] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 608.975338][T26301] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 609.148955][T26910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.870571][T26900] chnl_net:caif_netlink_parms(): no params data found [ 609.940576][T26938] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 609.950712][T26938] team0: Port device batadv1 added [ 610.339146][T26900] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.347303][T26900] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.355973][T26900] bridge_slave_0: entered allmulticast mode [ 610.364915][T26900] bridge_slave_0: entered promiscuous mode [ 610.374533][T26900] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.381915][T26900] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.390095][T26900] bridge_slave_1: entered allmulticast mode [ 610.406032][T26900] bridge_slave_1: entered promiscuous mode [ 610.541550][T26968] Cannot find add_set index 0 as target [ 610.556754][T26959] syzkaller0: entered promiscuous mode [ 610.562780][T26959] syzkaller0: entered allmulticast mode [ 611.043399][ T5142] Bluetooth: hci2: command tx timeout [ 612.490092][T26900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.503721][T26900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.607180][T26900] team0: Port device team_slave_0 added [ 612.616929][T26900] team0: Port device team_slave_1 added [ 612.698957][T26900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.706784][T26900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.762300][T26900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.787653][T26995] ip6tnl0: Caught tx_queue_len zero misconfig [ 612.800989][T26997] __nla_validate_parse: 49 callbacks suppressed [ 612.801010][T26997] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5887'. [ 612.806297][T26998] xt_hashlimit: size too large, truncated to 1048576 [ 612.826117][T26900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.837058][T27000] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5892'. [ 612.846373][T26900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.885271][T26900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.897677][T27000] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5892'. [ 613.090665][T26900] hsr_slave_0: entered promiscuous mode [ 613.099623][T26900] hsr_slave_1: entered promiscuous mode [ 613.110452][T26900] debugfs: 'hsr0' already exists in 'hsr' [ 613.116957][ T5142] Bluetooth: hci2: command tx timeout [ 613.122666][T26900] Cannot create hsr debugfs directory [ 613.269118][T27018] Bluetooth: MGMT ver 1.23 [ 613.300935][T27019] x_tables: duplicate underflow at hook 2 [ 613.467306][T27029] netlink: 'syz.0.5900': attribute type 10 has an invalid length. [ 613.497176][T27029] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5900'. [ 613.535736][T27028] x_tables: duplicate underflow at hook 2 [ 613.593000][T26900] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 613.601419][T27033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5898'. [ 613.616338][T26900] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 613.697586][T26900] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 613.751121][T26900] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 614.504790][T27061] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5905'. [ 614.691672][T27066] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5906'. [ 614.707070][T26900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.759268][T27071] netlink: 160 bytes leftover after parsing attributes in process `syz.3.5907'. [ 614.794259][T26900] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.837938][T18848] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.845424][T18848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.861868][T27074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5908'. [ 614.897417][T18852] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.904604][T18852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.912511][T27074] netlink: 'syz.0.5908': attribute type 7 has an invalid length. [ 614.920729][T27074] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5908'. [ 615.194600][ T5142] Bluetooth: hci2: command tx timeout [ 615.216223][T27087] veth0: entered promiscuous mode [ 615.263523][T27086] veth0: left promiscuous mode [ 615.474357][T26900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.155156][ T1762] block nbd2: Possible stuck request ffff888026700000: control (read@0,1024B). Runtime 120 seconds [ 616.167931][ T1762] block nbd2: Possible stuck request ffff888026700200: control (read@1024,1024B). Runtime 120 seconds [ 616.179960][ T1762] block nbd2: Possible stuck request ffff888026700400: control (read@2048,1024B). Runtime 120 seconds [ 616.191409][ T1762] block nbd2: Possible stuck request ffff888026700600: control (read@3072,1024B). Runtime 120 seconds [ 617.272540][ T5142] Bluetooth: hci2: command tx timeout [ 618.331197][T26900] veth0_vlan: entered promiscuous mode [ 618.387214][T26900] veth1_vlan: entered promiscuous mode [ 618.439698][T27120] __nla_validate_parse: 3 callbacks suppressed [ 618.439720][T27120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5921'. [ 618.458861][T27120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5921'. [ 618.491909][T26900] veth0_macvtap: entered promiscuous mode [ 618.545640][T26900] veth1_macvtap: entered promiscuous mode [ 618.587013][T26900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.638736][T26900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.666976][T18848] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.678162][T18848] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.725207][T18848] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.750266][T27144] netlink: 'syz.0.5927': attribute type 3 has an invalid length. [ 618.758210][T18848] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.774673][T27144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5927'. [ 618.803407][T27148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5929'. [ 618.829633][T27144] block nbd0: reconnected socket [ 618.830584][ T5142] block nbd0: Receive control failed (result -107) [ 618.975704][ T7261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.022127][ T7261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.100646][ T7266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.114385][ T7266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.161140][T27160] netlink: 'syz.4.5934': attribute type 1 has an invalid length. [ 619.332995][T27168] netlink: 'syz.4.5937': attribute type 13 has an invalid length. [ 619.351091][ T6677] lec:lec_start_xmit: lec0:No lecd attached [ 619.386141][T27172] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5861'. [ 620.015208][T27213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5952'. [ 620.290817][T27221] netlink: 'syz.0.5955': attribute type 12 has an invalid length. [ 620.318106][T27221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5955'. [ 620.349755][T27221] netlink: 'syz.0.5955': attribute type 12 has an invalid length. [ 620.359201][T27221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5955'. [ 620.432076][T27229] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5956'. [ 620.501734][T27232] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5957'. [ 620.716304][T27239] SET target dimension over the limit! [ 621.014191][T27257] block nbd4: Unsupported socket: should be TCP or UNIX. [ 621.462783][T27275] Cannot find add_set index 0 as target [ 621.688235][T27285] tipc: Enabled bearer , priority 10 [ 621.909014][T27300] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 621.942895][T27300] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 621.965820][T27300] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 622.089173][ T42] IPVS: starting estimator thread 0... [ 622.116896][T27317] : entered promiscuous mode [ 622.200926][T27319] IPVS: using max 25 ests per chain, 60000 per kthread [ 622.212832][T27318] netlink: 'syz.4.5986': attribute type 4 has an invalid length. [ 622.506241][T27345] veth1_macvtap: left promiscuous mode [ 622.531466][T27342] netlink: 'syz.5.5993': attribute type 13 has an invalid length. [ 622.796678][T27361] Cannot find add_set index 0 as target [ 622.985526][T27367] x_tables: duplicate underflow at hook 2 [ 623.115641][T27373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 623.346636][T27381] ip6gre1: entered allmulticast mode [ 623.635267][T27398] Cannot find add_set index 0 as target [ 623.659146][T27391] syzkaller0: entered promiscuous mode [ 623.674870][T27391] syzkaller0: entered allmulticast mode [ 624.046014][T27417] netlink: 'syz.0.6011': attribute type 13 has an invalid length. [ 624.119839][T27423] ipt_ECN: cannot use operation on non-tcp rule [ 625.032260][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5680 ms [ 625.040569][ C0] lec:lec_tx_timeout: lec0 [ 625.045789][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 626.172871][T27447] Cannot find add_set index 0 as target [ 626.489440][T27460] pim6reg1: entered promiscuous mode [ 626.527398][T27460] pim6reg1: entered allmulticast mode [ 626.756914][T27473] __nla_validate_parse: 9 callbacks suppressed [ 626.756939][T27473] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6032'. [ 626.852485][T27476] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6033'. [ 626.912426][T27476] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6033'. [ 627.272544][T27502] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6038'. [ 627.497886][T27504] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 628.123800][T27523] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6046'. [ 628.144598][T27523] netlink: 'syz.5.6046': attribute type 1 has an invalid length. [ 628.164613][T27523] netlink: 'syz.5.6046': attribute type 1 has an invalid length. [ 628.182308][T27523] netlink: 'syz.5.6046': attribute type 2 has an invalid length. [ 628.201482][T27523] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6046'. [ 628.226854][T27524] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6048'. [ 628.261624][T27524] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6048'. [ 628.407821][T27534] netlink: 'syz.4.6051': attribute type 13 has an invalid length. [ 628.428646][T27536] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6052'. [ 628.455274][T27536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6052'. [ 628.497448][T27536] netlink: 'syz.3.6052': attribute type 3 has an invalid length. [ 628.514664][T27536] netlink: 'syz.3.6052': attribute type 2 has an invalid length. [ 628.726938][T27543] gretap0: left allmulticast mode [ 628.736807][T27543] gretap0: left promiscuous mode [ 628.748678][T27543] bridge0: port 2(gretap0) entered disabled state [ 628.764889][T27543] syz_tun: left allmulticast mode [ 628.780456][T27543] syz_tun: left promiscuous mode [ 628.790847][T27543] bridge0: port 3(syz_tun) entered disabled state [ 628.804527][T27543] bridge_slave_0: left allmulticast mode [ 628.810384][T27543] bridge_slave_0: left promiscuous mode [ 628.817018][T27543] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.892687][T27557] batadv_slave_0: Caught tx_queue_len zero misconfig [ 629.118785][T27570] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 629.159490][T27570] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 629.195783][T27570] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 629.321837][T27580] netlink: 'syz.0.6060': attribute type 4 has an invalid length. [ 629.333569][T27580] tipc: Enabling of bearer rejected, failed to enable media [ 629.632087][T27595] netlink: 'syz.4.6066': attribute type 13 has an invalid length. [ 629.902693][T27611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 630.052007][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 630.060383][ C0] lec:lec_tx_timeout: lec0 [ 630.445730][T27597] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 630.459634][T27597] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 630.631568][T27597] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 630.658355][T27597] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 630.858198][T27665] xt_CT: You must specify a L4 protocol and not use inversions on it [ 630.945944][T27670] IPv6: addrconf: prefix option has invalid lifetime [ 630.952767][T27670] IPv6: addrconf: prefix option has invalid lifetime [ 631.142932][T27680] bond_slave_0: Caught tx_queue_len zero misconfig [ 631.258418][T27686] netlink: 'syz.5.6095': attribute type 1 has an invalid length. [ 631.364982][T27694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.414090][T27694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.436022][T27694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.455779][T27694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.490404][T27694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.502971][T27694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.619108][T27711] netlink: 'syz.6.6101': attribute type 13 has an invalid length. [ 631.702641][T27711] gretap0: refused to change device tx_queue_len [ 631.806994][T27713] bond9: entered promiscuous mode [ 631.814421][T27717] netlink: 'syz.3.6103': attribute type 10 has an invalid length. [ 631.856459][T27727] __nla_validate_parse: 14 callbacks suppressed [ 631.856482][T27727] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6105'. [ 631.878572][T27717] team0: Device veth1_macvtap failed to register rx_handler [ 631.889265][T27727] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6105'. [ 631.919985][T27734] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 632.008379][T27713] macvlan2: entered promiscuous mode [ 632.021753][T27713] macvlan2: entered allmulticast mode [ 632.044556][T27713] bond9: (slave macvlan2): Opening slave failed [ 632.237911][T27739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.302731][T27754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6108'. [ 632.554718][T27771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6116'. [ 632.711041][T27779] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6117'. [ 632.740992][T27782] SET target dimension over the limit! [ 633.173667][T27806] netlink: 212324 bytes leftover after parsing attributes in process `syz.6.6124'. [ 633.439776][T27820] netlink: 'syz.3.6127': attribute type 1 has an invalid length. [ 633.481913][T27824] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6132'. [ 633.605801][T27820] 8021q: adding VLAN 0 to HW filter on device bond9 [ 633.667944][T27826] bond9: (slave geneve3): making interface the new active one [ 633.681395][T27826] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 633.695636][T27825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.044994][T27849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6137'. [ 634.121722][T27851] netlink: 'syz.3.6138': attribute type 1 has an invalid length. [ 634.454904][T27856] bond10: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 634.501809][T27856] bond10 (unregistering): Released all slaves [ 634.715054][T27876] netlink: 196 bytes leftover after parsing attributes in process `syz.4.6146'. [ 634.762819][T27876] netlink: 196 bytes leftover after parsing attributes in process `syz.4.6146'. [ 635.160116][T27907] bridge_slave_0: entered allmulticast mode [ 635.237456][T27897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.505739][T27925] net_ratelimit: 61 callbacks suppressed [ 635.505761][T27925] openvswitch: netlink: IP tunnel dst address not specified [ 635.598825][T27928] 8021q: adding VLAN 0 to HW filter on device bond2 [ 636.068381][T27960] netlink: 'syz.0.6171': attribute type 1 has an invalid length. [ 636.134728][T27958] bridge_slave_0: left allmulticast mode [ 636.140931][T27958] bridge_slave_1: left promiscuous mode [ 636.159702][T27958] bridge_slave_1: left allmulticast mode [ 636.168270][T27958] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 636.388398][T27983] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 636.754067][T26301] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 636.764796][T28004] netlink: 'syz.0.6182': attribute type 32 has an invalid length. [ 636.765047][T26301] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 636.784000][T27990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.797881][T26301] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 636.808903][T26301] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 636.830480][T26301] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 636.908320][ T5142] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 636.917707][ T5142] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 636.926323][ T5142] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 636.940781][ T5142] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 636.949477][ T5142] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 637.121026][T28007] __nla_validate_parse: 12 callbacks suppressed [ 637.121048][T28007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6183'. [ 637.141904][T28007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6183'. [ 637.479891][T28019] nbd: must specify at least one socket [ 637.512094][T28022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6189'. [ 637.537722][T28019] nbd: must specify at least one socket [ 637.572401][T28019] nbd: must specify at least one socket [ 637.578480][T28019] nbd: must specify at least one socket [ 637.607934][T28019] nbd: must specify at least one socket [ 637.631407][T28019] nbd: must specify at least one socket [ 637.637980][T28030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6192'. [ 637.638136][T28019] nbd: must specify at least one socket [ 637.672657][T28019] nbd: must specify at least one socket [ 637.679864][T28030] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 637.682370][T28019] nbd: must specify at least one socket [ 637.716782][T28019] nbd: must specify at least one socket [ 637.724299][T28030] block nbd4: Unsupported socket: should be TCP or UNIX. [ 637.777064][T28039] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6192'. [ 637.885111][T28019] nbd: must specify at least one socket [ 637.927818][T28019] nbd: must specify at least one socket [ 637.950392][T28019] nbd: must specify at least one socket [ 637.958232][T28003] chnl_net:caif_netlink_parms(): no params data found [ 637.977786][T28019] nbd: must specify at least one socket [ 637.990549][T28019] nbd: must specify at least one socket [ 638.014418][T28019] nbd: must specify at least one socket [ 638.025392][T28019] nbd: must specify at least one socket [ 638.031532][T28019] nbd: must specify at least one socket [ 638.053531][T28019] nbd: must specify at least one socket [ 638.061272][T28019] nbd: must specify at least one socket [ 638.073598][T28019] nbd: must specify at least one socket [ 638.084871][T28019] nbd: must specify at least one socket [ 638.101239][T28019] nbd: must specify at least one socket [ 638.112242][T28019] nbd: must specify at least one socket [ 638.119207][T28058] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6193'. [ 638.135146][T28019] nbd: must specify at least one socket [ 638.148223][T28019] nbd: must specify at least one socket [ 638.160969][T28019] nbd: must specify at least one socket [ 638.176297][T28019] nbd: must specify at least one socket [ 638.189569][T28019] nbd: must specify at least one socket [ 638.202737][T28019] nbd: must specify at least one socket [ 638.211080][T28003] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.219110][T28019] nbd: must specify at least one socket [ 638.225814][T28003] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.233985][T28019] nbd: must specify at least one socket [ 638.239984][T28003] bridge_slave_0: entered allmulticast mode [ 638.247213][T28019] nbd: must specify at least one socket [ 638.256388][T28003] bridge_slave_0: entered promiscuous mode [ 638.273785][T28003] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.281273][T28003] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.289077][T28003] bridge_slave_1: entered allmulticast mode [ 638.300028][T28003] bridge_slave_1: entered promiscuous mode [ 638.351312][T28003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.375387][T28003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.538098][T28003] team0: Port device team_slave_0 added [ 638.571050][T28003] team0: Port device team_slave_1 added [ 638.650332][T28003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.669962][T28003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.731413][T28003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.767401][T28003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.785432][T28003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.834936][T28003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.035538][T26301] Bluetooth: hci7: command tx timeout [ 639.065777][T28003] hsr_slave_0: entered promiscuous mode [ 639.114262][T28003] hsr_slave_1: entered promiscuous mode [ 639.121825][T28003] debugfs: 'hsr0' already exists in 'hsr' [ 639.128103][T28003] Cannot create hsr debugfs directory [ 639.396235][T28104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6214'. [ 639.422485][T28102] netlink: 'syz.0.6212': attribute type 10 has an invalid length. [ 639.427357][T28104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6214'. [ 639.486986][T28110] netlink: 'syz.6.6213': attribute type 13 has an invalid length. [ 639.528405][T28112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.821522][T28116] netlink: 'syz.3.6216': attribute type 3 has an invalid length. [ 639.849260][T28118] netlink: 'syz.3.6216': attribute type 3 has an invalid length. [ 639.947746][T28121] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6217'. [ 640.017263][T28003] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.168404][T28130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6219'. [ 640.178028][T28130] openvswitch: netlink: Flow actions attr not present in new flow. [ 640.204557][T28003] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.325754][T28003] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.369514][T28137] team_slave_1: entered promiscuous mode [ 640.394323][T28137] gretap0: entered promiscuous mode [ 640.406130][T28003] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.112743][T26301] Bluetooth: hci7: command tx timeout [ 642.358137][T28102] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 642.374648][T28003] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 642.467429][T28003] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 642.530847][T28157] __nla_validate_parse: 1 callbacks suppressed [ 642.530868][T28157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6226'. [ 642.567410][T28003] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 642.614582][T28162] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6226'. [ 642.630027][T28003] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 642.808090][T28157] bond10: option xmit_hash_policy: invalid value (64) [ 642.830009][T28157] bond10 (unregistering): Released all slaves [ 642.853804][T28177] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6230'. [ 643.203670][ T5142] Bluetooth: hci7: command tx timeout [ 643.224526][T20864] udevd[20864]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 643.301310][T28205] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6235'. [ 643.382987][T28003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.440627][T28003] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.476353][T18849] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.483773][T18849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.521246][T18849] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.528552][T18849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.770965][T28226] netlink: 'syz.3.6242': attribute type 1 has an invalid length. [ 643.801520][T28226] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6242'. [ 643.849163][T28226] netlink: 658 bytes leftover after parsing attributes in process `syz.3.6242'. [ 643.880026][T28226] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6242'. [ 644.092815][T28003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.103485][T28239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6245'. [ 644.177652][T28245] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6247'. [ 644.360985][T28250] netlink: 'syz.0.6248': attribute type 1 has an invalid length. [ 644.427296][T28252] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 644.477828][T28256] tipc: Failed to obtain node identity [ 644.507300][T28256] tipc: Enabling of bearer rejected, failed to enable media [ 644.528044][T28256] netlink: 'syz.6.6250': attribute type 10 has an invalid length. [ 644.578110][T28256] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6250'. [ 644.759281][T28264] netlink: 'syz.0.6252': attribute type 29 has an invalid length. [ 644.995793][T28276] netlink: 'syz.3.6254': attribute type 10 has an invalid length. [ 645.024723][T28276] team0: Port device dummy0 added [ 645.045828][T28003] veth0_vlan: entered promiscuous mode [ 645.059678][T28003] veth1_vlan: entered promiscuous mode [ 645.100507][T28003] veth0_macvtap: entered promiscuous mode [ 645.115099][T28003] veth1_macvtap: entered promiscuous mode [ 645.149136][T28003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.185199][T28003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.212482][T18848] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.235827][T18848] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.260095][T18848] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.273032][ T5142] Bluetooth: hci7: command tx timeout [ 645.285745][T18848] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.389751][T28292] º: renamed from veth1_vlan (while UP) [ 645.902349][T28310] netlink: 'syz.4.6265': attribute type 1 has an invalid length. [ 646.238181][ T1762] block nbd2: Possible stuck request ffff888026700000: control (read@0,1024B). Runtime 150 seconds [ 646.249120][ T1762] block nbd2: Possible stuck request ffff888026700200: control (read@1024,1024B). Runtime 150 seconds [ 646.261721][ T1762] block nbd2: Possible stuck request ffff888026700400: control (read@2048,1024B). Runtime 150 seconds [ 646.273290][ T1762] block nbd2: Possible stuck request ffff888026700600: control (read@3072,1024B). Runtime 150 seconds [ 647.807979][T28269] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 647.914240][T18852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.940782][T18852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.097427][ T7261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.114284][ T7261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.549454][T28347] netlink: 'syz.4.6276': attribute type 10 has an invalid length. [ 648.614595][T28344] bond9: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 648.643628][T28344] bond9: entered promiscuous mode [ 648.651235][T26301] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 648.665359][T26301] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 648.674395][T26301] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 648.688700][T28344] bond9: entered allmulticast mode [ 648.690102][T28355] netlink: 'syz.4.6276': attribute type 1 has an invalid length. [ 648.705222][T26301] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 648.719583][T26301] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 648.720005][T28344] 8021q: adding VLAN 0 to HW filter on device bond9 [ 648.749198][T28357] __nla_validate_parse: 4 callbacks suppressed [ 648.749217][T28357] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6278'. [ 648.753710][T28347] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 648.841523][T28355] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 648.859800][T28357] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.876810][T28357] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.511607][T28382] syzkaller0: entered promiscuous mode [ 649.528191][T28382] syzkaller0: entered allmulticast mode [ 649.587324][T28391] netlink: 'syz.4.6287': attribute type 13 has an invalid length. [ 649.700972][T28382] tipc: Enabled bearer , priority 0 [ 649.768346][T28404] Cannot find add_set index 0 as target [ 649.773285][T28380] tipc: Resetting bearer [ 649.826405][T28380] tipc: Disabling bearer [ 649.877221][T18849] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.906713][T18849] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.014768][T28418] netlink: 240 bytes leftover after parsing attributes in process `syz.4.6292'. [ 650.044746][T18849] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.058228][T18849] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.261433][T18849] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.286837][T18849] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.300427][T28434] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6298'. [ 650.347488][T28434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6298'. [ 650.444767][T18849] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.474121][T18849] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.620219][T28350] chnl_net:caif_netlink_parms(): no params data found [ 650.752281][T28455] unsupported nla_type 33542 [ 650.775455][ T7266] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.794610][ T5142] Bluetooth: hci4: command tx timeout [ 650.934914][ T7266] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.951133][T28467] ip6tnl1: entered promiscuous mode [ 650.970905][T28350] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.978518][T28350] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.992253][T28350] bridge_slave_0: entered allmulticast mode [ 651.006210][T28350] bridge_slave_0: entered promiscuous mode [ 651.025873][T28350] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.034770][T28350] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.042906][T28350] bridge_slave_1: entered allmulticast mode [ 651.051712][T28350] bridge_slave_1: entered promiscuous mode [ 651.062511][T28474] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6308'. [ 651.127713][T18845] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.284640][T28480] syz_tun: entered promiscuous mode [ 651.290636][T28480] macvtap1: entered promiscuous mode [ 651.305726][T28480] syz_tun: left promiscuous mode [ 651.419752][T28482] xt_hashlimit: size too large, truncated to 1048576 [ 651.623963][T18849] gretap0 (unregistering): left promiscuous mode [ 651.657171][T18849] bond9 (unregistering): (slave geneve3): Releasing active interface [ 651.688524][T18849] bridge0 (unregistering): left allmulticast mode [ 651.866115][T18849] bond2 (unregistering): (slave bridge4): Releasing backup interface [ 651.874908][T18849] bridge4 (unregistering): left promiscuous mode [ 652.085568][T18849] bond0 (unregistering): Released all slaves [ 652.096088][T18849] bond1 (unregistering): Released all slaves [ 652.109283][T18849] bond2 (unregistering): Released all slaves [ 652.124383][T18849] bond3 (unregistering): Released all slaves [ 652.141421][T18849] bond4 (unregistering): (slave veth15): Releasing active interface [ 652.156592][T18849] bond4 (unregistering): Released all slaves [ 652.169939][T18849] bond5 (unregistering): Released all slaves [ 652.189784][T18849] bond6 (unregistering): Released all slaves [ 652.204001][T18849] bond7 (unregistering): Released all slaves [ 652.218907][T18849] bond8 (unregistering): (slave lo): Releasing backup interface [ 652.227201][T18849] bond8 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 652.245824][T18849] bond8 (unregistering): Released all slaves [ 652.264093][T18849] bond9 (unregistering): Released all slaves [ 652.278145][T28490] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 652.360893][T28466] syzkaller0: entered promiscuous mode [ 652.404936][T28466] syzkaller0: entered allmulticast mode [ 652.430178][T28494] netlink: 'syz.0.6313': attribute type 21 has an invalid length. [ 652.440199][T28350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.456975][T28494] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 652.464453][T28494] IPv6: NLM_F_CREATE should be set when creating new route [ 652.471743][T28494] IPv6: NLM_F_CREATE should be set when creating new route [ 652.472920][T28350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.479033][T28494] IPv6: NLM_F_CREATE should be set when creating new route [ 652.509242][T18848] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.873723][ T5142] Bluetooth: hci4: command tx timeout [ 652.957992][T18848] wlan1: Trigger new scan to find an IBSS to join [ 654.446300][T18849] vþ: left promiscuous mode [ 654.551063][T28350] team0: Port device team_slave_0 added [ 654.602177][T18849] : left promiscuous mode [ 654.655295][T28350] team0: Port device team_slave_1 added [ 654.710019][T18849] tipc: Disabling bearer [ 654.735762][T18849] tipc: Left network mode [ 654.817227][T28350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.841745][T28350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.896946][T28350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.953282][ T5142] Bluetooth: hci4: command tx timeout [ 654.967054][T28350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.990316][T28350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.059489][T28350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.100447][T28533] netlink: 'syz.0.6324': attribute type 1 has an invalid length. [ 655.176660][T28528] syzkaller0: entered promiscuous mode [ 655.182818][T28528] syzkaller0: entered allmulticast mode [ 655.291436][T28350] hsr_slave_0: entered promiscuous mode [ 655.301774][T28350] hsr_slave_1: entered promiscuous mode [ 655.310885][T28350] debugfs: 'hsr0' already exists in 'hsr' [ 655.319366][T28350] Cannot create hsr debugfs directory [ 655.993908][T18848] wlan1: Trigger new scan to find an IBSS to join [ 656.007248][T28569] netlink: 'syz.6.6333': attribute type 13 has an invalid length. [ 656.017841][T28568] netlink: 4972 bytes leftover after parsing attributes in process `syz.4.6334'. [ 656.049809][T28568] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6334'. [ 656.210557][T18849] team_slave_1: left promiscuous mode [ 656.319326][T18849] hsr_slave_0: left promiscuous mode [ 656.397566][T18849] veth0_macvtap: left promiscuous mode [ 656.412487][T18849] veth1_vlan: left promiscuous mode [ 656.423474][T18849] veth0_vlan: left promiscuous mode [ 656.448528][T28591] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6339'. [ 656.618095][T28604] netlink: 1 bytes leftover after parsing attributes in process `syz.5.6342'. [ 656.824285][T28615] netlink: 'syz.0.6345': attribute type 1 has an invalid length. [ 657.033238][ T5142] Bluetooth: hci4: command tx timeout [ 657.334119][T18849] team0 (unregistering): Port device dummy0 removed [ 657.381040][T18849] lo (unregistering): left allmulticast mode [ 657.397441][T28586] ip6_vti0: entered promiscuous mode [ 657.409085][T28586] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6339'. [ 657.428768][T28603] netlink: 'syz.6.6339': attribute type 1 has an invalid length. [ 657.543828][T28628] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6347'. [ 657.634386][T28350] netdevsim netdevsim3 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.673549][ T29] audit: type=1804 audit(1771652773.956:8): pid=28634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.6350" name="/newroot/90/cgroup.controllers" dev="tmpfs" ino=471 res=1 errno=0 [ 657.697892][T28634] netlink: 164 bytes leftover after parsing attributes in process `syz.6.6350'. [ 657.745999][ T29] audit: type=1800 audit(1771652773.976:9): pid=28634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6350" name="cgroup.controllers" dev="tmpfs" ino=471 res=0 errno=0 [ 657.773686][T28637] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 657.843176][T28350] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.944853][T28642] netlink: 192 bytes leftover after parsing attributes in process `syz.5.6352'. [ 657.989995][T28646] netlink: 192 bytes leftover after parsing attributes in process `syz.5.6352'. [ 658.106726][T28350] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.286952][T28350] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.377927][T28666] netlink: 'syz.5.6357': attribute type 6 has an invalid length. [ 658.404197][T28666] netlink: 176 bytes leftover after parsing attributes in process `syz.5.6357'. [ 658.470926][T28666] netlink: 'syz.5.6357': attribute type 6 has an invalid length. [ 658.770550][T28678] 8021q: VLANs not supported on xfrm0 [ 658.805992][T28683] syzkaller0: entered promiscuous mode [ 658.824600][T28683] syzkaller0: entered allmulticast mode [ 658.953713][ T7261] wlan1: Trigger new scan to find an IBSS to join [ 659.041171][T28690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 659.087069][T28350] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 659.117298][T28350] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 659.139295][T28350] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 659.155284][T28350] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 659.347454][T28716] sctp: [Deprecated]: syz.4.6372 (pid 28716) Use of struct sctp_assoc_value in delayed_ack socket option. [ 659.347454][T28716] Use struct sctp_sack_info instead [ 659.477989][T28350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.540796][T28350] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.587770][ T7261] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.595029][ T7261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.660494][T28730] gretap1: entered promiscuous mode [ 659.684957][T28730] gretap1: entered allmulticast mode [ 659.708452][T18849] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.715655][T18849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.995087][T18849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.019600][T28753] x_tables: duplicate underflow at hook 2 [ 660.203122][T28760] netlink: 'syz.4.6383': attribute type 13 has an invalid length. [ 660.339707][T28768] tipc: Enabled bearer , priority 11 [ 660.610611][T28778] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 660.695340][T28350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.878850][T28788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.018898][T28791] geneve2: entered promiscuous mode [ 661.138429][T28786] netlink: 'syz.4.6390': attribute type 3 has an invalid length. [ 661.381215][T28350] veth0_vlan: entered promiscuous mode [ 661.459674][T28350] veth1_vlan: entered promiscuous mode [ 661.516686][T28819] netlink: 'syz.4.6396': attribute type 3 has an invalid length. [ 661.688352][T28831] netlink: 'syz.0.6398': attribute type 13 has an invalid length. [ 661.860247][T28838] siw: device registration error -23 [ 662.341690][T28350] veth0_macvtap: entered promiscuous mode [ 662.407864][T28350] veth1_macvtap: entered promiscuous mode [ 662.485012][T28350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.517302][T28350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.616642][T28860] __nla_validate_parse: 8 callbacks suppressed [ 662.616661][T28860] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6403'. [ 662.651524][T18849] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.671985][T18849] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.706888][T28866] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6405'. [ 662.753579][T28866] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6405'. [ 662.789765][T18845] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.843644][T18845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.917650][T28885] netlink: 'syz.6.6408': attribute type 1 has an invalid length. [ 662.961001][T28885] netlink: 'syz.6.6408': attribute type 2 has an invalid length. [ 663.013066][T28885] netlink: 'syz.6.6408': attribute type 1 has an invalid length. [ 663.017355][T28864] syzkaller0: entered promiscuous mode [ 663.053704][T28864] syzkaller0: entered allmulticast mode [ 665.343078][T28900] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 665.536822][T18848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.554055][T18848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.681897][T28935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6415'. [ 665.705575][T18853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.719691][T28935] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6415'. [ 665.730250][T18853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.792175][T28941] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6416'. [ 666.006426][T28951] xt_ecn: cannot match TCP bits for non-tcp packets [ 666.057368][T28958] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6421'. [ 666.168804][T28964] netlink: 212360 bytes leftover after parsing attributes in process `syz.6.6421'. [ 666.198905][T28971] netlink: 'syz.3.6424': attribute type 33 has an invalid length. [ 666.220758][T28958] netlink: 84 bytes leftover after parsing attributes in process `syz.6.6421'. [ 666.371120][T26301] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 666.384942][T26301] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 666.410960][T26301] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 666.421554][T26301] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 666.430335][T28979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6426'. [ 666.442419][T26301] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 666.498329][T28980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 666.529268][T28980] netlink: 'syz.5.6425': attribute type 2 has an invalid length. [ 666.588842][T28980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 666.619935][T28980] netlink: 'syz.5.6425': attribute type 1 has an invalid length. [ 666.645560][T28980] netlink: 'syz.5.6425': attribute type 11 has an invalid length. [ 666.654961][T28987] netlink: 'syz.6.6428': attribute type 4 has an invalid length. [ 666.686842][T28987] netlink: 'syz.6.6428': attribute type 4 has an invalid length. [ 666.777385][T17745] bridge0: port 3(syz_tun) entered disabled state [ 666.794255][T28995] netlink: 'syz.6.6431': attribute type 21 has an invalid length. [ 666.805403][T28995] netlink: 'syz.6.6431': attribute type 1 has an invalid length. [ 666.848307][T17745] syz_tun (unregistering): left allmulticast mode [ 666.862609][T17745] syz_tun (unregistering): left promiscuous mode [ 666.879277][T17745] bridge0: port 3(syz_tun) entered disabled state [ 666.889981][T29001] Cannot find add_set index 0 as target [ 667.166889][T29012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 667.186778][T29014] openvswitch: netlink: IP tunnel dst address not specified [ 667.540032][T28975] chnl_net:caif_netlink_parms(): no params data found [ 667.637317][T29028] netlink: 'syz.5.6439': attribute type 178 has an invalid length. [ 667.733658][T28975] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.750296][T28975] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.762620][T28975] bridge_slave_0: entered allmulticast mode [ 667.789465][T28975] bridge_slave_0: entered promiscuous mode [ 667.819919][T28975] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.837518][T28975] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.855010][T28975] bridge_slave_1: entered allmulticast mode [ 667.887014][T28975] bridge_slave_1: entered promiscuous mode [ 667.964689][T28975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.979122][T28975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.010103][T29034] netlink: 'syz.5.6440': attribute type 23 has an invalid length. [ 668.085631][T28975] team0: Port device team_slave_0 added [ 668.093973][T28975] team0: Port device team_slave_1 added [ 668.141706][T28975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.158027][T28975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.193704][T28975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.235957][T28975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.240768][T29040] Cannot find add_set index 0 as target [ 668.245809][T28975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.285597][T28975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.365606][T28975] hsr_slave_0: entered promiscuous mode [ 668.379198][T28975] hsr_slave_1: entered promiscuous mode [ 668.385776][T29036] block nbd4: server does not support multiple connections per device. [ 668.397615][T29036] block nbd4: shutting down sockets [ 668.408741][T28975] debugfs: 'hsr0' already exists in 'hsr' [ 668.415070][T28975] Cannot create hsr debugfs directory [ 668.552650][ T5142] Bluetooth: hci1: command tx timeout [ 668.565359][T29052] __nla_validate_parse: 6 callbacks suppressed [ 668.565374][T29052] netlink: 164788 bytes leftover after parsing attributes in process `syz.3.6445'. [ 668.681297][T29059] Cannot find set identified by id 0 to match [ 668.780393][T28975] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.816709][T28975] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.875089][T29063] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 668.892937][T29074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6450'. [ 668.962641][T28975] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.004400][T28975] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.111393][T28975] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.131848][T28975] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.166021][T29092] Cannot find add_set index 0 as target [ 669.201658][T28975] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.212417][T28975] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.236779][T29095] netlink: 244 bytes leftover after parsing attributes in process `syz.6.6455'. [ 669.245786][T29096] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6454'. [ 669.393990][T28975] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 669.406951][T28975] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 669.423333][T28975] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 669.448677][T28975] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 669.533237][T29110] syzkaller1: entered promiscuous mode [ 669.538917][T29110] syzkaller1: entered allmulticast mode [ 669.591345][T28975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.615691][T28975] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.632827][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.640138][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.659807][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.667173][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.989598][T29125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 670.008896][T29124] Cannot find add_set index 0 as target [ 670.186200][T28975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.216893][T29133] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6466'. [ 670.385761][T28975] veth0_vlan: entered promiscuous mode [ 670.434050][T28975] veth1_vlan: entered promiscuous mode [ 670.525996][T28975] veth0_macvtap: entered promiscuous mode [ 670.556668][T28975] veth1_macvtap: entered promiscuous mode [ 670.600303][T28975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.632559][ T5142] Bluetooth: hci1: command tx timeout [ 670.656353][T28975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.711195][T18858] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.746328][ T3477] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.853655][ T3477] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.858788][T29163] Cannot find add_set index 0 as target [ 670.885443][ T3477] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.069288][T29170] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6478'. [ 671.083377][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.113018][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.198627][T18852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.226815][T18852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.349218][T29184] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6483'. [ 671.388561][T29184] validate_nla: 2 callbacks suppressed [ 671.388582][T29184] netlink: 'syz.5.6483': attribute type 3 has an invalid length. [ 671.417938][T29188] bond0: entered allmulticast mode [ 671.432669][T29188] bond_slave_0: entered allmulticast mode [ 671.452964][T29188] bond_slave_1: entered allmulticast mode [ 671.562450][T29191] nbd4: detected capacity change from 0 to 127 [ 671.645811][T29191] dvmrp0: entered allmulticast mode [ 671.670212][T29191] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 671.701745][T29202] Cannot find add_set index 0 as target [ 671.765375][ T5142] block nbd4: Receive control failed (result -104) [ 671.807454][T29204] syzkaller0: entered promiscuous mode [ 671.815142][T29204] syzkaller0: entered allmulticast mode [ 671.993972][T29221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6494'. [ 672.085245][T29227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6496'. [ 672.295664][T29239] SET target dimension over the limit! [ 672.529817][T29250] netlink: 'syz.5.6503': attribute type 3 has an invalid length. [ 672.713330][ T5142] Bluetooth: hci1: command tx timeout [ 672.746090][T29265] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6508'. [ 672.914392][T29273] bridge0: port 3(gretap0) entered blocking state [ 672.931511][T29273] bridge0: port 3(gretap0) entered disabled state [ 672.943941][T29273] gretap0: entered allmulticast mode [ 672.944169][T29282] SET target dimension over the limit! [ 672.965139][T29273] gretap0: entered promiscuous mode [ 672.973277][T29273] bridge0: port 3(gretap0) entered blocking state [ 672.979968][T29273] bridge0: port 3(gretap0) entered forwarding state [ 673.265755][T29300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 673.290861][T29301] Cannot find set identified by id 0 to match [ 673.517200][T29319] hsr_slave_0: left promiscuous mode [ 673.527438][T29322] Cannot find add_set index 0 as target [ 673.561524][T29319] hsr_slave_1: left promiscuous mode [ 673.625728][T29326] syzkaller0: entered promiscuous mode [ 673.631272][T29326] syzkaller0: entered allmulticast mode [ 673.652913][T29330] team0: Device gtp0 is up. Set it down before adding it as a team port [ 673.808520][T29341] __nla_validate_parse: 2 callbacks suppressed [ 673.808542][T29341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6533'. [ 673.868198][T29343] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6532'. [ 673.878757][T29343] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6532'. [ 673.998992][T29343] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6532'. [ 674.029037][T29343] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6532'. [ 674.113285][T29362] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6538'. [ 674.165243][T29364] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6539'. [ 674.527546][T29390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6547'. [ 674.536770][T29390] nbd: must specify a size in bytes for the device [ 674.642562][T29388] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6545'. [ 674.671203][T29388] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6545'. [ 674.793118][ T5142] Bluetooth: hci1: command tx timeout [ 674.871343][T29399] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 674.956309][T29402] lo: Caught tx_queue_len zero misconfig [ 675.153920][T29408] netlink: 'syz.4.6554': attribute type 39 has an invalid length. [ 675.226756][T29410] xt_TPROXY: Can be used only with -p tcp or -p udp [ 675.662916][T29432] netlink: 'syz.4.6561': attribute type 1 has an invalid length. [ 675.856980][T29441] netlink: 'syz.3.6564': attribute type 5 has an invalid length. [ 675.885079][T29447] netlink: 'syz.5.6562': attribute type 1 has an invalid length. [ 675.998459][T29440] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.005895][T29440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.216209][T29472] openvswitch: netlink: Flow key attr not present in new flow. [ 676.335717][ T1762] block nbd2: Possible stuck request ffff888026700000: control (read@0,1024B). Runtime 180 seconds [ 676.337955][T29478] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.347837][ T1762] block nbd2: Possible stuck request ffff888026700200: control (read@1024,1024B). Runtime 180 seconds [ 676.365551][ T1762] block nbd2: Possible stuck request ffff888026700400: control (read@2048,1024B). Runtime 180 seconds [ 676.377379][ T1762] block nbd2: Possible stuck request ffff888026700600: control (read@3072,1024B). Runtime 180 seconds [ 676.568412][T29494] netlink: 'syz.6.6578': attribute type 3 has an invalid length. [ 676.580223][T29494] netlink: 'syz.6.6578': attribute type 3 has an invalid length. [ 676.798087][T29505] syzkaller0: entered promiscuous mode [ 676.822423][T29505] syzkaller0: entered allmulticast mode [ 676.915435][T29519] netlink: 'syz.6.6586': attribute type 30 has an invalid length. [ 677.115012][T29529] tipc: Started in network mode [ 677.120067][T29529] tipc: Node identity ffffffff, cluster identity 4711 [ 677.133327][T29529] tipc: Node number set to 4294967295 [ 677.141340][T29529] tipc: Cannot configure node identity twice [ 677.151408][T29533] IPv6: NLM_F_REPLACE set, but no existing node found! [ 677.228190][T29538] netlink: 'syz.0.6591': attribute type 10 has an invalid length. [ 677.357255][T29544] bond2: option fail_over_mac: invalid value (16) [ 677.378052][T29544] bond2 (unregistering): Released all slaves [ 677.379718][T29554] netlink: 'syz.4.6592': attribute type 21 has an invalid length. [ 677.417565][T29553] team0: Caught tx_queue_len zero misconfig [ 678.138039][T29590] netlink: 'syz.0.6605': attribute type 1 has an invalid length. [ 678.293792][T29592] netlink: 'syz.6.6607': attribute type 4 has an invalid length. [ 678.786721][ T5192] udevd[5192]: worker [20573] /devices/virtual/block/nbd2 timeout; kill it [ 678.824226][ T5192] udevd[5192]: seq 24360 '/devices/virtual/block/nbd2' killed [ 679.169942][T29634] __nla_validate_parse: 21 callbacks suppressed [ 679.169965][T29634] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6616'. [ 679.200340][T29634] 8021q: VLANs not supported on gre0 [ 679.349294][T29643] syzkaller1: entered promiscuous mode [ 679.360946][T29643] syzkaller1: entered allmulticast mode [ 679.488820][T29653] syzkaller1: entered promiscuous mode [ 679.495819][T29653] syzkaller1: entered allmulticast mode [ 679.508172][T29653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6625'. [ 679.674352][T29665] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 679.686338][T29665] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 679.696577][T29664] netlink: 112 bytes leftover after parsing attributes in process `syz.6.6629'. [ 679.829299][T29669] netlink: 'syz.4.6631': attribute type 11 has an invalid length. [ 679.915075][T29674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6633'. [ 679.926456][T29674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6633'. [ 679.971325][T29677] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6635'. [ 679.985554][T29674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6633'. [ 680.151786][T29688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.185379][T29691] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6640'. [ 680.249394][T29693] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6641'. [ 680.620710][T29714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6649'. [ 680.633362][T29714] Cannot find del_set index 0 as target [ 680.745971][T29714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.762618][T29714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.778747][T29714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.802058][T29714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.072673][T29735] netlink: 'syz.0.6655': attribute type 10 has an invalid length. [ 681.537594][T29765] netlink: 'syz.4.6664': attribute type 4 has an invalid length. [ 681.707060][T29778] netlink: 'syz.6.6666': attribute type 1 has an invalid length. [ 681.732587][T29778] netlink: 'syz.6.6666': attribute type 1 has an invalid length. [ 681.766275][T29779] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 682.557962][ T6677] lec:lec_start_xmit: lec0:No lecd attached [ 687.992159][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms [ 688.000300][ C0] lec:lec_tx_timeout: lec0 [ 688.005834][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 691.048597][ T13] team0: left allmulticast mode [ 691.054041][ T13] team_slave_0: left allmulticast mode [ 691.059507][ T13] team_slave_1: left allmulticast mode [ 691.065456][ T13] batadv0: left allmulticast mode [ 691.070504][ T13] batadv1: left allmulticast mode [ 691.076105][ T13] team0: left promiscuous mode [ 691.080885][ T13] team_slave_0: left promiscuous mode [ 691.088800][ T13] team_slave_1: left promiscuous mode [ 691.094539][ T13] batadv0: left promiscuous mode [ 691.099679][ T13] batadv1: left promiscuous mode [ 691.108267][ T13] bridge0: port 2(team0) entered disabled state [ 691.116592][ T13] bridge_slave_0: left allmulticast mode [ 691.122441][ T13] bridge_slave_0: left promiscuous mode [ 691.128166][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.264724][ T13] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 691.273456][ T13] bond6 (unregistering): (slave macvlan2): making interface the new active one [ 691.346707][ T13] erspan0 (unregistering): left promiscuous mode [ 691.370418][ T13] gretap0 (unregistering): left promiscuous mode [ 691.447820][ T13] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 691.456012][ T13] bridge1 (unregistering): left promiscuous mode [ 691.556964][ T13] bond0 (unregistering): (slave bridge3): Releasing backup interface [ 691.679865][ T13] team0: Port device bridge6 removed [ 691.768780][ T13] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.779655][ T13] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.790212][ T13] ` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 691.799713][ T13] ` (unregistering): Released all slaves [ 691.811682][ T13] bond1 (unregistering): Released all slaves [ 691.829321][ T13] bond2 (unregistering): Released all slaves [ 691.843876][ T13] bond3 (unregistering): Released all slaves [ 691.866347][ T13] bond6 (unregistering): (slave macvlan2): Releasing active interface [ 691.879201][ T13] bond0 (unregistering): Released all slaves [ 691.896837][ T13] bond4 (unregistering): Released all slaves [ 691.911137][ T13] bond5 (unregistering): Released all slaves [ 691.931570][ T13] bond6 (unregistering): Released all slaves [ 692.052702][ T13] vþ: left promiscuous mode [ 692.132122][ T13] tipc: Disabling bearer [ 692.137754][ T13] tipc: Left network mode [ 692.320030][T18858] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 692.492132][ T13] hsr_slave_0: left promiscuous mode [ 692.498309][ T13] hsr_slave_1: left promiscuous mode [ 692.510423][ T13] veth1_macvtap: left promiscuous mode [ 692.520001][ T13] veth1_vlan: left allmulticast mode [ 692.526478][ T13] veth1_vlan: left promiscuous mode [ 692.531754][ T13] veth0_vlan: left promiscuous mode [ 692.583770][ T13] team0 (unregistering): Port device batadv1 removed [ 692.633374][ T13] team0 (unregistering): Port device batadv0 removed [ 692.771329][ T13] team0 (unregistering): Port device team_slave_1 removed [ 692.802036][ T13] team0 (unregistering): Port device team_slave_0 removed [ 693.038205][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 693.046355][ C0] lec:lec_tx_timeout: lec0 [ 693.171290][ T13] IPVS: stop unused estimator thread 0... [ 701.913728][ T1762] block nbd4: Possible stuck request ffff888026798000: control (read@0,1024B). Runtime 30 seconds [ 701.924749][ T1762] block nbd4: Possible stuck request ffff888026798200: control (read@1024,1024B). Runtime 30 seconds [ 701.935853][ T1762] block nbd4: Possible stuck request ffff888026798400: control (read@2048,1024B). Runtime 30 seconds [ 701.947596][ T1762] block nbd4: Possible stuck request ffff888026798600: control (read@3072,1024B). Runtime 30 seconds [ 706.395221][ T1762] block nbd2: Possible stuck request ffff888026700000: control (read@0,1024B). Runtime 210 seconds [ 706.406488][ T1762] block nbd2: Possible stuck request ffff888026700200: control (read@1024,1024B). Runtime 210 seconds [ 706.417838][ T1762] block nbd2: Possible stuck request ffff888026700400: control (read@2048,1024B). Runtime 210 seconds [ 706.429125][ T1762] block nbd2: Possible stuck request ffff888026700600: control (read@3072,1024B). Runtime 210 seconds [ 706.635460][T29789] netlink: 'syz.5.6669': attribute type 3 has an invalid length. [ 706.673849][T29791] __nla_validate_parse: 7 callbacks suppressed [ 706.673874][T29791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6670'. [ 706.898810][T29800] syzkaller0: entered promiscuous mode [ 706.914181][T29800] syzkaller0: entered allmulticast mode [ 707.576638][T29832] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 709.313410][T29855] netlink: 277 bytes leftover after parsing attributes in process `syz.3.6685'. [ 709.384409][T18853] nci: nci_ntf_packet: unsupported ntf opcode 0xf10 [ 709.443024][T29865] syzkaller1: entered promiscuous mode [ 709.451722][T29865] syzkaller1: entered allmulticast mode [ 710.050331][T29849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 712.226806][T29856] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 724.313310][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 731.998640][ T1762] block nbd4: Possible stuck request ffff888026798000: control (read@0,1024B). Runtime 60 seconds [ 732.009700][ T1762] block nbd4: Possible stuck request ffff888026798200: control (read@1024,1024B). Runtime 60 seconds [ 732.021081][ T1762] block nbd4: Possible stuck request ffff888026798400: control (read@2048,1024B). Runtime 60 seconds [ 732.032615][ T1762] block nbd4: Possible stuck request ffff888026798600: control (read@3072,1024B). Runtime 60 seconds [ 733.280400][ T5192] udevd[5192]: worker [20864] /devices/virtual/block/nbd4 is taking a long time [ 734.429819][T29875] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 734.452580][T29875] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 735.809481][T29940] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6722'. [ 736.131108][T29956] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6730'. [ 736.146442][T29956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.160793][T29956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.188609][T29959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 736.200123][T29959] batadv_slave_0: entered promiscuous mode [ 736.495095][ T1762] block nbd2: Possible stuck request ffff888026700000: control (read@0,1024B). Runtime 240 seconds [ 736.506047][ T1762] block nbd2: Possible stuck request ffff888026700200: control (read@1024,1024B). Runtime 240 seconds [ 736.517839][ T1762] block nbd2: Possible stuck request ffff888026700400: control (read@2048,1024B). Runtime 240 seconds [ 736.529510][ T1762] block nbd2: Possible stuck request ffff888026700600: control (read@3072,1024B). Runtime 240 seconds [ 736.621102][T29937] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 736.628424][T29937] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 736.750286][T29988] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6747'. [ 736.819894][T29937] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 736.842978][T29937] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 737.167954][T30010] xt_CT: You must specify a L4 protocol and not use inversions on it [ 737.727437][T29937] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 737.778485][T29937] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 738.103743][T30044] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6767'. [ 738.279940][T30052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 738.312526][T30052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 738.403955][T30059] netlink: 88 bytes leftover after parsing attributes in process `syz.5.6774'. [ 739.023602][T30085] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6784'. [ 739.355155][T30106] xt_hashlimit: size too large, truncated to 1048576 [ 739.434624][T30108] Bluetooth: MGMT ver 1.23 [ 739.701807][T30121] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6796'. [ 739.803100][T30130] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6796'. [ 739.911482][T30139] netlink: 'syz.6.6801': attribute type 2 has an invalid length. [ 740.078315][T30145] syz_tun: entered promiscuous mode [ 740.120527][T30145] macvtap1: entered promiscuous mode [ 740.151219][T30145] syz_tun: left promiscuous mode [ 740.515905][T30168] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6808'. [ 740.813851][T30191] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 740.919619][T30193] netlink: 'syz.6.6812': attribute type 13 has an invalid length. [ 741.002770][T30193] lec:lec_start_xmit: lec0:No lecd attached [ 741.188202][T30211] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 741.356839][T30214] syzkaller0: entered allmulticast mode [ 741.496893][T30224] Cannot find add_set index 0 as target [ 741.791715][T30237] syzkaller1: entered promiscuous mode [ 741.797865][T30237] syzkaller1: entered allmulticast mode [ 741.816441][T30232] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 741.861712][T30245] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6833'. [ 741.909288][T30245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6833'. [ 742.034661][T30250] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6835'. [ 742.097178][T30253] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6835'. [ 742.109724][T30253] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6835'. [ 742.133507][T30253] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6835'. [ 742.145133][T30254] SET target dimension over the limit! [ 742.166119][T30256] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 742.321091][T30265] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6840'. [ 742.342676][T30265] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6840'. [ 742.360847][T30265] tls_set_device_offload_rx: netdev not found [ 742.425292][T30270] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6842'. [ 742.572666][T30278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 742.630363][T30277] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6844'. [ 742.708987][T30290] Cannot find add_set index 0 as target [ 742.963436][T30305] mac80211_hwsim hwsim56 ÿ: renamed from wlan1 [ 743.298049][T30324] netlink: 'syz.6.6857': attribute type 1 has an invalid length. [ 743.312332][T30320] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.320384][T30320] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.328677][T30324] netlink: 'syz.6.6857': attribute type 1 has an invalid length. [ 743.535852][T30339] Cannot find add_set index 0 as target [ 743.920095][T30372] netlink: 'syz.4.6869': attribute type 1 has an invalid length. [ 743.928605][T30372] netlink: 'syz.4.6869': attribute type 1 has an invalid length. [ 744.338890][T30386] syzkaller0: entered promiscuous mode [ 744.344732][T30386] syzkaller0: entered allmulticast mode [ 744.490713][T30410] openvswitch: netlink: EtherType 53b is less than min 600 [ 744.630907][T30414] openvswitch: netlink: Flow actions attr not present in new flow. [ 746.021966][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 746.030167][ C1] lec:lec_tx_timeout: lec0 [ 746.035370][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 746.295568][T30410] IPVS: Unknown mcast interface: vcan0 [ 746.391359][T30422] netlink: 'syz.3.6887': attribute type 1 has an invalid length. [ 746.430126][T30422] netlink: 'syz.3.6887': attribute type 3 has an invalid length. [ 746.469355][T30424] syzkaller1: entered promiscuous mode [ 746.476229][T30424] syzkaller1: entered allmulticast mode [ 746.607563][T30432] netlink: 'syz.6.6890': attribute type 4 has an invalid length. [ 746.664436][ T7719] IPVS: starting estimator thread 0... [ 746.773717][T30436] IPVS: using max 24 ests per chain, 57600 per kthread [ 746.836205][T30453] 0·: renamed from hsr_slave_1 (while UP) [ 746.862944][T30453] 0·: entered allmulticast mode [ 746.884544][T30453] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 747.366898][ T1300] aoe: packet could not be sent on lec0. consider increasing tx_queue_len [ 747.625618][T30492] __nla_validate_parse: 17 callbacks suppressed [ 747.625640][T30492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6908'. [ 748.110833][T30530] netlink: 'syz.0.6922': attribute type 9 has an invalid length. [ 748.119914][T30530] netlink: 'syz.0.6922': attribute type 6 has an invalid length. [ 748.130893][T30530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6922'. [ 748.195282][T30530] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.203455][T30530] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.356309][T30552] sock: sock_set_timeout: `syz.3.6927' (pid 30552) tries to set negative timeout [ 750.913289][T30516] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 751.042176][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 751.050331][ C1] lec:lec_tx_timeout: lec0 [ 751.087877][T30568] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20001 [ 751.112339][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 751.140151][T30570] syzkaller0: entered promiscuous mode [ 751.171760][T30570] syzkaller0: entered allmulticast mode [ 751.211548][T30570] 0: reclassify loop, rule prio 0, protocol 800 [ 751.233452][T30572] netlink: 'syz.4.6933': attribute type 4 has an invalid length. [ 751.342326][T30581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6937'. [ 752.014777][T30621] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6950'. [ 752.482778][T30648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6959'. [ 752.794984][T30668] netlink: 'syz.6.6964': attribute type 1 has an invalid length. [ 752.822186][T30668] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6964'. [ 752.856858][T30668] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6964'. [ 752.868203][T30670] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 752.875668][T30670] IPv6: NLM_F_CREATE should be set when creating new route [ 752.883093][T30670] IPv6: NLM_F_CREATE should be set when creating new route [ 752.890351][T30670] IPv6: NLM_F_CREATE should be set when creating new route [ 752.939959][T30668] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 752.943833][T30681] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 752.984870][T30668] bridge5: entered allmulticast mode [ 752.995046][T30670] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6965'. [ 753.056811][T30685] 8021q: VLANs not supported on ip6_vti0 [ 753.196757][T30692] netlink: 'syz.0.6971': attribute type 75 has an invalid length. [ 753.221792][T30695] mac80211_hwsim hwsim55 wlan0: Caught tx_queue_len zero misconfig [ 753.260412][T30688] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 753.325205][T30698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 753.364032][T30697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 753.665238][T30724] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6982'. [ 753.734098][T30729] xfrm0: mtu less than device minimum [ 753.756433][T30733] xfrm0: mtu less than device minimum [ 753.793810][T30735] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6985'. [ 754.535202][T30767] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6995'. [ 754.803579][T30776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6999'. [ 754.994101][T30791] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7004'. [ 754.995259][T30797] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7004'. [ 755.033347][ T30] INFO: task syz.1.5628:26088 blocked for more than 143 seconds. [ 755.041146][ T30] Not tainted syzkaller #0 [ 755.072955][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 755.084333][ T30] task:syz.1.5628 state:D stack:26120 pid:26088 tgid:26080 ppid:16287 task_flags:0x400040 flags:0x00080002 [ 755.101879][ T30] Call Trace: [ 755.105588][ T30] [ 755.109743][ T30] __schedule+0x1585/0x5340 [ 755.116900][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 755.123709][ T30] ? irqentry_exit+0x59e/0x620 [ 755.131119][ T30] ? __pfx___schedule+0x10/0x10 [ 755.137435][ T30] ? schedule+0x90/0x360 [ 755.144153][ T30] schedule+0x164/0x360 [ 755.150659][ T30] schedule_preempt_disabled+0x13/0x30 [ 755.160505][ T30] __mutex_lock+0x7fe/0x1300 [ 755.168929][ T30] ? __mutex_lock+0x5ac/0x1300 [ 755.182088][ T30] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 755.188414][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 755.197662][ T30] ? stack_trace_save+0xa9/0x100 [ 755.203003][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 755.208413][ T30] nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 755.215204][ T30] ? kasan_save_track+0x4f/0x80 [ 755.220166][ T30] ? kasan_save_track+0x3e/0x80 [ 755.225147][ T30] ? __kasan_kmalloc+0x93/0xb0 [ 755.229953][ T30] ? __alloc_skb+0x2c1/0x7d0 [ 755.235078][ T30] ? netlink_dump+0x190/0xe80 [ 755.239887][ T30] ? __netlink_dump_start+0x5cb/0x7e0 [ 755.245399][ T30] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 755.251341][ T30] ? genl_rcv_msg+0x5e8/0x7a0 [ 755.256350][ T30] ? netlink_rcv_skb+0x232/0x4b0 [ 755.261487][ T30] ? genl_rcv+0x28/0x40 [ 755.265843][ T30] ? netlink_unicast+0x80f/0x9b0 [ 755.270891][ T30] ? netlink_sendmsg+0x813/0xb40 [ 755.276275][ T30] ? ____sys_sendmsg+0xa68/0xad0 [ 755.281323][ T30] ? ___sys_sendmsg+0x2a5/0x360 [ 755.288652][ T30] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 755.294175][ T30] ? do_syscall_64+0x14d/0xf80 [ 755.299096][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.305393][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 755.312313][ T30] ? rcu_is_watching+0x15/0xb0 [ 755.317245][ T30] ? trace_kmalloc+0x2a/0x110 [ 755.322190][ T30] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 755.328925][ T30] genl_dumpit+0x10b/0x1b0 [ 755.333801][ T30] netlink_dump+0x722/0xe80 [ 755.338331][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 755.343774][ T30] ? genl_start+0x499/0x6c0 [ 755.348332][ T30] __netlink_dump_start+0x5cb/0x7e0 [ 755.356896][ T30] genl_family_rcv_msg_dumpit+0x213/0x310 [ 755.362839][ T30] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 755.369121][ T30] ? genl_get_cmd+0x4a8/0x930 [ 755.374151][ T30] ? __pfx_genl_start+0x10/0x10 [ 755.379067][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 755.384220][ T30] ? __pfx_genl_done+0x10/0x10 [ 755.389101][ T30] ? __dev_queue_xmit+0x274/0x38a0 [ 755.394985][ T30] genl_rcv_msg+0x5e8/0x7a0 [ 755.399557][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 755.406457][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 755.413248][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 755.418452][ T30] netlink_rcv_skb+0x232/0x4b0 [ 755.423419][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 755.428587][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 755.434625][ T30] ? down_read+0x272/0x2e0 [ 755.439051][ T30] ? genl_rcv+0xd/0x40 [ 755.443271][ T30] genl_rcv+0x28/0x40 [ 755.447400][ T30] netlink_unicast+0x80f/0x9b0 [ 755.452610][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 755.457907][ T30] ? netlink_sendmsg+0x650/0xb40 [ 755.462958][ T30] ? skb_put+0x11b/0x210 [ 755.467235][ T30] netlink_sendmsg+0x813/0xb40 [ 755.472417][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 755.477777][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 755.483073][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 755.488400][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 755.493955][ T30] ____sys_sendmsg+0xa68/0xad0 [ 755.498757][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 755.504345][ T30] ? import_iovec+0x73/0xa0 [ 755.508881][ T30] ___sys_sendmsg+0x2a5/0x360 [ 755.514153][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 755.519424][ T30] ? futex_wake+0x4ac/0x580 [ 755.524361][ T30] ? __fget_files+0x2a/0x420 [ 755.529100][ T30] ? __fget_files+0x3a0/0x420 [ 755.534128][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 755.539204][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 755.544969][ T30] ? rcu_is_watching+0x15/0xb0 [ 755.549791][ T30] do_syscall_64+0x14d/0xf80 [ 755.554745][ T30] ? trace_irq_disable+0x3b/0x150 [ 755.559961][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.566641][ T30] ? clear_bhb_loop+0x40/0x90 [ 755.571425][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.577871][ T30] RIP: 0033:0x7fc93419c629 [ 755.582361][ T30] RSP: 002b:00007fc93506d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 755.590865][ T30] RAX: ffffffffffffffda RBX: 00007fc934416180 RCX: 00007fc93419c629 [ 755.599244][ T30] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000003 [ 755.607412][ T30] RBP: 00007fc934232b39 R08: 0000000000000000 R09: 0000000000000000 [ 755.615723][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.623786][ T30] R13: 00007fc934416218 R14: 00007fc934416180 R15: 00007ffcabeb3678 [ 755.631773][ T30] [ 755.635384][ T30] [ 755.635384][ T30] Showing all locks held in the system: [ 755.650799][ T30] 1 lock held by khungtaskd/30: [ 755.656003][ T30] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 755.666026][ T30] 2 locks held by getty/5579: [ 755.670806][ T30] #0: ffff8880360820a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 755.681221][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 755.692143][ T30] 3 locks held by kworker/0:9/7719: [ 755.697553][ T30] #0: ffff88813fe0f548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 755.708810][ T30] #1: ffffc900047a7c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 755.722097][ T30] #2: ffff88803de11240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x202/0x3d0 [ 755.732290][ T30] 2 locks held by syz.2.3023/16581: [ 755.737518][ T30] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 755.746014][ T30] #1: ffffffff8ea86928 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 755.756802][ T30] 3 locks held by kworker/0:3/18587: [ 755.762363][ T30] #0: ffff88813fe0f548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 755.773514][ T30] #1: ffffc9000c93fc40 ((work_completion)(&pool->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 755.785814][ T30] #2: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: xp_release_deferred+0x29/0x180 [ 755.795424][ T30] 3 locks held by kworker/u8:14/18853: [ 755.800896][ T30] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 755.813554][ T30] #1: ffffc9000e017c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 755.824709][ T30] #2: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 755.834601][ T30] 1 lock held by udevd/20573: [ 755.839279][ T30] #0: ffff888025f70358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 755.848841][ T30] 1 lock held by udevd/20864: [ 755.855304][ T30] #0: ffff8880266d8358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 755.864797][ T30] 3 locks held by syz.1.5628/26088: [ 755.870013][ T30] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 755.878706][ T30] #1: ffff888068e126f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 755.889430][ T30] #2: ffffffff8ea86928 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 755.900403][ T30] 2 locks held by syz.6.7004/30797: [ 755.905698][ T30] #0: ffffffff90131b28 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 755.915892][ T30] #1: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 755.925050][ T30] 2 locks held by syz.5.7002/30794: [ 755.930266][ T30] #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 755.939486][ T30] #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 755.950572][ T30] 2 locks held by syz.0.7005/30804: [ 755.956058][ T30] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 755.965824][ T30] #1: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 755.976369][ T30] [ 755.978918][ T30] ============================================= [ 755.978918][ T30] [ 755.993930][ T30] NMI backtrace for cpu 1 [ 755.993949][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 755.993971][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 755.993981][ T30] Call Trace: [ 755.993990][ T30] [ 755.993998][ T30] dump_stack_lvl+0xe8/0x150 [ 755.994030][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 755.994053][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 755.994078][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 755.994105][ T30] sys_info+0x135/0x170 [ 755.994124][ T30] watchdog+0xfd9/0x1030 [ 755.994157][ T30] ? watchdog+0x21a/0x1030 [ 755.994190][ T30] kthread+0x388/0x470 [ 755.994208][ T30] ? __pfx_watchdog+0x10/0x10 [ 755.994231][ T30] ? __pfx_kthread+0x10/0x10 [ 755.994250][ T30] ret_from_fork+0x51e/0xb90 [ 755.994276][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 755.994296][ T30] ? __switch_to+0xc7d/0x1450 [ 755.994320][ T30] ? __pfx_kthread+0x10/0x10 [ 755.994338][ T30] ret_from_fork_asm+0x1a/0x30 [ 755.994378][ T30] [ 755.994385][ T30] Sending NMI from CPU 1 to CPUs 0: [ 756.110610][ C0] NMI backtrace for cpu 0 [ 756.110629][ C0] CPU: 0 UID: 0 PID: 18853 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 756.110649][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 756.110659][ C0] Workqueue: events_unbound toggle_allocation_gate [ 756.110683][ C0] RIP: 0010:__phys_addr+0x9/0x180 [ 756.110702][ C0] Code: ad 40 4d 00 eb e3 e8 a6 40 4d 00 eb b4 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 <48> 89 fb 49 bf 00 00 00 00 00 fc ff df e8 75 40 4d 00 48 bf ff ff [ 756.110716][ C0] RSP: 0018:ffffc9000e0176f0 EFLAGS: 00000046 [ 756.110730][ C0] RAX: 1ffffffff1d10e67 RBX: ffff88813fe38c40 RCX: dffffc0000000000 [ 756.110741][ C0] RDX: ffff888030265ac0 RSI: ffffffff8c27a460 RDI: ffffffff8e54c000 [ 756.110752][ C0] RBP: ffffffff8e887280 R08: 0000000000000001 R09: 1ffffffff2022e56 [ 756.110763][ C0] R10: dffffc0000000000 R11: fffffbfff2022e57 R12: ffff888030265ac0 [ 756.110774][ C0] R13: 000000000e54c000 R14: ffffffff8e887338 R15: 0000000000000000 [ 756.110785][ C0] FS: 0000000000000000(0000) GS:ffff888125466000(0000) knlGS:0000000000000000 [ 756.110799][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 756.110810][ C0] CR2: 00007f44571e82f8 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 756.110827][ C0] Call Trace: [ 756.110834][ C0] [ 756.110843][ C0] switch_mm_irqs_off+0x80/0x690 [ 756.110863][ C0] use_temporary_mm+0x98/0x140 [ 756.110880][ C0] __text_poke+0x632/0x9a0 [ 756.110898][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 756.110912][ C0] ? __pfx_perf_event_text_poke+0x10/0x10 [ 756.110935][ C0] ? kmem_cache_alloc_from_sheaf_noprof+0x3b/0x180 [ 756.110951][ C0] ? __pfx___text_poke+0x10/0x10 [ 756.110971][ C0] smp_text_poke_batch_finish+0x923/0x1160 [ 756.110993][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 756.111012][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 756.111035][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 756.111053][ C0] static_key_disable_cpuslocked+0xc5/0x1a0 [ 756.111075][ C0] static_key_disable+0x1a/0x20 [ 756.111095][ C0] toggle_allocation_gate+0x1fe/0x290 [ 756.111112][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 756.111129][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 756.111149][ C0] ? process_scheduled_works+0xa25/0x1830 [ 756.111168][ C0] ? process_scheduled_works+0xa25/0x1830 [ 756.111187][ C0] process_scheduled_works+0xb02/0x1830 [ 756.111218][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 756.111239][ C0] ? assign_work+0x3d5/0x5e0 [ 756.111260][ C0] worker_thread+0xa50/0xfc0 [ 756.111291][ C0] kthread+0x388/0x470 [ 756.111306][ C0] ? __pfx_worker_thread+0x10/0x10 [ 756.111323][ C0] ? __pfx_kthread+0x10/0x10 [ 756.111338][ C0] ret_from_fork+0x51e/0xb90 [ 756.111359][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 756.111376][ C0] ? __switch_to+0xc7d/0x1450 [ 756.111395][ C0] ? __pfx_kthread+0x10/0x10 [ 756.111410][ C0] ret_from_fork_asm+0x1a/0x30 [ 756.111440][ C0] [ 756.125992][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 756.126026][ C1] lec:lec_tx_timeout: lec0 [ 756.168548][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 756.433958][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 756.440905][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 756.450209][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 756.460613][ T30] Call Trace: [ 756.463891][ T30] [ 756.466844][ T30] vpanic+0x56c/0xa60 [ 756.471005][ T30] ? __pfx___schedule+0x10/0x10 [ 756.475865][ T30] ? __pfx_vpanic+0x10/0x10 [ 756.480630][ T30] ? __pfx_console_unlock+0x10/0x10 [ 756.485934][ T30] panic+0xc5/0xd0 [ 756.489657][ T30] ? __pfx_panic+0x10/0x10 [ 756.494084][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 756.499609][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 756.505775][ T30] watchdog+0x1023/0x1030 [ 756.510121][ T30] ? watchdog+0x21a/0x1030 [ 756.514554][ T30] kthread+0x388/0x470 [ 756.518628][ T30] ? __pfx_watchdog+0x10/0x10 [ 756.523343][ T30] ? __pfx_kthread+0x10/0x10 [ 756.527966][ T30] ret_from_fork+0x51e/0xb90 [ 756.532593][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 756.537723][ T30] ? __switch_to+0xc7d/0x1450 [ 756.542508][ T30] ? __pfx_kthread+0x10/0x10 [ 756.547209][ T30] ret_from_fork_asm+0x1a/0x30 [ 756.552003][ T30] [ 756.555183][ T30] Kernel Offset: disabled [ 756.559506][ T30] Rebooting in 86400 seconds..