last executing test programs: 20.168413431s ago: executing program 3 (id=3719): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000000800000003"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0}, 0x20) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@remote, @in=@empty}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000340)=0x123) write$tun(r3, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, "042000", 0x8, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x1b59, 0x8}}}}}}}, 0x42) ioctl$XFS_IOC_FSGROWFSLOG(0xffffffffffffffff, 0x4008586f, &(0x7f0000000300)={0x5}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002980)=@newchain={0x64, 0x1e, 0x1, 0x1000, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_ACT={0x34, 0x7, [@m_skbedit={0x30, 0xc, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x64}}, 0x2004c000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r5 = socket$nl_generic(0x11, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x25, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000003c80010325bd70ff090000000400034000000000e70ef9565c0c7b2baa7f93637a2dc8db7d57e10b855a6e33a0eab59db807f7a6b88ad49c5bb9e8f7d3b3008b443497229754af2473c21bdbc6bf1078807f10550f4140e4c835ba53d90eca5f"], 0x18}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xfffe, 0x0, 0x2, 0x0, @broadcast, @multicast1}, {0x16, 0xfb, 0x0, @remote}}}}}, 0x0) sendmsg(r5, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c000000100005ff00000040000000000000004a", @ANYRES32=0x0, @ANYBLOB="0002010000000000340012800b000100677265746170000024000280060010004e24000008000600e00000020500160001000000050016000100000008000a00", @ANYRES32=r2], 0x5c}}, 0x24000000) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) accept$packet(r1, 0x0, &(0x7f0000000040)) 16.922438574s ago: executing program 3 (id=3783): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000080), &(0x7f0000000140)='%-010d \x00'}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_NUM_PEER_NOTIF={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newtaction={0x64, 0x30, 0x9, 0xfffffffe, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xc, 0x0, 0x20000000, 0x7ee6, 0x2}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}}, 0x0) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000004c0)={r2, &(0x7f00000003c0)='bbr', 0x200000, &(0x7f0000000400)={@align=0x1, {0xfff8, 0xcd83, 0x9, 0x1}}, 0x4a8f, &(0x7f0000000440), &(0x7f0000000480)}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000040)=0x1) (async) close(0x4) 16.811496879s ago: executing program 4 (id=3784): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 16.810029999s ago: executing program 4 (id=3786): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0xa, 0x0, 0x9, 0x2}, 0x10}}, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f00000000c0)={0x3a, @multicast1, 0x4e23, 0x1, 'lblc\x00', 0x22, 0x2, 0x12}, 0x2c) r2 = socket(0x2a, 0x2, 0x0) recvfrom(r0, &(0x7f0000000100)=""/92, 0x5c, 0x103, &(0x7f0000000180)=@nl=@unspec, 0x80) r3 = socket$inet6(0xa, 0x2, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x400000013) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getsockname$packet(r2, &(0x7f0000002600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@rand_addr=0x64010102, @empty, 0xffffffffffffffff, "2da08213247519c4ed7cf81353d4c7a95bbfe3e84aa0f70d83475cb808867c13", 0x1, 0x5, 0xd0f, 0x4}, 0x3c) 16.797403225s ago: executing program 3 (id=3787): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32], 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, 0x0, &(0x7f0000000040)) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000400000000000000000000030000000003000000020000000000000000000000000000010500000008000000020000000000000c0000000000002e"], 0x0, 0x50}, 0x28) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x8, 0x3000000000002, 0x0, 0x1}, 0x8091) 16.741756613s ago: executing program 4 (id=3789): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x3ff, 0x1, 0xffffffffffffffff, 0x6da443c8}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0}, 0x20) 16.660972856s ago: executing program 3 (id=3791): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="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") r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x29, 0x50, 0x0, &(0x7f0000000280)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000007f00000000000000000c00020001000000150000000c000c8006000100d43f0000060003000100"/56], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x192}}, 0x20}}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffc, @mcast1, 0x7}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x2, 0x0, 0x2, 0x2, {0xa, 0x4e24, 0xffff, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x32) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000100100000100000080000000000000007000000000000000100100000e"], 0x88}, 0xfc40) writev(r1, &(0x7f0000000800)=[{&(0x7f0000000740)="fbb9b35314b22f1f4cb47eace766f6b8d03bfe3f8e3a82b50a1b5e9cd2e00a992e1135405731e2df16ff986abe8421811ede024553765aba07523f2657f32a1076fe37b60cb3e811ea80d5d552928140bd0e242f775e4f5305d6e8c0b74d0a41d50ac938a9de44df4eb3988930397bbb20b7bd6ed5fb826b6840930be010cdc441186a1f9c2432a41305dc73813006ae4ffb8cf627ed43b2776d1b52", 0x9c}], 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000800002e00000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180300002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r13, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_INITMSG(r12, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x20}, 0x8) sendto$inet6(r12, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000010000d042abd7000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="b2000600552d04001c0012800c00fcffffff63766c616e000c0002800800090006003b00140035006d26c2e9031f7a5aecd675c66163766c"], 0x50}, 0x1, 0x0, 0x0, 0x400c844}, 0x8880) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r11) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x8, 0x5, 0x2, @loopback, @loopback, 0x40, 0x700, 0x280000, 0x8}}) 16.628464831s ago: executing program 4 (id=3794): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) (async) listen(r0, 0x0) (async) listen(r1, 0x2) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r2, 0x2) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000080)=ANY=[]) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000091f0000000000008112bf00000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) (async) close(r3) (async, rerun: 32) socket$kcm(0xa, 0x5, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r3, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) 16.458580196s ago: executing program 4 (id=3798): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x39241}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010800}, 0x8054) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x46}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x8, 0x0, r1, 0xef6d, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) 16.450795086s ago: executing program 0 (id=3800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c000000020601030000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3100000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200060005000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="000000000000002a45d92600000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7655e0ab61e2481d4cc2a8c3c0a550a035ee2b8d27a45c2764802522c496500"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) read$alg(0xffffffffffffffff, &(0x7f0000001500)=""/4096, 0x1000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000002c0)='%pK \x00'}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000011c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000013c0)={"90992c225ceee11dd9ce98744c759d3b", 0x0, r5, {0x800, 0x8000}, {0x0, 0x2}, 0x1, [0x5, 0x6, 0xffffffff00000001, 0x3, 0x7, 0x6, 0xfff, 0x0, 0xffffffffffffbd9b, 0x9, 0x8, 0xfffffffffffffffa, 0xff, 0x336, 0x6, 0x2ba6]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r7, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x304c927d0d0001ad}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x44) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r4, 0xc038943b, &(0x7f0000000700)={0x7ff, 0x28, '\x00', 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4028000}, 0x24048094) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES64=r0, @ANYRESDEC=0x0, @ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8a59}, 0x94) 16.412113394s ago: executing program 1 (id=3801): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add", 0xd6}], 0x1}, 0xff00) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000005200010004000000000000001c00"], 0x28}}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000010000000100001304000000", @ANYRES16], 0x0, 0x35, 0x0, 0x1}, 0x28) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x7fffffff}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000280)={r3, 0x9}, 0x8) (async, rerun: 32) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async, rerun: 32) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 64) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, 0x0) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (rerun: 32) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r10, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003100000001010000000000000e000a000f000000028002002d1fb664ad3f48b9e0", 0x35}], 0x1}, 0x0) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x30, r11, 0x1, 0x72bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x11}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r9, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r11, 0x8, 0x70bd28, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40015}, 0x20000000) (async, rerun: 32) r13 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r13, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x1407, 0x400, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) 16.342844334s ago: executing program 1 (id=3803): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x4000800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000240)='FREEZING\x00', 0x9) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r3 = openat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r6, 0x0, 0x0, 0x20080d4, &(0x7f0000000640)=@nfc={0x27, 0x0, 0x1, 0x4}, 0x80) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x34, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0xc, 0xfe, 0x0, 0x1, [@typed={0x8, 0x5, 0x0, 0x0, @fd=r5}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) openat$cgroup_int(r3, &(0x7f0000000200)='pids.max\x00', 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="110004000000000001000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x1000) r8 = accept4$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14, 0x0) recvfrom$packet(r8, &(0x7f0000000340), 0x0, 0x12121, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) ioctl$int_out(r1, 0x0, &(0x7f0000000080)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0xd, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004080) 16.316675586s ago: executing program 0 (id=3804): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x3fffffff, 0x7}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000010500001400128009000100626f6e64"], 0x34}}, 0x0) connect$netlink(r1, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfa, 0x20000000}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '>'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01600000000000000100077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x304) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r9) socket(0x2b, 0x80801, 0x1) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SET_PARAMS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="000327bd7000fbdbdf251000000005001000030000000600110073040000050010000a00000008000100", @ANYRES32=r7, @ANYBLOB="c5d2079b5ad67da7d890bb19c2f55cceacb9ca70fb687165"], 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x2000c000) sendmsg$NFC_CMD_DEP_LINK_DOWN(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000827bd740000000000000001ff080004000000000008000100", @ANYRES32=r7, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4) 16.203187273s ago: executing program 2 (id=3806): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="8b4d4a4f", @ANYRES16=r3, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r4, @ANYBLOB="08003200050000000500330001000000"], 0x2c}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r3, 0x2, 0x30bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x440c4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x400003}]}, 0x3c}}, 0x20000018) 16.194199021s ago: executing program 2 (id=3807): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x4, 0x0, 0xffdff036}, {0x6, 0x0, 0x0, 0x2}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xfffff010}]}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r2, &(0x7f0000000200)={0x2, @long}, 0x8) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 16.130382845s ago: executing program 1 (id=3808): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000044) 16.007418455s ago: executing program 0 (id=3809): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000002c0)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000104050000000300000000000000", @ANYRES32=0x0, @ANYBLOB="0305000000000000240012800900010069706970000000001400028008000300ac1414aa08000100", @ANYRES32=r2, @ANYBLOB="61d135a1af94"], 0x44}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000002c0)=0x1, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000104050000000300000000000000", @ANYRES32=0x0, @ANYBLOB="0305000000000000240012800900010069706970000000001400028008000300ac1414aa08000100", @ANYRES32=r2, @ANYBLOB="61d135a1af94"], 0x44}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) (async) 16.000722949s ago: executing program 2 (id=3810): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f0300", 0x4}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000340)={{r0, &(0x7f00000001c0)='\x1e}+\x00', 0x8000, &(0x7f0000000200)={@_ha_fsid={[0x2]}, {0xf, 0xfffe, 0x7, 0x4}}, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x1}, {[0x6, 0x1, 0x3, 0x2]}, 0x9, 0xb, &(0x7f00000002c0)=""/11}) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000400), r0) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r3, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x40004) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x72}, @void, @val={0xc, 0x99, {0x1, 0x33}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4c014}, 0x4000010) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) 15.935510618s ago: executing program 1 (id=3811): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, r3, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1c11a077609475b78411e88509d0050000000000f2170e65e3f5037fe422000000000086350000000200000000001900", 0x3c}, 0x60) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r4, &(0x7f0000000080)={0x27, r3, 0x0, 0x3, 0x0, 0x5, "750538440ff92fe2aaf1beea7cdcc151042cd9893bc31f80716a120d8be6d7f81cd81ec275000386e7255f0669b740a5418d69d00000d51de08a00ee1d9a34", 0x400000011}, 0x60) close(r2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x2, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) unshare(0x2c020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'lo\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xff, 0x1, 0x7fff, 0x80000000, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0xcf12, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x8006, 0x1c00, 0xb, 0x7, 0xbed4, 0x4, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x1000a, 0x7, 0xf, 0x104, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0xd, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf6, 0x5, 0x5, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x1, 0xfffffefd, 0x6, 0x752, 0x0, 0x6000000, 0x5, 0x10001, 0x2, 0xffffffff, 0x80000006, 0x4, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x800102, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x403, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) write$tun(r6, &(0x7f0000000140)=ANY=[], 0xfd6c) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 15.887459331s ago: executing program 0 (id=3812): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x25dfdbff, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 15.884425927s ago: executing program 2 (id=3813): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x16c5, r2, 0x4000000000000000}, 0x38) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8607, 0x0, 0xffff8c45}, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001600010a29bd7000fbdbdf25160010"], 0x20}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0xa002a014}) 15.788864823s ago: executing program 2 (id=3814): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x8, 0x0, 0xa1, 0x1, 0x4, 0x7, 0x9, 0x9, 0x5b, 0x7, 0x5, 0x5, 0x80}, 0xe) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000080)=0x28) shutdown(r0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f00000000c0)={0xffffffff, 0x2}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x3ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}, 0x8, 0x5, 0xffffffff, 0xfffffff8, 0x9}, &(0x7f00000001c0)=0x98) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x3ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}, 0x8, 0x5, 0xffffffff, 0xfffffff8, 0x9}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x6, 0x820b, 0x1, 0x5, r2}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) socket$xdp(0x2c, 0x3, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000280)=0xa0, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000280)=0xa0, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001340)={0xffffffffffffffff, &(0x7f00000002c0)="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", &(0x7f00000012c0)=""/72}, 0x20) r5 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x400) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000001380)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000013c0)={r2, 0x8, 0x10}, &(0x7f0000001400)=0xc) vmsplice(r5, &(0x7f00000018c0)=[{&(0x7f0000001440)="8457b38a0acd3abf47feac3f35100fe46d451790da0a215495aa9aba6f08b5f3b1606a8f674bbb238de7982fcce0eabbdf1eba52e6608fe313c07c6f89540d85a1de4400845a1cafe4b9ce938805e61bc38f0c1532ee0cd057e70e7bdf655bf1f81477dfff86940c70ae6a3c75554fb185be1691ebb551ff393513ea90844a5ee22e917b5445703512134e04c66f7f2588f0fe528415131279100522afbf10", 0x9f}, {&(0x7f0000001500)="41d90b7cd86e06dc8661ea36bc2d1d6a5913db43d5b08d2b556e2d4ff33f7a7dd515a7b120a05ce032dd174c854059ee03eb3a6f269e671f58b7427e9df8105cdf6bc2cf92f55c1af6c75aec355a847ce22dcce35b184fe15521dd78", 0x5c}, {&(0x7f0000001580)="637a90d5af6814a25c61b8e688205767c3889e19bb2b5acbe0433e4ae55b1b84e51664fbba4f9e6df4efd2e70e52b309a7fe83735665f58c3cfa2008f741ea8a36c314d2296c1726f42191bb5ece78537a", 0x51}, {&(0x7f0000001600)="08ee6481843e5d5424deb66ba09c5bdab303298e4916f42b53bd3e7af3528b124d2f3632a375881deca36c77bb75b27ea7b9fd2dea4fd1be217ef5270c1edd2e30d439bd5083a245349c6949bf809604e06ec4ac0442aa20cb5136061e905ee2fe4defeea452e8ff645afecdc528ec531919fdf0c185175cee8d0fd5e9461e97667f85090589f1836e14b99e51fde9253ba4b554f830f5d169d907172183fea214b312e222", 0xa5}, {&(0x7f00000016c0)="afb0a25a7274c036d734bc32bef836929b466cafc3e5ff07d4f80b94eb1d9c47d0549bac70", 0x25}, {&(0x7f0000001700)="854ce45086467431562a46c5d521c5384de673439aed33b2eea1791fee8abeb18590644ffb8092fa147e9e10579b4d", 0x2f}, {&(0x7f0000001740)="dbf806a36a3134fd53cf0705a6aae0c836632dc3736d63084cfc82307666fb0899d4280485fce0466e9ee482", 0x2c}, {&(0x7f0000001780)="71bd1dcad2416908a7828a310d5b120d8bccbda95ad825cca61fd36c0ca2384be0b8f38be40ba72b5060f956d5b38510b1c5acba80220f7cbd4a4b7efd8fe4770abd9d58e0c73d4f15e0bde35614a1a519533304ab169ca64d703e67659a63079b919857094f6103939daa9ca382fe394e1ec55a1bdfb5e2a2446459fb8f7a7b83b9ef6984bab6e2dccd0db48650040b87c2e8872d268586dac0e985d88db0287454ecc6c935e8cc10ae89b05b570f5523b304a93d88f3cf4e3aa2a441e495cb43438e3961481fe84825f6011b", 0xcd}, {&(0x7f0000001880)="9edf46a41d5d0b7528d0018a", 0xc}], 0x9, 0xc) (async) vmsplice(r5, &(0x7f00000018c0)=[{&(0x7f0000001440)="8457b38a0acd3abf47feac3f35100fe46d451790da0a215495aa9aba6f08b5f3b1606a8f674bbb238de7982fcce0eabbdf1eba52e6608fe313c07c6f89540d85a1de4400845a1cafe4b9ce938805e61bc38f0c1532ee0cd057e70e7bdf655bf1f81477dfff86940c70ae6a3c75554fb185be1691ebb551ff393513ea90844a5ee22e917b5445703512134e04c66f7f2588f0fe528415131279100522afbf10", 0x9f}, {&(0x7f0000001500)="41d90b7cd86e06dc8661ea36bc2d1d6a5913db43d5b08d2b556e2d4ff33f7a7dd515a7b120a05ce032dd174c854059ee03eb3a6f269e671f58b7427e9df8105cdf6bc2cf92f55c1af6c75aec355a847ce22dcce35b184fe15521dd78", 0x5c}, {&(0x7f0000001580)="637a90d5af6814a25c61b8e688205767c3889e19bb2b5acbe0433e4ae55b1b84e51664fbba4f9e6df4efd2e70e52b309a7fe83735665f58c3cfa2008f741ea8a36c314d2296c1726f42191bb5ece78537a", 0x51}, {&(0x7f0000001600)="08ee6481843e5d5424deb66ba09c5bdab303298e4916f42b53bd3e7af3528b124d2f3632a375881deca36c77bb75b27ea7b9fd2dea4fd1be217ef5270c1edd2e30d439bd5083a245349c6949bf809604e06ec4ac0442aa20cb5136061e905ee2fe4defeea452e8ff645afecdc528ec531919fdf0c185175cee8d0fd5e9461e97667f85090589f1836e14b99e51fde9253ba4b554f830f5d169d907172183fea214b312e222", 0xa5}, {&(0x7f00000016c0)="afb0a25a7274c036d734bc32bef836929b466cafc3e5ff07d4f80b94eb1d9c47d0549bac70", 0x25}, {&(0x7f0000001700)="854ce45086467431562a46c5d521c5384de673439aed33b2eea1791fee8abeb18590644ffb8092fa147e9e10579b4d", 0x2f}, {&(0x7f0000001740)="dbf806a36a3134fd53cf0705a6aae0c836632dc3736d63084cfc82307666fb0899d4280485fce0466e9ee482", 0x2c}, {&(0x7f0000001780)="71bd1dcad2416908a7828a310d5b120d8bccbda95ad825cca61fd36c0ca2384be0b8f38be40ba72b5060f956d5b38510b1c5acba80220f7cbd4a4b7efd8fe4770abd9d58e0c73d4f15e0bde35614a1a519533304ab169ca64d703e67659a63079b919857094f6103939daa9ca382fe394e1ec55a1bdfb5e2a2446459fb8f7a7b83b9ef6984bab6e2dccd0db48650040b87c2e8872d268586dac0e985d88db0287454ecc6c935e8cc10ae89b05b570f5523b304a93d88f3cf4e3aa2a441e495cb43438e3961481fe84825f6011b", 0xcd}, {&(0x7f0000001880)="9edf46a41d5d0b7528d0018a", 0xc}], 0x9, 0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000019c0)={@private0}, &(0x7f0000001a00)=0x14) (async) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000019c0)={@private0, 0x0}, &(0x7f0000001a00)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001a40)={{{@in6=@private0, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f0000001b40)=0xe8) sendmsg$nl_xfrm(r6, &(0x7f0000001f00)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001b80)=@flushsa={0x330, 0x1c, 0x400, 0x70bd2d, 0x25dfdbfe, {0x6c}, [@encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e22, 0x4e21, @in6=@remote}}, @algo_aead={0x84, 0x12, {{'authenc(sha3-224-generic,lrw-camellia-aesni-avx2)\x00'}, 0x1c0, 0x0, "2f85e1bb0095b2af67883a3f0ec2afac75ccba373d9d090fdd14ad3c6112e1fdb4e1bb8c9b3295d4bc5aa2463d82d56a371a9c747c5d4494"}}, @algo_aead={0xb8, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x360, 0x100, "dc5c2b32a7626dfefa2208043cab0718a963f4b8de8dc76a725d4151841e10e1a99235a0da6a1d0977846e9f89151395afaa30a46ff330ad7e5a75b84ca3fd86ae0087998093b40a78ac359e0ff2ccd6665c26a3e4f948de26665eb987f7cf8ba3986ac2522fd6c9d09e3fdb"}}, @sa={0xe4, 0x6, {{@in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0xe267, 0x4e22, 0x1, 0x2, 0x80, 0x0, 0x19, r7, r8}, {@in=@multicast1, 0x4d6, 0x32}, @in=@empty, {0x7fffffffffffffff, 0x4, 0x0, 0xfffffffffffffffa, 0xb9b, 0x8, 0x2, 0x7}, {0xffffffffffff8001, 0x3, 0x9, 0x1967}, {0x7, 0x8, 0x7}, 0x70bd25, 0x3500, 0x2, 0x2, 0xc5, 0x46}}, @lastused={0xc, 0xf, 0x6}, @algo_comp={0xae, 0x3, {{'lzs\x00'}, 0x330, "6135d312cc5e6b743a18ba4b36738389ded36af677e9308b062ac761be3457e60e6db3beb1e9a4376debbc5bb81772c316962259bfb659f8fc261a7ee6b817d8b65b18884a8c72c5995afc80917677ed3cbdd7995e6ca7bd77c7cd0773bafb0efe1d1bc502f0"}}, @lifetime_val={0x24, 0x9, {0x101, 0x7, 0x8, 0xfff}}]}, 0x330}}, 0x80) pipe(&(0x7f0000001f40)) (async) pipe(&(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001fc0), r3) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001fc0), r3) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r10, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x14, r11, 0x8, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x14}}, 0x24000890) ioctl$int_in(r10, 0x73, &(0x7f00000020c0)=0x9) ioctl$SIOCGETNODEID(r9, 0x89e1, &(0x7f0000002100)={0xfd0}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002140), r1) ioctl$BTRFS_IOC_GET_FEATURES(r9, 0x80189439, &(0x7f0000002180)) accept4(r0, 0x0, &(0x7f00000021c0), 0x0) (async) accept4(r0, 0x0, &(0x7f00000021c0), 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002200)={{{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x4e21, 0x7ff, 0x4e23, 0x9, 0xa, 0x20, 0xa0, 0x2c, 0x0, r8}, {0x1, 0x8, 0x8, 0x465f, 0x3, 0x1f, 0x8, 0x9a}, {0x3, 0x6801cf84, 0x3, 0x2}, 0x7, 0x0, 0x1, 0x1, 0x0, 0x2}, {{@in6=@remote, 0x4d6, 0x2b}, 0xa, @in=@remote, 0x3503, 0x0, 0x0, 0x9f, 0x9, 0x7, 0x80}}, 0xe8) 15.788216553s ago: executing program 0 (id=3815): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @remote}, 0x4, 0x2, 0x1, 0x1}}, 0x2e) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="11000000040000000400000009"], 0x50) (rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x2, 0x2, 0x1, 0x0, r3}, 0x50) (async, rerun: 64) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) (rerun: 64) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="8fb22b5f37282c04948495642fa5c564bd6c00552cf3e47cba", @ANYRES16=r5, @ANYBLOB="00042bbd7000ffdbdf250b000000080003000500000005000500090000000800040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x9000}, 0x40080c1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x8, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x9, 0x0, 0x1, 0x6, 0xff, 0x0, 0xfffffeff}}) (async, rerun: 32) r7 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) (async) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x27}, 0x62) (async) listen(r9, 0x0) accept4(r9, 0x0, 0x0, 0x80800) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000) (async, rerun: 64) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) ioctl$int_in(r10, 0x5452, &(0x7f0000000000)=0x10) close(0x3) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}, @IFLA_GRE_IKEY={0x8, 0x4, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) bind$inet(r7, &(0x7f0000000180)={0x2, 0x4e22, @multicast1}, 0x10) 15.622807025s ago: executing program 2 (id=3816): syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x6a, 0x4, 0x1, 0x27) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r4, @ANYBLOB="b759cdc0af94680674f451c513371f4927b49175dc9ee9db8eb8eb5fcaca9296def45a15b56382a7441ce4e79983c157442c23fe123fd4468ca55c510635f9c28dc8b0648bf29681f9ab1313f4ccad8e0ded61a6f250426f9eac"], 0x3c}}, 0x8000) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r4, @ANYBLOB="b759cdc0af94680674f451c513371f4927b49175dc9ee9db8eb8eb5fcaca9296def45a15b56382a7441ce4e79983c157442c23fe123fd4468ca55c510635f9c28dc8b0648bf29681f9ab1313f4ccad8e0ded61a6f250426f9eac"], 0x3c}}, 0x8000) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) (async) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) 15.62254137s ago: executing program 3 (id=3817): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4", 0x50}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0xd, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 15.621347996s ago: executing program 1 (id=3818): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="1d5fe8317ca952a2ba4bfee0f003", 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000540)) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x80) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000002440)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r2) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r6, @ANYBLOB="200025bd7000fddbdf253d000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c746963617374000e00010062657464657673696d0000000f2002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000001180)=ANY=[], 0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={r4, 0x5, 0x0, 0x8, 0x7ff}, &(0x7f0000000140)=0x18) setsockopt$MRT_DEL_MFC(r2, 0x0, 0xcd, &(0x7f00000001c0)={@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffffffffffff, "62d364a6ac907249114eb01d0d45dd11a43b25e034fdbe1198be80d17cc045e4", 0x7f, 0x80000000, 0x1, 0xfffffff5}, 0x3c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x2e, 0xfffffffffffffffc, 0x40f00, 0x40, '\x00', 0x0, 0x38}, 0x94) 15.539287542s ago: executing program 0 (id=3819): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="3b4ae27d883f82b12f78fe34bdd4f7fd41c02e76fe0a2a763ae92d627cffd52c1315c729452095062b3ed9c1e0d7a599fafa716793d4653b4144ccfd7ecfeee6e3a1bb024d572fa3dccfba6b4cba365c6f0a199bb31244dda571349af132a93c"], 0x2c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010093797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020089000000380001800c00017e209c00626974776973650028000280080003400000000240000000120400058008000480040001000900010073797a30000000001400000011000100"/268], 0x10c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r9, 0xff, 0x1, 0x0, &(0x7f0000000040)=0xfffffffffffffed0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x10c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x9, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x4}, {0xfffffff9, 0x1, 0x1, 0x7}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x8, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1804004, 0xfffffff8, 0x400}]}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x28bf, 0x20000000, 0xd, 0x1, 0x2, {0x3, 0x2, 0x3, 0x2, 0x6}, {0xf3, 0x1, 0xfffb, 0x6f4, 0x6, 0x6}, 0x6, 0x0, 0xfafd}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0xc040) 15.491995198s ago: executing program 3 (id=3820): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0xfff3}, {0xffff, 0xffff}, {0xffef, 0x6}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x82, 0x3, 0x4, 0xffff, 0x7f, 0x7fffffff, 0x1, 0x40, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xdc}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x234, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x204, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x70, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7fff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xab8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xdebb}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x42}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x7, 0x6, 0xd, 0x5, 0xb, 0xc, 0x7, 0x5, 0xb, 0x5, 0x10, 0x1, 0x5, 0x5, 0x3, 0xd], 0x0, [0x527b, 0x1000, 0x7, 0x6a, 0x4, 0xd, 0x2, 0xc7a, 0x8, 0x9, 0x8, 0x3079, 0x4, 0x100, 0xe, 0xd], [0xaae, 0x4, 0x9, 0xc, 0x4, 0x8, 0x5, 0x0, 0x9, 0xb1, 0x6, 0x7, 0x9, 0x7, 0x400, 0x400]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x4}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x128, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xf4}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xbd4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x400}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffff0000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffffffff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xe}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1ff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6913e4d9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x80}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xff}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1011}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2f}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}]}]}]}}]}, 0x234}, 0x1, 0x0, 0x0, 0x400dc}, 0x40) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r15) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) r16 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r17 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c6a39aa3c56e1cd3680b5d2c1d3e80f31059fb430b191f4f496617191805be9922f127432b31de532e450fec0681cb4eca22dc339ca497424a74462a005b602648a61483e03a394b33a040b421f89ca24f86c5c6e41b7a610bad70f67cfc1f9980fc56", @ANYRES16=r17, @ANYBLOB="0100000000000000000003000000"], 0x14}}, 0x20000000) (async) sendmsg$IPVS_CMD_SET_INFO(r16, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r18, @ANYBLOB="0000000000004a641c0012000c000100626f6e6400"], 0x3c}}, 0x0) 15.475277276s ago: executing program 4 (id=3821): socket(0x1e, 0x4, 0x7ffffffe) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="1709000000000000000001000000050007000000000008000900000000001400200000000000000000000000ffed0000000008000a0000000000060002000100000014001f000000000000000000000000cbcf"], 0x5c}, 0x1, 0x620b}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x20, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 15.378589977s ago: executing program 1 (id=3822): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) splice(0xffffffffffffffff, &(0x7f0000000100)=0x7, 0xffffffffffffffff, 0x0, 0x5, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x4, {0x0, 0x0, 0x0, 0x0, 0x88ad7db5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x48, 0x2, 0x48, 0x5}, {0x28, 0x4, 0x5, 0xffbff038}, {0x6, 0x27, 0x2, 0x207}]}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa}}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000035f5150001000004002c0524000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r3, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)='U', 0x1}], 0x1, 0x0, 0x0, 0x4004000}}], 0x1, 0x0) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000440)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16=r8, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r9, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) openat$cgroup_procs(r5, &(0x7f00000006c0)='cgroup.threads\x00', 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x8c, r6, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x40}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xf4}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) r11 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) splice(0xffffffffffffffff, &(0x7f00000064c0)=0x8, 0xffffffffffffffff, 0x0, 0x2000000000000e, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r11, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000006500)=@newtaction={0x279c, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x1a0, 0x1, [@m_vlan={0xcc, 0xd, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x1, 0xffffffffffffffff, 0x2, 0x4}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x8, 0x2, 0xc56}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x8000, 0x4, 0x8, 0x4}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x806}]}, {0x31, 0x6, "cebcde2e4d2c72bafa9569c8bfd0613e38aa693e1ca82e5f62ad31b8d92c90f38c85d01d103b653ecab5b68a5d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0xd0, 0x14, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x5, 0xffffffffffffffff, 0x7, 0x3}, 0x16}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x7, 0x3, 0x80, 0x8}, 0x2f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x7, 0xc, 0x9}, 0x31}}]}, {0x50, 0x6, "cfa55703739f2fc1b236f6347e91c634d3d8408f77a93984add68debc10ad99d273c312e5ecadb5fb6600fe1cf8680bec2d8d26a8945ecdd8b11865744906aac06020898d333351255035c56"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, {0x25e8, 0x1, [@m_vlan={0x138, 0x1f, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x787}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x235}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0xc29f, 0x8, 0x8, 0x400}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x23f, 0x6, 0x3, 0x333, 0x800}, 0x2}}]}, {0xa9, 0x6, "158e9407e9e02bce6b51bb46b4ed8b96601d761382da3e978517d95f5f150f9a88fb5d400d653c26b25e6477b74809d79d86ccb709b105b5cdfc5af76c5ffdec5eac3d5157c4dc332d8ae989f91c374928b61f8b5e5e72ddec24cdfadffad2b052d3e79c5c9c68f859d04aea7ddad3fdbefff7379db81094d8e2010d6cfcda98d1a27cf8483b425bf4ec4ee9417447963e0302785b997442514f5034293b62a8e965f9354c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ct={0x94, 0x3, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "5516bc61d1dabcdc063ca70b1e7003aa"}, @TCA_CT_ZONE={0x6, 0x4, 0x2}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x1}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x7f}]}, {0x3d, 0x6, "72f8bf6125729c967da84d6a46ef061f3b904f827d7e568279890693a3637cdb564ea55bd499866afa97286b261aed9cc784127f7ffdafea47"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x58, 0x10, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}]}, {0xc, 0x6, "26a42716d268d31b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x2340, 0xa, 0x0, 0x0, {{0xb}, {0x2224, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x74}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x6, 0x9, 0x9, 0x0, 0x1ff, 0x6, 0x4, 0x80000001, 0x10, 0xfffffffc, 0x8, 0x5, 0x4, 0x8000, 0xffffffbf, 0x5, 0x1, 0x9, 0x5, 0x6, 0x597, 0x6, 0x9, 0x2, 0x6, 0xed84, 0x100, 0xc4a3, 0x55, 0x5, 0x9, 0x81, 0x5, 0x6, 0x2, 0x10000, 0x1b4, 0x5, 0x7fffffff, 0x6, 0x8, 0x0, 0x7, 0xfffffffd, 0x2, 0x48000, 0x3, 0x6, 0x6, 0xff, 0x7f, 0x3ff, 0x1000, 0x1, 0x40, 0x3, 0x8, 0xfffffff9, 0x1, 0x8, 0x369, 0xfc, 0x1, 0x6, 0xfffffff8, 0x2, 0x8, 0x800000, 0x5, 0xffff67c5, 0x80000000, 0x8, 0x3, 0x8, 0xe4, 0x4, 0x5, 0xac, 0x401, 0xf, 0xdb6, 0x80000000, 0x3, 0x8001, 0x9, 0x1, 0x40, 0x7, 0x7f, 0x7, 0x20, 0x80, 0xa, 0x2, 0x6, 0x1, 0x2, 0x4, 0x608e, 0x800, 0xffffff81, 0x0, 0x140, 0x4, 0xe, 0xcfdb, 0xfff, 0x6, 0x95, 0x2, 0x2, 0xd742, 0x0, 0x4, 0x4, 0x100, 0x5957, 0x6, 0x2, 0x8, 0x1, 0xf3db, 0x5, 0xff, 0x8, 0x236, 0x0, 0x82a9, 0x5, 0x1, 0x2, 0x4e, 0x8ca, 0x1, 0x3, 0x400, 0x101, 0x8, 0x3, 0x6a34, 0x43a9, 0x6, 0x6, 0x6, 0x7, 0x9, 0x20, 0x8c, 0x1c, 0x2d1000, 0xd, 0x0, 0xe, 0x8, 0x4, 0x7fff, 0x7, 0x2, 0x7, 0x5, 0x0, 0x8, 0x2, 0x40, 0x6, 0x2, 0xe, 0x8dcf, 0xb3, 0x5, 0x3d, 0x1, 0x4, 0x4, 0x6, 0x3, 0x1, 0xfff, 0x6, 0x6, 0x6, 0x5, 0x6, 0x101, 0x3, 0x8, 0x9237, 0x7, 0x8, 0x0, 0x3, 0x0, 0xac, 0xa8, 0x8, 0x4003, 0x1, 0x81, 0x7, 0x7ff, 0x82, 0xfffffff7, 0x3ff5, 0x1, 0x1, 0xfa, 0xc, 0x678, 0x7, 0x953, 0x40, 0xc3, 0xfff, 0x4, 0x4, 0x2, 0x3, 0x67, 0xcab5, 0x0, 0xea1, 0xb7e2, 0x10001, 0x9, 0x4, 0x0, 0x1, 0xffffffff, 0x4, 0x5, 0x5, 0x2, 0x10000, 0x70, 0x5, 0x4, 0x1, 0x18, 0x2160, 0x7, 0x2, 0x8, 0x1, 0xfffffe00, 0x800, 0xfffff800, 0x9, 0x7fffffff, 0xc45d, 0x1, 0x52772e2c, 0x6, 0x4, 0x80000001, 0xc]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff7}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000000, 0x2, 0x9, 0x8, 0x7, 0xb5, 0x1c35, 0x1, 0xffff, 0x1, 0xfffff27c, 0x7, 0x7fff, 0x9, 0x7, 0x9, 0x5, 0x2b, 0x7, 0xdc, 0x9, 0xefc, 0x8, 0x4, 0xe, 0x4, 0x3e04e386, 0x837d, 0x1, 0x1000, 0x7, 0x8, 0x1c00f710, 0x8, 0x5, 0x1000, 0xff, 0xfffff8b3, 0x7fffffff, 0x2, 0x8, 0x40, 0x2, 0x9, 0x6, 0x7, 0x1, 0x5, 0x4, 0x1, 0x40, 0xa0c, 0x6, 0x6, 0x1fc, 0x3aad, 0x80000001, 0xd, 0x4, 0x7, 0x4, 0x5, 0x9, 0x401, 0x7, 0x9, 0x7, 0xfffffffb, 0x1, 0x0, 0x3, 0x5, 0xffff, 0xfffffffb, 0x951, 0x3, 0x4, 0x1ff, 0x2, 0x1, 0x0, 0x2932, 0x0, 0x180, 0x0, 0x9, 0x9, 0x3, 0xffff, 0x1, 0x0, 0xf, 0xa7bd, 0x0, 0x4, 0x2400000, 0xe, 0x0, 0x9b56, 0x0, 0x9, 0x1ffc0000, 0x1, 0x9, 0x40, 0x2, 0x8, 0x0, 0x9, 0x76487dc2, 0x8, 0x1ff, 0x0, 0xc, 0x9, 0xfffffffc, 0x7, 0xfffffffa, 0x3, 0x5, 0x3ff, 0x0, 0xfffffffb, 0x0, 0x6, 0x9caf, 0x1, 0x100, 0x8, 0x2, 0x2, 0x9, 0x1c, 0x8000, 0x1cf7, 0x3, 0x5e7, 0xe7, 0x1, 0x0, 0x1000, 0x7ff, 0xb96, 0x4, 0x0, 0x0, 0x2, 0x7fff, 0x7, 0x8, 0x8000, 0x6a0, 0xfffffff8, 0x3, 0x0, 0x1, 0x7, 0x8001, 0xb4, 0xd89, 0x7fff, 0x1000, 0x5, 0x0, 0xa3c, 0x9, 0x2, 0x2, 0x6, 0x2, 0xcbd, 0x10000, 0x8, 0x7f, 0x9, 0x4, 0x6, 0xf4, 0x7, 0x100, 0x3, 0x5, 0x1, 0x4, 0x9d41, 0x623b781b, 0xfff, 0x4, 0x80000000, 0x0, 0x1, 0x3, 0x0, 0xc, 0x5, 0x37973d8, 0x4, 0x7fff, 0x5, 0x6, 0xd66, 0x83, 0xd, 0x8, 0x81, 0xec5a, 0x5, 0x4, 0x4, 0x2, 0x10000, 0x0, 0x272, 0x6, 0xffffffff, 0x6, 0x3, 0x6, 0x7f, 0x4, 0x80000001, 0x1, 0x3, 0x4, 0x2, 0x0, 0x4, 0x400, 0xf, 0x1, 0x4, 0x8, 0x1000, 0x8, 0x10, 0x400, 0x0, 0x400, 0x4, 0x1000, 0x5, 0x7, 0x100, 0x9, 0x5, 0xe0ef, 0x18e, 0x3, 0x7c94, 0x3af1, 0xc900000, 0x8, 0x0, 0x3, 0x7, 0xffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x10000000, 0x2, 0x2, 0x9, {0xa, 0x0, 0x0, 0x9, 0x5, 0xfffffffa}, {0x40, 0x0, 0x400, 0x8, 0x40, 0x3}, 0x4, 0x5, 0xffff}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x10000000, 0xd89d, 0xffffffff, 0x3, {0x6, 0x0, 0x766, 0x6, 0x6, 0x4}, {0xff, 0x2, 0x80, 0x8, 0x9, 0x2}, 0x2, 0x3, 0xe2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x4, 0x8, 0x2, 0x3, {0x0, 0x1, 0x0, 0x7, 0x5, 0x8}, {0x0, 0x0, 0x7f, 0x8, 0x1, 0x2}, 0x3, 0x401, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0xc2f, 0x8, 0x0, 0x7, 0x7, 0xffffd9f4, 0x1, 0x3, 0x1ff, 0x4, 0xcb, 0x7f, 0xa, 0x3b4d593a, 0x2, 0x48, 0x3b, 0x93, 0x0, 0xffff457e, 0x10000, 0x6, 0x9, 0x8, 0x8, 0x1, 0x4, 0x9, 0x839f, 0x8000, 0x0, 0x7, 0x9, 0x7, 0x6, 0x2, 0x5, 0x7, 0x1, 0x4, 0x81, 0x2000, 0x3, 0x734d, 0xa4, 0x0, 0x80000001, 0x2, 0x8001, 0xd5c, 0xdc6, 0x1, 0x80000000, 0x2, 0x2, 0x6f7da0df, 0x85c1, 0x0, 0xc0, 0x5, 0x3ff, 0x9d25, 0x800, 0x86c3, 0x80000000, 0x5, 0x1, 0x3, 0x4, 0x7, 0x7ff, 0x5, 0x3, 0x100, 0x0, 0x4bf8, 0x8, 0x579, 0x2, 0xffffffff, 0x8, 0x56d, 0x7fff, 0x2, 0x2, 0x3ff, 0xb8, 0x3, 0x0, 0x1, 0x80, 0x3, 0x0, 0x7c, 0x0, 0x1, 0x8, 0x65, 0x0, 0x9, 0x3, 0x7fffffff, 0xfffffffc, 0x4, 0xfffffff6, 0x7, 0x9, 0x4, 0x6f, 0x7, 0x3, 0x5, 0x4, 0x1d1, 0x8000, 0x7fffffff, 0x8, 0xfff, 0x8, 0xa, 0x4, 0xf09, 0x1, 0x4, 0xfae0, 0x2, 0x1, 0x9, 0x0, 0x40, 0x7fff, 0xd, 0x3, 0x0, 0x0, 0x5c5f, 0x7bf15ffa, 0x9, 0x78, 0x7, 0x2, 0x0, 0x4, 0x4, 0x1, 0x7, 0x3, 0x8d40, 0xff, 0x6, 0x1, 0xfffffff9, 0x1, 0x1, 0x101, 0x9, 0x3, 0xfffffffb, 0x4, 0xc1c5, 0x401, 0xb, 0x5, 0x80, 0x0, 0x4, 0xb, 0x7fff, 0x3, 0x6, 0x2, 0x2, 0x3b8, 0x8, 0x7f, 0xff8, 0x0, 0x8, 0xfffffffd, 0x7, 0x4, 0x9, 0x5, 0x0, 0x5, 0xc271, 0x8, 0x4, 0x6, 0x7, 0x7, 0x6a87, 0x0, 0x8, 0x2, 0x80000001, 0xb, 0x5, 0x80000001, 0x1, 0x7ff, 0x4, 0x1ea, 0x400, 0x0, 0x8, 0x5, 0x6, 0x9, 0x8, 0xfffffff8, 0x401, 0x8, 0x7, 0x401, 0x7, 0x9, 0x2, 0x5, 0x2, 0x1, 0x9, 0xf481, 0x9, 0x7ff, 0x2, 0x8, 0x5, 0xf, 0x8, 0x800, 0x1000, 0x5b01, 0x1, 0x8000, 0x45, 0x7, 0x7, 0xf98, 0x2, 0xfffffffe, 0x6, 0x0, 0x1, 0xa3c6, 0x6, 0x241c, 0x1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2a8, 0x0, 0x6, 0x9, 0x8, 0x0, 0x210, 0x6e45, 0xe, 0x7, 0x6, 0x9d, 0x0, 0x6, 0x2, 0xe9, 0x0, 0x9, 0x1, 0x3ff, 0x2, 0xae, 0x7fff, 0x45a, 0xb79, 0xffff, 0x4, 0x6, 0xfffff864, 0x3, 0x0, 0x7, 0x1, 0x100, 0x6, 0x9, 0x8, 0x4, 0x7, 0x4, 0xfffffffd, 0x5, 0x9f9a, 0x6, 0x7fff, 0x8, 0x100, 0xa110, 0x7, 0x0, 0x0, 0xc, 0x10001, 0x8, 0x9, 0x3, 0xbb2, 0xfffffbfa, 0xbd4, 0x2, 0xa2c, 0x6, 0x8, 0x6, 0x3, 0x6, 0x3, 0x4, 0xfffffffc, 0x8001, 0x3, 0x0, 0x1000, 0xd5, 0x479f, 0x9, 0x6, 0x101, 0x2, 0xfffffffc, 0xfff, 0x5, 0x633, 0x8, 0xa8d7, 0x81, 0x6, 0x0, 0x8, 0x8, 0x1ff, 0xe017, 0xfb8e, 0xd, 0xc, 0x0, 0x6, 0x4, 0x0, 0x1, 0xb, 0xd, 0x7, 0x8, 0xfffffffe, 0xfffffe01, 0x8, 0x2, 0xecf2, 0x8001, 0x4, 0x6, 0x5, 0x5, 0x9, 0xffffffff, 0x1, 0x8f7, 0x8001, 0x7, 0x9, 0xffff0001, 0x2, 0x6, 0x9, 0x1, 0x3, 0x96c4, 0x6, 0x8, 0xfffff02d, 0x5, 0x8001, 0x4, 0x7, 0x3, 0x8, 0x5, 0x6, 0x3, 0x0, 0x2, 0xfffffffe, 0x1, 0x1000, 0x0, 0xffffffff, 0x10001, 0x401, 0x7ff, 0x4, 0x988, 0xd, 0x3, 0x2, 0x0, 0x5, 0x6, 0x8, 0x2, 0x0, 0x100, 0x8b9, 0x2000, 0x4, 0x7, 0x2, 0xf, 0x9, 0x6, 0x3, 0x20080000, 0x0, 0x6, 0x3ff, 0x0, 0x41f8, 0x2, 0x7, 0x9, 0xb, 0x9, 0x4, 0x8, 0xfffffffd, 0x563513fd, 0x0, 0x5, 0x7ff, 0xc, 0x800, 0x10, 0x2, 0x8, 0x3ff, 0x5, 0x7, 0x9, 0x1e97, 0x6, 0x7, 0x8, 0x89d, 0xe, 0x4, 0x0, 0x7, 0x2, 0x4, 0xbd6, 0x3, 0xb, 0x10000, 0x7, 0x5, 0x1ff, 0x9, 0xb7d, 0x7, 0x7fffffff, 0x2, 0x5, 0x5, 0xd2e5, 0xca, 0x4, 0x40, 0x4, 0xf0, 0x80, 0x2378, 0xfff, 0x85, 0x7, 0x9, 0x200, 0x9, 0x10, 0x6, 0x6, 0x6c42, 0x1, 0x6, 0x9, 0x9, 0xfffffffc, 0x0, 0x7, 0xffffff7f, 0x6, 0x6, 0x4, 0x6, 0xfff, 0xfffffff9, 0xd]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8, 0xaae, 0x0, 0xe0b0, 0x1000, 0x1ff, 0x1, 0x5, 0x48f9, 0x80000, 0xff, 0x2, 0x2, 0x1, 0x9, 0x7fff, 0x8, 0x0, 0x1, 0x8, 0x80000001, 0x5, 0xf7d, 0x8, 0xfffff800, 0xfffffff9, 0x0, 0x1, 0x2, 0xe, 0x3, 0x101, 0x80000000, 0x80000000, 0x3ff, 0xa, 0x9, 0x6, 0x8000, 0x9, 0xec8, 0x6a, 0x64, 0x7, 0x4, 0x7, 0xa, 0x90c, 0x0, 0x7, 0x4, 0x5, 0xfffffff3, 0x2, 0x101, 0x6, 0x80000001, 0x8, 0xed0, 0x80, 0x4, 0xd3, 0x7, 0x3c0000, 0x9, 0x6, 0x1, 0x8, 0x579, 0x8, 0x2, 0x9, 0xa, 0x54, 0x7f, 0x1, 0xfffff3b6, 0x7, 0x80, 0x8, 0x0, 0x982, 0x6, 0x5, 0x128000, 0x1, 0x6, 0x10000, 0x6, 0x175, 0x1, 0x1, 0x3, 0x100, 0x10, 0x101, 0xce2b, 0x6, 0xd2a, 0x7, 0x8, 0x6, 0x2, 0xfffffffd, 0x5, 0x7, 0xffff, 0x3, 0x98ed, 0x6, 0x100, 0x10, 0x4, 0x2, 0x4, 0x3ae7, 0x6, 0xffffffff, 0x3, 0x0, 0xca2, 0x893c, 0x200, 0x2, 0xc, 0x4, 0x1, 0x3, 0x2f, 0x5, 0x1, 0x0, 0x8, 0x3e18, 0x8, 0x3, 0x8, 0xb, 0x4, 0x9, 0x1, 0x3, 0x40, 0x13e, 0xe6, 0x1, 0x8, 0x8b, 0x7f, 0x3, 0x4, 0xffff, 0x6, 0x68, 0x8, 0x1, 0x5, 0x9, 0x8, 0x7, 0x7f, 0xc, 0xb, 0x3, 0x8, 0x6, 0xf5, 0x1, 0x3, 0x401, 0x7f, 0x80, 0x5, 0x0, 0x8, 0xf44, 0x4, 0x4, 0x7fffffff, 0x6, 0x1, 0x3, 0xb0a8, 0x8, 0xf, 0x1, 0x3, 0x4, 0x1, 0x2, 0x2, 0x7, 0x1000, 0x2, 0x3000000, 0x200, 0x0, 0x10001, 0x1, 0xf, 0x249c0001, 0x7ff, 0x54, 0x7f, 0x2, 0x0, 0x3, 0x1, 0x8001, 0x7f, 0x1, 0x5, 0xb2e, 0xe2, 0x5, 0x81, 0x7, 0x58, 0x0, 0x5, 0x4000000, 0x6, 0x100, 0x1000, 0x1ec, 0x30000, 0x100, 0x800, 0x3d, 0xc80a, 0x7fff, 0x912e, 0x7, 0x8, 0x50def00c, 0x4, 0x68a2, 0x4, 0x7, 0x5, 0x101, 0x7d54fc4, 0x80000001, 0x4, 0x1, 0x10001, 0xfffff348, 0x3ff, 0x2, 0x6, 0x5d, 0x5, 0xc70, 0x0, 0x8000]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6a}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xbb9}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x2, 0xf6, 0x8001, 0xb607, 0x6, 0x0, 0x40, 0x0, 0x8, 0x0, 0x8, 0x2, 0x9, 0x3, 0xfffffffb, 0x4f, 0x7, 0x5, 0x2, 0x3, 0x8, 0x6, 0x8, 0x200, 0x800, 0x5, 0x8, 0x1e, 0x4, 0x10000, 0x0, 0x800, 0x8, 0x0, 0x2, 0x6, 0xb, 0xa7, 0xa, 0x9, 0x1, 0x654, 0x62, 0x6, 0x7, 0x81, 0x0, 0x0, 0x2, 0x9, 0x4, 0x6, 0x0, 0x7, 0x9, 0xffff, 0xc, 0x625f, 0x2, 0x4, 0x3, 0x2, 0x80000000, 0x2, 0x6, 0x3, 0x2, 0xfc, 0x77, 0x797, 0x10000, 0x0, 0x4, 0x600, 0x4, 0x2, 0x3, 0x6, 0x9, 0x9, 0xffffffff, 0x8001, 0x7, 0xfffffffd, 0x2, 0xd6, 0x6, 0x61f6, 0x9, 0x0, 0xff, 0x2, 0x1, 0x7, 0xfffffff5, 0xa, 0x7, 0x7fffffff, 0x2, 0x4, 0x2, 0x0, 0xf, 0x2, 0x1, 0x8, 0x20, 0x21c9, 0x8, 0x5, 0x0, 0x8, 0x4, 0x10, 0xfffffff3, 0x3ff, 0x1, 0x4, 0x7, 0x8, 0xfffffff6, 0x5, 0x8, 0x7, 0x4, 0x10, 0x6, 0x8, 0x1, 0x7, 0x2b, 0x2, 0x8, 0x70, 0x4, 0x4, 0xf6, 0x1, 0x8, 0xf, 0x6, 0x40, 0x7, 0x20000000, 0x80000000, 0x800, 0xa5, 0xc, 0xffff, 0x2, 0x2, 0x5, 0x80000001, 0xffc, 0x5, 0x9, 0x7, 0x8, 0x8, 0x9, 0x2, 0xa000, 0x861, 0x3, 0x4, 0x9, 0x401, 0x81, 0x3ff, 0x5, 0x0, 0x2, 0xa8, 0x4, 0xb238, 0x2, 0xee25, 0x6, 0x2, 0x1000, 0x2, 0xffffff80, 0x81, 0xfffffffe, 0x101, 0x3ff, 0x5, 0x401, 0xb7a, 0x1, 0x1, 0x0, 0x7, 0x7, 0x6, 0x5, 0xc, 0x6, 0x3, 0x200, 0xae51, 0x638, 0xaf, 0x9, 0x8, 0x2, 0xb, 0x6e, 0xffffb075, 0x7, 0x0, 0x9, 0x7e44, 0x167b, 0x3, 0x6, 0x3ff, 0x9d, 0x0, 0x6, 0x3, 0x5, 0x1, 0x4, 0xfffffffc, 0x98a, 0x4, 0x6, 0x5, 0x9, 0x1, 0xfffffffc, 0x75, 0x7, 0x7fff, 0x4, 0xfffffffd, 0xd03, 0x8, 0x5, 0x4, 0xc1, 0x7fff, 0x1, 0x9, 0x2, 0x6, 0x7fff, 0x9, 0x0, 0x200, 0x2, 0x800, 0x4c, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb6f3, 0x8, 0xe1066bf5, 0x9, 0x43, 0x7fff, 0x3, 0x4, 0xfffffffe, 0x8001, 0x8, 0x802, 0xfffffffe, 0xaa, 0xe5d7, 0x8, 0x7, 0xfffffff8, 0x7, 0x4, 0x3, 0x100, 0x3, 0x1, 0x4, 0xffff, 0x3, 0x6c, 0x50000000, 0x2, 0x9, 0x81, 0x7d48, 0x8001, 0x1, 0x2, 0x7f, 0xfffffff3, 0x5, 0x0, 0xfffffffe, 0xc, 0x3, 0x5, 0x7, 0xfffffffa, 0x7f, 0x8, 0xfffffff8, 0x8, 0xfffffc01, 0x2, 0x2, 0x600, 0x401, 0x6, 0x7, 0x6, 0x68, 0x19f, 0x8, 0x7c8, 0x3, 0x4, 0x7b2, 0x6, 0x7, 0x1, 0x5, 0xf, 0x8, 0xffffd800, 0xbf, 0x81, 0x1, 0xffff, 0x3, 0x6, 0xe, 0xfff, 0xfffffffd, 0x5, 0x3, 0x4, 0x706, 0x7, 0x7fff, 0x10000, 0xfffffffd, 0x2, 0x7f, 0x81, 0x3, 0x1, 0xc, 0x0, 0x7, 0x9, 0x6, 0x0, 0xfff, 0x1f3f, 0x6, 0x8001, 0x3, 0x1, 0xb800000, 0x8, 0x43a0cf58, 0x9, 0x4, 0xfffffffd, 0x9, 0x7ff, 0x7, 0x3933afe1, 0x2, 0x1, 0x7fffffff, 0x3, 0xb93, 0x0, 0x9, 0x7, 0x0, 0x80000001, 0xb54, 0x0, 0x9b, 0x7, 0xfffffff8, 0x9, 0x7, 0x4, 0x8, 0xced, 0xd, 0x2, 0x2, 0x66, 0x1, 0x82d, 0x0, 0x0, 0x1, 0x7, 0x6, 0x6, 0x8, 0x9, 0x9, 0x4, 0xa, 0x400, 0x2, 0x54, 0x5, 0x9, 0x1, 0x8, 0xe5, 0x8, 0xf78, 0xb, 0x2, 0x3ff, 0x800, 0x1e8d, 0x8000, 0x8, 0xd, 0x3, 0x4, 0x87, 0x3e, 0x3d, 0x6, 0x6, 0xc, 0x9, 0x4, 0x7, 0x4, 0x6, 0x1ff, 0x9, 0x7, 0x7a6a, 0x6, 0x2, 0xfffffffe, 0x1, 0x9, 0x7e9, 0x3, 0x400, 0xc, 0x6, 0x8, 0x5, 0x6, 0x9, 0x1, 0x5, 0x69, 0x2, 0x2, 0x4, 0x4, 0x3, 0xfffffff8, 0x7204c175, 0x7fffffff, 0x2, 0x5fe2, 0x100, 0x6, 0x1, 0x2, 0xff, 0x5, 0x6, 0x10, 0x401, 0x1, 0x3, 0x4, 0x10, 0x6, 0x7, 0x0, 0x0, 0x150, 0x9, 0x200, 0x6, 0x3, 0x5, 0x81, 0x80, 0x708, 0x0, 0x200, 0x48c1, 0x6, 0x3c, 0x904, 0x60de, 0x3, 0x5, 0x2, 0x4, 0xa2fe, 0x3000000, 0xd4d, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0x1, 0x10001, 0x3, 0x0, {0xd6, 0x2, 0x4, 0x2, 0xfff, 0x9}, {0x3, 0x2, 0x5, 0x80, 0x10, 0x8}, 0x2, 0x7, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x2, 0x10, 0x9f, 0x1, {0x1, 0x1, 0xd, 0x4, 0x0, 0x8}, {0x2, 0x1, 0x1, 0x9f6, 0x5, 0x2e}, 0x401, 0x5, 0x5d}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7a372d7b, 0x3, 0x3000000, 0x7f, 0x1, {0x6, 0x0, 0x7, 0x1, 0x2, 0x7}, {0x3, 0x0, 0x5, 0x1e6, 0x0, 0x8}, 0x57, 0x1, 0x962}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x87cd, 0xfffffff7, 0x4bb, 0x8, 0xfffff001, 0x6, 0x3, 0xffffff10, 0xf, 0x2, 0x8, 0x9, 0x4, 0x6, 0xa, 0x7, 0x1ff, 0x3ff, 0x1, 0x1, 0xb, 0x22, 0xa, 0x0, 0x9, 0x1, 0x7f, 0x6, 0x9, 0x4, 0x45, 0x40, 0x1, 0x9, 0x1ff, 0x5, 0x5, 0xa, 0x1000, 0x3, 0x8, 0xa, 0x8, 0x9, 0x1, 0x3, 0x9, 0xfffffffb, 0x56c, 0x5, 0x6, 0x8, 0x9, 0x9bc, 0x3, 0x1, 0xffffffff, 0x10001, 0x1, 0x0, 0x7, 0x3, 0x5, 0x800, 0x0, 0x9, 0x4, 0x4, 0x2, 0x6, 0xdd, 0x8, 0x0, 0x280, 0x7, 0x9, 0x3, 0x86e2, 0xfffff3f1, 0x8, 0x9, 0xda, 0x5, 0x8, 0x0, 0x2, 0x6, 0x1, 0xa, 0x9, 0x3, 0x4, 0xfffeffff, 0x80, 0x0, 0x0, 0x13a6, 0xff, 0x6, 0x9f83, 0x7, 0xc7, 0x3, 0xe94, 0x2, 0x29bc, 0x7, 0x10, 0x3, 0x200, 0x2, 0x3ff, 0x1, 0x3, 0x2, 0x2, 0x41a3, 0x1, 0x50f8, 0x2, 0x7841, 0x8c1, 0x6, 0x2, 0x6, 0x8, 0x80, 0x2d2, 0x1, 0x1, 0xc, 0x8, 0x7, 0x7ff, 0x2f5, 0xc2, 0x3, 0x93d3, 0x8, 0xffff, 0xbbaa, 0x3, 0x1bd000, 0x7, 0x10, 0x9, 0x8, 0xb553, 0xde47, 0x200, 0x0, 0x0, 0x0, 0x9, 0x8, 0x5, 0x9, 0xff, 0x2000, 0x40, 0x10001, 0x6293, 0x7fff, 0x3, 0x5, 0xff, 0x1, 0x0, 0x9, 0x6, 0xe8, 0xfffffffb, 0x7, 0x7, 0x10, 0x596c, 0x6, 0x2, 0x80000001, 0x9, 0xe, 0x1200000, 0x0, 0xff, 0x8, 0x0, 0x3, 0x1, 0x1, 0xfffffff7, 0x40, 0x8000000, 0xf, 0x9, 0x5, 0x7f, 0x400, 0x46c9, 0x4, 0xfffffffe, 0x5, 0x0, 0x4c, 0x0, 0x9, 0xb0, 0x4, 0x1, 0x400000, 0x10000, 0xdb, 0x3, 0x9266, 0x4, 0x7f, 0x10, 0x6, 0x5, 0xffff6cd6, 0x8, 0x6, 0xf, 0x8, 0x3f498dee, 0x5, 0x4, 0xffffffff, 0x5, 0x0, 0x1, 0x6, 0x80, 0x4, 0x2, 0x6, 0x1, 0x1000, 0x4, 0xffffffff, 0x7ff, 0x1984, 0xf51, 0x4, 0x6, 0x2, 0x10001, 0x6, 0x7fffffff, 0x3, 0x7, 0x800, 0x6, 0x2, 0x1000, 0x2]}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}]]}, {0xf2, 0x6, "0c5d8da014631aeb6ad3ce24fe8c48da806fc9d80b5b7f571a0d686214297ef23e394455240e41261b7d2078c90a5e930bd6bdf54eb37b6fec491f9c499759f0211a7ef9cc5a6b29ca3249af7b97939df2702ecbd8335c7a2c0c1bfa542963e6aa732242f108e58891bbf492f7befa479eb597c2fd95b51480d78f5e5b7f3d81ad66ed5eb06104fa7156518942b6e6d06a894c6e63e7d68b7daa83c71dd0ca95089de7a719f1725991a73809f088d02b2ee30cf3fc8e3fe50ac56bd7cc0ab6526c2975b783e9bd578b581fbdede189d4737c486cb58a9bdc7d6f5a4cb7854c3c80ca9af2fc01bda35e7df9ca1d25"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0x80, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0xeafe, 0x2, 0x7, 0x800}}]}, {0x3b, 0x6, "fc0fc29109323553f6d3a76fcf8eff56036d9ffb76ff79f7598a2740ad8c201339e407e34c1b3dff8b7a97af1119eda142dab80380bc91"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x279c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), 0xffffffffffffffff) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xfffe}}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_TIMEOUT={0xc}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e6576650000500002800500080000000000040006000500090001000000050003000900000005000a"], 0x88}}, 0x0) 116.492772ms ago: executing program 32 (id=3819): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="3b4ae27d883f82b12f78fe34bdd4f7fd41c02e76fe0a2a763ae92d627cffd52c1315c729452095062b3ed9c1e0d7a599fafa716793d4653b4144ccfd7ecfeee6e3a1bb024d572fa3dccfba6b4cba365c6f0a199bb31244dda571349af132a93c"], 0x2c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010093797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020089000000380001800c00017e209c00626974776973650028000280080003400000000240000000120400058008000480040001000900010073797a30000000001400000011000100"/268], 0x10c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r9, 0xff, 0x1, 0x0, &(0x7f0000000040)=0xfffffffffffffed0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x10c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x9, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x4}, {0xfffffff9, 0x1, 0x1, 0x7}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x8, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1804004, 0xfffffff8, 0x400}]}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x28bf, 0x20000000, 0xd, 0x1, 0x2, {0x3, 0x2, 0x3, 0x2, 0x6}, {0xf3, 0x1, 0xfffb, 0x6f4, 0x6, 0x6}, 0x6, 0x0, 0xfafd}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0xc040) 97.580916ms ago: executing program 33 (id=3822): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) splice(0xffffffffffffffff, &(0x7f0000000100)=0x7, 0xffffffffffffffff, 0x0, 0x5, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x4, {0x0, 0x0, 0x0, 0x0, 0x88ad7db5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x48, 0x2, 0x48, 0x5}, {0x28, 0x4, 0x5, 0xffbff038}, {0x6, 0x27, 0x2, 0x207}]}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa}}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000035f5150001000004002c0524000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r3, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)='U', 0x1}], 0x1, 0x0, 0x0, 0x4004000}}], 0x1, 0x0) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000440)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16=r8, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r9, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) openat$cgroup_procs(r5, &(0x7f00000006c0)='cgroup.threads\x00', 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x8c, r6, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x40}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xf4}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) r11 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) splice(0xffffffffffffffff, &(0x7f00000064c0)=0x8, 0xffffffffffffffff, 0x0, 0x2000000000000e, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r11, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000006500)=@newtaction={0x279c, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x1a0, 0x1, [@m_vlan={0xcc, 0xd, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x1, 0xffffffffffffffff, 0x2, 0x4}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x8, 0x2, 0xc56}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x8000, 0x4, 0x8, 0x4}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x806}]}, {0x31, 0x6, "cebcde2e4d2c72bafa9569c8bfd0613e38aa693e1ca82e5f62ad31b8d92c90f38c85d01d103b653ecab5b68a5d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0xd0, 0x14, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x5, 0xffffffffffffffff, 0x7, 0x3}, 0x16}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x7, 0x3, 0x80, 0x8}, 0x2f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x7, 0xc, 0x9}, 0x31}}]}, {0x50, 0x6, "cfa55703739f2fc1b236f6347e91c634d3d8408f77a93984add68debc10ad99d273c312e5ecadb5fb6600fe1cf8680bec2d8d26a8945ecdd8b11865744906aac06020898d333351255035c56"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, {0x25e8, 0x1, [@m_vlan={0x138, 0x1f, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x787}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x235}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0xc29f, 0x8, 0x8, 0x400}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x23f, 0x6, 0x3, 0x333, 0x800}, 0x2}}]}, {0xa9, 0x6, "158e9407e9e02bce6b51bb46b4ed8b96601d761382da3e978517d95f5f150f9a88fb5d400d653c26b25e6477b74809d79d86ccb709b105b5cdfc5af76c5ffdec5eac3d5157c4dc332d8ae989f91c374928b61f8b5e5e72ddec24cdfadffad2b052d3e79c5c9c68f859d04aea7ddad3fdbefff7379db81094d8e2010d6cfcda98d1a27cf8483b425bf4ec4ee9417447963e0302785b997442514f5034293b62a8e965f9354c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ct={0x94, 0x3, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "5516bc61d1dabcdc063ca70b1e7003aa"}, @TCA_CT_ZONE={0x6, 0x4, 0x2}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x1}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x7f}]}, {0x3d, 0x6, "72f8bf6125729c967da84d6a46ef061f3b904f827d7e568279890693a3637cdb564ea55bd499866afa97286b261aed9cc784127f7ffdafea47"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x58, 0x10, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}]}, {0xc, 0x6, "26a42716d268d31b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x2340, 0xa, 0x0, 0x0, {{0xb}, {0x2224, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x74}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x6, 0x9, 0x9, 0x0, 0x1ff, 0x6, 0x4, 0x80000001, 0x10, 0xfffffffc, 0x8, 0x5, 0x4, 0x8000, 0xffffffbf, 0x5, 0x1, 0x9, 0x5, 0x6, 0x597, 0x6, 0x9, 0x2, 0x6, 0xed84, 0x100, 0xc4a3, 0x55, 0x5, 0x9, 0x81, 0x5, 0x6, 0x2, 0x10000, 0x1b4, 0x5, 0x7fffffff, 0x6, 0x8, 0x0, 0x7, 0xfffffffd, 0x2, 0x48000, 0x3, 0x6, 0x6, 0xff, 0x7f, 0x3ff, 0x1000, 0x1, 0x40, 0x3, 0x8, 0xfffffff9, 0x1, 0x8, 0x369, 0xfc, 0x1, 0x6, 0xfffffff8, 0x2, 0x8, 0x800000, 0x5, 0xffff67c5, 0x80000000, 0x8, 0x3, 0x8, 0xe4, 0x4, 0x5, 0xac, 0x401, 0xf, 0xdb6, 0x80000000, 0x3, 0x8001, 0x9, 0x1, 0x40, 0x7, 0x7f, 0x7, 0x20, 0x80, 0xa, 0x2, 0x6, 0x1, 0x2, 0x4, 0x608e, 0x800, 0xffffff81, 0x0, 0x140, 0x4, 0xe, 0xcfdb, 0xfff, 0x6, 0x95, 0x2, 0x2, 0xd742, 0x0, 0x4, 0x4, 0x100, 0x5957, 0x6, 0x2, 0x8, 0x1, 0xf3db, 0x5, 0xff, 0x8, 0x236, 0x0, 0x82a9, 0x5, 0x1, 0x2, 0x4e, 0x8ca, 0x1, 0x3, 0x400, 0x101, 0x8, 0x3, 0x6a34, 0x43a9, 0x6, 0x6, 0x6, 0x7, 0x9, 0x20, 0x8c, 0x1c, 0x2d1000, 0xd, 0x0, 0xe, 0x8, 0x4, 0x7fff, 0x7, 0x2, 0x7, 0x5, 0x0, 0x8, 0x2, 0x40, 0x6, 0x2, 0xe, 0x8dcf, 0xb3, 0x5, 0x3d, 0x1, 0x4, 0x4, 0x6, 0x3, 0x1, 0xfff, 0x6, 0x6, 0x6, 0x5, 0x6, 0x101, 0x3, 0x8, 0x9237, 0x7, 0x8, 0x0, 0x3, 0x0, 0xac, 0xa8, 0x8, 0x4003, 0x1, 0x81, 0x7, 0x7ff, 0x82, 0xfffffff7, 0x3ff5, 0x1, 0x1, 0xfa, 0xc, 0x678, 0x7, 0x953, 0x40, 0xc3, 0xfff, 0x4, 0x4, 0x2, 0x3, 0x67, 0xcab5, 0x0, 0xea1, 0xb7e2, 0x10001, 0x9, 0x4, 0x0, 0x1, 0xffffffff, 0x4, 0x5, 0x5, 0x2, 0x10000, 0x70, 0x5, 0x4, 0x1, 0x18, 0x2160, 0x7, 0x2, 0x8, 0x1, 0xfffffe00, 0x800, 0xfffff800, 0x9, 0x7fffffff, 0xc45d, 0x1, 0x52772e2c, 0x6, 0x4, 0x80000001, 0xc]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff7}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000000, 0x2, 0x9, 0x8, 0x7, 0xb5, 0x1c35, 0x1, 0xffff, 0x1, 0xfffff27c, 0x7, 0x7fff, 0x9, 0x7, 0x9, 0x5, 0x2b, 0x7, 0xdc, 0x9, 0xefc, 0x8, 0x4, 0xe, 0x4, 0x3e04e386, 0x837d, 0x1, 0x1000, 0x7, 0x8, 0x1c00f710, 0x8, 0x5, 0x1000, 0xff, 0xfffff8b3, 0x7fffffff, 0x2, 0x8, 0x40, 0x2, 0x9, 0x6, 0x7, 0x1, 0x5, 0x4, 0x1, 0x40, 0xa0c, 0x6, 0x6, 0x1fc, 0x3aad, 0x80000001, 0xd, 0x4, 0x7, 0x4, 0x5, 0x9, 0x401, 0x7, 0x9, 0x7, 0xfffffffb, 0x1, 0x0, 0x3, 0x5, 0xffff, 0xfffffffb, 0x951, 0x3, 0x4, 0x1ff, 0x2, 0x1, 0x0, 0x2932, 0x0, 0x180, 0x0, 0x9, 0x9, 0x3, 0xffff, 0x1, 0x0, 0xf, 0xa7bd, 0x0, 0x4, 0x2400000, 0xe, 0x0, 0x9b56, 0x0, 0x9, 0x1ffc0000, 0x1, 0x9, 0x40, 0x2, 0x8, 0x0, 0x9, 0x76487dc2, 0x8, 0x1ff, 0x0, 0xc, 0x9, 0xfffffffc, 0x7, 0xfffffffa, 0x3, 0x5, 0x3ff, 0x0, 0xfffffffb, 0x0, 0x6, 0x9caf, 0x1, 0x100, 0x8, 0x2, 0x2, 0x9, 0x1c, 0x8000, 0x1cf7, 0x3, 0x5e7, 0xe7, 0x1, 0x0, 0x1000, 0x7ff, 0xb96, 0x4, 0x0, 0x0, 0x2, 0x7fff, 0x7, 0x8, 0x8000, 0x6a0, 0xfffffff8, 0x3, 0x0, 0x1, 0x7, 0x8001, 0xb4, 0xd89, 0x7fff, 0x1000, 0x5, 0x0, 0xa3c, 0x9, 0x2, 0x2, 0x6, 0x2, 0xcbd, 0x10000, 0x8, 0x7f, 0x9, 0x4, 0x6, 0xf4, 0x7, 0x100, 0x3, 0x5, 0x1, 0x4, 0x9d41, 0x623b781b, 0xfff, 0x4, 0x80000000, 0x0, 0x1, 0x3, 0x0, 0xc, 0x5, 0x37973d8, 0x4, 0x7fff, 0x5, 0x6, 0xd66, 0x83, 0xd, 0x8, 0x81, 0xec5a, 0x5, 0x4, 0x4, 0x2, 0x10000, 0x0, 0x272, 0x6, 0xffffffff, 0x6, 0x3, 0x6, 0x7f, 0x4, 0x80000001, 0x1, 0x3, 0x4, 0x2, 0x0, 0x4, 0x400, 0xf, 0x1, 0x4, 0x8, 0x1000, 0x8, 0x10, 0x400, 0x0, 0x400, 0x4, 0x1000, 0x5, 0x7, 0x100, 0x9, 0x5, 0xe0ef, 0x18e, 0x3, 0x7c94, 0x3af1, 0xc900000, 0x8, 0x0, 0x3, 0x7, 0xffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x10000000, 0x2, 0x2, 0x9, {0xa, 0x0, 0x0, 0x9, 0x5, 0xfffffffa}, {0x40, 0x0, 0x400, 0x8, 0x40, 0x3}, 0x4, 0x5, 0xffff}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x10000000, 0xd89d, 0xffffffff, 0x3, {0x6, 0x0, 0x766, 0x6, 0x6, 0x4}, {0xff, 0x2, 0x80, 0x8, 0x9, 0x2}, 0x2, 0x3, 0xe2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x4, 0x8, 0x2, 0x3, {0x0, 0x1, 0x0, 0x7, 0x5, 0x8}, {0x0, 0x0, 0x7f, 0x8, 0x1, 0x2}, 0x3, 0x401, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0xc2f, 0x8, 0x0, 0x7, 0x7, 0xffffd9f4, 0x1, 0x3, 0x1ff, 0x4, 0xcb, 0x7f, 0xa, 0x3b4d593a, 0x2, 0x48, 0x3b, 0x93, 0x0, 0xffff457e, 0x10000, 0x6, 0x9, 0x8, 0x8, 0x1, 0x4, 0x9, 0x839f, 0x8000, 0x0, 0x7, 0x9, 0x7, 0x6, 0x2, 0x5, 0x7, 0x1, 0x4, 0x81, 0x2000, 0x3, 0x734d, 0xa4, 0x0, 0x80000001, 0x2, 0x8001, 0xd5c, 0xdc6, 0x1, 0x80000000, 0x2, 0x2, 0x6f7da0df, 0x85c1, 0x0, 0xc0, 0x5, 0x3ff, 0x9d25, 0x800, 0x86c3, 0x80000000, 0x5, 0x1, 0x3, 0x4, 0x7, 0x7ff, 0x5, 0x3, 0x100, 0x0, 0x4bf8, 0x8, 0x579, 0x2, 0xffffffff, 0x8, 0x56d, 0x7fff, 0x2, 0x2, 0x3ff, 0xb8, 0x3, 0x0, 0x1, 0x80, 0x3, 0x0, 0x7c, 0x0, 0x1, 0x8, 0x65, 0x0, 0x9, 0x3, 0x7fffffff, 0xfffffffc, 0x4, 0xfffffff6, 0x7, 0x9, 0x4, 0x6f, 0x7, 0x3, 0x5, 0x4, 0x1d1, 0x8000, 0x7fffffff, 0x8, 0xfff, 0x8, 0xa, 0x4, 0xf09, 0x1, 0x4, 0xfae0, 0x2, 0x1, 0x9, 0x0, 0x40, 0x7fff, 0xd, 0x3, 0x0, 0x0, 0x5c5f, 0x7bf15ffa, 0x9, 0x78, 0x7, 0x2, 0x0, 0x4, 0x4, 0x1, 0x7, 0x3, 0x8d40, 0xff, 0x6, 0x1, 0xfffffff9, 0x1, 0x1, 0x101, 0x9, 0x3, 0xfffffffb, 0x4, 0xc1c5, 0x401, 0xb, 0x5, 0x80, 0x0, 0x4, 0xb, 0x7fff, 0x3, 0x6, 0x2, 0x2, 0x3b8, 0x8, 0x7f, 0xff8, 0x0, 0x8, 0xfffffffd, 0x7, 0x4, 0x9, 0x5, 0x0, 0x5, 0xc271, 0x8, 0x4, 0x6, 0x7, 0x7, 0x6a87, 0x0, 0x8, 0x2, 0x80000001, 0xb, 0x5, 0x80000001, 0x1, 0x7ff, 0x4, 0x1ea, 0x400, 0x0, 0x8, 0x5, 0x6, 0x9, 0x8, 0xfffffff8, 0x401, 0x8, 0x7, 0x401, 0x7, 0x9, 0x2, 0x5, 0x2, 0x1, 0x9, 0xf481, 0x9, 0x7ff, 0x2, 0x8, 0x5, 0xf, 0x8, 0x800, 0x1000, 0x5b01, 0x1, 0x8000, 0x45, 0x7, 0x7, 0xf98, 0x2, 0xfffffffe, 0x6, 0x0, 0x1, 0xa3c6, 0x6, 0x241c, 0x1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2a8, 0x0, 0x6, 0x9, 0x8, 0x0, 0x210, 0x6e45, 0xe, 0x7, 0x6, 0x9d, 0x0, 0x6, 0x2, 0xe9, 0x0, 0x9, 0x1, 0x3ff, 0x2, 0xae, 0x7fff, 0x45a, 0xb79, 0xffff, 0x4, 0x6, 0xfffff864, 0x3, 0x0, 0x7, 0x1, 0x100, 0x6, 0x9, 0x8, 0x4, 0x7, 0x4, 0xfffffffd, 0x5, 0x9f9a, 0x6, 0x7fff, 0x8, 0x100, 0xa110, 0x7, 0x0, 0x0, 0xc, 0x10001, 0x8, 0x9, 0x3, 0xbb2, 0xfffffbfa, 0xbd4, 0x2, 0xa2c, 0x6, 0x8, 0x6, 0x3, 0x6, 0x3, 0x4, 0xfffffffc, 0x8001, 0x3, 0x0, 0x1000, 0xd5, 0x479f, 0x9, 0x6, 0x101, 0x2, 0xfffffffc, 0xfff, 0x5, 0x633, 0x8, 0xa8d7, 0x81, 0x6, 0x0, 0x8, 0x8, 0x1ff, 0xe017, 0xfb8e, 0xd, 0xc, 0x0, 0x6, 0x4, 0x0, 0x1, 0xb, 0xd, 0x7, 0x8, 0xfffffffe, 0xfffffe01, 0x8, 0x2, 0xecf2, 0x8001, 0x4, 0x6, 0x5, 0x5, 0x9, 0xffffffff, 0x1, 0x8f7, 0x8001, 0x7, 0x9, 0xffff0001, 0x2, 0x6, 0x9, 0x1, 0x3, 0x96c4, 0x6, 0x8, 0xfffff02d, 0x5, 0x8001, 0x4, 0x7, 0x3, 0x8, 0x5, 0x6, 0x3, 0x0, 0x2, 0xfffffffe, 0x1, 0x1000, 0x0, 0xffffffff, 0x10001, 0x401, 0x7ff, 0x4, 0x988, 0xd, 0x3, 0x2, 0x0, 0x5, 0x6, 0x8, 0x2, 0x0, 0x100, 0x8b9, 0x2000, 0x4, 0x7, 0x2, 0xf, 0x9, 0x6, 0x3, 0x20080000, 0x0, 0x6, 0x3ff, 0x0, 0x41f8, 0x2, 0x7, 0x9, 0xb, 0x9, 0x4, 0x8, 0xfffffffd, 0x563513fd, 0x0, 0x5, 0x7ff, 0xc, 0x800, 0x10, 0x2, 0x8, 0x3ff, 0x5, 0x7, 0x9, 0x1e97, 0x6, 0x7, 0x8, 0x89d, 0xe, 0x4, 0x0, 0x7, 0x2, 0x4, 0xbd6, 0x3, 0xb, 0x10000, 0x7, 0x5, 0x1ff, 0x9, 0xb7d, 0x7, 0x7fffffff, 0x2, 0x5, 0x5, 0xd2e5, 0xca, 0x4, 0x40, 0x4, 0xf0, 0x80, 0x2378, 0xfff, 0x85, 0x7, 0x9, 0x200, 0x9, 0x10, 0x6, 0x6, 0x6c42, 0x1, 0x6, 0x9, 0x9, 0xfffffffc, 0x0, 0x7, 0xffffff7f, 0x6, 0x6, 0x4, 0x6, 0xfff, 0xfffffff9, 0xd]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8, 0xaae, 0x0, 0xe0b0, 0x1000, 0x1ff, 0x1, 0x5, 0x48f9, 0x80000, 0xff, 0x2, 0x2, 0x1, 0x9, 0x7fff, 0x8, 0x0, 0x1, 0x8, 0x80000001, 0x5, 0xf7d, 0x8, 0xfffff800, 0xfffffff9, 0x0, 0x1, 0x2, 0xe, 0x3, 0x101, 0x80000000, 0x80000000, 0x3ff, 0xa, 0x9, 0x6, 0x8000, 0x9, 0xec8, 0x6a, 0x64, 0x7, 0x4, 0x7, 0xa, 0x90c, 0x0, 0x7, 0x4, 0x5, 0xfffffff3, 0x2, 0x101, 0x6, 0x80000001, 0x8, 0xed0, 0x80, 0x4, 0xd3, 0x7, 0x3c0000, 0x9, 0x6, 0x1, 0x8, 0x579, 0x8, 0x2, 0x9, 0xa, 0x54, 0x7f, 0x1, 0xfffff3b6, 0x7, 0x80, 0x8, 0x0, 0x982, 0x6, 0x5, 0x128000, 0x1, 0x6, 0x10000, 0x6, 0x175, 0x1, 0x1, 0x3, 0x100, 0x10, 0x101, 0xce2b, 0x6, 0xd2a, 0x7, 0x8, 0x6, 0x2, 0xfffffffd, 0x5, 0x7, 0xffff, 0x3, 0x98ed, 0x6, 0x100, 0x10, 0x4, 0x2, 0x4, 0x3ae7, 0x6, 0xffffffff, 0x3, 0x0, 0xca2, 0x893c, 0x200, 0x2, 0xc, 0x4, 0x1, 0x3, 0x2f, 0x5, 0x1, 0x0, 0x8, 0x3e18, 0x8, 0x3, 0x8, 0xb, 0x4, 0x9, 0x1, 0x3, 0x40, 0x13e, 0xe6, 0x1, 0x8, 0x8b, 0x7f, 0x3, 0x4, 0xffff, 0x6, 0x68, 0x8, 0x1, 0x5, 0x9, 0x8, 0x7, 0x7f, 0xc, 0xb, 0x3, 0x8, 0x6, 0xf5, 0x1, 0x3, 0x401, 0x7f, 0x80, 0x5, 0x0, 0x8, 0xf44, 0x4, 0x4, 0x7fffffff, 0x6, 0x1, 0x3, 0xb0a8, 0x8, 0xf, 0x1, 0x3, 0x4, 0x1, 0x2, 0x2, 0x7, 0x1000, 0x2, 0x3000000, 0x200, 0x0, 0x10001, 0x1, 0xf, 0x249c0001, 0x7ff, 0x54, 0x7f, 0x2, 0x0, 0x3, 0x1, 0x8001, 0x7f, 0x1, 0x5, 0xb2e, 0xe2, 0x5, 0x81, 0x7, 0x58, 0x0, 0x5, 0x4000000, 0x6, 0x100, 0x1000, 0x1ec, 0x30000, 0x100, 0x800, 0x3d, 0xc80a, 0x7fff, 0x912e, 0x7, 0x8, 0x50def00c, 0x4, 0x68a2, 0x4, 0x7, 0x5, 0x101, 0x7d54fc4, 0x80000001, 0x4, 0x1, 0x10001, 0xfffff348, 0x3ff, 0x2, 0x6, 0x5d, 0x5, 0xc70, 0x0, 0x8000]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6a}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xbb9}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x2, 0xf6, 0x8001, 0xb607, 0x6, 0x0, 0x40, 0x0, 0x8, 0x0, 0x8, 0x2, 0x9, 0x3, 0xfffffffb, 0x4f, 0x7, 0x5, 0x2, 0x3, 0x8, 0x6, 0x8, 0x200, 0x800, 0x5, 0x8, 0x1e, 0x4, 0x10000, 0x0, 0x800, 0x8, 0x0, 0x2, 0x6, 0xb, 0xa7, 0xa, 0x9, 0x1, 0x654, 0x62, 0x6, 0x7, 0x81, 0x0, 0x0, 0x2, 0x9, 0x4, 0x6, 0x0, 0x7, 0x9, 0xffff, 0xc, 0x625f, 0x2, 0x4, 0x3, 0x2, 0x80000000, 0x2, 0x6, 0x3, 0x2, 0xfc, 0x77, 0x797, 0x10000, 0x0, 0x4, 0x600, 0x4, 0x2, 0x3, 0x6, 0x9, 0x9, 0xffffffff, 0x8001, 0x7, 0xfffffffd, 0x2, 0xd6, 0x6, 0x61f6, 0x9, 0x0, 0xff, 0x2, 0x1, 0x7, 0xfffffff5, 0xa, 0x7, 0x7fffffff, 0x2, 0x4, 0x2, 0x0, 0xf, 0x2, 0x1, 0x8, 0x20, 0x21c9, 0x8, 0x5, 0x0, 0x8, 0x4, 0x10, 0xfffffff3, 0x3ff, 0x1, 0x4, 0x7, 0x8, 0xfffffff6, 0x5, 0x8, 0x7, 0x4, 0x10, 0x6, 0x8, 0x1, 0x7, 0x2b, 0x2, 0x8, 0x70, 0x4, 0x4, 0xf6, 0x1, 0x8, 0xf, 0x6, 0x40, 0x7, 0x20000000, 0x80000000, 0x800, 0xa5, 0xc, 0xffff, 0x2, 0x2, 0x5, 0x80000001, 0xffc, 0x5, 0x9, 0x7, 0x8, 0x8, 0x9, 0x2, 0xa000, 0x861, 0x3, 0x4, 0x9, 0x401, 0x81, 0x3ff, 0x5, 0x0, 0x2, 0xa8, 0x4, 0xb238, 0x2, 0xee25, 0x6, 0x2, 0x1000, 0x2, 0xffffff80, 0x81, 0xfffffffe, 0x101, 0x3ff, 0x5, 0x401, 0xb7a, 0x1, 0x1, 0x0, 0x7, 0x7, 0x6, 0x5, 0xc, 0x6, 0x3, 0x200, 0xae51, 0x638, 0xaf, 0x9, 0x8, 0x2, 0xb, 0x6e, 0xffffb075, 0x7, 0x0, 0x9, 0x7e44, 0x167b, 0x3, 0x6, 0x3ff, 0x9d, 0x0, 0x6, 0x3, 0x5, 0x1, 0x4, 0xfffffffc, 0x98a, 0x4, 0x6, 0x5, 0x9, 0x1, 0xfffffffc, 0x75, 0x7, 0x7fff, 0x4, 0xfffffffd, 0xd03, 0x8, 0x5, 0x4, 0xc1, 0x7fff, 0x1, 0x9, 0x2, 0x6, 0x7fff, 0x9, 0x0, 0x200, 0x2, 0x800, 0x4c, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb6f3, 0x8, 0xe1066bf5, 0x9, 0x43, 0x7fff, 0x3, 0x4, 0xfffffffe, 0x8001, 0x8, 0x802, 0xfffffffe, 0xaa, 0xe5d7, 0x8, 0x7, 0xfffffff8, 0x7, 0x4, 0x3, 0x100, 0x3, 0x1, 0x4, 0xffff, 0x3, 0x6c, 0x50000000, 0x2, 0x9, 0x81, 0x7d48, 0x8001, 0x1, 0x2, 0x7f, 0xfffffff3, 0x5, 0x0, 0xfffffffe, 0xc, 0x3, 0x5, 0x7, 0xfffffffa, 0x7f, 0x8, 0xfffffff8, 0x8, 0xfffffc01, 0x2, 0x2, 0x600, 0x401, 0x6, 0x7, 0x6, 0x68, 0x19f, 0x8, 0x7c8, 0x3, 0x4, 0x7b2, 0x6, 0x7, 0x1, 0x5, 0xf, 0x8, 0xffffd800, 0xbf, 0x81, 0x1, 0xffff, 0x3, 0x6, 0xe, 0xfff, 0xfffffffd, 0x5, 0x3, 0x4, 0x706, 0x7, 0x7fff, 0x10000, 0xfffffffd, 0x2, 0x7f, 0x81, 0x3, 0x1, 0xc, 0x0, 0x7, 0x9, 0x6, 0x0, 0xfff, 0x1f3f, 0x6, 0x8001, 0x3, 0x1, 0xb800000, 0x8, 0x43a0cf58, 0x9, 0x4, 0xfffffffd, 0x9, 0x7ff, 0x7, 0x3933afe1, 0x2, 0x1, 0x7fffffff, 0x3, 0xb93, 0x0, 0x9, 0x7, 0x0, 0x80000001, 0xb54, 0x0, 0x9b, 0x7, 0xfffffff8, 0x9, 0x7, 0x4, 0x8, 0xced, 0xd, 0x2, 0x2, 0x66, 0x1, 0x82d, 0x0, 0x0, 0x1, 0x7, 0x6, 0x6, 0x8, 0x9, 0x9, 0x4, 0xa, 0x400, 0x2, 0x54, 0x5, 0x9, 0x1, 0x8, 0xe5, 0x8, 0xf78, 0xb, 0x2, 0x3ff, 0x800, 0x1e8d, 0x8000, 0x8, 0xd, 0x3, 0x4, 0x87, 0x3e, 0x3d, 0x6, 0x6, 0xc, 0x9, 0x4, 0x7, 0x4, 0x6, 0x1ff, 0x9, 0x7, 0x7a6a, 0x6, 0x2, 0xfffffffe, 0x1, 0x9, 0x7e9, 0x3, 0x400, 0xc, 0x6, 0x8, 0x5, 0x6, 0x9, 0x1, 0x5, 0x69, 0x2, 0x2, 0x4, 0x4, 0x3, 0xfffffff8, 0x7204c175, 0x7fffffff, 0x2, 0x5fe2, 0x100, 0x6, 0x1, 0x2, 0xff, 0x5, 0x6, 0x10, 0x401, 0x1, 0x3, 0x4, 0x10, 0x6, 0x7, 0x0, 0x0, 0x150, 0x9, 0x200, 0x6, 0x3, 0x5, 0x81, 0x80, 0x708, 0x0, 0x200, 0x48c1, 0x6, 0x3c, 0x904, 0x60de, 0x3, 0x5, 0x2, 0x4, 0xa2fe, 0x3000000, 0xd4d, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0x1, 0x10001, 0x3, 0x0, {0xd6, 0x2, 0x4, 0x2, 0xfff, 0x9}, {0x3, 0x2, 0x5, 0x80, 0x10, 0x8}, 0x2, 0x7, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x2, 0x10, 0x9f, 0x1, {0x1, 0x1, 0xd, 0x4, 0x0, 0x8}, {0x2, 0x1, 0x1, 0x9f6, 0x5, 0x2e}, 0x401, 0x5, 0x5d}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7a372d7b, 0x3, 0x3000000, 0x7f, 0x1, {0x6, 0x0, 0x7, 0x1, 0x2, 0x7}, {0x3, 0x0, 0x5, 0x1e6, 0x0, 0x8}, 0x57, 0x1, 0x962}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x87cd, 0xfffffff7, 0x4bb, 0x8, 0xfffff001, 0x6, 0x3, 0xffffff10, 0xf, 0x2, 0x8, 0x9, 0x4, 0x6, 0xa, 0x7, 0x1ff, 0x3ff, 0x1, 0x1, 0xb, 0x22, 0xa, 0x0, 0x9, 0x1, 0x7f, 0x6, 0x9, 0x4, 0x45, 0x40, 0x1, 0x9, 0x1ff, 0x5, 0x5, 0xa, 0x1000, 0x3, 0x8, 0xa, 0x8, 0x9, 0x1, 0x3, 0x9, 0xfffffffb, 0x56c, 0x5, 0x6, 0x8, 0x9, 0x9bc, 0x3, 0x1, 0xffffffff, 0x10001, 0x1, 0x0, 0x7, 0x3, 0x5, 0x800, 0x0, 0x9, 0x4, 0x4, 0x2, 0x6, 0xdd, 0x8, 0x0, 0x280, 0x7, 0x9, 0x3, 0x86e2, 0xfffff3f1, 0x8, 0x9, 0xda, 0x5, 0x8, 0x0, 0x2, 0x6, 0x1, 0xa, 0x9, 0x3, 0x4, 0xfffeffff, 0x80, 0x0, 0x0, 0x13a6, 0xff, 0x6, 0x9f83, 0x7, 0xc7, 0x3, 0xe94, 0x2, 0x29bc, 0x7, 0x10, 0x3, 0x200, 0x2, 0x3ff, 0x1, 0x3, 0x2, 0x2, 0x41a3, 0x1, 0x50f8, 0x2, 0x7841, 0x8c1, 0x6, 0x2, 0x6, 0x8, 0x80, 0x2d2, 0x1, 0x1, 0xc, 0x8, 0x7, 0x7ff, 0x2f5, 0xc2, 0x3, 0x93d3, 0x8, 0xffff, 0xbbaa, 0x3, 0x1bd000, 0x7, 0x10, 0x9, 0x8, 0xb553, 0xde47, 0x200, 0x0, 0x0, 0x0, 0x9, 0x8, 0x5, 0x9, 0xff, 0x2000, 0x40, 0x10001, 0x6293, 0x7fff, 0x3, 0x5, 0xff, 0x1, 0x0, 0x9, 0x6, 0xe8, 0xfffffffb, 0x7, 0x7, 0x10, 0x596c, 0x6, 0x2, 0x80000001, 0x9, 0xe, 0x1200000, 0x0, 0xff, 0x8, 0x0, 0x3, 0x1, 0x1, 0xfffffff7, 0x40, 0x8000000, 0xf, 0x9, 0x5, 0x7f, 0x400, 0x46c9, 0x4, 0xfffffffe, 0x5, 0x0, 0x4c, 0x0, 0x9, 0xb0, 0x4, 0x1, 0x400000, 0x10000, 0xdb, 0x3, 0x9266, 0x4, 0x7f, 0x10, 0x6, 0x5, 0xffff6cd6, 0x8, 0x6, 0xf, 0x8, 0x3f498dee, 0x5, 0x4, 0xffffffff, 0x5, 0x0, 0x1, 0x6, 0x80, 0x4, 0x2, 0x6, 0x1, 0x1000, 0x4, 0xffffffff, 0x7ff, 0x1984, 0xf51, 0x4, 0x6, 0x2, 0x10001, 0x6, 0x7fffffff, 0x3, 0x7, 0x800, 0x6, 0x2, 0x1000, 0x2]}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}]]}, {0xf2, 0x6, "0c5d8da014631aeb6ad3ce24fe8c48da806fc9d80b5b7f571a0d686214297ef23e394455240e41261b7d2078c90a5e930bd6bdf54eb37b6fec491f9c499759f0211a7ef9cc5a6b29ca3249af7b97939df2702ecbd8335c7a2c0c1bfa542963e6aa732242f108e58891bbf492f7befa479eb597c2fd95b51480d78f5e5b7f3d81ad66ed5eb06104fa7156518942b6e6d06a894c6e63e7d68b7daa83c71dd0ca95089de7a719f1725991a73809f088d02b2ee30cf3fc8e3fe50ac56bd7cc0ab6526c2975b783e9bd578b581fbdede189d4737c486cb58a9bdc7d6f5a4cb7854c3c80ca9af2fc01bda35e7df9ca1d25"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0x80, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0xeafe, 0x2, 0x7, 0x800}}]}, {0x3b, 0x6, "fc0fc29109323553f6d3a76fcf8eff56036d9ffb76ff79f7598a2740ad8c201339e407e34c1b3dff8b7a97af1119eda142dab80380bc91"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x279c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), 0xffffffffffffffff) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xfffe}}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_TIMEOUT={0xc}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e6576650000500002800500080000000000040006000500090001000000050003000900000005000a"], 0x88}}, 0x0) 71.435148ms ago: executing program 34 (id=3816): syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x6a, 0x4, 0x1, 0x27) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r4, @ANYBLOB="b759cdc0af94680674f451c513371f4927b49175dc9ee9db8eb8eb5fcaca9296def45a15b56382a7441ce4e79983c157442c23fe123fd4468ca55c510635f9c28dc8b0648bf29681f9ab1313f4ccad8e0ded61a6f250426f9eac"], 0x3c}}, 0x8000) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r4, @ANYBLOB="b759cdc0af94680674f451c513371f4927b49175dc9ee9db8eb8eb5fcaca9296def45a15b56382a7441ce4e79983c157442c23fe123fd4468ca55c510635f9c28dc8b0648bf29681f9ab1313f4ccad8e0ded61a6f250426f9eac"], 0x3c}}, 0x8000) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) (async) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) 44.694573ms ago: executing program 35 (id=3820): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0xfff3}, {0xffff, 0xffff}, {0xffef, 0x6}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x82, 0x3, 0x4, 0xffff, 0x7f, 0x7fffffff, 0x1, 0x40, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xdc}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x234, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x204, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x70, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7fff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xab8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xdebb}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x42}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x7, 0x6, 0xd, 0x5, 0xb, 0xc, 0x7, 0x5, 0xb, 0x5, 0x10, 0x1, 0x5, 0x5, 0x3, 0xd], 0x0, [0x527b, 0x1000, 0x7, 0x6a, 0x4, 0xd, 0x2, 0xc7a, 0x8, 0x9, 0x8, 0x3079, 0x4, 0x100, 0xe, 0xd], [0xaae, 0x4, 0x9, 0xc, 0x4, 0x8, 0x5, 0x0, 0x9, 0xb1, 0x6, 0x7, 0x9, 0x7, 0x400, 0x400]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x4}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x128, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xf4}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xbd4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x400}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffff0000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffffffff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xe}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1ff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6913e4d9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x80}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xff}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1011}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2f}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}]}]}]}}]}, 0x234}, 0x1, 0x0, 0x0, 0x400dc}, 0x40) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r15) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) r16 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r17 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c6a39aa3c56e1cd3680b5d2c1d3e80f31059fb430b191f4f496617191805be9922f127432b31de532e450fec0681cb4eca22dc339ca497424a74462a005b602648a61483e03a394b33a040b421f89ca24f86c5c6e41b7a610bad70f67cfc1f9980fc56", @ANYRES16=r17, @ANYBLOB="0100000000000000000003000000"], 0x14}}, 0x20000000) (async) sendmsg$IPVS_CMD_SET_INFO(r16, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r18, @ANYBLOB="0000000000004a641c0012000c000100626f6e6400"], 0x3c}}, 0x0) 0s ago: executing program 36 (id=3821): socket(0x1e, 0x4, 0x7ffffffe) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="1709000000000000000001000000050007000000000008000900000000001400200000000000000000000000ffed0000000008000a0000000000060002000100000014001f000000000000000000000000cbcf"], 0x5c}, 0x1, 0x620b}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x20, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) kernel console output (not intermixed with test programs): iscuous mode [ 230.738262][T14838] syzkaller0: entered allmulticast mode [ 230.745129][T14848] team0: Failed to send options change via netlink (err -105) [ 230.752715][T14848] team0: Mode changed to "activebackup" [ 230.798830][T14851] xt_TPROXY: Can be used only with -p tcp or -p udp [ 230.851005][T14794] tipc: Resetting bearer [ 230.867986][T14794] tipc: Disabling bearer [ 231.037983][T14855] bond20 (unregistering): Released all slaves [ 231.131533][T14880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2417'. [ 231.549976][T14919] netlink: 'syz.0.2429': attribute type 13 has an invalid length. [ 231.617542][T14919] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.624731][T14919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.641559][T14927] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2430'. [ 231.641883][T14926] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2430'. [ 231.662846][T14926] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2430'. [ 231.674536][T14926] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2430'. [ 231.684749][T14926] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2430'. [ 231.713222][T14919] netlink: 'syz.0.2429': attribute type 2 has an invalid length. [ 231.722344][T14919] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2429'. [ 231.741808][T14919] bond0: (slave dummy0): Releasing backup interface [ 231.818424][T14938] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 231.834398][T14938] netlink: 'syz.2.2432': attribute type 1 has an invalid length. [ 231.842595][T14938] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2432'. [ 231.861558][T14938] netlink: 'syz.2.2432': attribute type 10 has an invalid length. [ 231.881006][T14938] netlink: 'syz.2.2432': attribute type 10 has an invalid length. [ 232.018681][T14954] batadv_slave_0: Caught tx_queue_len zero misconfig [ 232.280903][T14970] netlink: 'syz.0.2439': attribute type 1 has an invalid length. [ 232.300164][T14971] tipc: Resetting bearer [ 232.316711][T14970] ipvlan1: entered promiscuous mode [ 232.322657][T14970] ipvlan1: left promiscuous mode [ 232.498705][T14976] syzkaller0: entered promiscuous mode [ 232.504427][T14976] syzkaller0: entered allmulticast mode [ 232.667556][T14997] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 232.857192][T15017] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 233.430086][T15085] geneve6: entered promiscuous mode [ 233.444337][T15085] geneve6: entered allmulticast mode [ 233.485010][T15090] netlink: 'syz.2.2473': attribute type 1 has an invalid length. [ 233.581110][T15100] netlink: 'syz.0.2475': attribute type 3 has an invalid length. [ 233.610928][T15096] lo speed is unknown, defaulting to 1000 [ 233.669308][T15100] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.719467][T15113] sctp: [Deprecated]: syz.2.2477 (pid 15113) Use of int in max_burst socket option. [ 233.719467][T15113] Use struct sctp_assoc_value instead [ 234.182386][T15156] netlink: 'syz.2.2490': attribute type 1 has an invalid length. [ 234.202087][T15156] bond13: entered promiscuous mode [ 234.208185][T15156] 8021q: adding VLAN 0 to HW filter on device bond13 [ 234.259497][T15156] bond13: (slave veth9): making interface the new active one [ 234.273051][T15156] veth9: entered promiscuous mode [ 234.280325][T15156] bond13: (slave veth9): Enslaving as an active interface with an up link [ 234.299241][T15160] syzkaller1: entered promiscuous mode [ 234.304836][T15160] syzkaller1: entered allmulticast mode [ 234.490714][T15173] netlink: 'syz.1.2494': attribute type 30 has an invalid length. [ 234.672367][T15180] vlan3: entered promiscuous mode [ 234.677607][T15180] bridge0: entered promiscuous mode [ 234.687250][T15180] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 236.983718][T15135] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 236.995496][T15180] validate_nla: 1 callbacks suppressed [ 236.995512][T15180] netlink: 'syz.1.2497': attribute type 10 has an invalid length. [ 237.034635][T15180] __nla_validate_parse: 20 callbacks suppressed [ 237.034651][T15180] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2497'. [ 237.043607][T15185] ip6erspan0: entered allmulticast mode [ 237.083168][T15187] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2500'. [ 237.102571][T15187] netlink: ct family unspecified [ 237.577879][T15236] tipc: Enabled bearer , priority 0 [ 237.625363][T15244] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 237.649915][T15245] syzkaller1: entered promiscuous mode [ 237.660404][T15245] syzkaller1: entered allmulticast mode [ 237.685537][T15236] tipc: Disabling bearer [ 237.780066][ T57] tipc: Subscription rejected, illegal request [ 237.820236][T15253] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2517'. [ 237.834700][T15260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2518'. [ 237.854242][T15253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.018353][T15276] lo speed is unknown, defaulting to 1000 [ 238.114230][T15285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2522'. [ 238.143733][T15287] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2523'. [ 238.221225][T15291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2521'. [ 238.258486][T15299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2524'. [ 238.295063][T15299] netlink: 'syz.4.2524': attribute type 30 has an invalid length. [ 238.320676][ T147] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.332484][ T147] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.342942][T15299] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2524'. [ 238.360375][ T147] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.787522][T15337] bond14: entered allmulticast mode [ 238.793145][T15337] 8021q: adding VLAN 0 to HW filter on device bond14 [ 238.839889][T15340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2533'. [ 238.849684][T15340] unsupported nla_type 216 [ 238.908978][T15342] netlink: 'syz.2.2534': attribute type 4 has an invalid length. [ 239.059136][T15355] xt_hashlimit: size too large, truncated to 1048576 [ 239.378708][T15355] openvswitch: netlink: Flow actions attr not present in new flow. [ 240.045138][T15370] ip6tnl0: Caught tx_queue_len zero misconfig [ 240.179778][T15375] netlink: 'syz.1.2542': attribute type 6 has an invalid length. [ 241.553228][T15326] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 241.567743][T15388] netlink: 'syz.2.2545': attribute type 2 has an invalid length. [ 241.714957][T15396] x_tables: duplicate underflow at hook 2 [ 241.798304][ T4939] block nbd2: Receive control failed (result -32) [ 242.110428][T15431] __nla_validate_parse: 5 callbacks suppressed [ 242.110445][T15431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2560'. [ 242.203922][T15434] lo speed is unknown, defaulting to 1000 [ 242.238510][T15439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2562'. [ 242.257907][T15439] openvswitch: netlink: Flow actions attr not present in new flow. [ 242.273623][T15440] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2561'. [ 242.293882][T15440] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2561'. [ 242.448239][T15445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2563'. [ 242.647565][T15462] tipc: Enabling of bearer rejected, failed to enable media [ 242.722097][T15469] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2569'. [ 242.749934][T15453] IPVS: persistence engine module ip_vs_pe_À not found [ 243.001331][T15497] geneve6: entered promiscuous mode [ 243.148343][T15515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2578'. [ 243.170066][T15511] veth0_to_hsr: entered promiscuous mode [ 243.201361][T15511] veth0_to_hsr: left promiscuous mode [ 243.249431][T15515] 8021q: VLANs not supported on ip_vti0 [ 243.255521][T15517] lo: Caught tx_queue_len zero misconfig [ 243.375649][T15529] netlink: 'syz.2.2584': attribute type 4 has an invalid length. [ 243.409262][ T24] lo speed is unknown, defaulting to 1000 [ 243.416205][T15530] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2585'. [ 243.425213][ T24] syz2: Port: 1 Link DOWN [ 243.474049][T15538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2587'. [ 243.499703][T15538] netlink: 'syz.4.2587': attribute type 30 has an invalid length. [ 243.542189][T15542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2587'. [ 243.553906][T15542] netlink: 'syz.4.2587': attribute type 30 has an invalid length. [ 243.905949][ T12] wlan0: Trigger new scan to find an IBSS to join [ 243.945944][ T35] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.970370][ T35] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.983461][ T35] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.009706][ T35] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.048709][ T35] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.072629][ T35] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.384189][ T35] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.393034][ T35] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.402732][T15562] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 245.447794][T15581] netlink: 'syz.4.2598': attribute type 1 has an invalid length. [ 245.520629][T15586] netlink: 'syz.0.2599': attribute type 13 has an invalid length. [ 245.789897][ T5637] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 245.797811][ T5637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 245.805192][ T5637] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 245.813124][ T5637] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 245.824050][ T5637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 245.860603][T15608] netlink: 'syz.3.2607': attribute type 27 has an invalid length. [ 245.888456][T15610] netlink: 'syz.4.2605': attribute type 4 has an invalid length. [ 246.256736][T15643] netlink: 'syz.4.2615': attribute type 1 has an invalid length. [ 246.272114][T15644] bond15: entered allmulticast mode [ 246.277619][T15643] netlink: 'syz.4.2615': attribute type 1 has an invalid length. [ 246.289969][T15643] netlink: 'syz.4.2615': attribute type 2 has an invalid length. [ 246.318618][T15602] lo speed is unknown, defaulting to 1000 [ 246.413622][T15657] block nbd3: Unsupported socket: should be TCP or UNIX. [ 246.569130][T15663] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 246.676377][T15682] tipc: Enabling of bearer rejected, failed to enable media [ 246.755392][T15602] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.771971][T15602] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.786660][T15602] bridge_slave_0: entered allmulticast mode [ 246.796298][T15602] bridge_slave_0: entered promiscuous mode [ 246.826671][T15602] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.834216][T15602] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.842206][T15602] bridge_slave_1: entered allmulticast mode [ 246.850552][T15602] bridge_slave_1: entered promiscuous mode [ 246.952288][T15602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.000341][T15602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.081832][T15602] team0: Port device team_slave_0 added [ 247.094812][T15602] team0: Port device team_slave_1 added [ 247.102979][T15713] tipc: Enabled bearer , priority 0 [ 247.110817][T15713] syzkaller0: entered promiscuous mode [ 247.111457][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.116369][T15713] syzkaller0: entered allmulticast mode [ 247.118517][T15713] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 247.131233][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.144353][T15721] __nla_validate_parse: 13 callbacks suppressed [ 247.144370][T15721] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2639'. [ 247.148290][T15722] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2639'. [ 247.187201][T15722] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2639'. [ 247.197306][T15602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.204422][T15602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.231606][T15602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.245105][T15713] tipc: Resetting bearer [ 247.253412][T15602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.258325][ T48] tipc: Subscription rejected, illegal request [ 247.261215][T15602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.295255][T15729] block nbd1: must specify backend [ 247.303664][T15729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.314798][T15602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.360497][T15731] xfrm1: left promiscuous mode [ 247.370060][T15731] 8021q: adding VLAN 0 to HW filter on device bond3 [ 247.385228][T15731] 8021q: adding VLAN 0 to HW filter on device bond4 [ 247.394189][T15731] bond5: left promiscuous mode [ 247.399711][T15731] bridge2: left promiscuous mode [ 247.408828][T15731] geneve4: left promiscuous mode [ 247.413858][T15731] A link change request failed with some changes committed already. Interface geneve4 may have been left with an inconsistent configuration, please check. [ 247.431861][T15712] tipc: Resetting bearer [ 247.442539][T15712] tipc: Disabling bearer [ 247.501152][T15602] hsr_slave_0: entered promiscuous mode [ 247.518859][T15602] hsr_slave_1: entered promiscuous mode [ 247.579770][T15742] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2644'. [ 247.602379][T15737] syzkaller1: entered promiscuous mode [ 247.609162][T15737] syzkaller1: entered allmulticast mode [ 247.722625][T15749] bond20: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 247.736688][T15749] bond20 (unregistering): Released all slaves [ 247.896293][T15761] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2649'. [ 247.906143][ T5637] Bluetooth: hci5: command tx timeout [ 247.935666][T15761] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2649'. [ 247.959144][T15761] geneve7: entered promiscuous mode [ 247.982201][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2649'. [ 247.993772][T15755] tipc: Enabling of bearer rejected, failed to enable media [ 248.055158][T15769] bond20: (slave bridge10): making interface the new active one [ 248.063840][T15769] bond20: (slave bridge10): Enslaving as an active interface with an up link [ 248.108780][T15773] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2652'. [ 248.161273][T15773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2652'. [ 248.168193][T15602] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 248.170385][T15773] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2652'. [ 248.196838][T15602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 248.204574][T15602] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 248.218389][T15602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 248.233248][T15602] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 248.249749][T15602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 248.262575][T15602] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 248.276551][T15602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 248.360973][T15602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.389117][T15602] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.412074][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.419239][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.476234][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.483374][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.658430][T15811] validate_nla: 2 callbacks suppressed [ 248.658448][T15811] netlink: 'syz.1.2659': attribute type 5 has an invalid length. [ 248.925480][T15602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.957253][T15602] veth0_vlan: entered promiscuous mode [ 248.970425][T15602] veth1_vlan: entered promiscuous mode [ 248.997753][T15602] veth0_macvtap: entered promiscuous mode [ 249.008281][T15602] veth1_macvtap: entered promiscuous mode [ 249.024488][T15602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.040010][T15602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.053309][ T1165] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.073595][ T1165] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.094894][ T1165] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.107729][ T1165] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.433513][T15844] ip6tnl0: entered promiscuous mode [ 249.439419][T15844] ip6tnl0: entered allmulticast mode [ 249.787400][T15852] netlink: 'syz.4.2667': attribute type 1 has an invalid length. [ 249.803700][T15852] 8021q: adding VLAN 0 to HW filter on device bond16 [ 249.916481][ T35] wlan1: Trigger new scan to find an IBSS to join [ 249.986505][ T5637] Bluetooth: hci5: command tx timeout [ 251.836424][T15819] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 251.912549][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.932612][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.997549][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.018342][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.048467][T15892] netlink: 'syz.0.2677': attribute type 1 has an invalid length. [ 252.068870][ T5637] Bluetooth: hci5: command tx timeout [ 252.131193][T15892] 8021q: adding VLAN 0 to HW filter on device bond19 [ 252.148340][T15900] __nla_validate_parse: 7 callbacks suppressed [ 252.148358][T15900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2680'. [ 252.185956][T15906] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2677'. [ 252.204632][T15896] bond19: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 252.227676][T15896] bond19: entered allmulticast mode [ 252.287495][T15914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2686'. [ 252.467179][T15930] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2689'. [ 252.477203][T15930] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2689'. [ 252.493088][T15930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2689'. [ 252.529309][T15934] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2691'. [ 252.552789][T15934] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2691'. [ 252.564786][T15934] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2691'. [ 252.590720][T15936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2692'. [ 252.631970][T15934] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 252.648917][T15939] ip6t_REJECT: ECHOREPLY is not supported [ 252.868535][ T35] wlan1: Trigger new scan to find an IBSS to join [ 252.934623][T15959] batman_adv: batadv0: Adding interface: vlan4 [ 252.941605][T15959] batman_adv: batadv0: The MTU of interface vlan4 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.979437][T15959] batman_adv: batadv0: Not using interface vlan4 (retrying later): interface not active [ 253.085575][T15973] netlink: 'syz.3.2703': attribute type 1 has an invalid length. [ 253.137257][T15973] bond21: entered promiscuous mode [ 253.148482][T15973] 8021q: adding VLAN 0 to HW filter on device bond21 [ 253.188503][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 253.382057][T15978] syzkaller1: entered promiscuous mode [ 253.402396][T15978] syzkaller1: entered allmulticast mode [ 253.457733][T15985] bond21: (slave bridge11): making interface the new active one [ 253.470844][T15985] bridge11: entered promiscuous mode [ 253.478034][T15985] bond21: (slave bridge11): Enslaving as an active interface with an up link [ 253.613830][T16002] netlink: 'syz.3.2707': attribute type 13 has an invalid length. [ 253.622497][T16002] netlink: 'syz.3.2707': attribute type 17 has an invalid length. [ 253.694382][T15994] tipc: Resetting bearer [ 253.838231][T16002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.846777][T16002] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.856536][T16002] batadv0: left promiscuous mode [ 253.862482][T16002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.934405][T16002] veth1_vlan: left promiscuous mode [ 253.941882][T16002] veth0_vlan: left promiscuous mode [ 253.950169][T16002] veth0_vlan: entered promiscuous mode [ 253.960985][T16002] veth1_vlan: entered promiscuous mode [ 253.971090][T16002] veth1_macvtap: left promiscuous mode [ 253.977783][T16002] veth0_macvtap: left promiscuous mode [ 253.984204][T16002] veth0_macvtap: entered promiscuous mode [ 253.998398][T16002] veth1_macvtap: entered promiscuous mode [ 254.009303][T16002] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 254.016872][T16002] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 254.030503][T16002] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 254.041484][T16002] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 254.052788][T16002] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 254.065407][T16002] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.074444][T16002] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.084362][T16002] 8021q: adding VLAN 0 to HW filter on device bond3 [ 254.103759][T16002] 8021q: adding VLAN 0 to HW filter on device bond4 [ 254.114312][T16002] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 254.123100][T16002] 8021q: adding VLAN 0 to HW filter on device bond5 [ 254.131451][T16002] batadv0: entered promiscuous mode [ 254.138131][T16002] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 254.148130][ T5637] Bluetooth: hci5: command tx timeout [ 254.154277][T16002] 8021q: adding VLAN 0 to HW filter on device bond6 [ 254.164046][T16002] bond7: left promiscuous mode [ 254.169421][T16002] 8021q: adding VLAN 0 to HW filter on device bond7 [ 254.178055][T16002] 8021q: adding VLAN 0 to HW filter on device bond8 [ 254.189931][T16002] geneve2: left promiscuous mode [ 254.196909][T16002] geneve3: left promiscuous mode [ 254.201901][T16002] geneve3: left allmulticast mode [ 254.209305][T16002] 8021q: adding VLAN 0 to HW filter on device bond9 [ 254.219655][T16002] 8021q: adding VLAN 0 to HW filter on device bond10 [ 254.234208][T16002] 8021q: adding VLAN 0 to HW filter on device bond11 [ 254.242991][T16002] 8021q: adding VLAN 0 to HW filter on device bond12 [ 254.251523][T16002] 8021q: adding VLAN 0 to HW filter on device bond13 [ 254.260105][T16002] 8021q: adding VLAN 0 to HW filter on device bond14 [ 254.268912][T16002] 8021q: adding VLAN 0 to HW filter on device bond15 [ 254.283515][T16002] ip6gre1: left promiscuous mode [ 254.288872][T16002] ip6gre1: left allmulticast mode [ 254.294810][T16002] vlan3: left promiscuous mode [ 254.300182][T16002] geneve1: left promiscuous mode [ 254.305317][T16002] vlan3: left allmulticast mode [ 254.310645][T16002] geneve1: left allmulticast mode [ 254.317227][T16002] 8021q: adding VLAN 0 to HW filter on device bond16 [ 254.325996][T16002] 8021q: adding VLAN 0 to HW filter on device bond17 [ 254.342615][T16002] geneve4: left promiscuous mode [ 254.350005][T16002] 8021q: adding VLAN 0 to HW filter on device bond18 [ 254.363400][T16002] 8021q: adding VLAN 0 to HW filter on device bond19 [ 254.371722][T16002] geneve5: left promiscuous mode [ 254.379829][T16002] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 254.389287][T16002] geneve6: left promiscuous mode [ 254.394395][T16002] geneve6: left allmulticast mode [ 254.400083][T16002] A link change request failed with some changes committed already. Interface geneve6 may have been left with an inconsistent configuration, please check. [ 254.481574][T16014] bond1 (unregistering): Released all slaves [ 254.705880][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.840248][T16049] xt_CT: No such helper "netbios-ns" [ 254.841129][T16048] xt_CT: No such helper "netbios-ns" [ 254.847232][T16056] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma? [ 254.866322][ T1105] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 255.004840][T16070] netlink: 'syz.0.2726': attribute type 11 has an invalid length. [ 255.149161][T16079] syzkaller0: entered promiscuous mode [ 255.184033][T16079] syzkaller0: entered allmulticast mode [ 255.226916][T16081] lo speed is unknown, defaulting to 1000 [ 255.262089][T16087] bond1: option resend_igmp: invalid value (2878) [ 255.300906][T16087] bond1: option resend_igmp: allowed values 0 - 255 [ 255.339266][T16087] bond1 (unregistering): Released all slaves [ 255.501765][T16101] netlink: 'syz.2.2734': attribute type 13 has an invalid length. [ 255.554077][ T7794] IPVS: starting estimator thread 0... [ 255.560679][T16106] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 255.638094][T16119] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 255.666692][T16114] IPVS: using max 57 ests per chain, 136800 per kthread [ 255.741434][T16134] netlink: 'syz.2.2740': attribute type 61 has an invalid length. [ 255.843856][T16137] netlink: 'syz.2.2742': attribute type 1 has an invalid length. [ 255.863157][T16141] netlink: 'syz.4.2744': attribute type 1 has an invalid length. [ 255.905593][T16129] tipc: Resetting bearer [ 255.906437][ T1105] wlan1: Trigger new scan to find an IBSS to join [ 256.003830][T16129] bond21: left promiscuous mode [ 256.008840][T16129] bridge11: left promiscuous mode [ 256.052609][T16141] bond17: entered promiscuous mode [ 256.065264][T16154] netlink: 'syz.3.2746': attribute type 11 has an invalid length. [ 256.071494][T16141] 8021q: adding VLAN 0 to HW filter on device bond17 [ 256.107511][T16146] bond1 (unregistering): Released all slaves [ 256.144722][ T1105] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.159041][ T1105] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.180587][ T1105] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.191284][ T1105] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.215013][ T1105] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.258681][ T1105] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.302292][ T1105] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.327159][ T1105] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.441254][T16177] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 256.827043][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.461370][T16240] __nla_validate_parse: 23 callbacks suppressed [ 258.461388][T16240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2772'. [ 258.660347][T16251] syzkaller0: refused to change device tx_queue_len [ 259.661129][T16195] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 259.713930][T16258] Cannot find add_set index 0 as target [ 259.755320][T16262] netlink: 'syz.1.2778': attribute type 1 has an invalid length. [ 259.773956][T16262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2778'. [ 259.909532][T16286] ip6tnl0: entered promiscuous mode [ 259.925857][T16286] ip6tnl0: entered allmulticast mode [ 260.113956][T16279] --map-set only usable from mangle table [ 260.272770][T16311] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2790'. [ 260.517801][T16322] lo speed is unknown, defaulting to 1000 [ 260.639318][T16334] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2797'. [ 260.666107][T16334] netlink: 'syz.4.2797': attribute type 7 has an invalid length. [ 260.674526][T16334] netlink: 'syz.4.2797': attribute type 8 has an invalid length. [ 260.696259][T16334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2797'. [ 260.844193][T16349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2801'. [ 260.943088][T16359] netlink: 'syz.0.2805': attribute type 2 has an invalid length. [ 260.960828][T16356] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2803'. [ 260.970134][T16359] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2805'. [ 261.097451][T16374] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2808'. [ 261.110477][T16375] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2807'. [ 261.263583][T16388] tipc: Resetting bearer [ 261.327242][T16393] geneve2: entered allmulticast mode [ 261.332844][T16396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.363292][T16396] tipc: Enabled bearer , priority 0 [ 261.372109][T16396] +: renamed from syzkaller0 [ 261.379037][T16396] tipc: Disabling bearer [ 261.427849][T16400] ip6gre1: entered promiscuous mode [ 261.433125][T16400] ip6gre1: entered allmulticast mode [ 261.445410][T16400] netlink: 'syz.2.2816': attribute type 6 has an invalid length. [ 261.457446][T16405] netlink: 'syz.4.2817': attribute type 2 has an invalid length. [ 261.734025][T16429] bridge_slave_0: left allmulticast mode [ 261.741095][T16429] bridge_slave_0: left promiscuous mode [ 261.747538][T16429] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.757422][T16429] bridge_slave_1: left allmulticast mode [ 261.763115][T16429] bridge_slave_1: left promiscuous mode [ 261.769191][T16429] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.780005][T16429] bond0: (slave bond_slave_0): Releasing backup interface [ 261.783005][T16430] sctp: [Deprecated]: syz.2.2825 (pid 16430) Use of int in max_burst socket option. [ 261.783005][T16430] Use struct sctp_assoc_value instead [ 261.806670][T16429] bond0: (slave bond_slave_1): Releasing backup interface [ 261.818810][T16429] team0: Port device team_slave_0 removed [ 261.828721][T16429] team0: Port device team_slave_1 removed [ 261.835135][T16429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.843229][T16429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.852007][T16429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.860202][T16429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.869181][T16429] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 262.130091][T16445] netlink: 'syz.0.2830': attribute type 2 has an invalid length. [ 262.138519][T16445] netlink: 'syz.0.2830': attribute type 1 has an invalid length. [ 262.226934][T16450] netlink: 'syz.2.2833': attribute type 1 has an invalid length. [ 262.275443][T16450] bond1: entered promiscuous mode [ 262.288297][T16450] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.332610][T16450] bond1: (slave bridge1): making interface the new active one [ 262.361681][T16450] bridge1: entered promiscuous mode [ 262.380244][T16450] bridge1: left promiscuous mode [ 262.492861][T16463] netlink: 'syz.2.2835': attribute type 1 has an invalid length. [ 262.601175][T16472] xfrm1: entered allmulticast mode [ 262.667205][T16472] team_slave_1: Caught tx_queue_len zero misconfig [ 262.759584][T16482] netlink: 'syz.2.2842': attribute type 10 has an invalid length. [ 262.789232][T16482] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 262.803595][T16482] team0: Port device netdevsim1 added [ 262.852595][T16489] team0: Port device geneve1 added [ 262.882651][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.898324][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.928728][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.024509][T16497] xt_bpf: check failed: parse error [ 263.295201][T16507] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 263.472422][T16516] bond16: entered promiscuous mode [ 263.478240][T16516] bond16: entered allmulticast mode [ 263.483765][T16516] 8021q: adding VLAN 0 to HW filter on device bond16 [ 263.659965][T16538] __nla_validate_parse: 220 callbacks suppressed [ 263.659982][T16538] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2856'. [ 264.089516][T16570] syzkaller0: entered promiscuous mode [ 264.097687][T16570] syzkaller0: entered allmulticast mode [ 264.281485][T16585] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2869'. [ 264.298300][T16585] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2869'. [ 264.411297][T16593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2871'. [ 264.602917][T16609] openvswitch: netlink: Message has 4 unknown bytes. [ 264.617415][T16609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.629165][T16610] veth9: entered allmulticast mode [ 264.640854][T16609] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2875'. [ 264.823007][T16619] tipc: Enabled bearer , priority 0 [ 264.855564][T16619] syzkaller0: entered promiscuous mode [ 264.861917][T16619] syzkaller0: entered allmulticast mode [ 264.885565][T16619] tipc: Resetting bearer [ 264.913502][T16618] tipc: Resetting bearer [ 264.944504][T16618] tipc: Disabling bearer [ 264.998229][T16634] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2886'. [ 265.035478][T16637] mac80211_hwsim hwsim21 wlan0: entered allmulticast mode [ 265.074628][T16639] bridge0: entered allmulticast mode [ 265.285443][ T1165] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x23 [ 265.294712][ T4939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 265.302711][ T4939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 265.310372][ T4939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 265.320278][ T4939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 265.330171][ T4939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 265.441364][T16659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2892'. [ 265.614620][T16650] lo speed is unknown, defaulting to 1000 [ 265.656731][T16673] block nbd3: server does not support multiple connections per device. [ 265.666790][T16673] block nbd3: shutting down sockets [ 265.686832][ T1165] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.697422][ T1165] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 265.744784][ T1165] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.758782][ T1165] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 265.851725][ T1165] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.862238][ T1165] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 265.890491][T16650] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.907736][T16650] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.915266][T16650] bridge_slave_0: entered allmulticast mode [ 265.927969][T16650] bridge_slave_0: entered promiscuous mode [ 265.937232][T16650] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.944380][T16650] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.956507][T16650] bridge_slave_1: entered allmulticast mode [ 265.963443][T16650] bridge_slave_1: entered promiscuous mode [ 265.979069][ T1165] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.990380][ T1165] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 266.054803][T16650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.078317][T16650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.140621][T16650] team0: Port device team_slave_0 added [ 266.158720][T16650] team0: Port device team_slave_1 added [ 266.235460][T16650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.243795][T16650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.282756][T16650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.292343][T16712] netlink: 912 bytes leftover after parsing attributes in process `syz.2.2903'. [ 266.304884][T16708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2902'. [ 266.318242][T16650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.339094][T16650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.424378][T16650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.491356][ T1165] bridge_slave_1: left allmulticast mode [ 266.497454][ T1165] bridge_slave_1: left promiscuous mode [ 266.503191][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.512834][ T1165] bridge_slave_0: left allmulticast mode [ 266.526342][ T1165] bridge_slave_0: left promiscuous mode [ 266.537675][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.594415][ T1165] batman_adv: batadv0: Interface deactivated: gretap1 [ 266.611694][T16744] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2907'. [ 266.810061][ T1165] batman_adv: batadv0: Removing interface: gretap1 [ 266.839466][ T1165] bond2 (unregistering): (slave geneve3): Releasing active interface [ 266.852260][ T1165] bond1 (unregistering): (slave geneve2): Releasing active interface [ 266.870742][ T1165] batman_adv: batadv0: Removing interface: vlan4 [ 266.884988][ T1165] bond5 (unregistering): (slave bridge2): Releasing backup interface [ 266.904006][ T1165] bond16 (unregistering): (slave bridge7): Releasing backup interface [ 266.912572][ T1165] bridge7 (unregistering): left promiscuous mode [ 266.919370][ T1165] bridge7 (unregistering): left allmulticast mode [ 266.938699][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.948891][ T1165] bond0 (unregistering): Released all slaves [ 266.959050][ T1165] bond1 (unregistering): Released all slaves [ 266.972409][ T1165] bond2 (unregistering): Released all slaves [ 266.983848][ T1165] bond3 (unregistering): Released all slaves [ 267.002114][ T1165] bond4 (unregistering): Released all slaves [ 267.017768][ T1165] bond5 (unregistering): Released all slaves [ 267.029795][ T1165] bond6 (unregistering): Released all slaves [ 267.041259][ T1165] bond7 (unregistering): Released all slaves [ 267.052904][ T1165] bond8 (unregistering): Released all slaves [ 267.068413][ T1165] bond9 (unregistering): Released all slaves [ 267.079178][ T1165] bond10 (unregistering): Released all slaves [ 267.089348][ T1165] bond11 (unregistering): (slave veth9): Releasing backup interface [ 267.098538][ T1165] bond11 (unregistering): Released all slaves [ 267.108445][ T1165] bond12 (unregistering): Released all slaves [ 267.120431][ T1165] bond13 (unregistering): Released all slaves [ 267.131958][ T1165] bond14 (unregistering): Released all slaves [ 267.142491][ T1165] bond15 (unregistering): Released all slaves [ 267.151671][ T1165] bond16 (unregistering): Released all slaves [ 267.162740][ T1165] bond17 (unregistering): Released all slaves [ 267.171956][ T1165] bond18 (unregistering): Released all slaves [ 267.183381][ T1165] bond19 (unregistering): Released all slaves [ 267.231722][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 267.264020][T16757] syzkaller0: entered promiscuous mode [ 267.283423][T16757] syzkaller0: entered allmulticast mode [ 267.286300][T16766] validate_nla: 5 callbacks suppressed [ 267.286317][T16766] netlink: 'syz.1.2909': attribute type 1 has an invalid length. [ 267.334345][T16766] netlink: 'syz.1.2909': attribute type 2 has an invalid length. [ 267.356757][ T4939] Bluetooth: hci0: command tx timeout [ 267.381150][ T1165] tipc: Disabling bearer [ 267.389341][ T1165] tipc: Disabling bearer [ 267.394844][ T1165] tipc: Left network mode [ 267.444492][T16650] hsr_slave_0: entered promiscuous mode [ 267.471561][T16650] hsr_slave_1: entered promiscuous mode [ 267.503395][T16650] debugfs: 'hsr0' already exists in 'hsr' [ 267.514200][T16650] Cannot create hsr debugfs directory [ 267.577587][T16791] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 267.681942][T16800] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 267.901367][T16821] netlink: 'syz.4.2923': attribute type 1 has an invalid length. [ 267.924537][T16821] netlink: 'syz.4.2923': attribute type 1 has an invalid length. [ 267.935026][T16821] netlink: 'syz.4.2923': attribute type 8 has an invalid length. [ 267.991418][T16826] bond0: Caught tx_queue_len zero misconfig [ 268.030056][T16833] netlink: 'syz.4.2923': attribute type 3 has an invalid length. [ 268.090092][T16821] rdma_op ffff888076b181f0 conn xmit_rdma 0000000000000000 [ 268.247194][ T1165] hsr_slave_0: left promiscuous mode [ 268.276858][T16854] xt_ecn: cannot match TCP bits for non-tcp packets [ 268.283624][ T1165] hsr_slave_1: left promiscuous mode [ 268.303376][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.324735][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.348452][ T1165] veth1_macvtap: left promiscuous mode [ 268.354685][ T1165] veth0_macvtap: left promiscuous mode [ 268.367208][ T1165] veth1_vlan: left promiscuous mode [ 268.373621][ T1165] veth0_vlan: left promiscuous mode [ 268.407586][T16866] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 268.422085][T16858] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 268.634824][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 268.647272][T16877] netlink: del zone limit has 8 unknown bytes [ 268.653780][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 268.818701][T16650] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 268.836562][T16650] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 268.853696][T16650] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 268.855064][T16884] __nla_validate_parse: 6 callbacks suppressed [ 268.855080][T16884] netlink: 7994 bytes leftover after parsing attributes in process `syz.3.2936'. [ 268.885356][T16650] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 268.903259][T16650] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 268.935452][T16650] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 268.952781][T16650] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 269.008646][T16650] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 269.099041][T16914] syzkaller0: entered promiscuous mode [ 269.115286][T16914] syzkaller0: entered allmulticast mode [ 269.150396][T16919] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 269.220566][ T1165] IPVS: stop unused estimator thread 0... [ 269.336231][T16650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.394991][T16650] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.426552][ T4939] Bluetooth: hci0: command tx timeout [ 269.444976][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.452300][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.474690][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.481845][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.508249][T16940] syz_tun: entered allmulticast mode [ 269.569631][T16940] bond0: entered promiscuous mode [ 269.764700][T16963] nbd: socks must be embedded in a SOCK_ITEM attr [ 269.779698][T16965] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3101777352/3101777354 [ 269.790560][T16966] netlink: 'syz.3.2952': attribute type 1 has an invalid length. [ 269.809055][T16965] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3101777352/3101777353 [ 269.848813][T16965] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3101777352/3101777354 [ 269.862674][T16965] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3101777352/3101777353 [ 269.887630][T16966] 8021q: adding VLAN 0 to HW filter on device bond22 [ 269.939292][T13776] udevd[13776]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 270.134248][T16991] openvswitch: netlink: IP tunnel dst address not specified [ 270.226188][T16650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.332834][T16650] veth0_vlan: entered promiscuous mode [ 270.343923][T17002] netlink: 'syz.2.2958': attribute type 10 has an invalid length. [ 270.347576][T16650] veth1_vlan: entered promiscuous mode [ 270.357897][T17002] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2958'. [ 270.382693][T16650] veth0_macvtap: entered promiscuous mode [ 270.396783][T16650] veth1_macvtap: entered promiscuous mode [ 270.419456][T16650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.433381][T16650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.452145][T17009] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2959'. [ 270.456479][T16901] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.471003][T16901] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.485571][T16901] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.496384][T16901] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.554228][T16901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.580071][T16901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.598768][T17015] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 270.611782][T17015] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 270.621623][T17015] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 270.638132][T17017] xt_hashlimit: size too large, truncated to 1048576 [ 270.680294][T16901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.689188][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.722918][T16901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.731935][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.759515][T17030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2965'. [ 270.785139][T17031] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2966'. [ 270.840735][T17035] netlink: 'syz.2.2967': attribute type 1 has an invalid length. [ 270.852480][T17019] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2963'. [ 270.871915][T17040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2888'. [ 270.921563][T17035] bond2: (slave veth3): Enslaving as an active interface with a down link [ 271.000518][T17045] sctp: [Deprecated]: syz.0.2969 (pid 17045) Use of int in maxseg socket option. [ 271.000518][T17045] Use struct sctp_assoc_value instead [ 271.023861][T17035] bond2: (slave veth5): Enslaving as an active interface with a down link [ 271.064299][T17052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.083540][T17045] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2969'. [ 271.110648][T17045] netlink: 'syz.0.2969': attribute type 1 has an invalid length. [ 271.119963][T17055] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 271.120364][T17045] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2969'. [ 271.210834][T17058] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2971'. [ 271.509649][ T4939] Bluetooth: hci0: command tx timeout [ 272.048552][T17099] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.077230][T17099] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.145033][T17099] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.156980][T17099] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.200599][T17099] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.215908][T17099] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.257965][T17112] syzkaller0: entered promiscuous mode [ 272.270078][T17112] syzkaller0: entered allmulticast mode [ 272.335103][T17119] validate_nla: 2 callbacks suppressed [ 272.335120][T17119] netlink: 'syz.1.2992': attribute type 3 has an invalid length. [ 272.389832][T16901] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.398432][T16901] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.418147][ T35] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.428035][ T35] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.455637][T17114] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 272.466820][ T35] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.475142][T17125] sctp: [Deprecated]: syz.3.2993 (pid 17125) Use of int in maxseg socket option. [ 272.475142][T17125] Use struct sctp_assoc_value instead [ 272.475284][ T35] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.499094][ T35] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.508077][ T35] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.604635][T17134] 8021q: adding VLAN 0 to HW filter on device bond18 [ 272.617551][T17134] gretap2: entered allmulticast mode [ 272.624875][T17134] bond18: (slave gretap2): Enslaving as an active interface with an up link [ 272.722139][T17138] tipc: Enabling of bearer rejected, failed to enable media [ 272.838564][T17151] hsr_slave_1 (unregistering): left promiscuous mode [ 272.971809][T17167] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 272.980433][ T7792] IPVS: starting estimator thread 0... [ 273.076515][T17168] IPVS: using max 55 ests per chain, 132000 per kthread [ 273.375387][T17207] ip6gre0: Caught tx_queue_len zero misconfig [ 273.512452][T17218] netlink: 'syz.3.3020': attribute type 1 has an invalid length. [ 273.588168][ T4939] Bluetooth: hci0: command tx timeout [ 273.647116][T17218] 8021q: adding VLAN 0 to HW filter on device bond24 [ 273.669476][T17218] bond23: (slave bond24): making interface the new active one [ 273.681357][T17218] bond23: (slave bond24): Enslaving as an active interface with an up link [ 273.791685][T17234] lo speed is unknown, defaulting to 1000 [ 273.831686][T17239] lo: Caught tx_queue_len zero misconfig [ 273.992652][T17249] __nla_validate_parse: 84 callbacks suppressed [ 273.992669][T17249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3025'. [ 274.040117][T17249] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 274.064866][T17255] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3025'. [ 274.092039][T17255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3025'. [ 274.101685][ T5802] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 274.253032][T17268] batadv_slave_1: entered promiscuous mode [ 274.411843][T17278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.439682][T17267] batadv_slave_1: left promiscuous mode [ 274.508387][ T5802] IPVS: starting estimator thread 0... [ 274.575292][T17294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3037'. [ 274.619887][T17285] IPVS: using max 56 ests per chain, 134400 per kthread [ 274.638674][T17300] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3039'. [ 275.054782][T17328] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3046'. [ 275.064881][T17328] tipc: Enabling of bearer rejected, media not registered [ 275.167129][T17340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3048'. [ 275.178471][T17340] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 275.212957][ T29] audit: type=1804 audit(1781772315.396:15): pid=17334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3048" name="/newroot/104/cgroup.controllers" dev="tmpfs" ino=550 res=1 errno=0 [ 275.221172][T17346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3053'. [ 275.260486][T17346] netlink: 'syz.3.3053': attribute type 11 has an invalid length. [ 275.268370][ T29] audit: type=1800 audit(1781772315.396:16): pid=17334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3048" name="cgroup.controllers" dev="tmpfs" ino=550 res=0 errno=0 [ 275.317207][T17346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3053'. [ 275.319211][ T7889] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.327103][T17346] netlink: 'syz.3.3053': attribute type 11 has an invalid length. [ 275.344886][ T7889] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.345046][T17351] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3055'. [ 275.365571][ T7889] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.383092][ T7889] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.410232][T17354] bond0 (unregistering): Released all slaves [ 275.435448][T17356] xt_CT: You must specify a L4 protocol and not use inversions on it [ 275.467801][T17358] netlink: 'syz.3.3057': attribute type 2 has an invalid length. [ 275.550853][T17371] netlink: 'syz.4.3060': attribute type 50 has an invalid length. [ 275.571355][ T3387] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.589136][ T3387] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.626527][ T3387] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.729427][T17401] syzkaller1: entered promiscuous mode [ 275.757492][T17401] syzkaller1: entered allmulticast mode [ 275.786362][T17411] netlink: 'syz.4.3064': attribute type 18 has an invalid length. [ 275.797946][T17419] macvtap0: entered promiscuous mode [ 275.855078][T17437] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.883269][T17428] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 276.023885][T17411] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 276.079858][T17386] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 276.201818][T17469] hsr0: entered promiscuous mode [ 276.638888][T17430] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.664278][T17430] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.712501][T17500] bridge_slave_1: entered allmulticast mode [ 276.736090][T17430] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.763312][T17430] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.819215][ T5637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.829105][ T5637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.838133][ T5637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.848958][ T5637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.859148][ T5637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.992452][T17526] netlink: 'syz.1.3088': attribute type 5 has an invalid length. [ 277.037630][T17528] netlink: 'syz.2.3087': attribute type 31 has an invalid length. [ 277.113986][ T5625] syz_tun (unregistering): left allmulticast mode [ 277.201205][T17532] syzkaller0: entered promiscuous mode [ 277.220404][T17532] syzkaller0: entered allmulticast mode [ 277.322189][T17514] lo speed is unknown, defaulting to 1000 [ 277.445669][T17564] syz_tun: entered allmulticast mode [ 277.472632][T17564] syz_tun (unregistering): left allmulticast mode [ 277.564539][T17576] openvswitch: netlink: IPv4 tun info is not correct [ 277.681996][T17564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.705525][T17594] mac80211_hwsim hwsim8 »»»»»»: renamed from wlan0 [ 277.711640][T17564] netlink: 'syz.2.3096': attribute type 1 has an invalid length. [ 277.740138][T17564] netlink: 'syz.2.3096': attribute type 2 has an invalid length. [ 277.849949][T17514] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.857779][T17514] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.869497][T17514] bridge_slave_0: entered allmulticast mode [ 277.877544][T17514] bridge_slave_0: entered promiscuous mode [ 277.893603][T17514] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.911155][T17514] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.925659][T17514] bridge_slave_1: entered allmulticast mode [ 277.932764][T17514] bridge_slave_1: entered promiscuous mode [ 277.961622][T17514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.973638][T17514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.018701][T17514] team0: Port device team_slave_0 added [ 278.029823][T17514] team0: Port device team_slave_1 added [ 278.072921][T17628] gre2: entered allmulticast mode [ 278.088316][T17514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.100747][T17514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.127800][T17514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.163341][T17514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.196069][T17514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.252934][T17514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.336685][T17639] bond0: (slave gre3): The slave device specified does not support setting the MAC address [ 278.348069][T17639] bond0: (slave gre3): Error -95 calling set_mac_address [ 278.384498][T17514] hsr_slave_0: entered promiscuous mode [ 278.392480][T17514] hsr_slave_1: entered promiscuous mode [ 278.560424][T17514] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.642553][T17514] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.655510][T17664] netlink: 'syz.2.3118': attribute type 10 has an invalid length. [ 278.687876][T17664] team0 (unregistering): Port device netdevsim1 removed [ 278.719196][T17514] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.796598][T17514] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.840260][T17679] ip6erspan1: entered allmulticast mode [ 278.907297][T17514] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 278.944956][T17514] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 278.946480][ T5621] Bluetooth: hci1: command tx timeout [ 278.965604][T17681] sctp: [Deprecated]: syz.4.3123 (pid 17681) Use of struct sctp_assoc_value in delayed_ack socket option. [ 278.965604][T17681] Use struct sctp_sack_info instead [ 278.967169][T17514] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 279.003008][T17514] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 279.021391][T17687] syzkaller0: entered promiscuous mode [ 279.027916][T17687] syzkaller0: entered allmulticast mode [ 279.036269][T17514] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 279.057216][T17514] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 279.065332][T17514] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 279.076801][T17514] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 279.085263][T17687] TC_ACT_REPEAT abuse ? [ 279.090870][T17688] pim6reg1: entered promiscuous mode [ 279.098135][T17688] pim6reg1: entered allmulticast mode [ 279.178055][T17704] x_tables: duplicate underflow at hook 1 [ 279.244658][T17514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.285128][T17514] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.302199][T17708] lo speed is unknown, defaulting to 1000 [ 279.319363][T17381] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.326539][T17381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.336913][T17711] block nbd4: Unsupported socket: should be TCP or UNIX. [ 279.364845][T17403] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.371992][T17403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.504622][T17721] netlink: 'syz.2.3135': attribute type 23 has an invalid length. [ 279.511828][T17719] sctp: [Deprecated]: syz.4.3134 (pid 17719) Use of int in max_burst socket option. [ 279.511828][T17719] Use struct sctp_assoc_value instead [ 279.512715][T17721] netlink: 'syz.2.3135': attribute type 21 has an invalid length. [ 279.543407][T17514] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 279.579155][T17514] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.599616][T17725] __nla_validate_parse: 217 callbacks suppressed [ 279.599633][T17725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3136'. [ 279.653856][T17729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3138'. [ 279.670948][T17729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3138'. [ 279.680350][T17729] netlink: 'syz.0.3138': attribute type 12 has an invalid length. [ 279.690661][T17729] netlink: 'syz.0.3138': attribute type 11 has an invalid length. [ 279.847330][T17748] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3140'. [ 279.863922][T17747] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3141'. [ 280.082878][T17747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3141'. [ 280.145201][T17772] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3144'. [ 280.236605][T17514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.328657][T17514] veth0_vlan: entered promiscuous mode [ 280.351434][T17783] pim6reg: entered allmulticast mode [ 280.384388][T17514] veth1_vlan: entered promiscuous mode [ 280.441005][T17514] veth0_macvtap: entered promiscuous mode [ 280.460238][T17514] veth1_macvtap: entered promiscuous mode [ 280.511915][T17792] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3152'. [ 280.522307][T17514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.540811][T17514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.559142][T17430] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.570859][T17430] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.599986][T17430] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.612992][T17430] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.737164][T17793] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3150'. [ 280.741212][T17435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.760713][T17435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.827765][T17806] syz_tun: entered allmulticast mode [ 280.837412][T17418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.845392][T17418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.943829][T17814] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 280.971635][T17814] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 281.003392][T17814] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 281.026375][ T5621] Bluetooth: hci1: command tx timeout [ 281.051516][ T4939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 281.059408][ T4939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 281.067260][ T4939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 281.075025][ T4939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 281.082995][ T4939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 281.148202][T17829] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3162'. [ 281.493594][T17850] gretap0: entered promiscuous mode [ 281.514794][T17850] vlan4: entered promiscuous mode [ 281.797336][T17860] bridge0: port 1(vlan2) entered blocking state [ 281.803909][T17860] bridge0: port 1(vlan2) entered disabled state [ 281.811320][T17860] vlan2: entered allmulticast mode [ 281.817241][T17860] bridge0: entered allmulticast mode [ 281.823421][T17860] vlan2: left allmulticast mode [ 281.829035][T17860] bridge0: left allmulticast mode [ 281.868031][T17821] lo speed is unknown, defaulting to 1000 [ 281.908464][T17871] netlink: 'syz.1.3169': attribute type 2 has an invalid length. [ 282.014364][T17880] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 282.070318][T17821] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.078497][T17821] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.089074][T17821] bridge_slave_0: entered allmulticast mode [ 282.097687][T17821] bridge_slave_0: entered promiscuous mode [ 282.105624][T17821] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.114009][T17821] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.121942][T17821] bridge_slave_1: entered allmulticast mode [ 282.131601][T17821] bridge_slave_1: entered promiscuous mode [ 282.133174][T17895] netlink: 'syz.3.3174': attribute type 1 has an invalid length. [ 282.155405][T17821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.168194][T17821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.185099][T17895] bond1 (unregistering): Released all slaves [ 282.207891][T17821] team0: Port device team_slave_0 added [ 282.215535][T17821] team0: Port device team_slave_1 added [ 282.238950][T17821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.247704][T17821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.319844][T17898] xt_hashlimit: size too large, truncated to 1048576 [ 282.323308][T17821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.345089][T17901] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma? [ 282.356347][T17821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.364129][T17821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.402763][T17821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.486520][T17821] hsr_slave_0: entered promiscuous mode [ 282.497040][T17821] hsr_slave_1: entered promiscuous mode [ 282.508861][T17821] debugfs: 'hsr0' already exists in 'hsr' [ 282.514798][T17821] Cannot create hsr debugfs directory [ 282.703700][T17926] Bluetooth: MGMT ver 1.23 [ 282.720359][T17926] veth0: entered promiscuous mode [ 282.733901][T17925] veth0: left promiscuous mode [ 282.843481][T17937] xt_hashlimit: size too large, truncated to 1048576 [ 282.981033][T17821] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 283.000094][T17821] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 283.012052][T17821] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 283.022146][T17821] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 283.032443][T17821] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 283.046987][T17821] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 283.057271][T17821] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 283.070130][T17821] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 283.106599][ T5621] Bluetooth: hci1: command tx timeout [ 283.112121][ T4939] Bluetooth: hci3: command tx timeout [ 283.143732][T17950] lo speed is unknown, defaulting to 1000 [ 283.301015][T17821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.325506][T17821] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.344985][T17403] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.349103][T17971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.352139][T17403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.390322][T17403] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.397541][T17403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.668646][T17821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.801287][T18002] hmac(sha224: entered promiscuous mode [ 283.946506][T18015] batadv_slave_1: entered promiscuous mode [ 283.991009][T17821] veth0_vlan: entered promiscuous mode [ 284.007713][T17821] veth1_vlan: entered promiscuous mode [ 284.020381][T18017] batadv_slave_1: left promiscuous mode [ 284.052533][T17821] veth0_macvtap: entered promiscuous mode [ 284.063612][T17821] veth1_macvtap: entered promiscuous mode [ 284.104332][T17821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.138372][T17821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.154693][T18030] hmó3)ó: entered promiscuous mode [ 284.171289][T17430] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.186867][T17430] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.210956][T17430] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.239001][T17430] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.278809][T17435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.287237][T17435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.321038][T17381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.336730][T17381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.404494][T18044] netlink: 'syz.1.3212': attribute type 4 has an invalid length. [ 284.461405][T18052] veth9: left allmulticast mode [ 284.527772][T18054] x_tables: duplicate underflow at hook 1 [ 284.589646][T18065] xt_HMARK: spi-set and port-set can't be combined [ 284.771570][T18085] syzkaller0: entered promiscuous mode [ 284.777735][T18085] syzkaller0: entered allmulticast mode [ 284.795217][T18090] __nla_validate_parse: 15 callbacks suppressed [ 284.795236][T18090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3223'. [ 284.848329][T18092] : entered promiscuous mode [ 285.083641][T18107] netlink: 'syz.2.3230': attribute type 1 has an invalid length. [ 285.188968][ T5621] Bluetooth: hci1: command tx timeout [ 285.194560][ T4939] Bluetooth: hci3: command tx timeout [ 285.269122][T18127] syzkaller1: entered promiscuous mode [ 285.274752][T18127] syzkaller1: entered allmulticast mode [ 285.285229][T18127] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3235'. [ 285.378277][T18139] netlink: 'syz.4.3238': attribute type 1 has an invalid length. [ 285.400673][T18139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3238'. [ 285.430185][T18139] netlink: 'syz.4.3238': attribute type 1 has an invalid length. [ 285.479208][T18139] syzkaller1: entered promiscuous mode [ 285.511582][T18139] syzkaller1: entered allmulticast mode [ 285.618788][T18155] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.626274][T18155] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.754213][T18155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.769160][T18155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.814981][T17435] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.833805][T17435] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.875240][T17435] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.902779][T17435] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.981636][ T4939] block nbd4: Receive control failed (result -32) [ 285.991818][T18172] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3245'. [ 286.030300][T18176] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3247'. [ 286.105185][T18181] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3249'. [ 286.206758][T18195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3254'. [ 286.257252][T18195] 8021q: adding VLAN 0 to HW filter on device bond1 [ 286.285404][T18195] bond1: (slave veth5): Enslaving as an active interface with an up link [ 286.517521][T18214] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 286.549322][T18214] tap0: tun_chr_ioctl cmd 1074025672 [ 286.563113][T18214] tap0: ignored: set checksum disabled [ 286.582215][T18214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3259'. [ 286.627641][T18216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3260'. [ 286.721708][T18219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3261'. [ 286.946350][T18224] netlink: zone id is out of range [ 286.961068][T18231] netlink: 'syz.4.3264': attribute type 3 has an invalid length. [ 286.968971][T18224] netlink: zone id is out of range [ 286.982272][T18224] netlink: zone id is out of range [ 286.989420][T18227] netlink: 'syz.4.3264': attribute type 3 has an invalid length. [ 286.994223][T18224] netlink: zone id is out of range [ 287.014219][T18224] netlink: zone id is out of range [ 287.025886][T18224] netlink: zone id is out of range [ 287.049356][T18224] netlink: zone id is out of range [ 287.052634][T18234] xt_TPROXY: Can be used only with -p tcp or -p udp [ 287.069079][T18224] netlink: zone id is out of range [ 287.081111][T18224] netlink: zone id is out of range [ 287.094051][T18233] vlan2: entered promiscuous mode [ 287.097997][T18224] netlink: zone id is out of range [ 287.108158][T18233] bridge0: entered promiscuous mode [ 287.266991][ T4939] Bluetooth: hci3: command tx timeout [ 287.844374][T18281] vlan2: entered allmulticast mode [ 287.905570][T18283] bridge9: port 1(vlan4) entered blocking state [ 287.916912][T18283] bridge9: port 1(vlan4) entered disabled state [ 287.936494][T18283] vlan4: entered allmulticast mode [ 287.954333][T18283] bridge9: entered allmulticast mode [ 287.975662][T18283] vlan4: left allmulticast mode [ 287.984611][T18283] bridge9: left allmulticast mode [ 288.174135][T18291] netlink: 'syz.1.3282': attribute type 1 has an invalid length. [ 288.252198][T18291] bond19: entered promiscuous mode [ 288.268199][T18291] 8021q: adding VLAN 0 to HW filter on device bond19 [ 288.304602][T18294] syzkaller0: entered promiscuous mode [ 288.328931][T18294] syzkaller0: entered allmulticast mode [ 288.371656][T18301] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 288.697577][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 288.706867][ T5621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 288.714167][ T5621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 288.722391][ T5621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 288.730348][ T5621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 288.883620][T18322] syzkaller0: entered promiscuous mode [ 288.900643][T18322] syzkaller0: entered allmulticast mode [ 289.052642][T18328] veth3: entered allmulticast mode [ 289.101884][T18316] lo speed is unknown, defaulting to 1000 [ 289.114580][T18339] bond0: Unable to set up delay as MII monitoring is disabled [ 289.202836][T18349] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 289.297455][T18355] netlink: 'syz.0.3298': attribute type 7 has an invalid length. [ 289.308124][T18355] netlink: 'syz.0.3298': attribute type 8 has an invalid length. [ 289.318440][T18355] netlink: 'syz.0.3298': attribute type 8 has an invalid length. [ 289.347032][ T5621] Bluetooth: hci3: command tx timeout [ 289.591661][T18316] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.612318][T18316] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.631153][T18316] bridge_slave_0: entered allmulticast mode [ 289.640342][T18316] bridge_slave_0: entered promiscuous mode [ 289.651255][T18316] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.661214][T18316] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.671141][T18316] bridge_slave_1: entered allmulticast mode [ 289.680303][T18316] bridge_slave_1: entered promiscuous mode [ 289.725292][ T5802] IPVS: starting estimator thread 0... [ 289.742981][T18316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.764420][T18316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.803556][T18392] __nla_validate_parse: 16 callbacks suppressed [ 289.803573][T18392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3307'. [ 289.813550][T18316] team0: Port device team_slave_0 added [ 289.827184][T18385] IPVS: using max 57 ests per chain, 136800 per kthread [ 289.837217][T18316] team0: Port device team_slave_1 added [ 289.874083][T18316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.892073][T18316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.918680][T18316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.931673][T18316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.939165][T18316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.968618][T18316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.217005][T18316] hsr_slave_0: entered promiscuous mode [ 290.228249][T18316] hsr_slave_1: entered promiscuous mode [ 290.234553][T18316] debugfs: 'hsr0' already exists in 'hsr' [ 290.241751][T18316] Cannot create hsr debugfs directory [ 290.355549][T18430] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3316'. [ 290.379363][T18430] nbd: must specify at least one socket [ 290.387608][T18430] validate_nla: 3 callbacks suppressed [ 290.387622][T18430] netlink: 'syz.4.3316': attribute type 1 has an invalid length. [ 290.426317][T18430] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.3316'. [ 290.453025][T18316] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.472897][T18436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3319'. [ 290.488097][T18316] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.539082][T18316] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.563466][T18316] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.596441][T18443] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3319'. [ 290.668804][T18316] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.709617][T18316] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.786458][ T5621] Bluetooth: hci4: command tx timeout [ 290.793776][T18316] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.817171][T18316] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.868655][T18448] lo speed is unknown, defaulting to 1000 [ 290.910063][T18456] netlink: 'syz.3.3324': attribute type 4 has an invalid length. [ 290.958056][T18456] netlink: 'syz.3.3324': attribute type 4 has an invalid length. [ 291.027227][T18316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 291.040964][T18316] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 291.114342][T18316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 291.129773][T18316] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 291.147847][T18316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 291.159703][T18316] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 291.167776][T18316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 291.179672][T18316] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 291.303190][T18488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3328'. [ 291.426300][ T5621] Bluetooth: hci3: command tx timeout [ 291.440907][T18498] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode [ 291.462368][T18498] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode [ 291.500014][T18316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.518735][T18316] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.531028][T17430] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.538209][T17430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.551352][T17390] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.558517][T17390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.623118][T18511] netlink: 'syz.3.3335': attribute type 10 has an invalid length. [ 291.658189][T18511] bridge0: port 3(netdevsim1) entered blocking state [ 291.671376][T18511] bridge0: port 3(netdevsim1) entered disabled state [ 291.679538][T18511] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 291.689598][T18511] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 291.727148][T18517] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3336'. [ 291.799025][T18520] xt_CT: You must specify a L4 protocol and not use inversions on it [ 292.089958][T18316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.179036][T18316] veth0_vlan: entered promiscuous mode [ 292.193842][T18316] veth1_vlan: entered promiscuous mode [ 292.252246][T18316] veth0_macvtap: entered promiscuous mode [ 292.289221][T18316] veth1_macvtap: entered promiscuous mode [ 292.345363][T18316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.368915][T18566] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3343'. [ 292.384540][T18316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.408517][T18566] IPv6: sit1: Disabled Multicast RS [ 292.416673][T18566] sit1: entered allmulticast mode [ 292.431136][T17430] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.453659][T17430] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.482245][T18575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3345'. [ 292.486945][T17430] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.551840][T17430] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.646280][T17390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.681424][T17390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.745436][T18592] netlink: 'syz.0.3348': attribute type 1 has an invalid length. [ 292.754277][T17381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.754902][T18594] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 292.769042][T17381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.819412][T18592] 8021q: adding VLAN 0 to HW filter on device bond1 [ 292.867426][ T5621] Bluetooth: hci4: command tx timeout [ 292.933167][T18612] netlink: 'syz.3.3352': attribute type 1 has an invalid length. [ 292.934998][T18596] net_ratelimit: 391 callbacks suppressed [ 292.935014][T18596] netlink: zone id is out of range [ 293.050635][T18596] netlink: zone id is out of range [ 293.094571][T18596] netlink: zone id is out of range [ 293.109285][T18596] netlink: zone id is out of range [ 293.114520][T18596] netlink: zone id is out of range [ 293.120472][T18596] netlink: zone id is out of range [ 293.125928][T18596] netlink: zone id is out of range [ 293.131137][T18596] netlink: zone id is out of range [ 293.137425][T18596] netlink: zone id is out of range [ 293.138981][T18619] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 293.164998][T18619] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3355'. [ 293.573497][T18646] sctp: [Deprecated]: syz.0.3361 (pid 18646) Use of struct sctp_assoc_value in delayed_ack socket option. [ 293.573497][T18646] Use struct sctp_sack_info instead [ 293.575429][T18644] vlan2: entered promiscuous mode [ 293.599622][T18644] bridge0: entered promiscuous mode [ 293.621967][T18644] netlink: 'syz.4.3362': attribute type 4 has an invalid length. [ 293.727980][T18648] lo speed is unknown, defaulting to 1000 [ 293.756921][T18651] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 293.924589][T18658] syzkaller0: entered promiscuous mode [ 293.940488][T18658] syzkaller0: entered allmulticast mode [ 293.957920][T18661] netlink: 'syz.3.3367': attribute type 10 has an invalid length. [ 293.984371][T18661] team0: Port device geneve1 added [ 294.145034][T18672] syzkaller0: entered promiscuous mode [ 294.160391][T18672] syzkaller0: entered allmulticast mode [ 294.234381][T18677] bond3: entered promiscuous mode [ 294.242426][T18677] bond3: entered allmulticast mode [ 294.253362][T18677] 8021q: adding VLAN 0 to HW filter on device bond3 [ 294.342240][T18674] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20004 [ 294.574404][T18719] bridge1: entered promiscuous mode [ 294.582627][T18719] bridge1: entered allmulticast mode [ 294.592216][T18719] team0: Port device bridge1 added [ 294.598919][T18719] bridge0: port 3(team0) entered blocking state [ 294.610700][T18719] bridge0: port 3(team0) entered disabled state [ 294.618034][T18719] team0: entered allmulticast mode [ 294.623191][T18719] team_slave_0: entered allmulticast mode [ 294.629871][T18719] team_slave_1: entered allmulticast mode [ 294.637281][T18719] team0: entered promiscuous mode [ 294.642322][T18719] team_slave_0: entered promiscuous mode [ 294.648430][T18719] team_slave_1: entered promiscuous mode [ 294.654482][T18719] bridge0: port 3(team0) entered blocking state [ 294.660816][T18719] bridge0: port 3(team0) entered forwarding state [ 294.750359][T18721] syz_tun: renamed from vxcan0 (while UP) [ 294.948936][ T5621] Bluetooth: hci4: command tx timeout [ 295.062599][T18758] __nla_validate_parse: 7 callbacks suppressed [ 295.062616][T18758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3394'. [ 295.089581][T18758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3394'. [ 295.407518][T18795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3406'. [ 295.424138][T18797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3406'. [ 295.443159][T18797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3406'. [ 295.446445][T18800] netlink: 'syz.3.3408': attribute type 39 has an invalid length. [ 295.453170][T18797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3406'. [ 295.515613][T18799] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3407'. [ 295.637775][T18817] sctp: [Deprecated]: syz.0.3411 (pid 18817) Use of int in max_burst socket option. [ 295.637775][T18817] Use struct sctp_assoc_value instead [ 295.680236][T18818] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3412'. [ 295.699873][T18818] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3412'. [ 295.732438][T18818] geneve2: entered promiscuous mode [ 295.738763][T18817] lo speed is unknown, defaulting to 1000 [ 295.749223][T18816] IPv6: NLM_F_REPLACE set, but no existing node found! [ 295.758387][T18816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3412'. [ 295.805410][T18816] geneve0: entered promiscuous mode [ 295.831714][T18816] geneve0: left promiscuous mode [ 296.356722][T18855] netlink: 'syz.3.3425': attribute type 1 has an invalid length. [ 296.555143][T18868] veth7: entered allmulticast mode [ 296.564072][T18873] netlink: 'syz.3.3431': attribute type 12 has an invalid length. [ 296.572283][T18873] netlink: 'syz.3.3431': attribute type 29 has an invalid length. [ 296.658287][T18872] bridge0: port 3(team0) entered disabled state [ 296.664709][T18872] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.672137][T18872] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.774804][T18872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.814769][T18872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.922591][T18867] bond4 (unregistering): Released all slaves [ 296.954037][T17381] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.970145][T17381] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.015000][T17381] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.039626][ T5621] Bluetooth: hci4: command tx timeout [ 297.043910][T17381] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.127960][T17381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.155042][T17381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.294957][T18925] syzkaller0: entered promiscuous mode [ 297.303317][T18925] syzkaller0: entered allmulticast mode [ 297.523422][T18936] tipc: Started in network mode [ 297.546700][T18936] tipc: Node identity fa4a6addeede, cluster identity 4711 [ 297.554194][T18936] tipc: Enabled bearer , priority 0 [ 297.567782][T18924] tipc: Resetting bearer [ 297.578328][T18924] tipc: Disabling bearer [ 297.842649][T18969] Cannot find del_set index 4 as target [ 299.257033][T19082] veth0: entered promiscuous mode [ 299.262935][T19081] veth0: left promiscuous mode [ 299.437047][T19095] 8021q: adding VLAN 0 to HW filter on device bond4 [ 299.478987][T19103] bond4: (slave veth11): Enslaving as an active interface with an up link [ 299.543055][T19110] tipc: Enabling of bearer rejected, failed to enable media [ 299.572724][T19107] lo speed is unknown, defaulting to 1000 [ 299.673725][T19120] netlink: 'syz.2.3500': attribute type 8 has an invalid length. [ 299.704871][T19120] netlink: 'syz.2.3500': attribute type 1 has an invalid length. [ 300.015371][T19140] netlink: 'syz.2.3504': attribute type 11 has an invalid length. [ 300.253022][T19155] __nla_validate_parse: 168 callbacks suppressed [ 300.253040][T19155] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3509'. [ 300.291104][T19157] netlink: 'syz.2.3508': attribute type 4 has an invalid length. [ 300.319928][T19157] netlink: 'syz.2.3508': attribute type 10 has an invalid length. [ 300.338086][T19157] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3508'. [ 300.349227][T19157] dummy0: entered promiscuous mode [ 300.549458][T19179] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3514'. [ 300.589792][T19183] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3515'. [ 300.631930][T19186] netlink: 'syz.4.3516': attribute type 3 has an invalid length. [ 300.640836][T19186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3516'. [ 300.833838][T19205] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3521'. [ 300.847551][T19205] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3521'. [ 300.892503][T19212] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3522'. [ 301.149392][T19231] tipc: Enabling of bearer rejected, failed to enable media [ 301.243336][T19241] syzkaller1: entered promiscuous mode [ 301.255167][T19241] syzkaller1: entered allmulticast mode [ 301.403102][T19252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3533'. [ 301.403793][T19256] sctp: [Deprecated]: syz.2.3535 (pid 19256) Use of int in max_burst socket option. [ 301.403793][T19256] Use struct sctp_assoc_value instead [ 301.490487][T19257] netlink: 'syz.1.3534': attribute type 3 has an invalid length. [ 301.505065][T19258] netlink: 'syz.1.3534': attribute type 3 has an invalid length. [ 301.963452][T19304] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3549'. [ 301.973148][T19302] syzkaller1: entered promiscuous mode [ 301.982849][T19302] syzkaller1: entered allmulticast mode [ 301.999909][T19302] gretap1: entered promiscuous mode [ 302.362345][T19327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.370406][T19327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.748199][T19352] netlink: 'syz.0.3563': attribute type 10 has an invalid length. [ 305.967506][T19388] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 305.982288][T19388] net_ratelimit: 305 callbacks suppressed [ 305.982301][T19388] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 306.015177][T19405] netlink: 'syz.0.3567': attribute type 3 has an invalid length. [ 306.040620][T19396] sctp: [Deprecated]: syz.2.3569 (pid 19396) Use of int in max_burst socket option. [ 306.040620][T19396] Use struct sctp_assoc_value instead [ 306.059630][T19405] rdma_op ffff88804e1621f0 conn xmit_rdma 0000000000000000 [ 306.078784][T19413] netlink: 'syz.3.3572': attribute type 2 has an invalid length. [ 306.174075][T19418] syzkaller1: entered promiscuous mode [ 306.193740][T19418] syzkaller1: entered allmulticast mode [ 306.195286][T19424] __nla_validate_parse: 10 callbacks suppressed [ 306.195301][T19424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3576'. [ 306.232102][T19427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3577'. [ 306.247893][T19427] hsr_slave_0: left promiscuous mode [ 306.254004][T19427] hsr_slave_1: left promiscuous mode [ 306.343410][T19437] vlan2: entered promiscuous mode [ 306.405111][ T7791] IPVS: starting estimator thread 0... [ 306.506851][T19448] IPVS: using max 54 ests per chain, 129600 per kthread [ 306.515585][T19439] xt_TPROXY: Can be used only with -p tcp or -p udp [ 306.534116][T19439] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3579'. [ 306.634375][T19459] netlink: 'syz.3.3585': attribute type 4 has an invalid length. [ 306.647067][T19459] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3585'. [ 306.664221][T19459] .`: renamed from bond0 (while UP) [ 306.763840][T17430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.772667][T17430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.790204][T19471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.848063][T19477] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20001 [ 307.060134][T19483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.219801][T19494] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3594'. [ 307.318890][T19494] nbd5: detected capacity change from 0 to 3 [ 307.333357][T13776] Buffer I/O error on dev nbd5, logical block 1, async page read [ 307.333437][T19493] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3594'. [ 307.396414][T19493] nbd6: detected capacity change from 0 to 3 [ 307.403454][T14643] Buffer I/O error on dev nbd6, logical block 1, async page read [ 307.415160][T19505] syzkaller0: entered promiscuous mode [ 307.421291][T19505] syzkaller0: entered allmulticast mode [ 307.422996][ T5621] block nbd5: Receive control failed (result -104) [ 307.427334][ T4939] block nbd6: Receive control failed (result -32) [ 307.514634][ T29] audit: type=1800 audit(1781772347.696:17): pid=19513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3599" name="memory.events" dev="tmpfs" ino=1157 res=0 errno=0 [ 307.537507][T19512] netlink: 'syz.3.3601': attribute type 1 has an invalid length. [ 307.560848][T19512] bond0: entered promiscuous mode [ 307.567285][T19512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.589819][T19512] bond0: (slave veth7): making interface the new active one [ 307.598138][T19512] veth7: entered promiscuous mode [ 307.604093][T19512] bond0: (slave veth7): Enslaving as an active interface with an up link [ 308.100270][T19545] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3613'. [ 308.120976][T19545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3613'. [ 308.180931][T19549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3614'. [ 308.202275][T19550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3613'. [ 308.212921][T19550] nbd: must specify a size in bytes for the device [ 308.222296][ T7794] IPVS: starting estimator thread 0... [ 308.282431][T19558] sctp: [Deprecated]: syz.0.3615 (pid 19558) Use of int in maxseg socket option. [ 308.282431][T19558] Use struct sctp_assoc_value instead [ 308.337658][T19553] IPVS: using max 55 ests per chain, 132000 per kthread [ 308.351309][T19561] netlink: 'syz.3.3617': attribute type 89 has an invalid length. [ 308.361219][T19561] netlink: 'syz.3.3617': attribute type 266 has an invalid length. [ 308.401081][T19569] syzkaller1: entered promiscuous mode [ 308.420938][T19569] syzkaller1: entered allmulticast mode [ 308.948631][T19606] netlink: 'syz.3.3631': attribute type 1 has an invalid length. [ 309.332974][T19617] syzkaller0: entered promiscuous mode [ 309.339022][T19617] syzkaller0: entered allmulticast mode [ 309.420841][T19619] tipc: MTU too low for tipc bearer [ 309.428965][T19619] netlink: 'syz.0.3634': attribute type 5 has an invalid length. [ 309.498819][T19623] pim6reg1: entered promiscuous mode [ 309.504240][T19623] pim6reg1: entered allmulticast mode [ 309.715634][T19639] ipvlan1: entered promiscuous mode [ 309.722100][T19639] ipvlan1: left promiscuous mode [ 309.871664][T19651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.084994][T19680] netlink: 'syz.3.3654': attribute type 1 has an invalid length. [ 310.096396][T19680] netlink: 'syz.3.3654': attribute type 2 has an invalid length. [ 310.191563][T19688] bond2: entered promiscuous mode [ 310.197361][T19688] 8021q: adding VLAN 0 to HW filter on device bond2 [ 310.230502][T19688] 8021q: adding VLAN 0 to HW filter on device bond2 [ 310.237879][T19688] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 310.250717][T19688] bond2: (slave ip6gre1): Error -95 calling set_mac_address [ 310.373320][T19709] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 310.380609][T19709] IPv6: NLM_F_CREATE should be set when creating new route [ 310.387877][T19709] IPv6: NLM_F_CREATE should be set when creating new route [ 310.722238][T19748] xfrm1: entered allmulticast mode [ 310.760201][T19750] tipc: Started in network mode [ 310.765080][T19750] tipc: Node identity 4a19788fb55, cluster identity 4711 [ 310.772558][T19750] tipc: Enabled bearer , priority 0 [ 310.838348][T19752] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 310.850881][T19752] bond2 (unregistering): Released all slaves [ 311.314266][T19781] __nla_validate_parse: 12 callbacks suppressed [ 311.314334][T19781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3683'. [ 311.343034][T19781] bridge4: port 1(dummy0) entered blocking state [ 311.362407][T19781] bridge4: port 1(dummy0) entered disabled state [ 311.370993][T19781] dummy0: entered allmulticast mode [ 311.377849][T19781] dummy0: entered promiscuous mode [ 311.461488][T19791] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3686'. [ 311.471655][T19791] ip6tnl0: Caught tx_queue_len zero misconfig [ 311.479611][T19791] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3686'. [ 311.498321][T19791] syzkaller1: entered promiscuous mode [ 311.503991][T19791] syzkaller1: entered allmulticast mode [ 311.524804][T19793] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3687'. [ 311.550628][T19793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3687'. [ 311.574266][T19795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3688'. [ 311.601364][T19797] xfrm0 speed is unknown, defaulting to 1000 [ 311.621210][T19793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3687'. [ 311.627116][T19797] xfrm0 speed is unknown, defaulting to 1000 [ 311.637253][T19797] xfrm0 speed is unknown, defaulting to 1000 [ 311.726464][T19802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3691'. [ 311.763369][T19802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3691'. [ 311.794199][T19802] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 311.814865][T19797] infiniband syz0: set active [ 311.819856][ T5802] xfrm0 speed is unknown, defaulting to 1000 [ 311.834546][T19797] infiniband syz0: added xfrm0 [ 311.860982][T19797] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 311.878595][T19797] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 311.896538][ T7791] tipc: Node number set to 4283005071 [ 311.896927][T19797] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 311.938240][T19797] RDS/IB: syz0: added [ 311.959641][T19797] smc: adding ib device syz0 with port count 1 [ 311.974506][T19797] smc: ib device syz0 port 1 has no pnetid [ 311.982439][T13586] xfrm0 speed is unknown, defaulting to 1000 [ 311.989622][T19797] xfrm0 speed is unknown, defaulting to 1000 [ 312.007364][T19818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3693'. [ 312.074172][ T29] audit: type=1800 audit(1781772352.256:18): pid=19827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3694" name="memory.events" dev="tmpfs" ino=769 res=0 errno=0 [ 312.104084][T19828] validate_nla: 34 callbacks suppressed [ 312.104103][T19828] netlink: 'syz.1.3695': attribute type 1 has an invalid length. [ 312.206953][T19828] 8021q: adding VLAN 0 to HW filter on device bond2 [ 312.249876][T19822] bond2: (slave veth3): Enslaving as an active interface with a down link [ 312.261765][T19797] xfrm0 speed is unknown, defaulting to 1000 [ 312.320338][T19838] ip6erspan0: entered allmulticast mode [ 312.395047][T19797] xfrm0 speed is unknown, defaulting to 1000 [ 312.483607][T19847] netlink: 'syz.1.3699': attribute type 1 has an invalid length. [ 312.521910][T19797] xfrm0 speed is unknown, defaulting to 1000 [ 312.652754][T19797] xfrm0 speed is unknown, defaulting to 1000 [ 312.759084][T19797] xfrm0 speed is unknown, defaulting to 1000 [ 312.877786][T19797] xfrm0 speed is unknown, defaulting to 1000 [ 312.992842][T19862] syzkaller0: entered promiscuous mode [ 313.006031][T19862] syzkaller0: entered allmulticast mode [ 313.093653][T19797] xfrm0 speed is unknown, defaulting to 1000 [ 313.170829][T19867] netlink: 'syz.0.3706': attribute type 4 has an invalid length. [ 313.252026][T19878] tipc: Enabling of bearer rejected, already enabled [ 313.284652][T19877] tipc: Enabling of bearer rejected, already enabled [ 313.317442][T19877] tipc: Resetting bearer [ 313.344743][T19797] xfrm0 speed is unknown, defaulting to 1000 [ 313.603028][ T29] audit: type=1800 audit(1781772353.786:19): pid=19901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3714" name="memory.events" dev="tmpfs" ino=1233 res=0 errno=0 [ 313.640913][T19903] netlink: 'syz.4.3716': attribute type 28 has an invalid length. [ 314.434414][T19877] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.441892][T19877] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.598324][T19877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.624535][T19877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.808218][T19877] mac80211_hwsim hwsim45 wlan0: left promiscuous mode [ 314.815121][T19877] mac80211_hwsim hwsim45 wlan0: left allmulticast mode [ 314.895958][T19877] geneve2: left promiscuous mode [ 314.918207][T19877] tipc: Resetting bearer [ 314.924657][T19877] syzkaller0: left promiscuous mode [ 314.931397][T19877] syzkaller0: left allmulticast mode [ 314.939667][T19877] bond0: left promiscuous mode [ 314.944694][T19877] veth7: left promiscuous mode [ 314.992079][T19910] syzkaller1: entered promiscuous mode [ 315.001889][T19910] syzkaller1: entered allmulticast mode [ 315.009485][T17430] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.026242][T17430] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.041890][T17430] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.076834][T19921] 8021q: adding VLAN 0 to HW filter on device bond3 [ 315.083928][T17430] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.094886][T19921] netlink: 'syz.3.3719': attribute type 12 has an invalid length. [ 315.103358][T19921] netlink: 'syz.3.3719': attribute type 7 has an invalid length. [ 315.121603][T19921] gretap1: entered allmulticast mode [ 315.130162][T19921] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 315.151267][T19921] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 315.175052][T19921] bond3 (unregistering): Released all slaves [ 315.273905][T19933] netlink: 'syz.0.3724': attribute type 4 has an invalid length. [ 315.284483][T19933] netlink: 'syz.0.3724': attribute type 4 has an invalid length. [ 315.363056][T19937] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not 'illinois' [ 315.428259][T19940] netlink: 'syz.0.3727': attribute type 2 has an invalid length. [ 315.457576][T19952] xt_time: unknown flags 0xf4 [ 315.641200][T19967] netlink: 'syz.4.3736': attribute type 13 has an invalid length. [ 315.894642][T19967] veth3: left allmulticast mode [ 315.903165][T19967] vlan2: left promiscuous mode [ 315.910881][T19967] bridge0: left promiscuous mode [ 315.922126][T19967] gretap1: left promiscuous mode [ 315.928442][T19987] sctp: [Deprecated]: syz.2.3740 (pid 19987) Use of struct sctp_assoc_value in delayed_ack socket option. [ 315.928442][T19987] Use struct sctp_sack_info instead [ 315.950850][T19967] xfrm1: left allmulticast mode [ 315.962330][T19913] xfrm0 speed is unknown, defaulting to 1000 [ 316.090900][T19999] lo speed is unknown, defaulting to 1000 [ 316.108980][T19999] xfrm0 speed is unknown, defaulting to 1000 [ 316.153860][T20004] openvswitch: netlink: Flow actions attr not present in new flow. [ 316.193780][T20004] tipc: Enabling of bearer rejected, failed to enable media [ 316.240789][T20011] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 316.338591][T20011] syzkaller0: entered promiscuous mode [ 316.344240][T20011] syzkaller0: entered allmulticast mode [ 316.901991][T20068] __nla_validate_parse: 8 callbacks suppressed [ 316.902009][T20068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3763'. [ 316.922405][T20068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3763'. [ 316.958524][T20054] lo speed is unknown, defaulting to 1000 [ 316.990119][T20054] xfrm0 speed is unknown, defaulting to 1000 [ 317.338836][T20072] block nbd7: server does not support multiple connections per device. [ 317.355813][T20072] block nbd7: shutting down sockets [ 317.505177][T20098] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3771'. [ 317.533444][T20096] lo speed is unknown, defaulting to 1000 [ 317.542355][T20100] syzkaller0: entered promiscuous mode [ 317.551599][T20098] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3771'. [ 317.557409][T20100] syzkaller0: entered allmulticast mode [ 317.572736][T20096] xfrm0 speed is unknown, defaulting to 1000 [ 317.771884][T20109] validate_nla: 2 callbacks suppressed [ 317.771901][T20109] netlink: 'syz.1.3774': attribute type 29 has an invalid length. [ 317.788941][T20110] bond0: (slave vlan3): Enslaving as an active interface with an up link [ 317.820009][T20109] netlink: 'syz.1.3774': attribute type 29 has an invalid length. [ 317.902111][T20119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3778'. [ 317.923651][T20119] xt_TCPMSS: Only works on TCP SYN packets [ 317.964790][T20114] bond2: entered promiscuous mode [ 317.972196][T20127] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 317.978163][T20114] netlink: 'syz.0.3776': attribute type 1 has an invalid length. [ 318.000559][T20114] netlink: 'syz.0.3776': attribute type 2 has an invalid length. [ 318.020924][T20119] team0: left allmulticast mode [ 318.032896][T20119] team_slave_0: left allmulticast mode [ 318.041724][T20119] team_slave_1: left allmulticast mode [ 318.048810][T20119] team0: left promiscuous mode [ 318.053666][T20119] team_slave_0: left promiscuous mode [ 318.060628][T20133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3781'. [ 318.070410][T20119] team_slave_1: left promiscuous mode [ 318.078354][T20119] bridge0: port 3(team0) entered disabled state [ 318.087212][T20119] bridge_slave_1: left allmulticast mode [ 318.098442][T20119] bridge_slave_1: left promiscuous mode [ 318.104501][T20119] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.114371][T20119] bridge_slave_0: left allmulticast mode [ 318.121137][T20119] bridge_slave_0: left promiscuous mode [ 318.130341][T20119] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.399722][T20153] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20003 [ 318.426232][T20149] netlink: 'syz.2.3785': attribute type 1 has an invalid length. [ 318.433949][T20150] netlink: 'syz.2.3785': attribute type 1 has an invalid length. [ 318.551090][T20169] sctp: [Deprecated]: syz.2.3793 (pid 20169) Use of struct sctp_assoc_value in delayed_ack socket option. [ 318.551090][T20169] Use struct sctp_sack_info instead [ 318.557556][T20168] batadv_slave_1: entered promiscuous mode [ 318.621020][T20174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3795'. [ 318.661823][T20174] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.3795'. [ 318.719038][T20186] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3797'. [ 318.748549][T20188] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 318.811078][T20198] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3801'. [ 318.977259][T20206] 8021q: adding VLAN 0 to HW filter on device bond3 [ 319.009032][T20203] : entered promiscuous mode [ 319.043505][T20206] syzkaller0: entered allmulticast mode [ 319.107882][T20217] netlink: 'syz.1.3808': attribute type 1 has an invalid length. [ 319.152409][T20217] bond3: entered promiscuous mode [ 319.168425][T20217] 8021q: adding VLAN 0 to HW filter on device bond3 [ 319.199574][T20221] ipip0: entered promiscuous mode [ 319.556523][T20249] netlink: 'syz.2.3816': attribute type 1 has an invalid length. [ 319.665042][T20249] 8021q: adding VLAN 0 to HW filter on device bond7 [ 319.756151][T20250] bond7: (slave veth17): Enslaving as an active interface with a down link [ 335.243426][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 335.252762][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 335.262116][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 335.271683][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 335.283103][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 335.291056][ T5637] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 335.299242][ T5637] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 335.307318][ T5637] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 335.327329][ T5637] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 335.334808][ T5637] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 335.363263][ T5621] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 335.371417][ T5621] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 335.379208][ T5621] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 335.387021][ T5621] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 335.396166][ T50] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 335.405161][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 335.412604][ T5621] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 335.420132][ T50] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 335.433231][ T50] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 335.441108][ T50] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 335.446564][ T5636] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 335.457574][ T5636] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 335.465504][ T5636] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 335.477020][ T5636] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 335.484493][ T5636] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 337.345834][ T5636] Bluetooth: hci2: command tx timeout [ 337.425839][ T5636] Bluetooth: hci6: command tx timeout [ 337.505891][ T5621] Bluetooth: hci7: command tx timeout [ 337.506326][ T50] Bluetooth: hci8: command tx timeout [ 337.511381][ T5636] Bluetooth: hci9: command tx timeout [ 337.666509][ T11] block nbd5: Possible stuck request ffff888027657000: control (read@0,1024B). Runtime 30 seconds [ 337.677426][ T1765] block nbd6: Possible stuck request ffff8880276c7000: control (read@0,1024B). Runtime 30 seconds [ 339.426270][ T5636] Bluetooth: hci2: command tx timeout [ 339.516281][ T5636] Bluetooth: hci6: command tx timeout [ 339.586806][ T50] Bluetooth: hci7: command tx timeout [ 339.586816][ T5621] Bluetooth: hci8: command tx timeout [ 339.598070][ T5636] Bluetooth: hci9: command tx timeout [ 341.506814][ T50] Bluetooth: hci2: command tx timeout [ 341.585781][ T50] Bluetooth: hci6: command tx timeout [ 341.665856][ T50] Bluetooth: hci7: command tx timeout [ 341.676157][ T50] Bluetooth: hci9: command tx timeout [ 341.678773][ T5636] Bluetooth: hci8: command tx timeout [ 343.586322][ T5636] Bluetooth: hci2: command tx timeout [ 343.666380][ T5636] Bluetooth: hci6: command tx timeout [ 343.745867][ T5636] Bluetooth: hci8: command tx timeout [ 343.756258][ T5636] Bluetooth: hci9: command tx timeout [ 343.756328][ T50] Bluetooth: hci7: command tx timeout [ 367.756292][ T1765] block nbd5: Possible stuck request ffff888027657000: control (read@0,1024B). Runtime 60 seconds [ 367.767134][ T11] block nbd6: Possible stuck request ffff8880276c7000: control (read@0,1024B). Runtime 60 seconds [ 368.533651][ T4989] udevd[4989]: worker [13776] /devices/virtual/block/nbd5 is taking a long time [ 368.542840][ T4989] udevd[4989]: worker [14643] /devices/virtual/block/nbd6 is taking a long time [ 385.825995][ T5636] Bluetooth: hci5: command 0x0406 tx timeout [ 395.757386][ T5636] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 395.764749][ T5636] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 395.773550][ T5636] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 395.781796][ T5636] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 395.789316][ T5636] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 395.834175][ T50] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 395.842709][ T50] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 395.850945][ T50] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 395.859359][ T50] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 395.869616][ T50] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 395.931879][ T5636] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 395.940865][ T5636] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 395.950649][ T5636] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 395.959524][ T5636] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 395.967547][ T5636] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 395.975016][ T5636] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 395.982768][ T4939] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 395.992416][ T5636] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 396.000725][ T5621] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 396.009753][ T4939] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 396.018899][ T4939] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 396.027186][ T5637] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 396.034548][ T4939] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 396.045511][ T4939] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 396.055545][ T4939] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 397.835988][ T5636] Bluetooth: hci10: command tx timeout [ 397.841728][ T11] block nbd5: Possible stuck request ffff888027657000: control (read@0,1024B). Runtime 90 seconds [ 397.852604][ T1765] block nbd6: Possible stuck request ffff8880276c7000: control (read@0,1024B). Runtime 90 seconds [ 397.906325][ T5636] Bluetooth: hci11: command tx timeout [ 398.066207][ T5636] Bluetooth: hci13: command tx timeout [ 398.066234][ T4939] Bluetooth: hci12: command tx timeout [ 398.146160][ T4939] Bluetooth: hci14: command tx timeout [ 399.905861][ T5636] Bluetooth: hci10: command tx timeout [ 399.985793][ T5636] Bluetooth: hci11: command tx timeout [ 400.145774][ T5636] Bluetooth: hci12: command tx timeout [ 400.156225][ T5636] Bluetooth: hci13: command tx timeout [ 400.235942][ T5636] Bluetooth: hci14: command tx timeout [ 401.185851][ T5636] Bluetooth: hci1: command 0x0406 tx timeout [ 401.986636][ T4939] Bluetooth: hci10: command tx timeout [ 402.066445][ T4939] Bluetooth: hci11: command tx timeout [ 402.226410][ T4939] Bluetooth: hci13: command tx timeout [ 402.226679][ T5636] Bluetooth: hci12: command tx timeout [ 402.306297][ T5636] Bluetooth: hci14: command tx timeout [ 404.066085][ T5636] Bluetooth: hci10: command tx timeout [ 404.145919][ T5636] Bluetooth: hci11: command tx timeout [ 404.306242][ T50] Bluetooth: hci13: command tx timeout [ 404.306682][ T4939] Bluetooth: hci12: command tx timeout [ 404.386237][ T4939] Bluetooth: hci14: command tx timeout [ 406.305840][ T4939] Bluetooth: hci3: command 0x0406 tx timeout [ 427.907688][ T11] block nbd6: Possible stuck request ffff8880276c7000: control (read@0,1024B). Runtime 120 seconds [ 427.918509][ T1765] block nbd5: Possible stuck request ffff888027657000: control (read@0,1024B). Runtime 120 seconds [ 442.145923][ T4939] Bluetooth: hci4: command 0x0406 tx timeout [ 455.838549][ T5637] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 455.846986][ T5637] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 455.854598][ T5637] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 455.863074][ T5637] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 455.871064][ T5637] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 455.878980][ T5637] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 455.886753][T20344] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 455.894096][T20344] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 455.900873][T20347] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 455.902948][T20344] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 455.909502][T20347] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 455.919421][T20344] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 455.924041][T20347] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 455.942544][T20347] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 455.950864][T20347] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 456.312969][T20347] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 456.320828][T20347] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 456.328369][T20347] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 456.334903][T20344] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 456.336029][T20347] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 456.343728][T20344] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 456.350762][T20347] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 456.358728][T20344] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 456.373832][T20344] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 456.382057][T20344] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 457.515879][T20344] Bluetooth: hci6: command 0x0406 tx timeout [ 457.516597][ T4939] Bluetooth: hci2: command 0x0406 tx timeout [ 457.986387][ T11] block nbd5: Possible stuck request ffff888027657000: control (read@0,1024B). Runtime 150 seconds [ 457.986636][ T5636] Bluetooth: hci17: command tx timeout [ 457.997314][ T1765] block nbd6: Possible stuck request ffff8880276c7000: control (read@0,1024B). Runtime 150 seconds [ 457.998105][ T4939] Bluetooth: hci16: command tx timeout [ 458.004885][ T5636] Bluetooth: hci15: command tx timeout [ 458.386286][ T5636] Bluetooth: hci18: command tx timeout [ 458.466442][ T5636] Bluetooth: hci19: command tx timeout [ 460.066021][ T5636] Bluetooth: hci15: command tx timeout [ 460.068543][ T4939] Bluetooth: hci16: command tx timeout [ 460.071540][T20344] Bluetooth: hci17: command tx timeout [ 460.465901][T20344] Bluetooth: hci18: command tx timeout [ 460.545984][T20344] Bluetooth: hci19: command tx timeout [ 462.145916][T20344] Bluetooth: hci15: command tx timeout [ 462.146254][T20348] Bluetooth: hci17: command tx timeout [ 462.152041][T20347] Bluetooth: hci16: command tx timeout [ 462.546261][T20347] Bluetooth: hci18: command tx timeout [ 462.626029][T20347] Bluetooth: hci8: command 0x0406 tx timeout [ 462.626350][T20348] Bluetooth: hci7: command 0x0406 tx timeout [ 462.632090][T20344] Bluetooth: hci9: command 0x0406 tx timeout [ 462.639093][ T5637] Bluetooth: hci19: command tx timeout [ 464.226605][ T4939] Bluetooth: hci17: command tx timeout [ 464.226617][ T5636] Bluetooth: hci16: command tx timeout [ 464.226636][ T5636] Bluetooth: hci15: command tx timeout [ 464.625981][ T5636] Bluetooth: hci18: command tx timeout [ 464.706158][ T5636] Bluetooth: hci19: command tx timeout [ 465.026177][ T30] INFO: task kworker/1:8:7543 blocked for more than 143 seconds. [ 465.033957][ T30] Not tainted syzkaller #0 [ 465.039251][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 465.047998][ T30] task:kworker/1:8 state:D stack:24912 pid:7543 tgid:7543 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 465.060114][ T30] Workqueue: events netdev_rx_mode_work [ 465.066260][ T30] Call Trace: [ 465.069569][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 465.072489][ T30] __schedule+0x17d9/0x56c0 [ 465.077149][ T30] ? rcu_is_watching+0x15/0xb0 [ 465.082192][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 465.087630][ T30] ? __pfx___schedule+0x10/0x10 [ 465.092518][ T30] ? rcu_is_watching+0x15/0xb0 [ 465.097589][ T30] ? rcu_is_watching+0x15/0xb0 [ 465.102392][ T30] ? lock_release+0x4b/0x3c0 [ 465.115740][ T30] ? rcu_is_watching+0x15/0xb0 [ 465.122058][ T30] ? schedule+0x90/0x360 [ 465.127376][ T30] ? trace_irq_enable+0x3b/0x140 [ 465.132351][ T30] schedule+0x164/0x360 [ 465.136862][ T30] schedule_preempt_disabled+0x13/0x30 [ 465.142358][ T30] __mutex_lock+0x7bf/0x1550 [ 465.152577][ T30] ? __mutex_lock+0x5d4/0x1550 [ 465.157825][ T30] ? netdev_rx_mode_work+0x18/0x3c0 [ 465.163067][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 465.168748][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 465.174146][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 465.180020][ T30] ? rcu_is_watching+0x15/0xb0 [ 465.184800][ T30] ? lock_acquire+0x5f/0x350 [ 465.189740][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 465.195482][ T30] netdev_rx_mode_work+0x18/0x3c0 [ 465.200608][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 465.206456][ T30] process_scheduled_works+0xa8e/0x14e0 [ 465.212054][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 465.218318][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 465.223369][ T30] ? assign_work+0x3cf/0x5d0 [ 465.228001][ T30] worker_thread+0xa47/0xfb0 [ 465.232596][ T30] ? __kthread_parkme+0x71/0x1f0 [ 465.237681][ T30] kthread+0x388/0x470 [ 465.241754][ T30] ? __pfx_worker_thread+0x10/0x10 [ 465.247141][ T30] ? __pfx_kthread+0x10/0x10 [ 465.251739][ T30] ret_from_fork+0x514/0xb70 [ 465.256945][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 465.262071][ T30] ? __switch_to+0xc89/0x1420 [ 465.267439][ T30] ? __pfx_kthread+0x10/0x10 [ 465.272203][ T30] ret_from_fork_asm+0x1a/0x30 [ 465.277312][ T30] [ 465.280410][ T30] INFO: task kworker/u8:17:16902 blocked for more than 143 seconds. [ 465.288520][ T30] Not tainted syzkaller #0 [ 465.293465][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 465.302211][ T30] task:kworker/u8:17 state:D stack:26104 pid:16902 tgid:16902 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 465.314465][ T30] Workqueue: events_unbound linkwatch_event [ 465.320883][ T30] Call Trace: [ 465.324184][ T30] [ 465.327666][ T30] __schedule+0x17d9/0x56c0 [ 465.332193][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 465.337596][ T30] ? debug_object_activate+0xb7/0x410 [ 465.343002][ T30] ? __pfx___schedule+0x10/0x10 [ 465.348604][ T30] ? rcu_is_watching+0x15/0xb0 [ 465.353398][ T30] ? rcu_is_watching+0x15/0xb0 [ 465.358314][ T30] ? lock_release+0x4b/0x3c0 [ 465.362929][ T30] ? wq_worker_sleeping+0x66/0x250 [ 465.368479][ T30] schedule+0x164/0x360 [ 465.372928][ T30] schedule_preempt_disabled+0x13/0x30 [ 465.378735][ T30] __mutex_lock+0x7bf/0x1550 [ 465.383360][ T30] ? __mutex_lock+0x5d4/0x1550 [ 465.388267][ T30] ? linkwatch_event+0xe/0x60 [ 465.392957][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 465.398314][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 465.404060][ T30] ? rcu_is_watching+0x15/0xb0 [ 465.408867][ T30] ? rcu_is_watching+0x15/0xb0 [ 465.413651][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 465.419465][ T30] linkwatch_event+0xe/0x60 [ 465.423982][ T30] process_scheduled_works+0xa8e/0x14e0 [ 465.429924][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 465.436039][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 465.441101][ T30] ? assign_work+0x3cf/0x5d0 [ 465.445743][ T30] worker_thread+0xa47/0xfb0 [ 465.450343][ T30] ? __kthread_parkme+0x71/0x1f0 [ 465.455270][ T30] kthread+0x388/0x470 [ 465.459739][ T30] ? __pfx_worker_thread+0x10/0x10 [ 465.464869][ T30] ? __pfx_kthread+0x10/0x10 [ 465.469568][ T30] ret_from_fork+0x514/0xb70 [ 465.474300][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 465.479574][ T30] ? __switch_to+0xc89/0x1420 [ 465.484258][ T30] ? __pfx_kthread+0x10/0x10 [ 465.489190][ T30] ret_from_fork_asm+0x1a/0x30 [ 465.493987][ T30] [ 465.497237][ T30] INFO: task syz.2.3816:20251 blocked for more than 143 seconds. [ 465.504971][ T30] Not tainted syzkaller #0 [ 465.510845][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 465.519686][ T30] task:syz.2.3816 state:D stack:21576 pid:20251 tgid:20247 ppid:15602 task_flags:0x400140 flags:0x00080002 [ 465.531626][ T30] Call Trace: [ 465.534901][ T30] [ 465.537896][ T30] __schedule+0x17d9/0x56c0 [ 465.542420][ T30] ? __pfx___schedule+0x10/0x10 [ 465.547565][ T30] ? rcu_is_watching+0x15/0xb0 [ 465.552354][ T30] ? rcu_is_watching+0x15/0xb0 [ 465.557201][ T30] ? lock_release+0x4b/0x3c0 [ 465.561813][ T30] ? rcu_is_watching+0x15/0xb0 [ 465.566623][ T30] schedule+0x164/0x360 [ 465.570776][ T30] schedule_preempt_disabled+0x13/0x30 [ 465.576782][ T30] __mutex_lock+0x7bf/0x1550 [ 465.581494][ T30] ? __mutex_lock+0x5d4/0x1550 [ 465.586415][ T30] ? __ethtool_get_link_ksettings+0x109/0x250 [ 465.592500][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 465.597569][ T30] ? igmp_group_added+0x238/0x910 [ 465.602596][ T30] ? igmpv3_del_delrec+0x204/0x710 [ 465.607949][ T30] __ethtool_get_link_ksettings+0x109/0x250 [ 465.613835][ T30] bond_netdev_event+0x643/0xf80 [ 465.618931][ T30] ? __pfx_bond_netdev_event+0x10/0x10 [ 465.624408][ T30] ? __pfx_inetdev_event+0x10/0x10 [ 465.629596][ T30] ? ipmr_device_event+0x1f6/0x220 [ 465.634731][ T30] notifier_call_chain+0x1a5/0x3d0 [ 465.640102][ T30] __dev_notify_flags+0x1aa/0x310 [ 465.645139][ T30] ? __pfx___dev_notify_flags+0x10/0x10 [ 465.650735][ T30] ? __dev_change_flags+0x5f1/0x820 [ 465.656030][ T30] ? __pfx___dev_change_flags+0x10/0x10 [ 465.661598][ T30] ? trace_contention_end+0x3d/0x140 [ 465.667849][ T30] netif_change_flags+0xde/0x1b0 [ 465.672832][ T30] dev_change_flags+0x128/0x260 [ 465.677768][ T30] vlan_device_event+0x1b4e/0x1f00 [ 465.683033][ T30] ? packet_notifier+0xf1b/0xf70 [ 465.688040][ T30] ? lock_release+0x4b/0x3c0 [ 465.692631][ T30] ? br_device_event+0x282/0x9c0 [ 465.697813][ T30] ? __pfx_phonet_device_notify+0x10/0x10 [ 465.703548][ T30] ? __pfx_vlan_device_event+0x10/0x10 [ 465.709078][ T30] ? bcm_notifier+0xa9/0x890 [ 465.713688][ T30] ? raw_notifier+0x9d/0x7d0 [ 465.718315][ T30] ? cgw_notifier+0x314/0x380 [ 465.722994][ T30] notifier_call_chain+0x1a5/0x3d0 [ 465.728408][ T30] netif_open+0x10f/0x190 [ 465.732763][ T30] ? __pfx_netif_open+0x10/0x10 [ 465.737702][ T30] ? timer_init_key+0x161/0x2c0 [ 465.742571][ T30] dev_open+0x101/0x220 [ 465.746853][ T30] bond_enslave+0xeb2/0x3b10 [ 465.751467][ T30] ? udp_tunnel_nic_netdevice_event+0x1a1/0x1850 [ 465.758059][ T30] ? __pfx_bond_enslave+0x10/0x10 [ 465.763100][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 465.769171][ T30] ? mutex_is_locked+0x17/0x50 [ 465.773958][ T30] do_set_master+0x563/0x720 [ 465.778605][ T30] do_setlink+0xe7b/0x4670 [ 465.783203][ T30] ? trace_sched_exit_tp+0x3a/0x130 [ 465.788685][ T30] ? __schedule+0x17ef/0x56c0 [ 465.793361][ T30] ? __pfx_do_setlink+0x10/0x10 [ 465.798329][ T30] ? stack_trace_save+0xa9/0x100 [ 465.803291][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 465.808363][ T30] ? rcu_is_watching+0x15/0xb0 [ 465.813168][ T30] ? rcu_is_watching+0x15/0xb0 [ 465.818170][ T30] ? rcu_is_watching+0x15/0xb0 [ 465.822929][ T30] ? rcu_is_watching+0x15/0xb0 [ 465.827832][ T30] ? trace_irq_enable+0x3b/0x140 [ 465.832796][ T30] ? __mutex_lock+0x1092/0x1550 [ 465.837762][ T30] ? __mutex_lock+0x5d4/0x1550 [ 465.842545][ T30] ? rtnl_newlink+0x8a3/0x1bd0 [ 465.847536][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 465.852560][ T30] ? full_name_hash+0x92/0xe0 [ 465.857339][ T30] rtnl_newlink+0x15c2/0x1bd0 [ 465.862050][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 465.867101][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.873175][ T30] ? rcu_is_watching+0x15/0xb0 [ 465.878723][ T30] ? trace_irq_enable+0x3b/0x140 [ 465.883824][ T30] ? nlmon_xmit+0xb0/0x100 [ 465.888310][ T30] ? kmem_cache_free+0x182/0x650 [ 465.893250][ T30] ? dev_hard_start_xmit+0x7c7/0x830 [ 465.898580][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 465.903695][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 465.909205][ T30] ? rcu_is_watching+0x15/0xb0 [ 465.914046][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 465.919288][ T30] ? trace_irq_enable+0x3b/0x140 [ 465.924254][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 465.929395][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 465.934506][ T30] ? __local_bh_enable_ip+0xd0/0x130 [ 465.940041][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 465.945148][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 465.950379][ T30] ? rcu_is_watching+0x15/0xb0 [ 465.955161][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 465.960227][ T30] ? rcu_is_watching+0x15/0xb0 [ 465.964988][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 465.970272][ T30] ? lock_release+0x4b/0x3c0 [ 465.974873][ T30] ? bpf_lsm_capable+0x9/0x20 [ 465.979642][ T30] ? security_capable+0x7e/0x2c0 [ 465.984603][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 465.989858][ T30] rtnetlink_rcv_msg+0x802/0xc00 [ 465.994809][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 466.000224][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 466.005787][ T30] ? ref_tracker_free+0x689/0x830 [ 466.010928][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 466.016362][ T30] netlink_rcv_skb+0x226/0x4a0 [ 466.021138][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 466.026871][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 466.032182][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 466.037486][ T30] netlink_unicast+0x7bb/0x940 [ 466.042275][ T30] netlink_sendmsg+0x813/0xb40 [ 466.047096][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.052412][ T30] ? futex_unqueue+0x22/0x240 [ 466.057388][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 466.062329][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 466.067698][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.073005][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 466.077811][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.083104][ T30] ? lock_release+0x4b/0x3c0 [ 466.087932][ T30] ? import_iovec+0x73/0xa0 [ 466.092601][ T30] ___sys_sendmsg+0x2a5/0x360 [ 466.097391][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.102615][ T30] ? futex_wait+0x2a2/0x390 [ 466.107162][ T30] ? __fget_files+0x2a/0x420 [ 466.111754][ T30] ? __fget_files+0x3a2/0x420 [ 466.116675][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 466.121624][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 466.127150][ T30] ? rcu_is_watching+0x15/0xb0 [ 466.131922][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.138047][ T30] do_syscall_64+0x174/0x580 [ 466.142641][ T30] ? trace_irq_disable+0x3b/0x140 [ 466.148041][ T30] ? clear_bhb_loop+0x40/0x90 [ 466.152736][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.158743][ T30] RIP: 0033:0x7f60d8f9ce59 [ 466.163175][ T30] RSP: 002b:00007f60d9dbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.171746][ T30] RAX: ffffffffffffffda RBX: 00007f60d9216180 RCX: 00007f60d8f9ce59 [ 466.179883][ T30] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000008 [ 466.187900][ T30] RBP: 00007f60d9032d6f R08: 0000000000000000 R09: 0000000000000000 [ 466.196100][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.204075][ T30] R13: 00007f60d9216218 R14: 00007f60d9216180 R15: 00007ffe52ed1ea8 [ 466.212365][ T30] [ 466.215406][ T30] INFO: task syz.0.3819:20258 blocked for more than 144 seconds. [ 466.223977][ T30] Not tainted syzkaller #0 [ 466.228969][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 466.237960][ T30] task:syz.0.3819 state:D stack:25336 pid:20258 tgid:20256 ppid:16650 task_flags:0x400140 flags:0x00080002 [ 466.250003][ T30] Call Trace: [ 466.253301][ T30] [ 466.256280][ T30] __schedule+0x17d9/0x56c0 [ 466.260816][ T30] ? __pfx___schedule+0x10/0x10 [ 466.265657][ T30] ? rcu_is_watching+0x15/0xb0 [ 466.270673][ T30] ? rcu_is_watching+0x15/0xb0 [ 466.275455][ T30] ? lock_release+0x4b/0x3c0 [ 466.280217][ T30] ? rcu_is_watching+0x15/0xb0 [ 466.285012][ T30] schedule+0x164/0x360 [ 466.289238][ T30] schedule_preempt_disabled+0x13/0x30 [ 466.294886][ T30] __mutex_lock+0x7bf/0x1550 [ 466.299645][ T30] ? __mutex_lock+0x5d4/0x1550 [ 466.304402][ T30] ? __tun_chr_ioctl+0x3bc/0x1e10 [ 466.310299][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 466.315367][ T30] ? lock_release+0x4b/0x3c0 [ 466.321666][ T30] ? __might_fault+0xaf/0x130 [ 466.326750][ T30] ? __might_fault+0xcb/0x130 [ 466.331462][ T30] __tun_chr_ioctl+0x3bc/0x1e10 [ 466.336748][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 466.342078][ T30] ? __fget_files+0x2a/0x420 [ 466.347287][ T30] ? __fget_files+0x3a2/0x420 [ 466.351969][ T30] ? __fget_files+0x2a/0x420 [ 466.356928][ T30] ? bpf_lsm_file_ioctl+0x9/0x20 [ 466.361864][ T30] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 466.367527][ T30] __se_sys_ioctl+0xfc/0x170 [ 466.372150][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.378744][ T30] do_syscall_64+0x174/0x580 [ 466.383337][ T30] ? trace_irq_disable+0x3b/0x140 [ 466.388997][ T30] ? clear_bhb_loop+0x40/0x90 [ 466.393667][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.400334][ T30] RIP: 0033:0x7f712139ce59 [ 466.404755][ T30] RSP: 002b:00007f71221f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 466.413672][ T30] RAX: ffffffffffffffda RBX: 00007f7121615fa0 RCX: 00007f712139ce59 [ 466.421991][ T30] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000006 [ 466.430329][ T30] RBP: 00007f7121432d6f R08: 0000000000000000 R09: 0000000000000000 [ 466.438624][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.446728][ T30] R13: 00007f7121616038 R14: 00007f7121615fa0 R15: 00007ffcee7948f8 [ 466.454734][ T30] [ 466.457822][ T30] INFO: task syz.0.3819:20271 blocked for more than 144 seconds. [ 466.465555][ T30] Not tainted syzkaller #0 [ 466.471576][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 466.480677][ T30] task:syz.0.3819 state:D stack:28248 pid:20271 tgid:20256 ppid:16650 task_flags:0x400140 flags:0x00080002 [ 466.492984][ T30] Call Trace: [ 466.496820][ T30] [ 466.499883][ T30] __schedule+0x17d9/0x56c0 [ 466.504472][ T30] ? rcu_is_watching+0x15/0xb0 [ 466.509712][ T30] ? __pfx___schedule+0x10/0x10 [ 466.514576][ T30] ? rcu_is_watching+0x15/0xb0 [ 466.519790][ T30] ? rcu_is_watching+0x15/0xb0 [ 466.524559][ T30] ? lock_release+0x4b/0x3c0 [ 466.529644][ T30] ? rcu_is_watching+0x15/0xb0 [ 466.534401][ T30] schedule+0x164/0x360 [ 466.538947][ T30] schedule_preempt_disabled+0x13/0x30 [ 466.544398][ T30] __mutex_lock+0x7bf/0x1550 [ 466.549532][ T30] ? __mutex_lock+0x5d4/0x1550 [ 466.554292][ T30] ? rtnetlink_rcv_msg+0x767/0xc00 [ 466.559944][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 466.564979][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 466.570561][ T30] ? rcu_is_watching+0x15/0xb0 [ 466.575358][ T30] ? lock_release+0x4b/0x3c0 [ 466.580321][ T30] ? bpf_lsm_capable+0x9/0x20 [ 466.584994][ T30] ? security_capable+0x7e/0x2c0 [ 466.590548][ T30] rtnetlink_rcv_msg+0x767/0xc00 [ 466.595492][ T30] ? kasan_save_track+0x3e/0x80 [ 466.600933][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 466.606426][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 466.611897][ T30] ? __netlink_lookup+0xc6/0x8b0 [ 466.617447][ T30] ? rcu_is_watching+0x15/0xb0 [ 466.622203][ T30] netlink_rcv_skb+0x226/0x4a0 [ 466.627354][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 466.632803][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 466.638544][ T30] ? net_generic+0x1e/0x240 [ 466.643054][ T30] ? net_generic+0x1e/0x240 [ 466.648014][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 466.653209][ T30] netlink_unicast+0x7bb/0x940 [ 466.658353][ T30] netlink_sendmsg+0x813/0xb40 [ 466.663110][ T30] ? format_decode+0xdc/0xe20 [ 466.668213][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.673506][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 466.679019][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 466.684317][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.689996][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 466.694757][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.700431][ T30] ? lock_release+0x4b/0x3c0 [ 466.705201][ T30] ? import_iovec+0x73/0xa0 [ 466.710419][ T30] ___sys_sendmsg+0x2a5/0x360 [ 466.715111][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.720686][ T30] ? kfree+0x1c5/0x640 [ 466.724752][ T30] ? tomoyo_path_number_perm+0x219/0x5f0 [ 466.730901][ T30] ? __fget_files+0x2a/0x420 [ 466.735484][ T30] ? __fget_files+0x3a2/0x420 [ 466.740496][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 466.745429][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 466.750938][ T30] ? kfree+0x4d/0x640 [ 466.755355][ T30] ? __pfx_kcov_ioctl+0x10/0x10 [ 466.760247][ T30] ? rcu_is_watching+0x15/0xb0 [ 466.765007][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.771504][ T30] do_syscall_64+0x174/0x580 [ 466.776655][ T30] ? trace_irq_disable+0x3b/0x140 [ 466.781710][ T30] ? clear_bhb_loop+0x40/0x90 [ 466.786940][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.792848][ T30] RIP: 0033:0x7f712139ce59 [ 466.797769][ T30] RSP: 002b:00007f71221af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.806675][ T30] RAX: ffffffffffffffda RBX: 00007f7121616180 RCX: 00007f712139ce59 [ 466.814651][ T30] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000007 [ 466.822987][ T30] RBP: 00007f7121432d6f R08: 0000000000000000 R09: 0000000000000000 [ 466.831455][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.839885][ T30] R13: 00007f7121616218 R14: 00007f7121616180 R15: 00007ffcee7948f8 [ 466.848227][ T30] [ 466.851257][ T30] INFO: task syz.4.3821:20269 blocked for more than 145 seconds. [ 466.859460][ T30] Not tainted syzkaller #0 [ 466.864380][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 466.873512][ T30] task:syz.4.3821 state:D stack:26720 pid:20269 tgid:20263 ppid:17821 task_flags:0x400140 flags:0x00080002 [ 466.886171][ T30] Call Trace: [ 466.889496][ T30] [ 466.892411][ T30] __schedule+0x17d9/0x56c0 [ 466.897331][ T30] ? __pfx___schedule+0x10/0x10 [ 466.902173][ T30] ? rcu_is_watching+0x15/0xb0 [ 466.907585][ T30] ? rcu_is_watching+0x15/0xb0 [ 466.912380][ T30] ? lock_release+0x4b/0x3c0 [ 466.917636][ T30] ? rcu_is_watching+0x15/0xb0 [ 466.922409][ T30] schedule+0x164/0x360 [ 466.926896][ T30] schedule_preempt_disabled+0x13/0x30 [ 466.932343][ T30] __mutex_lock+0x7bf/0x1550 [ 466.937288][ T30] ? __mutex_lock+0x5d4/0x1550 [ 466.942049][ T30] ? rtnl_newlink+0x8a3/0x1bd0 [ 466.947569][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 466.953127][ T30] ? ns_capable+0x89/0xe0 [ 466.957951][ T30] ? rtnl_link_get_net_capable+0xd3/0x310 [ 466.963791][ T30] rtnl_newlink+0x8a3/0x1bd0 [ 466.968854][ T30] ? netlink_deliver_tap+0x19c/0x1b0 [ 466.974179][ T30] ? netlink_unicast+0x77f/0x940 [ 466.979698][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 466.984727][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.991243][ T30] ? rcu_is_watching+0x15/0xb0 [ 466.996567][ T30] ? trace_irq_enable+0x3b/0x140 [ 467.001529][ T30] ? nlmon_xmit+0xb0/0x100 [ 467.006615][ T30] ? kmem_cache_free+0x182/0x650 [ 467.011742][ T30] ? dev_hard_start_xmit+0x7c7/0x830 [ 467.017430][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 467.022535][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 467.028125][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.032913][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 467.038372][ T30] ? trace_irq_enable+0x3b/0x140 [ 467.043304][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 467.048453][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 467.053556][ T30] ? __local_bh_enable_ip+0xd0/0x130 [ 467.058903][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 467.064036][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 467.069583][ T30] ? lock_release+0x4b/0x3c0 [ 467.074187][ T30] ? bpf_lsm_capable+0x9/0x20 [ 467.079252][ T30] ? security_capable+0x7e/0x2c0 [ 467.084188][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 467.089595][ T30] rtnetlink_rcv_msg+0x802/0xc00 [ 467.094533][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 467.100162][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 467.105616][ T30] ? ref_tracker_free+0x689/0x830 [ 467.111159][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 467.117082][ T30] netlink_rcv_skb+0x226/0x4a0 [ 467.121883][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 467.127866][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 467.133173][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 467.138794][ T30] netlink_unicast+0x7bb/0x940 [ 467.143557][ T30] netlink_sendmsg+0x813/0xb40 [ 467.148696][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.153979][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 467.159427][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 467.164710][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.170414][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 467.175184][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.180941][ T30] ? lock_release+0x4b/0x3c0 [ 467.185530][ T30] ? import_iovec+0x73/0xa0 [ 467.190585][ T30] ___sys_sendmsg+0x2a5/0x360 [ 467.195265][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.200855][ T30] ? futex_wake+0x51b/0x5f0 [ 467.205361][ T30] ? __fget_files+0x2a/0x420 [ 467.210318][ T30] ? __fget_files+0x3a2/0x420 [ 467.215182][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 467.220700][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 467.226669][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.231446][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.237830][ T30] do_syscall_64+0x174/0x580 [ 467.242428][ T30] ? trace_irq_disable+0x3b/0x140 [ 467.247942][ T30] ? clear_bhb_loop+0x40/0x90 [ 467.252610][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.258897][ T30] RIP: 0033:0x7f1d72b9ce59 [ 467.263304][ T30] RSP: 002b:00007f1d70df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.272460][ T30] RAX: ffffffffffffffda RBX: 00007f1d72e15fa0 RCX: 00007f1d72b9ce59 [ 467.280921][ T30] RDX: 0000000000040000 RSI: 0000200000000180 RDI: 0000000000000003 [ 467.289351][ T30] RBP: 00007f1d72c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 467.297674][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.305637][ T30] R13: 00007f1d72e16038 R14: 00007f1d72e15fa0 R15: 00007ffcf30c24d8 [ 467.314125][ T30] [ 467.317873][ T30] INFO: task syz.3.3820:20266 blocked for more than 145 seconds. [ 467.325593][ T30] Not tainted syzkaller #0 [ 467.330831][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 467.339743][ T30] task:syz.3.3820 state:D stack:28792 pid:20266 tgid:20264 ppid:17514 task_flags:0x400040 flags:0x00080002 [ 467.351960][ T30] Call Trace: [ 467.355266][ T30] [ 467.358469][ T30] __schedule+0x17d9/0x56c0 [ 467.363005][ T30] ? __pfx___schedule+0x10/0x10 [ 467.368364][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.373209][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.378332][ T30] ? lock_release+0x4b/0x3c0 [ 467.382938][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.388074][ T30] schedule+0x164/0x360 [ 467.392231][ T30] schedule_preempt_disabled+0x13/0x30 [ 467.398301][ T30] __mutex_lock+0x7bf/0x1550 [ 467.402914][ T30] ? __mutex_lock+0x5d4/0x1550 [ 467.408070][ T30] ? __tun_chr_ioctl+0x3bc/0x1e10 [ 467.413091][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 467.418486][ T30] ? lock_release+0x4b/0x3c0 [ 467.423242][ T30] ? __might_fault+0xaf/0x130 [ 467.428699][ T30] ? __might_fault+0xcb/0x130 [ 467.433374][ T30] __tun_chr_ioctl+0x3bc/0x1e10 [ 467.438624][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 467.443947][ T30] ? __fget_files+0x2a/0x420 [ 467.448906][ T30] ? __fget_files+0x3a2/0x420 [ 467.453570][ T30] ? __fget_files+0x2a/0x420 [ 467.458678][ T30] ? bpf_lsm_file_ioctl+0x9/0x20 [ 467.463610][ T30] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 467.469071][ T30] __se_sys_ioctl+0xfc/0x170 [ 467.473654][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.480071][ T30] do_syscall_64+0x174/0x580 [ 467.484657][ T30] ? trace_irq_disable+0x3b/0x140 [ 467.490176][ T30] ? clear_bhb_loop+0x40/0x90 [ 467.494843][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.501096][ T30] RIP: 0033:0x7f475959ce59 [ 467.506584][ T30] RSP: 002b:00007f475a387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 467.515035][ T30] RAX: ffffffffffffffda RBX: 00007f4759815fa0 RCX: 00007f475959ce59 [ 467.523327][ T30] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 467.531738][ T30] RBP: 00007f4759632d6f R08: 0000000000000000 R09: 0000000000000000 [ 467.539945][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.548099][ T30] R13: 00007f4759816038 R14: 00007f4759815fa0 R15: 00007ffe4d981908 [ 467.556573][ T30] [ 467.559625][ T30] INFO: task syz.1.3822:20273 blocked for more than 145 seconds. [ 467.567724][ T30] Not tainted syzkaller #0 [ 467.572645][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 467.581527][ T30] task:syz.1.3822 state:D stack:26968 pid:20273 tgid:20272 ppid:18316 task_flags:0x400140 flags:0x00080002 [ 467.593895][ T30] Call Trace: [ 467.597421][ T30] [ 467.600379][ T30] __schedule+0x17d9/0x56c0 [ 467.604891][ T30] ? stack_trace_save+0xa9/0x100 [ 467.609951][ T30] ? stack_depot_save_flags+0x33/0x800 [ 467.615412][ T30] ? __pfx___schedule+0x10/0x10 [ 467.620546][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.625506][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.630384][ T30] ? lock_release+0x4b/0x3c0 [ 467.634994][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.639833][ T30] schedule+0x164/0x360 [ 467.644006][ T30] schedule_preempt_disabled+0x13/0x30 [ 467.649706][ T30] __mutex_lock+0x7bf/0x1550 [ 467.654292][ T30] ? __mutex_lock+0x5d4/0x1550 [ 467.659189][ T30] ? rtnl_newlink+0x8a3/0x1bd0 [ 467.663970][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 467.669197][ T30] ? ns_capable+0x89/0xe0 [ 467.673557][ T30] ? rtnl_link_get_net_capable+0xd3/0x310 [ 467.679536][ T30] rtnl_newlink+0x8a3/0x1bd0 [ 467.684128][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 467.689205][ T30] ? unwind_next_frame+0x8f/0x2550 [ 467.694319][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.699160][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 467.704383][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.709468][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.714246][ T30] ? unwind_next_frame+0x8f/0x2550 [ 467.719460][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.724247][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 467.729707][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.734483][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.739522][ T30] ? lock_release+0x4b/0x3c0 [ 467.744143][ T30] ? lock_release+0x4b/0x3c0 [ 467.748828][ T30] ? is_bpf_text_address+0x292/0x2b0 [ 467.754128][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 467.759394][ T30] ? kernel_text_address+0xa5/0xe0 [ 467.764509][ T30] ? __kernel_text_address+0xd/0x30 [ 467.769957][ T30] ? unwind_get_return_address+0x4d/0x90 [ 467.775600][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 467.781901][ T30] ? arch_stack_walk+0xfb/0x150 [ 467.786818][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 467.791845][ T30] ? lock_release+0x4b/0x3c0 [ 467.796662][ T30] ? bpf_lsm_capable+0x9/0x20 [ 467.801343][ T30] ? security_capable+0x7e/0x2c0 [ 467.806356][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 467.811419][ T30] rtnetlink_rcv_msg+0x802/0xc00 [ 467.816528][ T30] ? kasan_save_track+0x3e/0x80 [ 467.821410][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 467.826866][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 467.832564][ T30] ? __netlink_lookup+0xc6/0x8b0 [ 467.837612][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.842395][ T30] netlink_rcv_skb+0x226/0x4a0 [ 467.847207][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 467.852666][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 467.858200][ T30] ? net_generic+0x1e/0x240 [ 467.862711][ T30] ? net_generic+0x1e/0x240 [ 467.867236][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 467.872446][ T30] netlink_unicast+0x7bb/0x940 [ 467.877417][ T30] netlink_sendmsg+0x813/0xb40 [ 467.882197][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.888103][ T30] ? futex_unqueue+0x22/0x240 [ 467.892810][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 467.898441][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 467.903776][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.909569][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 467.914393][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.919963][ T30] ? lock_release+0x4b/0x3c0 [ 467.924577][ T30] ? import_iovec+0x73/0xa0 [ 467.929246][ T30] ___sys_sendmsg+0x2a5/0x360 [ 467.934081][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.939409][ T30] ? futex_wait+0x2a2/0x390 [ 467.943939][ T30] ? __fget_files+0x2a/0x420 [ 467.948786][ T30] ? __fget_files+0x3a2/0x420 [ 467.953527][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 467.958592][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 467.964085][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.968892][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.974956][ T30] do_syscall_64+0x174/0x580 [ 467.979821][ T30] ? trace_irq_disable+0x3b/0x140 [ 467.984866][ T30] ? clear_bhb_loop+0x40/0x90 [ 467.989690][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.995610][ T30] RIP: 0033:0x7f7fce59ce59 [ 468.000141][ T30] RSP: 002b:00007f7fcf4a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.008863][ T30] RAX: ffffffffffffffda RBX: 00007f7fce815fa0 RCX: 00007f7fce59ce59 [ 468.016986][ T30] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 468.024987][ T30] RBP: 00007f7fce632d6f R08: 0000000000000000 R09: 0000000000000000 [ 468.033043][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.041617][ T30] R13: 00007f7fce816038 R14: 00007f7fce815fa0 R15: 00007ffec7cb7808 [ 468.049695][ T30] [ 468.052760][ T30] INFO: task syz.1.3822:20274 blocked for more than 146 seconds. [ 468.060546][ T30] Not tainted syzkaller #0 [ 468.065473][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 468.074436][ T30] task:syz.1.3822 state:D stack:25816 pid:20274 tgid:20272 ppid:18316 task_flags:0x400140 flags:0x00080002 [ 468.086623][ T30] Call Trace: [ 468.089943][ T30] [ 468.092862][ T30] __schedule+0x17d9/0x56c0 [ 468.098210][ T30] ? __nla_validate_parse+0x2534/0x2d50 [ 468.103793][ T30] ? is_bpf_text_address+0x292/0x2b0 [ 468.109625][ T30] ? __pfx___schedule+0x10/0x10 [ 468.114511][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.119785][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.124561][ T30] ? lock_release+0x4b/0x3c0 [ 468.129691][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.134474][ T30] schedule+0x164/0x360 [ 468.139195][ T30] schedule_preempt_disabled+0x13/0x30 [ 468.144773][ T30] __mutex_lock+0x7bf/0x1550 [ 468.149966][ T30] ? unwind_get_return_address+0x4d/0x90 [ 468.155625][ T30] ? __mutex_lock+0x5d4/0x1550 [ 468.161097][ T30] ? team_nl_options_set_doit+0xb3/0xe60 [ 468.167146][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 468.172195][ T30] team_nl_options_set_doit+0xb3/0xe60 [ 468.178043][ T30] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 468.184140][ T30] ? trace_kmalloc+0x2a/0xf0 [ 468.189239][ T30] ? __nla_parse+0x40/0x60 [ 468.193666][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 468.200400][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 468.207073][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 468.212614][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 468.219239][ T30] ? bpf_lsm_capable+0x9/0x20 [ 468.223924][ T30] ? security_capable+0x7e/0x2c0 [ 468.229303][ T30] genl_rcv_msg+0x614/0x7a0 [ 468.233820][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.239381][ T30] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 468.245470][ T30] ? __netlink_lookup+0xc6/0x8b0 [ 468.250755][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.255517][ T30] netlink_rcv_skb+0x226/0x4a0 [ 468.260332][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.265353][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 468.270702][ T30] ? down_read+0x2be/0x330 [ 468.275127][ T30] genl_rcv+0x28/0x40 [ 468.279623][ T30] netlink_unicast+0x7bb/0x940 [ 468.284390][ T30] netlink_sendmsg+0x813/0xb40 [ 468.289531][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.294818][ T30] ? futex_unqueue+0x22/0x240 [ 468.299857][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 468.304787][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 468.310883][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.316540][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 468.321301][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.326999][ T30] ? lock_release+0x4b/0x3c0 [ 468.331597][ T30] ? import_iovec+0x73/0xa0 [ 468.336640][ T30] ___sys_sendmsg+0x2a5/0x360 [ 468.341474][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.347062][ T30] ? futex_wait+0x2a2/0x390 [ 468.351564][ T30] ? __fget_files+0x2a/0x420 [ 468.356520][ T30] ? __fget_files+0x3a2/0x420 [ 468.361193][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 468.366757][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 468.372234][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.377390][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.383469][ T30] do_syscall_64+0x174/0x580 [ 468.389330][ T30] ? trace_irq_disable+0x3b/0x140 [ 468.394387][ T30] ? clear_bhb_loop+0x40/0x90 [ 468.399402][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.405314][ T30] RIP: 0033:0x7f7fce59ce59 [ 468.410231][ T30] RSP: 002b:00007f7fcf483028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.419004][ T30] RAX: ffffffffffffffda RBX: 00007f7fce816090 RCX: 00007f7fce59ce59 [ 468.427313][ T30] RDX: 000000002404c080 RSI: 0000200000000140 RDI: 0000000000000008 [ 468.435273][ T30] RBP: 00007f7fce632d6f R08: 0000000000000000 R09: 0000000000000000 [ 468.444073][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.452449][ T30] R13: 00007f7fce816128 R14: 00007f7fce816090 R15: 00007ffec7cb7808 [ 468.460914][ T30] [ 468.463949][ T30] INFO: task syz.1.3822:20275 blocked for more than 146 seconds. [ 468.472949][ T30] Not tainted syzkaller #0 [ 468.478273][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 468.487272][ T30] task:syz.1.3822 state:D stack:28248 pid:20275 tgid:20272 ppid:18316 task_flags:0x400140 flags:0x00080002 [ 468.499813][ T30] Call Trace: [ 468.503098][ T30] [ 468.506394][ T30] __schedule+0x17d9/0x56c0 [ 468.510891][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.516241][ T30] ? unwind_next_frame+0x8f/0x2550 [ 468.521367][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.526599][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 468.531797][ T30] ? __pfx___schedule+0x10/0x10 [ 468.537021][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.541786][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.547231][ T30] ? lock_release+0x4b/0x3c0 [ 468.551853][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.556913][ T30] schedule+0x164/0x360 [ 468.561079][ T30] schedule_preempt_disabled+0x13/0x30 [ 468.566601][ T30] __mutex_lock+0x7bf/0x1550 [ 468.571195][ T30] ? unwind_get_return_address+0x4d/0x90 [ 468.577160][ T30] ? __mutex_lock+0x5d4/0x1550 [ 468.581919][ T30] ? rtnetlink_rcv_msg+0x767/0xc00 [ 468.587549][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 468.592572][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 468.598060][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.602820][ T30] ? lock_release+0x4b/0x3c0 [ 468.607871][ T30] ? bpf_lsm_capable+0x9/0x20 [ 468.612557][ T30] ? security_capable+0x7e/0x2c0 [ 468.617972][ T30] rtnetlink_rcv_msg+0x767/0xc00 [ 468.622909][ T30] ? ____sys_sendmsg+0x9b9/0xa20 [ 468.628345][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 468.633453][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 468.639271][ T30] ? __netlink_lookup+0xc6/0x8b0 [ 468.644198][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.649613][ T30] netlink_rcv_skb+0x226/0x4a0 [ 468.654393][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 468.660384][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 468.666261][ T30] ? net_generic+0x1e/0x240 [ 468.670792][ T30] ? net_generic+0x1e/0x240 [ 468.675279][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 468.681052][ T30] netlink_unicast+0x7bb/0x940 [ 468.686166][ T30] netlink_sendmsg+0x813/0xb40 [ 468.690931][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.696652][ T30] ? futex_unqueue+0x22/0x240 [ 468.701319][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 468.706825][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 468.712123][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.717882][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 468.722648][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.728314][ T30] ? lock_release+0x4b/0x3c0 [ 468.732902][ T30] ? import_iovec+0x73/0xa0 [ 468.737887][ T30] ___sys_sendmsg+0x2a5/0x360 [ 468.742561][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.748156][ T30] ? futex_wait+0x2a2/0x390 [ 468.752827][ T30] ? __fget_files+0x2a/0x420 [ 468.757806][ T30] ? __fget_files+0x3a2/0x420 [ 468.762478][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 468.767904][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 468.773375][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.778555][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.784642][ T30] do_syscall_64+0x174/0x580 [ 468.789775][ T30] ? trace_irq_disable+0x3b/0x140 [ 468.794815][ T30] ? clear_bhb_loop+0x40/0x90 [ 468.799932][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.806348][ T30] RIP: 0033:0x7f7fce59ce59 [ 468.811019][ T30] RSP: 002b:00007f7fcf462028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.820212][ T30] RAX: ffffffffffffffda RBX: 00007f7fce816180 RCX: 00007f7fce59ce59 [ 468.829126][ T30] RDX: 0000000000000000 RSI: 0000200000006280 RDI: 0000000000000009 [ 468.837384][ T30] RBP: 00007f7fce632d6f R08: 0000000000000000 R09: 0000000000000000 [ 468.845348][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.853603][ T30] R13: 00007f7fce816218 R14: 00007f7fce816180 R15: 00007ffec7cb7808 [ 468.861740][ T30] [ 468.864751][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 468.874344][ T30] INFO: task syz.1.3822:20276 blocked for more than 147 seconds. [ 468.882449][ T30] Not tainted syzkaller #0 [ 468.887895][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 468.897206][ T30] task:syz.1.3822 state:D stack:28984 pid:20276 tgid:20272 ppid:18316 task_flags:0x400040 flags:0x00080002 [ 468.909474][ T30] Call Trace: [ 468.912758][ T30] [ 468.915675][ T30] __schedule+0x17d9/0x56c0 [ 468.920873][ T30] ? __update_page_owner_handle+0x5a/0x570 [ 468.927034][ T30] ? __pfx___schedule+0x10/0x10 [ 468.931881][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.937107][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.941866][ T30] ? lock_release+0x4b/0x3c0 [ 468.946976][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.951771][ T30] schedule+0x164/0x360 [ 468.956477][ T30] schedule_preempt_disabled+0x13/0x30 [ 468.961947][ T30] __mutex_lock+0x7bf/0x1550 [ 468.966890][ T30] ? __mutex_lock+0x5d4/0x1550 [ 468.971651][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 468.976801][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 468.981824][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 468.987558][ T30] ? radix_tree_lookup+0x240/0x290 [ 468.992670][ T30] genl_rcv_msg+0x10b/0x7a0 [ 468.997604][ T30] ? __alloc_skb+0x276/0x7a0 [ 469.002203][ T30] ? netlink_sendmsg+0x5d4/0xb40 [ 469.007704][ T30] ? do_syscall_64+0x174/0x580 [ 469.012551][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 469.017941][ T30] ? __netlink_lookup+0xc6/0x8b0 [ 469.022874][ T30] ? rcu_is_watching+0x15/0xb0 [ 469.028054][ T30] netlink_rcv_skb+0x226/0x4a0 [ 469.032828][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 469.038317][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 469.043603][ T30] ? down_read+0x2be/0x330 [ 469.048483][ T30] genl_rcv+0x28/0x40 [ 469.052461][ T30] netlink_unicast+0x7bb/0x940 [ 469.057597][ T30] netlink_sendmsg+0x813/0xb40 [ 469.062523][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.068340][ T30] ? __might_fault+0xaf/0x130 [ 469.073011][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 469.078313][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 469.083589][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.089248][ T30] __sys_sendto+0x626/0x6c0 [ 469.093745][ T30] ? file_init_path+0x3b/0x5a0 [ 469.099047][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 469.104153][ T30] ? errseq_sample+0x40/0x70 [ 469.109470][ T30] ? rcu_is_watching+0x15/0xb0 [ 469.114243][ T30] ? fd_install+0x94/0x3d0 [ 469.119103][ T30] ? fd_install+0x306/0x3d0 [ 469.123616][ T30] __x64_sys_sendto+0xde/0x100 [ 469.128684][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.134739][ T30] do_syscall_64+0x174/0x580 [ 469.139365][ T30] ? trace_irq_disable+0x3b/0x140 [ 469.144389][ T30] ? clear_bhb_loop+0x40/0x90 [ 469.149108][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.155011][ T30] RIP: 0033:0x7f7fce55d68e [ 469.159991][ T30] RSP: 002b:00007f7fcf43fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 469.168941][ T30] RAX: ffffffffffffffda RBX: 00007f7fcf4416c0 RCX: 00007f7fce55d68e [ 469.177291][ T30] RDX: 0000000000000028 RSI: 00007f7fcf440000 RDI: 000000000000000c [ 469.185261][ T30] RBP: 0000000000000000 R08: 00007f7fcf43ff04 R09: 000000000000000c [ 469.193770][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 469.202107][ T30] R13: 00007f7fcf43ff58 R14: 00007f7fcf440000 R15: 0000000000000000 [ 469.210692][ T30] [ 469.213703][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 469.223266][ T30] INFO: task syz.1.3822:20277 blocked for more than 147 seconds. [ 469.231365][ T30] Not tainted syzkaller #0 [ 469.236639][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 469.245292][ T30] task:syz.1.3822 state:D stack:26968 pid:20277 tgid:20272 ppid:18316 task_flags:0x400140 flags:0x00080002 [ 469.258005][ T30] Call Trace: [ 469.261279][ T30] [ 469.264352][ T30] __schedule+0x17d9/0x56c0 [ 469.269414][ T30] ? rcu_is_watching+0x15/0xb0 [ 469.274224][ T30] ? __pfx___schedule+0x10/0x10 [ 469.279475][ T30] ? rcu_is_watching+0x15/0xb0 [ 469.284238][ T30] ? rcu_is_watching+0x15/0xb0 [ 469.289490][ T30] ? lock_release+0x4b/0x3c0 [ 469.294087][ T30] ? rcu_is_watching+0x15/0xb0 [ 469.299239][ T30] schedule+0x164/0x360 [ 469.303394][ T30] schedule_preempt_disabled+0x13/0x30 [ 469.309227][ T30] __mutex_lock+0x7bf/0x1550 [ 469.313856][ T30] ? __mutex_lock+0x5d4/0x1550 [ 469.319116][ T30] ? rtnl_newlink+0x8a3/0x1bd0 [ 469.323876][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 469.329314][ T30] ? ns_capable+0x89/0xe0 [ 469.333651][ T30] ? rtnl_link_get_net_capable+0xd3/0x310 [ 469.339914][ T30] rtnl_newlink+0x8a3/0x1bd0 [ 469.344506][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 469.350206][ T30] ? unwind_next_frame+0x8f/0x2550 [ 469.355347][ T30] ? rcu_is_watching+0x15/0xb0 [ 469.360518][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 469.366390][ T30] ? rcu_is_watching+0x15/0xb0 [ 469.371176][ T30] ? rcu_is_watching+0x15/0xb0 [ 469.376529][ T30] ? lock_release+0x4b/0x3c0 [ 469.381115][ T30] ? lock_release+0x4b/0x3c0 [ 469.385729][ T30] ? unwind_next_frame+0x8f/0x2550 [ 469.390841][ T30] ? rcu_is_watching+0x15/0xb0 [ 469.395609][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 469.401195][ T30] ? rcu_is_watching+0x15/0xb0 [ 469.406415][ T30] ? rcu_is_watching+0x15/0xb0 [ 469.411169][ T30] ? lock_release+0x4b/0x3c0 [ 469.416228][ T30] ? lock_release+0x4b/0x3c0 [ 469.420828][ T30] ? is_bpf_text_address+0x292/0x2b0 [ 469.426750][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 469.431979][ T30] ? kernel_text_address+0xa5/0xe0 [ 469.437270][ T30] ? __kernel_text_address+0xd/0x30 [ 469.442478][ T30] ? unwind_get_return_address+0x4d/0x90 [ 469.448492][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 469.454677][ T30] ? arch_stack_walk+0xfb/0x150 [ 469.459581][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 469.464604][ T30] ? lock_release+0x4b/0x3c0 [ 469.469480][ T30] ? bpf_lsm_capable+0x9/0x20 [ 469.474174][ T30] ? security_capable+0x7e/0x2c0 [ 469.479566][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 469.484588][ T30] rtnetlink_rcv_msg+0x802/0xc00 [ 469.490003][ T30] ? kasan_save_track+0x3e/0x80 [ 469.494849][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 469.500366][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 469.506763][ T30] ? __netlink_lookup+0xc6/0x8b0 [ 469.511721][ T30] ? rcu_is_watching+0x15/0xb0 [ 469.516959][ T30] netlink_rcv_skb+0x226/0x4a0 [ 469.521854][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 469.527729][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 469.533015][ T30] ? net_generic+0x1e/0x240 [ 469.538014][ T30] ? net_generic+0x1e/0x240 [ 469.542515][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 469.548097][ T30] netlink_unicast+0x7bb/0x940 [ 469.552855][ T30] netlink_sendmsg+0x813/0xb40 [ 469.558046][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.563341][ T30] ? futex_unqueue+0x22/0x240 [ 469.568838][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 469.573929][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 469.579611][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.584889][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 469.590229][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.595542][ T30] ? lock_release+0x4b/0x3c0 [ 469.600613][ T30] ? import_iovec+0x73/0xa0 [ 469.605114][ T30] ___sys_sendmsg+0x2a5/0x360 [ 469.610220][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.615414][ T30] ? futex_wait+0x2a2/0x390 [ 469.620288][ T30] ? __fget_files+0x2a/0x420 [ 469.624869][ T30] ? __fget_files+0x3a2/0x420 [ 469.630223][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 469.635160][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 469.641000][ T30] ? rcu_is_watching+0x15/0xb0 [ 469.646225][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.652300][ T30] do_syscall_64+0x174/0x580 [ 469.657330][ T30] ? trace_irq_disable+0x3b/0x140 [ 469.662353][ T30] ? clear_bhb_loop+0x40/0x90 [ 469.667444][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.673599][ T30] RIP: 0033:0x7f7fce59ce59 [ 469.678547][ T30] RSP: 002b:00007f7fcf420028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.687432][ T30] RAX: ffffffffffffffda RBX: 00007f7fce816360 RCX: 00007f7fce59ce59 [ 469.695398][ T30] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000d [ 469.703741][ T30] RBP: 00007f7fce632d6f R08: 0000000000000000 R09: 0000000000000000 [ 469.712073][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.720517][ T30] R13: 00007f7fce8163f8 R14: 00007f7fce816360 R15: 00007ffec7cb7808 [ 469.728833][ T30] [ 469.731841][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 469.741059][ T30] INFO: lockdep is turned off. [ 469.746118][ T30] NMI backtrace for cpu 1 [ 469.746141][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 469.746157][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 469.746166][ T30] Call Trace: [ 469.746172][ T30] [ 469.746179][ T30] dump_stack_lvl+0xe8/0x150 [ 469.746200][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 469.746217][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 469.746239][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 469.746255][ T30] sys_info+0x135/0x170 [ 469.746268][ T30] watchdog+0xfd7/0x1030 [ 469.746290][ T30] ? watchdog+0x1c7/0x1030 [ 469.746310][ T30] kthread+0x388/0x470 [ 469.746324][ T30] ? __pfx_watchdog+0x10/0x10 [ 469.746341][ T30] ? __pfx_kthread+0x10/0x10 [ 469.746355][ T30] ret_from_fork+0x514/0xb70 [ 469.746370][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 469.746384][ T30] ? __switch_to+0xc89/0x1420 [ 469.746405][ T30] ? __pfx_kthread+0x10/0x10 [ 469.746417][ T30] ret_from_fork_asm+0x1a/0x30 [ 469.746440][ T30] [ 469.746446][ T30] Sending NMI from CPU 1 to CPUs 0: [ 469.859225][ C0] NMI backtrace for cpu 0 [ 469.859243][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 469.859260][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 469.859269][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 469.859295][ C0] Code: 0c 80 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 a7 21 00 fb f4 7c 03 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 469.859309][ C0] RSP: 0018:ffffffff8e607de0 EFLAGS: 00000246 [ 469.859323][ C0] RAX: ffff88812527c000 RBX: ffffffff819a5170 RCX: 0000000080000001 [ 469.859335][ C0] RDX: 0000000000000001 RSI: ffffffff8c291100 RDI: ffffffff819a5170 [ 469.859346][ C0] RBP: ffffffff8e607eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 469.859357][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 469.859368][ C0] R13: 1ffffffff1cd1de8 R14: 1ffffffff1cc0fc4 R15: dffffc0000000000 [ 469.859380][ C0] FS: 0000000000000000(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 [ 469.859393][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 469.859403][ C0] CR2: 00007fc9a8556718 CR3: 000000000e746000 CR4: 00000000003526f0 [ 469.859418][ C0] Call Trace: [ 469.859424][ C0] [ 469.859430][ C0] default_idle+0x9/0x20 [ 469.859459][ C0] default_idle_call+0x72/0xb0 [ 469.859482][ C0] do_idle+0x2e0/0x540 [ 469.859505][ C0] ? __pfx_do_idle+0x10/0x10 [ 469.859529][ C0] cpu_startup_entry+0x43/0x60 [ 469.859551][ C0] rest_init+0x2de/0x300 [ 469.859565][ C0] start_kernel+0x38a/0x3e0 [ 469.859686][ C0] x86_64_start_reservations+0x24/0x30 [ 469.859707][ C0] x86_64_start_kernel+0x137/0x1b0 [ 469.859724][ C0] common_startup_64+0x13e/0x157 [ 469.859749][ C0] [ 470.039485][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 470.046318][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 470.055405][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 470.065441][ T30] Call Trace: [ 470.068706][ T30] [ 470.071619][ T30] vpanic+0x56c/0xa60 [ 470.075580][ T30] ? __pfx___schedule+0x10/0x10 [ 470.080418][ T30] ? __pfx_vpanic+0x10/0x10 [ 470.084908][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 470.091056][ T30] panic+0xc5/0xd0 [ 470.094761][ T30] ? __pfx_panic+0x10/0x10 [ 470.099158][ T30] ? preempt_schedule_common+0x82/0xd0 [ 470.104607][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 470.109973][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 470.116115][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 470.122254][ T30] watchdog+0x1030/0x1030 [ 470.126574][ T30] ? watchdog+0x1c7/0x1030 [ 470.130978][ T30] kthread+0x388/0x470 [ 470.135029][ T30] ? __pfx_watchdog+0x10/0x10 [ 470.139690][ T30] ? __pfx_kthread+0x10/0x10 [ 470.144262][ T30] ret_from_fork+0x514/0xb70 [ 470.148831][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 470.153924][ T30] ? __switch_to+0xc89/0x1420 [ 470.158584][ T30] ? __pfx_kthread+0x10/0x10 [ 470.163152][ T30] ret_from_fork_asm+0x1a/0x30 [ 470.167903][ T30] [ 470.171190][ T30] Kernel Offset: disabled [ 470.175495][ T30] Rebooting in 86400 seconds..