last executing test programs: 2m54.860812507s ago: executing program 3 (id=2249): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000006c0)=[{{0x4}, {0x3, 0x1, 0x1, 0x1}}], 0x8) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002900)=ANY=[@ANYBLOB="1c0000002a0001002c0800010029242d00"/28], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000071102200000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000340)=[{}], 0x20) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r4, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) 2m54.686066703s ago: executing program 3 (id=2252): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x44}}}]}, 0x3c}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e0837fb8a6d69e9b5e9c0f17e209f8c", '\x00', "12772541f8eb02bb"}, 0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x9, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_STATUS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) shutdown(r0, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r3, 0x0, 0xffffffff004) 2m53.664350353s ago: executing program 3 (id=2269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r1, 0x3) accept4(r1, 0x0, 0x0, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)='L{', 0x2}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 2m52.500190338s ago: executing program 3 (id=2284): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079103000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000300)={0x1, 0x4, 0xfc, 0x7fffffff, @vifc_lcl_addr=@empty, @broadcast}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @local}}]}]}, @IFLA_GROUP={0x8}]}, 0x58}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000000004004780080001800400298000"/32], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0xc000) r5 = socket$inet(0x2, 0x80000, 0x1) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f00000002c0)={r1, &(0x7f0000000100)='}),&\xf2\'+:}},\x00', 0x101102, &(0x7f0000000200)={@_ha_fsid={[0x7, 0x219]}, {0x3, 0x4, 0x400, 0x8}}, 0x6, &(0x7f0000000240), &(0x7f0000000280)=0x2}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r6) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r7, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000080), 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) writev(r0, &(0x7f0000000700)=[{&(0x7f00000000c0)="0232e6", 0x3}, {&(0x7f0000000140)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d671416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a43", 0x45}], 0x2) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x20010, r4, 0x400000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00000001000071101a000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa029}, 0x94) 2m52.136675672s ago: executing program 3 (id=2288): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {0x3, 0x0}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x4, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0xb7}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0x1, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)="5d46542b3090ce5ceca970bf8abf170549531f3309044e8b5176033b03b6ffb6877fc1bf93944e8918f7671993d5b56494717c96f1a910bc20b312c4ac1319c04da6b26ab882b4086cb2ac1545cef2003c2f29885496d182cc00eb08067822dfbfa896a37248b990eeeec77445d6f8da52deda337f8af0366be93702298a20b912b44091a10ec9d76ab09f3b44ee95c1de86a9fee94df8dc49001ce17774fea95cd2cbd5e662f1ea9d73351feabf5ef6f6bba0853c240188f92c5f4ae3c27038150a5c6ac31cb4545d6baabd07f705a1ea0e", &(0x7f0000000100), 0x1003, r8}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r8, &(0x7f0000000180)="f85115", 0x0}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x19, 0x0, 0x28e, 0x5, 0x804c0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x800, 0x8}, 0xc) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0xffffffffffffffff, 0xff, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x50, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xff}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @generic={0x75, 0x1, 0x6, 0x5, 0x8}, @call={0x85, 0x0, 0x0, 0x4d}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000500)='GPL\x00', 0x400, 0x0, 0x0, 0x41100, 0x10, '\x00', r5, 0x0, r6, 0x8, &(0x7f00000005c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x1434d, r0, 0x8, &(0x7f0000000700)=[r7, r8, r9, r10, r11], &(0x7f0000000740)=[{0x4, 0x4, 0xc, 0x6}, {0x4, 0x5, 0xa, 0xb}, {0x5, 0x3, 0xe, 0x2}, {0x3, 0x4, 0x5, 0x2}, {0x5, 0x1, 0x4, 0x2}, {0x0, 0x1, 0x6, 0x2}, {0x5, 0x2, 0x7, 0x6}, {0x5, 0x3, 0x3, 0x6}], 0x10, 0x800}, 0x94) socket$inet_icmp(0x2, 0x2, 0x1) 2m51.839499866s ago: executing program 3 (id=2293): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffd87, &(0x7f0000000140)={&(0x7f0000001ac0)={0x1c, 0x1e, 0x1, 0x20000002, 0x400, {0x1}, [@nested={0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', 0x0}) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100000000000000000002000000", @ANYRES32=r2, @ANYRES32=r0], 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x24008000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081140000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071104e00000000001d300500000000004704000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x10}, 0x94) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)={0x14, 0x14, 0x1, 0x70bd2d, 0x0, "", [@generic="09fa6c93"]}, 0x14}], 0x1}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f0000000240)={r5, &(0x7f0000000040)='wlan0\x00', 0x24c40, &(0x7f0000000100)={@_ha_fsid={[0xfffffff9, 0xc]}, {0x2, 0x7, 0xfffffffe, 0xd6}}, 0x4, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000200)=0x1}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000280)={'vlan0\x00', 0x600}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x5c, r8, 0x801, 0x401, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "fcaa80c75526d92bcd065bf750"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x5c}}, 0x0) r12 = socket$kcm(0xa, 0x3, 0x3a) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$kcm(r12, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}, 0x0, 0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000880)="00bc49eb", 0x4}], 0x1, 0x0, 0x0, 0x900}, 0x60) r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m36.716009833s ago: executing program 32 (id=2293): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffd87, &(0x7f0000000140)={&(0x7f0000001ac0)={0x1c, 0x1e, 0x1, 0x20000002, 0x400, {0x1}, [@nested={0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', 0x0}) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100000000000000000002000000", @ANYRES32=r2, @ANYRES32=r0], 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x24008000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x10}, 0x94) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)={0x14, 0x14, 0x1, 0x70bd2d, 0x0, "", [@generic="09fa6c93"]}, 0x14}], 0x1}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f0000000240)={r5, &(0x7f0000000040)='wlan0\x00', 0x24c40, &(0x7f0000000100)={@_ha_fsid={[0xfffffff9, 0xc]}, {0x2, 0x7, 0xfffffffe, 0xd6}}, 0x4, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000200)=0x1}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000280)={'vlan0\x00', 0x600}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x5c, r8, 0x801, 0x401, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "fcaa80c75526d92bcd065bf750"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x5c}}, 0x0) r12 = socket$kcm(0xa, 0x3, 0x3a) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$kcm(r12, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}, 0x0, 0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000880)="00bc49eb", 0x4}], 0x1, 0x0, 0x0, 0x900}, 0x60) r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m35.4889679s ago: executing program 2 (id=2498): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 2m34.202720159s ago: executing program 2 (id=2503): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) readv(0xffffffffffffffff, &(0x7f0000001300)=[{0x0}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) close(r1) 2m33.233472018s ago: executing program 2 (id=2511): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3e, 0x0}, @in6=@local, 0x4e1f, 0x0, 0x0, 0x3, 0x2}, {0x7, 0x200000004, 0x40000000007, 0x6811220d, 0x100000003, 0x2, 0x200000003, 0x9}, {0x5, 0x0, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x7}, {{@in=@dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0x6c}, 0x2, @in6=@empty, 0x3502, 0x1, 0x0, 0x0, 0x9}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 2m33.060527557s ago: executing program 2 (id=2513): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={0x28, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x4, 0x38}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 2m32.884888354s ago: executing program 2 (id=2516): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newrule={0x1c, 0x21, 0x801, 0xfffffffc, 0xfffffffc, {0x2, 0x20}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m32.687159671s ago: executing program 2 (id=2518): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 2m17.420864626s ago: executing program 33 (id=2518): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 58.410507717s ago: executing program 6 (id=3337): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0)={r1, 0xe4, "7aa85bc4a520dd3646780a53d5688be956fedc1996948085449ae0bfd8e722d69cdf55263d009cdb4a2e3a540b2abc207517f24a8d23518016d29eb35d1318a1e22e26af244e66f8853c94cea1c3a97e574ba5fb6f95438eba9b0a7f416fa7432dde120db359499de42b4c768075be41c737fe70cace331a9d9aa779c4b96da7cde6424666fe1e83b4d8c971f477ca587bc72865706980d2b201c5702cf4fde3e64e83a9b866fdf9557ca40baa345d859588099ce041c4b1c610536ab0ae08581742905b8d68ede7799f0a81ab14769f518878a8d94c45914801494abfeaf91b88276d2f"}, &(0x7f00000001c0)=0xec) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x7, &(0x7f0000000000), 0xa0) 58.264298609s ago: executing program 6 (id=3339): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {}, {0x4, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0xa}]}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r4, @ANYBLOB="800202000a000200577f0000aabb000020000e"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 58.09146133s ago: executing program 6 (id=3344): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bind$alg(r0, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1a, 0x0, 0x0, 0x0, 0x3866, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003a40)=@newtaction={0x900, 0x30, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{0x64, 0x1, [@m_ipt={0x60, 0x17, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xadc0}, @TCA_IPT_HOOK={0x8}]}, {0x25, 0x6, "e0bc7743d52057483c234da7396aee1c1620232e9758fc402870746166594df527"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x888, 0x1, [@m_ipt={0x884, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0x859, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x900}, 0x1, 0x0, 0x0, 0x4}, 0x24040001) recvmmsg$unix(r2, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) sendmsg$802154_raw(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @long={0x3, 0x1}}, 0x14, &(0x7f0000000080)={&(0x7f0000000040)="46b68cccacb551e62736620fa40495af108dd48427d1010c73aefa4cfd3f44885c3c4c09294fa11a50f7", 0x2a}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 57.884289759s ago: executing program 6 (id=3347): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x28010804) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000240)=0xffffffffffffffff, 0x4) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001418000000120800040043000000a80016000a0001400600d4c140e99d5a57dfcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8004cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed92d2f52eb233dcb9ef3d93452a", 0xd8}], 0x1}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 57.646948954s ago: executing program 6 (id=3354): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x14}]}}}]}, 0x3c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100), 0x10) 57.304117399s ago: executing program 6 (id=3359): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002600010026bdf000fddbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, 0x0, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x2c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x2c}}, 0x0) 42.245785163s ago: executing program 34 (id=3359): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002600010026bdf000fddbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, 0x0, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x2c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x2c}}, 0x0) 3.794627606s ago: executing program 7 (id=3873): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a80)={0x2c, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x8e, 0x0, 0x1, [@nested={0x4, 0xe9}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) r2 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x40008000) write$bt_hci(r2, &(0x7f0000000640)=ANY=[], 0xc) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a80)={0x2c, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x8e, 0x0, 0x1, [@nested={0x4, 0xe9}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) (async) accept4(r0, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) (async) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x40008000) (async) write$bt_hci(r2, &(0x7f0000000640)=ANY=[], 0xc) (async) 3.528791704s ago: executing program 7 (id=3879): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7800000600"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00P'], 0x78}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="40005200060010"], 0x24}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) 3.347228322s ago: executing program 7 (id=3882): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_ts_info}) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x2, @remote}}, 0x6, 0x101}, &(0x7f00000001c0)=0x90) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x80, 0x0, 0xe5c, 0xd, 0x7dbe, 0xe, 0x0, r2}, 0x20) 3.171516465s ago: executing program 7 (id=3885): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)={0x20, 0x2, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4044014) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x43}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r4 = socket(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x90000005}) epoll_pwait(r7, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) (async) writev(r5, &(0x7f0000000780)=[{&(0x7f00000001c0)="02a51c4fd963", 0x6}], 0x1) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) (async) bind$unix(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002440), 0x0, 0x20004001, 0x0, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000005a00)={0x0, 0x0, &(0x7f00000059c0)={&(0x7f0000005940)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000091}, 0x8004) (async) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r9, 0xc0385869, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) getsockopt(r3, 0x1, 0x27, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000180)=@ethtool_rxnfc={0x2d, 0xe, 0x100, {0x0, @sctp_ip6_spec={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e23, 0x4e20, 0x81}, {0x0, @random="97babeed5a9f", 0x5, 0x7, [0x3, 0xa4d]}, @sctp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x23}, @empty, 0x4e24, 0x4e23, 0x7}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x4, 0xe0a4, [0x3fd, 0x1]}, 0x49, 0x7}, 0x3, [0x63, 0x95c8, 0xa9e]}}) 2.756237998s ago: executing program 7 (id=3891): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) socketpair(0x6, 0x1, 0xc2f5, &(0x7f0000000000)) 2.534992056s ago: executing program 7 (id=3897): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="000000000000001a2000128008000100677470001400028008000400630e00000800030000000000"], 0x40}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xc040ff0b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r4, @ANYBLOB="18005e800800020000efff000c0001"], 0x34}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x8000) readv(r9, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r11, 0x0, 0xf3a, 0x0) vmsplice(r11, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r6, r11, 0x8f5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x154, 0x154, 0x4, [@union={0xd, 0x1, 0x0, 0x5, 0x0, 0x8, [{}]}, @union={0x2, 0x2, 0x0, 0x5, 0x1, 0x1, [{0x10, 0x1, 0x80000001}, {0x10, 0x2, 0xfbd}]}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x26, 0x1}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xc, 0x5}, {0xb, 0x5}, {0x4, 0x2}, {0x6, 0x2}, {0x0, 0x3}, {0x6, 0x5}]}, @volatile={0x10, 0x0, 0x0, 0x9, 0x3}, @union={0x8, 0x7, 0x0, 0x5, 0x0, 0xb451, [{0x5, 0x1, 0x7}, {0xb, 0xffffffff, 0x1}, {0x4, 0x1, 0x3}, {0x5, 0x3, 0x9}, {0x6, 0x4, 0x3ff}, {0xe, 0x0, 0x1}, {0x5, 0x4, 0x9}]}, @volatile={0x1, 0x0, 0x0, 0x9, 0x1}, @float={0x5, 0x0, 0x0, 0x10, 0x8}, @union={0xb, 0x5, 0x0, 0x5, 0x1, 0xfffffe40, [{0xe, 0x3, 0x4}, {0x9, 0x1, 0x3}, {0x4, 0x3, 0x2d}, {0xc, 0x2, 0x3}, {0x3, 0x3, 0x1}]}]}, {0x0, [0x30, 0x61]}}, &(0x7f0000000440)=""/100, 0x170, 0x64, 0x0, 0x2, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="5888ea02000000046d20b711b93bddd052365b8870d71931ca35c1e3d64e8c96816e87f6afa5841beb42a91c6e10ebf900f90b3eb6d32cd545f71d2bf9b47242474d0f0b3a03d5b2d61f2b485d4af8b6b948a99af959bd48485f80c389c94d040f45df5dbe1273252de0c0452c1485af229be96846c81f58bde876e22ed6c6fc9c64649b422748a29901415d32c905f8c8a27883d972059f5bff05c0a0e967f059595efbcce120397b3bb8fe0caf442f4c8fba3bf0dc838d486a627bb2b23f44caef43", @ANYRES32=0x1, @ANYBLOB="010100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000400"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b020000000000000009000000000000110800000000000000e6f301f08d0c1cfbff6fbb4f18a1012df46f0815b34b0287b9f131fd9ca86eca95", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000100"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 2.026525652s ago: executing program 4 (id=3907): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0x3}}]}, 0x90}}, 0x20000000) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r5, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="beebefe5f9367919474d4b47efae1394735641c5d5c2d6e06ccd4965da14998d61b7b40a40f7aa4fc7e85f7531d6bdb43cb39cda1f52f5b5916a02a012994b44fde957af7022da14d9851ccadec762604ff8da620b6e983374462632a763b7c90d0d6855dae1b82b6608730df58bb5a554e82b864ded93dd55ab3cc853907768c202681db3879a821a70e8047e6c8b7c9071d1a6992695da0327137fc97b9b6e7a268a927a979f0a99050e656b0966da6056705391ae75f14fcc2ee100"/200, @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800010001000000040004800800020001000000080108802c0007800800ffeac3bc0000080006001c0000000800060000000000080005"], 0x130}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r8, 0x8b24, &(0x7f0000000040)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r10, 0x1000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r9, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r11, &(0x7f0000000100)={0xa, 0x4e22, 0xfff, @local, 0x80}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1.696121866s ago: executing program 1 (id=3913): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21ac6, 0x51a23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x14, 0xb, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) 1.436258585s ago: executing program 1 (id=3916): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7b4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c010105fb7000"}, 0xd8) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711234000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)='\x00!', 0x2}, {&(0x7f0000000140)="abffa99a7d6ed2dcacc958fd3a5c773e03b4a54890c6ba34d4a318f17925141e844a5882851431385aa863defbc0d479f945bbd8eb945276a091970bbeccd52a559731b33c20fd6eb7d6adb5ba81c0eccf6ee0dfd3f702812d39c7853360046b50ad6a4436d4247a5e920c58f140a138faa35246b17306e25f6e34b456ccefe6c20a544cb784ec517071b8f1563bb232c4019084d9003f1a2832609a0e8eb141c1ded373dd38c0e827721ecab5570c9b"}, {&(0x7f0000000240)="43e51f1bce2ede7abb6a4b66c403f7e047ecee20f0c2fcb0e9a0fa457ecafec104711845155c12d3083c2643fa79d4831d46244b8543a725fd5366f46c47f28a49d9cd9504e8fcb98c7295b91fddb7740713db6271cd2cabd133fcda03c5c0f034350170b69e304f501b3d0b0adab4ab55293a945272119c6ce79f8290df879fff628d42f94b5057e51e8a86a1879350d393acc57a51418944c4ebd0bc038ee67565694f4a4a655c4c280a6c171c3d9f3526cd4edb361a"}, {&(0x7f0000000300)="f2671cb24621eed7e7a51d5659a146245add4a2f90cb80f9129d9a161de443485cc5ee75345f3572a222faec0745c7d800937747222bbd7f4dc9514a4799640f8255dc6a4743dab90efdb54b411a188a4e021ae5b392d4de7029e547a196c8990184ef06499677b80d5e21e063b3e263e1b2d2df8b2200a968be53e544fc"}], 0x1000000000000215, 0x5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7b4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c010105fb7000"}, 0xd8) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711234000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)='\x00!', 0x2}, {&(0x7f0000000140)="abffa99a7d6ed2dcacc958fd3a5c773e03b4a54890c6ba34d4a318f17925141e844a5882851431385aa863defbc0d479f945bbd8eb945276a091970bbeccd52a559731b33c20fd6eb7d6adb5ba81c0eccf6ee0dfd3f702812d39c7853360046b50ad6a4436d4247a5e920c58f140a138faa35246b17306e25f6e34b456ccefe6c20a544cb784ec517071b8f1563bb232c4019084d9003f1a2832609a0e8eb141c1ded373dd38c0e827721ecab5570c9b"}, {&(0x7f0000000240)="43e51f1bce2ede7abb6a4b66c403f7e047ecee20f0c2fcb0e9a0fa457ecafec104711845155c12d3083c2643fa79d4831d46244b8543a725fd5366f46c47f28a49d9cd9504e8fcb98c7295b91fddb7740713db6271cd2cabd133fcda03c5c0f034350170b69e304f501b3d0b0adab4ab55293a945272119c6ce79f8290df879fff628d42f94b5057e51e8a86a1879350d393acc57a51418944c4ebd0bc038ee67565694f4a4a655c4c280a6c171c3d9f3526cd4edb361a"}, {&(0x7f0000000300)="f2671cb24621eed7e7a51d5659a146245add4a2f90cb80f9129d9a161de443485cc5ee75345f3572a222faec0745c7d800937747222bbd7f4dc9514a4799640f8255dc6a4743dab90efdb54b411a188a4e021ae5b392d4de7029e547a196c8990184ef06499677b80d5e21e063b3e263e1b2d2df8b2200a968be53e544fc"}], 0x1000000000000215, 0x5, 0x0) (async) 1.280216851s ago: executing program 4 (id=3918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x16}, 0x80) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r1, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xbe}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x8}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xa0000000}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x6}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x2a7f}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x200480c5}, 0x4008814) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000480)={@empty, 0x0}, &(0x7f00000004c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'caif0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vxcan0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x13c, r4, 0x4, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x44}, 0x28040045) r13 = socket$xdp(0x2c, 0x3, 0x0) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r2) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000a00)={&(0x7f00000008c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x6c, r14, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000045}, 0x14) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r2) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r15, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x284}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c1}, 0x20000804) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000b80)={'filter\x00', 0x0, [0xfffffffe, 0x8, 0xce54]}, &(0x7f0000000c00)=0x44) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r2, 0x40106e8c, &(0x7f0000000c40)=[0x2, 0x6]) ioctl$int_in(r3, 0x5421, &(0x7f0000000c80)=0xb) r16 = accept$inet(r2, &(0x7f0000000cc0)={0x2, 0x0, @multicast1}, &(0x7f0000000d00)=0x10) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x30, r16, 0xb157000) socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x3c, r17, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000090) ioctl$NILFS_IOCTL_GET_BDESCS(r13, 0xc0186e87, &(0x7f0000000f80)={&(0x7f0000000e80)=[{0x7, 0x8, 0xaff, 0x10001, 0x6}, {0x80, 0x2, 0x3, 0x3, 0x200}, {0x6, 0x8001, 0x1, 0x4, 0x1}, {0x7f, 0xd, 0x0, 0x7fff, 0x8}, {0x4, 0x1, 0x3469a3b2, 0x36, 0xc}], 0x5, 0x28, 0x80, 0x401}) 1.1762741s ago: executing program 1 (id=3919): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x12}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x64}}, 0x0) 1.097528655s ago: executing program 1 (id=3921): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'gre0\x00', 0x0}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r1, 0x10e}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r4) 892.128855ms ago: executing program 1 (id=3922): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000140000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d40)={0x34, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x34}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x84}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r6, 0xff, 0x1, 0x0, &(0x7f0000000040)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x8, 0x6}, 0x50) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000ac0)={0x0, @in6={{0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd88}}, 0x8001, 0x5, 0x2, 0x96, 0x65, 0xd88, 0xc}, &(0x7f0000000b80)=0x9c) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000580)={r9, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000000203000000020000000000000700000000000000000000000d02000000000051"], 0x0, 0x40}, 0x20) recvmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/126, 0x7e}, {&(0x7f00000001c0)=""/231, 0xe7}], 0x2, &(0x7f0000000300)=""/129, 0x81}, 0x1000}, {{&(0x7f00000003c0)=@l2tp6, 0x80, &(0x7f0000002580)=[{&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/164, 0xa4}, {&(0x7f0000002400)=""/114, 0x72}, {&(0x7f0000002480)=""/94, 0x5e}, {&(0x7f0000002500)=""/92, 0x5c}], 0x5, &(0x7f0000002600)=""/33, 0x21}, 0x4}, {{&(0x7f0000002640)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000002900)=[{&(0x7f00000026c0)=""/5, 0x5}, {&(0x7f0000002700)=""/250, 0xfa}, {&(0x7f0000002800)=""/167, 0xa7}, {&(0x7f00000028c0)=""/50, 0x32}], 0x4}, 0x200}, {{&(0x7f0000002940)=@xdp, 0x80, &(0x7f00000029c0), 0x0, &(0x7f0000002a00)=""/50, 0x32}, 0x3ff}, {{&(0x7f0000002a40)=@xdp, 0x80, &(0x7f0000003180)=[{&(0x7f0000002ac0)=""/252, 0xfc}, {&(0x7f0000002bc0)=""/130, 0x82}, {&(0x7f0000002c80)=""/78, 0x4e}, {&(0x7f0000002d00)=""/31, 0x1f}, {&(0x7f0000002d40)=""/195, 0xc3}, {&(0x7f0000002e40)=""/38, 0x26}, {&(0x7f0000002e80)=""/233, 0xe9}, {&(0x7f0000002f80)=""/228, 0xe4}, {&(0x7f0000003080)=""/202, 0xca}], 0x9}}, {{&(0x7f0000003240)=@can, 0x80, &(0x7f00000047c0)=[{&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)=""/139, 0x8b}, {&(0x7f0000004380)=""/63, 0x3f}, {&(0x7f00000043c0)=""/94, 0x5e}, {&(0x7f0000004440)=""/134, 0x86}, {&(0x7f0000004500)=""/10, 0xa}, {&(0x7f0000004540)=""/103, 0x67}, {&(0x7f00000045c0)=""/149, 0x95}, {&(0x7f0000004680)=""/134, 0x86}, {&(0x7f0000004740)=""/71, 0x47}], 0xa, &(0x7f0000004880)=""/218, 0xda}, 0x40b}], 0x6, 0x10000, &(0x7f0000004b00)={0x77359400}) 866.377357ms ago: executing program 4 (id=3923): r0 = socket$inet6(0xa, 0x802, 0x8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000002b00), 0x8) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r2, 0x6, 0x5, &(0x7f0000000000), 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000002b40)=0x4, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt(r4, 0x11b, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x29, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000002a80)={&(0x7f0000000000)=@rc={0x1f, @any, 0x8}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000200)="00c8fa9576cd9c7fb8958ace5516d6f2d4975a387784caa4ad8d9fa0c8e5ef8c8f4fee6cc355d311cf6360fb786cdad7de9698ca65cc88ecf0e4981e8216e05552d7be38bcda83bb11f806430b13263f9bdf4fc34f961709be8c67536e98ad9a25c23ca9e06a377c40c16fd3232a4ea92a61c606511d5c09b95b6d76d3c4873487ad6d6e7c27a36a2ff5c8bb4d9dc1010eea70c6d12020dd2e9fb4016bde0d22917dbae5fa002219f64edfd06096e594a6f5571067c381c53474756fcb0c45f29c59ab4c4fced6704aa8b144b212f9ef568891cb678cb088fe693de938c8016c08db024e23b16ea713dec85cc8", 0xed}, {&(0x7f0000000300)="2333aeddf9528ecdbc", 0x9}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="a5471789f4b27952bc05cb28622129e5005a2ffa67893a5ce04fc61f1f37a05efb1d520d3be290b1c4b64987b883a5847d71aab3f6947c3dade4a8aa28940f99bb66a658e588bfe880307b34d9ef3ea4dffed2a282baa776cf0313bcca98f31b3e45a0aa5550c6a1b6e49aa934baa9dc736f5897b682a218e7a451fcbe4fca4008ed30962ab04d3aefadd73d07fa93cd0f0b890483d3eac8115c7c3f1c2b8cde3d7892d64ea067edf041eb2e579e10627e135fc0774218949d9ebe542957f8bd1bd569a7763ab5c9e1f9a3a405c52eb0f0c2f408b5585485a032880e126b8d81db10f847916be964", 0xe8}, {&(0x7f00000014c0)="b157d19e2e6ca1754c04858f6b3ee75663a116b22793d3551bff97d11c2bc0c609a6106b7a087021a9b34375253e71fb441d0d0d8985a80afb815ecbe3d6636d0b5cd85bab2f5d9716ebc2f0b9b71f23bddace1d7f8eaef5845aadf7f1f246942cdf79cd420aff3f7119ef7e37596941f241b3e995fe39dd285506a060ae28e48619dc30761f769e2b085d8654f73c34a6b9c6", 0x93}], 0x5, &(0x7f0000002bc0)=[{0x1010, 0x111, 0x4, "e66cccdde6f8dceb99a13ddb4fe12330226630a54deb071bc40d809937f87bad08356504eaa7a29dda8fa49d919aa067098175e2fee3039160b72165b1081056b2c74aea83165a56259fc613a3303a93232f3518eb4fd9df45e43411f6e751835d9242a55419b525b56e5b85ebedf07b67ce4b4ff865cd64f3cf240c15bfeb86cd4b74c507c5e3b23d728945c07398ab8949e07fd3fdda9d7a0a11a6ef0211b27cd164eea936b41d1d58b35671bca20dec37793558eb94bea85aa16fb99d66f62b821beebba3a237dc646ca064802b9f74843e61738a2288332392423b3d2592a4146a98e9ef2d3344b28f6281af744704beba3a2b937184da0e990f4b0a40c3ed295f4a83f52454f96703e7adfe2289907a7b65994d9e35d02161265b7f5d570911a4d4854cbea99d7eb5f7693a0c3778a12980422f474df32a56455376354a9bc42a51566e3c9b48e35a394c565a0d1402928bf27046f080d6ed00035108789b1ec30228f7d9de6218cffc235363919f881e21e2ccab8b7356d549762cd91ed205deadce0cc48ddc36e7b9a9b37d3faf244431e1dd2e8a2877285327ba173db14e77907095f2e253d25e9646218a1fc4e85fe5cab92ffbaf894118dfda505464bed6a8a2f961e1c32ee90dada1f4ca98423542818ef9bd36743689cc2546344684f0b96ae4accb3c7798b880ac3869afb121f31e92f928b5a37d7339e41c80a3dd19666a882b876f9dfe52c66b2efe9ebb47ded832eba9afa75ff4daf3934e680948be70988c0f4ec0a0987fc4c14f98bcfb39d2be2ae7fea31e15a5911f925154d19f9fb9ce735550b1aa3d90abdb0362caafcaf6710f21f2e374b42bbe407ae0e07883cf5ce092beb13ce226812adecbc311ee2f129debe3b206f59e006cc7048c08c88569861b18f367e41793e29f47e8dc90d29e2444fd9b99c1ba093006fa0fc7483c33532aee8bcc84624e3b6de76762e04a7537c787e4557d98a5e7b1078eb3ff7fdfe56a0a0f2c05cf56b822af0ecf0d705d55b0e73affcd9927c1150c083d0765413630bfbaf7fc64d0cf7d2704c3b6448226d54d1e88ba925fb53b14a0ca2ad2af168069faef30dbf109b81d127152fe47d4e2110cb8f02d615a80b9aa02827b69c70d1b48c474059308d3a76bbc499220c033e103dcd5a45665630355e42800f26e998d069fc419d923500b8ffd33113da881ee5ffcb57d54980562ac4ea5ef4b6b7624da9073d6b44fbaf64679c622052d01f4e40cbc407e8a3c839f495dadd8af1ca1da1b4102d6780ef185cf3710d25cb0715e47de19612fa7ca993e4acc6de6089e37e7ef1cc71e33998502388f2db32a17ef8f1d8cdae95930ea8f5ab928d750968407a9e12a446fd0287080ab0b523b3f538558deee29bd005ddcdcd1fd3a8b98a1e4b24ad8d7e6593ee91a36ef69ae5913e1b114a1821ef5b77458a927d5f934e365aa44b1239d9af96a8459ce5ea0c281d9ca803056c78ec5b56ab3df0b02cc1eba59e4f7f99cb6fc2b917b389f3c44a414e9bb3ad98dc361d5a0f55d5c38cb9984880e0e051785f773772228a81217014084e1997d006a72f9865f99ad4580412668e47bf2534c4185809098fa12d519b58406251d5903b4b612523154eea28d63d07e8f174737bd72088794d6533bb67fad609427cde0912588058328ad621c9bd789f4659172796435bcdb8ed9eb13eb13ae5d42ff131109d1956fbf71db54d2b59fb7b9b41c41d8bf6c5714ba039d7aa5aa4df249fcd8f1f6e931266b2ea7379cecc18d71a6dceeae7af642382631629ebc7bdfd2f52186254d8a1a583a259744ff4f0e69855898bfcde0ee5cdd8a61fd4f2c632b2b4ef9ea633e3868afef87a920385206d65ed225c80990f33dcbeb5381a50d06a4f30490d2b1695ff63ba179b98bb8009186181a231c33a956535416e8c44a19b75021462639a9120d06311b76ea519a13dbc4f8cd337cbf52383153c93efcacfd4ec301ea58a6155a998eba170ff8c5c5bffe4932136535f17e630827e3f31a9d1ce672fbf62d645adb7a998784e5335cddc437c6ad05160c5fd2182b21f9c83ec01e53812752b3b47b86c2c7fe1738458cd82bd6c271b455e71112332af33c54669f85971b73b5951fde7c7b235be3cecb0f01c846e298ca758550fe1c68580ae527bb1c61fee1700e217f66dbae7857f75a155301b43247c943231ee8a83f5315b251e7a53185e0e4344228939c33549ccea5f5b67978bc354865974af65264b23aa42303942894217d362c598b66448d0e3a803c60c273d8edb51a3ca9adb806dfc141f815688dbbfd99c70c62e51322d47a1485d96c93e7d1b14bccb2e05fc94678d8d83548dd0d92154ac3dbb2a829e03e398a94eaba6f824af5f09cbb269b60f4a78f4c30cf750771172dfb79111193089ba30944669a5f5b3304844fa5566324d074f3855732c7b6941d754509c441afec7b3927cd69ff8de8e5581aecfc9e2b5d2ab01341b9b88fa24b722af9c66e271a6e6eae6c14cc3f11a3f03b74f4541584f0f344b4664c0f4463aedad26e1be397ab3aeaf45b21d0dca8dac18a61c9ef8413738f861a7fe2dad89dc5812cd41ea9fc6034235b8ade8f1bdd980c4592b8d71c22a81ff3d1352725bb9c2f5261b49b653bbb5af7bf3ab20b2b8188cab35bc49b949ae70a1cec0529a62f0650c5aca23055f3f2efb94dc52b378e330d0c38b94dee895b1b90f2ea9ed3883f32ef0e8168cc7313c96113ba58ca7fa6adbab2f0a3ea8a265ce83cd5adf12e413eb58310da39a283238bf0356146b3c93357b94145b5174b97b6d646859e982b6a4e31574c3346be898690f590c97394cdc52c07929194c15b23169ce0aa1ddaeb46d13ec260a292a4c2e07396650f47df39691e47d3c889e6ae53c3f6d64d19392b1bc3890700a3867e78313e2ced9bf1c29c0ae95eef667a1ee9cef4e0204e628d9fb1f6c7c977982cb30dce14f12b21b26b3a1cb1f55302d70601ebfeac641c465bfeb9b4ec1da544d0528f7ec581560e7d169a47abc97c76261560838378e2e0065d78cddc642b2e3bd5ad69f944b8a2ad52d3b636d82731e2e0615f8c2a02b202ef33c5aabea480283ce0f0373b7ad612111691609491008d6d46be0e0db4e83bef51655d63141203797f5ba93420fff67b2643c75e81bc53fc97465ad59ead6c3f1bb249fe1d4902a3f966fe6171e2260a8d951153509ed054d043729c750cffb69c7d4c0344a51907389cd1b83adfed618af32f179a16d90d6e0f7720dae7d50d288c3962e942e15847467ca37d5dfc8fb60f5f336a3d1395a78435b2dca0ae1744112c58650806ce260fcd1ced8deaca620a08822f27cffe7ff90eb89a48ccdaa9cb1d0a2041e8aaf22773a0b831cb4cf2fe69526ab58934016a50349c3aa52950843b07ea4c53ceef220de442d1651ad00854f6e40e09137372ea2618d74ba9b308d9916205c1fdbefa6cd1bdbb8a1f11dbe49e90d9a74ef77d1f899d2f71784dd1eb5754cbb29898c747d9c010add683ec4c678001172d1fae61fafacda227d01936b618ce817f33267a68e2d767b92da40e648f0f34a07681a5315080648fd600a8dab56459281e50e9205727fda2a027a4a8ec817bc6f866de0f6dbdefc89a2d7752a38a4b3b5421d9aa7894291bc33fd8d018bf8967f7e071e6f2aeb548c3fdcde8b9fb33a35f1a19037708a840a9d9d3877c7ca4e77844e9b863bfcbad2a049cac450f9a65648e40edf2046714ad715404b97404de813f40adcbd4f55554f3a2f0d1e3e6c760ee0542f639448f8840eab626d31b47af10716f71e1835be1997fec23971bd728659e0bd88312685ba85bdb686907acfc6a5e881819ba44d4fef88ae2602c37ccbdff76981b450bbff89b67ce7ae0131c1b4029b9c76d26a45f517795bbd7c59618f21a9ca82075dd07f25de7fbafe3debf507d1ae5c69a7fd862b2e5b84c1590adbd1f0863917b20379539db42d19fe72d5d9e0892164e07fe8ab8bbeffafa22a29bff0f6439160b628cf80ef786e382aef67858e5d344cd0d3ef51a1a6282cdf541e2c919b942ded4511d878a5004e7d2b78e0f77bf44bef5dd172d9584dd8449fc2397502056a0591c37c21e1d0875dbaf1ad5c81190a0e7d43e479acc4b25fde3bd0bc764ac64b4260d2de4788d4c96a0e2e2a55089a1b49850be2da242567c2c5efd5cace565e91caf13f2969ad0361e3854a45ebb3379b37b1c5013f9d4700b17bae366ac423d50633f6c952da21df19cb03d449690fb0085b42149d0352a0082fb1ee13e2ef85635869ecf4a38813e0af2e751d37db7985562a9f86edd4b910e39a504d7756376f28c8d064492b0375a4e7adbdf4c0c8ee9058ddb69662f061eaeb5689a3b54660ab9d31c19a9849c96cdb18b0a2f4218a4c79076ba09fd17d94fbf9f01e8db71cd054ebbd803732692622ea88f4386af0682e0b36f54d0f20eb60c19606b629ec998a85c7d4362596ae08719bb8417acbfc20e5a71294e8628aeffe3d5cf79b7edfdd002c32b96e4d66cc01027a9329cdf086188d8a8659918eb8be6f963743b15cd62141a863f35901ec909d7e9029661bfad58fa291124103dbcb80b2c887d6cf0202f9439141ed6ecaf38ba9fe52d22462634f51ba85fe8d5f5cdccd67ab22659cf68f9e0a69a71647e79c3d7aee479cca176f8afd68c178e0450ac7cd99200be6a55f5d83cd3a928f3e9d8d56eee5953b8c5d3019227cf7594869bd8e7745d64e6a0f885a758c0e61cdb0cfa8cccfcc69098b3329c9f393eed276911229f009f7773557a5a7a32be165a1ed94b8e578551634c86c1932ff5f4a9c9c6d8c08a49537f9b9cb26ffaa0cd5b215ef51a59b892a37e20df6169ce199d251d1010bab649f2dc2020c6de0d8243b1e20d6fd2086052d0b86d79aeef2503eefcfa50246a59656fab5ff4a98faacfa4ef408c68aa514098648363cce13e1faa3105395980dcb6cdd6d92bf9d84f4c59f201c6c407bc6c54921cd2299e505b9d6ec6f25b07bfb4808cbc8b428e267f6f806ecb7053fb11bf750d0597ce1063dfadf35df86c633b472ecd0fe1bbedbf83252f55af51d2632965e4548e8d8ea02b1626d22ec6e8e667f1f32fd70db92a1697d86d287eaeb6d622852954dec85a090550c1529a96dad03471a7912190c1a420a97702a998e551a00b69b3d7c3edd082503e1ae48c95f6fcbe1be2a9d1d3f6d555c2c51825bce6caa3d11db009679675c400d32cd5ab4c02bc762e1a5a24cd6735b5d74a2c03fcda37f9169eac832c8c54db7420c3385643df00dbdc98b44675ab01d2041dc8ba409d6daab6a90b3b078d09241106cf83fbbeed4454fafaa4c2ddc5fc68da4ee01c5c01daf8bc241cd3aaefc495097f98eb76f23eeaaf7705cf0ba6fabc90985ce626d476cd7420e2e3bc8498d3681698ffab9e2360d8e84ce143551da5c55d655853de4c9e74f8ec0ba39c45d081679c3e83ba403ec648401043491854fade011050db04cddb86009149ffc7f7e7a7977dbcf78dd2588b32b8e9ca8ef3118e8aa7c0883696713d3d7eb3aa366cfe8dbe8e74b591a7c09cc33e70aa91d3aa609788248d90762f6dacde49b226acb91d418d2363b73a8b16622242c1c664c588dee9a1f5b41c41c335ef0735554fbe827e575569b82cf8cb5d771bac61c6840fbf17d70ef6d085617b1e36364b2583b8656caf980e7811ca693021e7c2b7b485ef635c27bc5ef12017b4d2987b455ab76e00e33a0f5d3c6d0729427df724e8d9380664"}, {0x30, 0x0, 0x8, "2f1054220043bbdbcf63219d19102370252eea13017b1b62777f6280821952"}, {0x100, 0x108, 0x2b, "eaceebeed268a3013dd6f9b911ad59919963b706039e51d8087b6abe9b936a2b4c4a066f5cb953c209a61da58254019e3537382615e137f12f58bd58b6a2442356f4636dd363fb08cf28f2a2e302422047ecb2ea119e707ab912518ab7fb9b4aa04584854b7231d5638f40c7b777427f95951bb2e4945b5d3f95bc4f90331645dd34102269c009407c1ac84daeb53691ed5c7a0cfbb29d53e6369670f1f2a9b2abe5a73324c4bd41cb6c2ec6a5e3c45d465f97f5e73fe2aff12e70629cc63a2144ab7a77871d9a91855f934727c3fc8562b6e7889b0432c29bf8c80fb6c49502fc0b81d6d7308ad75b8b4f7449fa11"}, {0xf0, 0x110, 0x8, "fc4f70e16982093ecd4818e0a7402e31f51497630187acd98b421682be874d6aaae2a8495791a5faf9d9bce168fa5b05b69dbb5d3f1d180640017b1834131f01f1332d1ddc40e02985850d2cd8209d2c953635ba97fc3908a6cc7a5c2445f7171705b0483caf90405f4673c006a196dd96fdad81d6c170ac4f9808089f33c3adfe5be170646190921161de4c2f2ec3f3f58dbbd9a1a6c843a6b49e8782197c7b3387fd4f95b011360340b91b43ff060918337d6f6c67765d2441096988fdf6342af36b59bb22a166bcc976d0a1d74d84126a187cfa0dfdbf45499b0bc74d057d"}, {0x98, 0x1, 0xba, "1b6497899d76de7bf29e963f52b00018de07bd5847093b4df303300bc42fe734505a818307a8088e23f7a56df507d42e42ca83eff85ad92041ea29a28ea784dab7ad8f83c0f9a12bc7aee60eb326d1873ee01507667c21cb1c57f427fc1087dc945349564c16b7e68349f07938fe96d796094184ef4cebbaa9fb5961c404bd9a74d9"}, {0xe0, 0x11, 0x3, "50bc82e1c730e313d5bbe687b9dc26958eb386a67c9f52f2bd527de1b3203c60f633fef85c529ee822e0a1bc54bd0840c2093521a0d53419512ee39082d3355eee9f2b870731d26fad1a705369257824b6b5db6c208e00948502fbe6c479bd35d0e715c1d7103407d7d573bf9aa08f5184e47fd343ed63e6b564b8c5a922f41f1be9207ce68838fb85a546066e9481998273f8eccbc8185cc9c2c34d9f7dba2ca60ed02c39d5a5f3b5dc0b98cfebaf1caf759c6a4af5af174b55996fdc907b5cb8d4846bbf96149862ae"}, {0x100, 0x3a, 0x7fffffff, "964b9954d99cd79a8aaedfc4b50314653445a5bdf821698c87bdc151de3e18c53a379987afed4256d4e4a4db877b22c243c2723ca7b7f95c378ca30c9debdc23359ab1901825a4d2e3669609cbbaba9ca14426eb6f5a22944ac2e5035fd618f97f331f579a38b88ec5af0c3c66596698ed4c1e01762040121494a4615f31289e0f686d5a9b4715d9d2c8bcbfbd7a9fe43bfeef66736048550ccf96af3345f09a042a9592ae156662e33606236b01ecc069976eb2b34d76ba58f760d505637ced92502e0215b26ee5f1a5da8bdc80e9c1fc424f341c7f7041e477f61ddf7104865ab85dce5906a5ccaaf4664b80"}], 0x14a8}, 0x20000800) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000280)={r8, 0xeb2}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000002ac0)={r8, 0x3}, 0x8) r9 = socket$kcm(0x2, 0x8, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb08004500001878cebaf5dac1fffe0000a02f90017fb10001e01000012001"], 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$tun(0xffffffffffffff9c, &(0x7f0000002b80), 0x4400, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c00000003"], 0x7c}}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000480)="b7028d7a89a1a9e34b7acba3d9bff1ab77e1", 0x12}], 0x1) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1300000056000100000000000000000007"], 0x18}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r10, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) 830.727302ms ago: executing program 5 (id=3924): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x700, 0x20, 0x81, 0x6, {{0x1a, 0x4, 0x2, 0xd, 0x68, 0x66, 0xf4, 0x1, 0x29, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x7, 0x9d, [@multicast1]}, @rr={0x7, 0x3b, 0x7, [@local, @empty, @local, @private=0xa010101, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x29}, @empty, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast1]}, @generic={0x86, 0x10, "8c04a2baecf7a68d9bfb1a0de38d"}]}}}}}) sendmmsg(r1, &(0x7f0000000540)=[{{&(0x7f0000000140)=@xdp={0x2c, 0xd, r2, 0x30}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)="d12e995e59d857b4c3719c6e89a150c1acb6988a14ad35fdce280b28e540ac84f18301fd33a3ac7c51577dc8b82f6d9f4c9855eab1454179f1c52480607faddbfb47868d225fd78cce4c0fea572b1f88e8e8284d4ad5a29eec8e43fba081b9c746c4acd96d8e1a0e03b34768aecb88443ef965f5c609a8e5398f5833daf65c3cddb4c1ebf74be235714b3e27cb6bd5e9ab05ce1bd437863ac95584385c09c22f83c6430056fc1a7e09e542154d517c45113a705bd055a95f6fd495dbcb3cb68631da80fbd7a7873ad84f98b4684673971e65a3768d65f6ca87296bb7fb68bf0153040b5df6cdb6df3632462d3a11f06b430a438546d832", 0xf7}, {&(0x7f00000002c0)="e6899a9f6805e8fd30e3a3d5d36adb2c3d094530c89e0f3464950e72431cc4ee8d9dd9f3324e4f44cab4b620afbd920fb55c17a97ce56d41e140cf51343e1a717f0230aa4ac8ff09d10b", 0x4a}, {&(0x7f0000000340)="58ee3a677ea74832db906db26f7e418aaedf8c9a34dbf7f85fbe12a063360cae94b46ce2b5d03f287457", 0x2a}, {&(0x7f0000000380)="f82e27dc8b16f216803738401fcc493b20366ad83482f2fd8be5a641235b2089", 0x20}, {&(0x7f00000003c0)="28aeeff95e227a8bbd5cd8bdaa7e10ae463f52abb7e82dff0be73767631fca16c43fd0aca78a0eb6873d5d101459416dc8e42b5260c0a3a2cb966fbf6da0a1e6a3978d807a83b05500d9f81622c6ec0bbf506124923d80608c7dbb43257a44ccc30eb72218cf1bce3040f2f75fd4b9152150b7810b94ebb3878f8a0573efa104a0e79384a9ca1acf286c3ce9cbe9cd96b63ac56763ddc803760f90443586dec16eb12a4bff809bfe1b4d9bcee6e28a3e2ce5a70d7b1c3d8dd8ddcc92de67b897411bb528792c803f030a2acb0b48d5f54e207bfa24d62bb8a416569db4116c097dbcbf95c8f57cc31af759b02dc3a4aa793308", 0xf3}], 0x5}}], 0x1, 0x8810) 680.751801ms ago: executing program 0 (id=3925): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000c}, 0x40004) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 32) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x52f8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x17, 0xa, 'cgroup.controllers\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000840) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x20) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r4, 0x34da2000) 653.234884ms ago: executing program 5 (id=3926): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, &(0x7f0000000140)) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r3 = socket(0xa, 0x3, 0x3a) getsockopt$nfc_llcp(r3, 0x3a, 0x1, 0x0, 0x20000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00B\x00'], 0xfe33) recvmsg(0xffffffffffffffff, 0x0, 0x40000020) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r9], 0x20}}, 0x8080) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r5, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r7], 0x34}}, 0x4008000) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 587.71067ms ago: executing program 0 (id=3927): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast2}}) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff}) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="59bbeb5cb9c8782b0dd1574e34", @ANYRES16=0x0, @ANYBLOB="000422bd7000fd5bdf25010000000000000001410000001800170000000b000010007564703a73797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x84) (async) sendmsg$AUDIT_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x4, 0x7, 0x0, r2, 0xfffffffb, 0xf56, 0x6c, 0x6, 0x0, 0x3, 0x7}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x51}, 0x24000000) (async) socket$nl_route(0x10, 0x3, 0x0) 477.36623ms ago: executing program 0 (id=3928): write(0xffffffffffffffff, &(0x7f0000000340)="0a000300010000", 0x7) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0x800, 0x200003, 0xfffffffd, {0x60, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240400d0}, 0x20040850) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000500000000000000b64f7110b5000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$tun(r1, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"/4199], 0x1001) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x541b, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000063119d000000000007000000200000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r0}, 0x94) 475.420398ms ago: executing program 4 (id=3929): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x8a, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x1, 0x0, 0x0, 0x0, {[@generic={0x2, 0x12, "25a31641bba628b7daf641a6958cd749"}, @exp_fastopen={0xfe, 0x13, 0xf989, "e895eefe1935234b314d142257be74"}, @exp_fastopen={0xfe, 0x6, 0xf989, "c20d"}, @md5sig={0x13, 0x12, "15a7d9fa6b6f80fffa3afbf87ff8e812"}]}}}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r3}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x80}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x4, 0x310, 0xffffffff, 0x0, 0xb8, 0xb8, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ip={@remote, @local, 0xff000000, 0xffffffff, 'sit0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x1d, 0x0, 0x65}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'macsec0\x00', {0xff}}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x1, 0x3, 0x1, 0x4], 0x6, 0x7}, {0x0, [0x7, 0x0, 0x4, 0x7, 0x2], 0x0, 0x4}}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x228, 0x18}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xbbc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1e8, 0x7, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x14c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x13}]}}}, {0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x9c}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_COMPAT={0x4}, @NFTA_RULE_USERDATA={0x83, 0x7, 0x1, 0x0, "4afc903cdde6d80ab4e58c979ae047b4e7c2fb3bd47e66322a80f10915c797b221f0ba4f11623d89be020088e32cfed3614f90ba18f2f4a9e8d657f10b5859d17b2811df07d65fcb6e5b56f5ba37a5eabb27f4002c48983444c91b8f625c5ec323c04ad17904ece3410de31f5ad2abbbd98acece1b21c378b297b4a4345340"}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000100000a0900010073797a300000000048000000090a010100000000000000000100000808000a40000000000900020073797a32000000000900010073797a300000000008000540000000020c000b4000000000000009212c0000000e0a01080000000000000000010000000900020073797a32000000000900010073797a30"], 0xbc}, 0x1, 0x0, 0x0, 0x801}, 0x0) 384.296835ms ago: executing program 4 (id=3930): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) (rerun: 64) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000024c0)=""/4106, 0x100a}], 0x1, 0x1, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b040000000000000000020000055000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c080003400000001710000180080001006e617400040002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ab14f7bdad670f5a827b9eeeb027801bff50c6b6ea6ecc0c2000bee20c21d"], 0xa4}, 0x1, 0x0, 0x0, 0x850}, 0x0) 383.667659ms ago: executing program 0 (id=3931): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)={{0x11, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x1058, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x102c, 0x4, 0x0, 0x1, [{0x1028, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1014, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1008, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}}], {0x14}}, 0x10a0}}, 0x8800) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x16, 0x100, 0x0, 0x0, {0x82}}, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x854) 365.565942ms ago: executing program 5 (id=3932): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffff01000000000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffdcff0000000000000000000000000000000000030000000000000000000000000000883bc00608d9ff7189ac35de90b3862c74f113eba01e6fa51f8a5029acbd4573a52361697ff3d6"], 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="cc0000002100010027bd7000fefffffffc020000000000000000000000000000fc020000000000000000000000000001dffc0000000000000a00e00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fe800000000000000000000000000011ac1414aa000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a002c0013"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) 301.221208ms ago: executing program 0 (id=3933): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r0, 0x8929, &(0x7f0000000440)="8d557fd094c38f748ec33512ef3a") r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x33bcafe04cda2078, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x31}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 232.738321ms ago: executing program 5 (id=3934): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x10) r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@nl, &(0x7f00000000c0)=0x80, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0xf4, 0x7, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x9e, 0x7, 0x1, 0x0, "dd45cf5d195f6b91f876d29baaad6c97ed5fc082102ed9e4e9e6a0f3c0823466b13f2afa2af829cfb1fc9d785febbef0452df35f77269381522e4ded67e8c47fbb9566b77365201ac7a783353b8563f70dfe0963894da214415e81b9375d5bfaf934fd8dfef1dad2d2ce0b1954ff663ae343f42585295762e81fc2039a31a3b7d434b04c1cfc85177838b4cd920357d226c2b9ddd604eb4c8fbe"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0xf4}, 0x1, 0x0, 0x0, 0x800}, 0x1) (async) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0xf4, 0x7, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x9e, 0x7, 0x1, 0x0, "dd45cf5d195f6b91f876d29baaad6c97ed5fc082102ed9e4e9e6a0f3c0823466b13f2afa2af829cfb1fc9d785febbef0452df35f77269381522e4ded67e8c47fbb9566b77365201ac7a783353b8563f70dfe0963894da214415e81b9375d5bfaf934fd8dfef1dad2d2ce0b1954ff663ae343f42585295762e81fc2039a31a3b7d434b04c1cfc85177838b4cd920357d226c2b9ddd604eb4c8fbe"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0xf4}, 0x1, 0x0, 0x0, 0x800}, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000) sendmsg$inet(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="a9030000000012000000", 0xfff7}], 0x1}, 0x4000841) (async) sendmsg$inet(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="a9030000000012000000", 0xfff7}], 0x1}, 0x4000841) 180.110172ms ago: executing program 5 (id=3935): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x288, 0x1398, 0x1398, 0x288, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [], [0x0, 0x0, 0xff000000, 0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10, 0x61}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x16, 0x3f, 0x1, 0xe, 0x7d, 0x376d, 0x8}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x62b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r4, 0x107, 0x15, 0x0, &(0x7f0000001040)) setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f00000001c0)=0x7f00, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@getlink={0x28, 0x12, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4043, 0x8000}, [@IFLA_EXT_MASK={0x8}]}, 0x28}}, 0x40000) 88.71014ms ago: executing program 4 (id=3936): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000007"], 0x64}}, 0x0) 16.713836ms ago: executing program 5 (id=3937): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r2}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r4}}, 0x40) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) (async) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r10, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async) readv(r10, &(0x7f0000004680)=[{&(0x7f0000003380)=""/85, 0x55}], 0x1) (async) r11 = syz_open_procfs$namespace(r7, &(0x7f0000001780)='ns/ipc\x00') (async) r12 = getpid() sendmmsg$unix(r6, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1c00000000eb28579500000002000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r11, @ANYRES32], 0x58, 0x800}}], 0x2, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000440)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc, &(0x7f0000000340)=[{&(0x7f0000000140)={0x1e0, 0x42, 0x2, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0x56, 0x0, 0x0, @u32=0x9}, @generic="e89cc12d9fc5fc91a82046710291bffd53b1e41dd26162c55817b5278d5e75c5aeee2de7e79c822214f822bbc41fcf0826520c17e5c273df50804c14692bad7fb7ac4cf0bf4faa3e2957c17cf438475b1be7c2ba2ac9938df63d43c0d44c37d3e331fe02c26b5187d3242ef1e547866fec04a231bef5a46f2fd0245d07854b42db622beb5a41f7f00f200d2dbf8ece5ecf3540bd73e1e2860f51a5", @generic="9db0df8a82701f35be537f29b7a75f987f24ebedb0385f950906ffb73237f0b71d06855331fdf0c292851fd5d7c8a9e16b25647dc362ef23e07c1c2f326add3ef536e6b91fdba911ea5be8549fb0e803039b3cf45620dd057fbc350f32328bcc3c0dff2cf70e1494c2e6ce4d129546a0b72a4891173129148d44cb17f3491a4be5a4e50f6f999fcc79043005b80355d24f4d2aa27adb02d694a8a6f2b4b129f9ffa34dfcb9848b6b7842891ac50895adb60a3401bf", @typed={0x8, 0x32, 0x0, 0x0, @ipv4=@broadcast}, @generic="3375c1da84197de396984fea4e3d4b00e44a5e096d8d2694f232", @generic="47e4080e329a28f6a40fc141343e00c64f46664b5aea7464c58c255c9d8f112df292a8c4ba851a6fe6881749e5408649aa39a0d79506317f628f7039e928be1438", @typed={0x6, 0xa1, 0x0, 0x0, @str=':\x00'}, @typed={0xc, 0x1d, 0x0, 0x0, @u64=0xc7}]}, 0x1e0}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r9}}}], 0x20, 0x40}, 0x24048894) r13 = socket$kcm(0x10, 0x2, 0x0) (async) r14 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001e14010000000000000000000900020073797a30000000000800410072786500140033"], 0x38}}, 0x100) (async) sendmsg$kcm(r13, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0001000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 16.272218ms ago: executing program 0 (id=3938): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x28) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x20008800) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, 0x0, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x3c}}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x0, 0xfe, 0x2, 0x20000000}, [@RTA_OIF={0x8, 0x4, r7}, @RTA_PREFSRC={0x8, 0x7, @private=0xa010102}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'erspan0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x10, 0x7, 0x0, 0x5, {{0x16, 0x4, 0x3, 0x6, 0x58, 0x64, 0x0, 0x2, 0x2f, 0x0, @local, @rand_addr=0x64010100, {[@rr={0x7, 0x1f, 0x87, [@loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010100, @loopback, @remote]}, @timestamp_prespec={0x44, 0x24, 0x82, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x17}, 0xc}, {@empty, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@local, 0x2f}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x700, 0x7, 0x2c6c, 0x1ff, {{0x2a, 0x4, 0x0, 0x5, 0xa8, 0x64, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x89, 0x2}, @noop, @timestamp={0x44, 0x8, 0x5f, 0x0, 0xa, [0x0]}, @generic={0x7, 0xb, "21d5a506d4f98f9249"}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0xae, 0x0, 0x9, [0x7ff, 0x3ff, 0x5]}, @generic={0x44, 0x7, "dc8dc9cdc8"}, @timestamp_prespec={0x44, 0x4c, 0xdf, 0x3, 0x9, [{@multicast2, 0x10}, {@local, 0x8}, {@multicast2, 0x800}, {@local}, {@broadcast, 0x3}, {@multicast1}, {@loopback, 0x4}, {@multicast2, 0x3}, {@loopback, 0x7}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0x6a, [@multicast2, @rand_addr=0x4, @multicast1, @multicast2]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@RTM_NEWMDB={0x58, 0x54, 0x200, 0x70bd2b, 0x25dfdbfb, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x5, 0x1, {@in6_addr=@mcast1, 0xc9b3}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x2, 0x4, {@in6_addr=@rand_addr=' \x01\x00', 0x86dd}}}]}, 0x58}}, 0x4048001) 0s ago: executing program 1 (id=3939): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$rds(r0, 0x0, 0x40800) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) kernel console output (not intermixed with test programs): : Device vlan0 failed to change mtu [ 287.267421][T14343] netlink: 'syz.4.2373': attribute type 10 has an invalid length. [ 287.678912][T14371] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 287.714548][T14371] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 288.030262][T14387] netlink: 'syz.4.2383': attribute type 30 has an invalid length. [ 288.249533][ T5294] veth0_macvtap: left promiscuous mode [ 288.772277][T14415] lo speed is unknown, defaulting to 1000 [ 288.866315][T14430] openvswitch: netlink: IPv6 tunnel dst address is zero [ 289.416784][T14463] virt_wifi0: entered promiscuous mode [ 289.439234][T14463] virt_wifi0: entered allmulticast mode [ 289.786285][T14479] __nla_validate_parse: 5 callbacks suppressed [ 289.786305][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2408'. [ 289.835485][T14479] netlink: 'syz.2.2408': attribute type 5 has an invalid length. [ 289.853048][T14479] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2408'. [ 289.985274][T14479] geneve0: entered promiscuous mode [ 289.990788][T14479] geneve0: entered allmulticast mode [ 290.014946][ T6346] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 290.045773][ T6346] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 290.066516][ T6346] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 290.091881][ T6346] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 290.166144][T14498] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2411'. [ 290.608939][T14528] Cannot find map_set index 135 as target [ 290.671071][T14533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2419'. [ 290.680174][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2419'. [ 290.701259][T14530] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.161624][T14500] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 293.374745][T14558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2421'. [ 293.430384][T14547] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2421'. [ 293.590124][T14570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2425'. [ 293.687275][T14573] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2426'. [ 293.731171][T14577] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2426'. [ 294.885984][T14604] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 295.282488][T14661] sctp: [Deprecated]: syz.4.2449 (pid 14661) Use of int in max_burst socket option deprecated. [ 295.282488][T14661] Use struct sctp_assoc_value instead [ 295.440622][T14672] __nla_validate_parse: 2 callbacks suppressed [ 295.440640][T14672] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2452'. [ 295.477081][T14670] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2452'. [ 295.506868][T14670] netlink: Unknown conntrack attr (0) [ 295.516544][T14672] netlink: Unknown conntrack attr (0) [ 295.614699][T14683] netlink: 'syz.0.2456': attribute type 1 has an invalid length. [ 295.682151][T14684] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2456'. [ 295.885418][T14699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2460'. [ 296.029116][T14703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2461'. [ 296.081226][ T9168] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.104726][ T9168] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.116411][T14703] bridge0: port 3(syz_tun) entered blocking state [ 296.123119][T14703] bridge0: port 3(syz_tun) entered disabled state [ 296.130114][T14703] syz_tun: entered allmulticast mode [ 296.136829][T14703] syz_tun: entered promiscuous mode [ 296.146802][ T9168] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.163449][ T9168] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.228248][T14718] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2465'. [ 296.332862][T14723] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2466'. [ 296.347726][T14723] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2466'. [ 296.361586][T14723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2466'. [ 296.384916][T14725] syzkaller0: entered promiscuous mode [ 296.390535][T14725] syzkaller0: entered allmulticast mode [ 296.650736][T14743] bridge0: port 2(ipvlan2) entered blocking state [ 296.667070][T14743] bridge0: port 2(ipvlan2) entered disabled state [ 296.675058][T14743] ipvlan2: entered allmulticast mode [ 296.680586][T14743] bridge0: entered allmulticast mode [ 296.692310][T14743] ipvlan2: left allmulticast mode [ 296.698397][T14743] bridge0: left allmulticast mode [ 296.717579][T14745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2474'. [ 297.602155][ T5635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 297.620539][ T5635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 297.633045][ T5635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 297.642866][ T5635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 297.652873][ T5635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.275945][T14775] lo speed is unknown, defaulting to 1000 [ 298.965030][T14811] bridge0: port 3(team0) entered disabled state [ 298.971662][T14811] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.979102][T14811] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.229607][T14811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.257680][T14811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.276262][T14811] tipc: Resetting bearer [ 299.498519][T14811] ip6erspan0: left allmulticast mode [ 299.730652][T14811] bond1: left promiscuous mode [ 299.743886][ T5638] Bluetooth: hci5: command tx timeout [ 299.774906][T14811] gtp0: left promiscuous mode [ 299.780415][T14811] gtp0: left allmulticast mode [ 299.806637][T14811] bond3: left promiscuous mode [ 299.812463][T14811] bridge6: left allmulticast mode [ 299.851760][T14811] bond4: left promiscuous mode [ 299.865763][T14811] hsr1: left promiscuous mode [ 299.907419][T14811] geneve0: left promiscuous mode [ 299.913017][T14811] geneve0: left allmulticast mode [ 299.943597][ T6346] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.976515][ T6346] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.003991][ T6346] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 300.085255][ T6346] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.123287][ T6346] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.147020][ T6346] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 300.157907][ T6346] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.169037][ T6346] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.178212][ T6346] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 300.229951][ T6346] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.262154][ T6346] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.301838][ T6346] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 300.815980][T14775] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.823671][T14775] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.830989][T14775] bridge_slave_0: entered allmulticast mode [ 300.838228][T14775] bridge_slave_0: entered promiscuous mode [ 300.847028][T14775] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.854448][T14775] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.861686][T14775] bridge_slave_1: entered allmulticast mode [ 300.869133][T14775] bridge_slave_1: entered promiscuous mode [ 300.916244][T14775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.942678][T14775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.988644][T14775] team0: Port device team_slave_0 added [ 301.006451][T14775] team0: Port device team_slave_1 added [ 301.097630][T14775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.114782][T14775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.166685][T14877] netlink: 'syz.2.2513': attribute type 1 has an invalid length. [ 301.180481][T14775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.222093][T14775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.239025][T14775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.298382][T14775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.309777][T14883] __nla_validate_parse: 3 callbacks suppressed [ 301.309793][T14883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2516'. [ 301.391346][T14885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2514'. [ 301.546063][T14885] vlan2: entered promiscuous mode [ 301.558448][T14885] batadv0: entered promiscuous mode [ 301.628493][T14775] hsr_slave_0: entered promiscuous mode [ 301.644585][T14775] hsr_slave_1: entered promiscuous mode [ 301.651145][T14775] debugfs: 'hsr0' already exists in 'hsr' [ 301.667361][T14775] Cannot create hsr debugfs directory [ 301.678535][T14894] syzkaller0: entered promiscuous mode [ 301.689541][T14894] syzkaller0: entered allmulticast mode [ 301.834052][ T5638] Bluetooth: hci5: command tx timeout [ 302.084103][T14918] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2524'. [ 302.384992][T14775] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 302.433916][T14775] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 302.446939][T14775] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 302.464550][T14775] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 302.472571][T14775] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 302.485492][T14934] netlink: 'syz.1.2532': attribute type 10 has an invalid length. [ 302.498001][T14775] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 302.507420][T14775] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 302.519996][T14775] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 302.662854][T14775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.708957][T14775] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.746651][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.754010][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.800657][T10414] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.808007][T10414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.831738][T14953] netlink: 'syz.1.2538': attribute type 3 has an invalid length. [ 302.861569][T14952] bridge7: entered promiscuous mode [ 302.880631][T14952] bridge7: entered allmulticast mode [ 302.890383][T14952] team0: Port device bridge7 added [ 303.060260][T14963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2541'. [ 303.336825][T14978] netlink: 'syz.0.2545': attribute type 1 has an invalid length. [ 303.537009][T14994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2549'. [ 303.599472][T14775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.903764][ T5638] Bluetooth: hci5: command tx timeout [ 304.069044][T14775] veth0_vlan: entered promiscuous mode [ 304.085704][T14775] veth1_vlan: entered promiscuous mode [ 304.114735][T15022] x_tables: unsorted entry at hook 2 [ 304.152997][T14775] veth0_macvtap: entered promiscuous mode [ 304.169231][T14775] veth1_macvtap: entered promiscuous mode [ 304.205176][T15026] syzkaller1: entered promiscuous mode [ 304.210884][T15026] syzkaller1: entered allmulticast mode [ 304.225777][T14775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.263200][T14775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.279891][ T9157] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.289189][ T9157] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.300014][ T9157] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.327167][ T9157] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.580898][ T9156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.600127][T15041] netlink: 'syz.1.2561': attribute type 5 has an invalid length. [ 304.616359][ T9156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.657573][ T6346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.668379][ T6346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.679232][T15045] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2563'. [ 304.706109][T15045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2563'. [ 305.041086][T15060] xt_policy: too many policy elements [ 305.061676][T15063] netlink: 'syz.4.2568': attribute type 1 has an invalid length. [ 305.095911][T15063] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2568'. [ 305.133177][T15063] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2568'. [ 305.161248][T15063] netlink: 'syz.4.2568': attribute type 1 has an invalid length. [ 305.175874][T15063] netlink: 618 bytes leftover after parsing attributes in process `syz.4.2568'. [ 305.231188][T15066] syzkaller0: entered promiscuous mode [ 305.241225][T15066] syzkaller0: entered allmulticast mode [ 305.993408][ T5638] Bluetooth: hci5: command tx timeout [ 307.646601][T15082] lo: entered allmulticast mode [ 307.651717][T15082] lo: left allmulticast mode [ 307.709817][T15099] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2575'. [ 307.720807][T15100] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2575'. [ 307.753624][T15099] netlink: Conntrack attr has 4 unknown bytes [ 307.770471][T15100] netlink: Conntrack attr has 4 unknown bytes [ 307.793996][T15102] syz_tun: mtu less than device minimum [ 307.808604][T15102] sctp: [Deprecated]: syz.5.2576 (pid 15102) Use of int in maxseg socket option. [ 307.808604][T15102] Use struct sctp_assoc_value instead [ 307.956625][T15111] ip6tnl0: entered allmulticast mode [ 308.009910][T15115] vet: renamed from veth0_vlan [ 308.089604][T15117] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2580'. [ 308.202873][T15124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.235413][T15124] x_tables: unsorted underflow at hook 4 [ 308.264034][T15124] virt_wifi0: mtu less than device minimum [ 308.286458][T15128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2584'. [ 308.428817][T15139] ieee802154 phy0 wpan0: encryption failed: -22 [ 308.671996][T15156] bond0: (slave gre0): refused to change device type [ 308.697116][T15157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2590'. [ 308.740035][T15157] openvswitch: netlink: EtherType 50a is less than min 600 [ 309.001552][T15170] bridge_slave_0: left allmulticast mode [ 309.025803][T15170] bridge_slave_0: left promiscuous mode [ 309.047648][T15170] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.088160][T15170] bridge_slave_1: left allmulticast mode [ 309.119262][T15170] bridge_slave_1: left promiscuous mode [ 309.140744][T15170] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.184155][T15170] bond0: (slave bond_slave_0): Releasing backup interface [ 309.195274][T15181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2596'. [ 309.210857][T15170] bond0: (slave bond_slave_1): Releasing backup interface [ 309.225867][T15170] team0: Port device team_slave_0 removed [ 309.235554][T15170] team0: Port device team_slave_1 removed [ 309.247600][T15170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.257634][T15170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.267617][T15170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.275898][T15170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.286536][T15170] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 309.674565][T15205] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 309.681067][T15205] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 310.044831][T15220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2602'. [ 310.207967][T15237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2604'. [ 310.663026][T15258] bond14: entered promiscuous mode [ 312.968197][T15220] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 312.980086][T15227] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2603'. [ 313.159256][T15271] netlink: 'syz.5.2609': attribute type 12 has an invalid length. [ 313.204072][T15271] bond1: option primary_reselect: invalid value (255) [ 313.212991][T15271] bond1 (unregistering): Released all slaves [ 313.220311][T15277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2612'. [ 313.276949][T15266] bond8: entered promiscuous mode [ 313.282276][T15266] bond8: entered allmulticast mode [ 313.290298][T15266] 8021q: adding VLAN 0 to HW filter on device bond8 [ 313.297010][T15285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2611'. [ 313.391250][T15280] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 313.411870][T15280] bond0: (slave lo): Enslaving as an active interface with an up link [ 313.424115][T15280] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 313.459347][T14824] lo speed is unknown, defaulting to 1000 [ 313.470403][T11191] lo speed is unknown, defaulting to 1000 [ 313.498309][T11191] lo speed is unknown, defaulting to 1000 [ 313.547098][T15294] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 313.557435][T15294] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 313.571631][T15297] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 313.633922][T15294] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 313.644502][T15294] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 313.717992][T15294] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 313.754250][T15294] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 313.786745][T15302] smc: net device team0 applied user defined pnetid SYZ2 [ 313.795656][T15302] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 313.847870][T15294] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 313.858529][T15294] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 313.991193][T15308] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2618'. [ 314.006528][T10412] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 314.019356][T10412] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 314.061951][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 314.083456][ T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 314.110016][ T9168] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 314.127092][ T9168] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 314.193886][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 314.203319][ T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 314.324633][T15317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2621'. [ 314.369182][T15317] erspan0: entered promiscuous mode [ 314.440360][T15323] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2622'. [ 314.474754][T15323] netlink: 'syz.5.2622': attribute type 1 has an invalid length. [ 314.498933][T15323] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2622'. [ 314.568391][T15333] openvswitch: netlink: IP tunnel dst address not specified [ 314.865636][T15340] syzkaller0: entered promiscuous mode [ 314.871174][T15340] syzkaller0: entered allmulticast mode [ 314.906192][T15340] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2628'. [ 315.193989][T15360] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2634'. [ 315.827890][T15380] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2639'. [ 317.031991][ T5635] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 317.056867][ T5635] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 317.065254][ T5635] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 317.104487][ T5635] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 317.122273][ T5635] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 317.196425][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.260133][T15401] vlan2: entered allmulticast mode [ 318.267970][T15401] bond0: entered allmulticast mode [ 318.274010][T15401] bond_slave_1: entered allmulticast mode [ 318.407768][T15383] lo speed is unknown, defaulting to 1000 [ 318.557202][T15411] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2648'. [ 318.581505][T15411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.637833][T15411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.665064][T15417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2649'. [ 318.675022][T15411] bond0 (unregistering): Released all slaves [ 318.689855][T15417] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2649'. [ 318.927371][T15428] netlink: 'syz.1.2654': attribute type 1 has an invalid length. [ 319.189200][ T5638] Bluetooth: hci6: command tx timeout [ 319.239513][T15451] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2660'. [ 319.353727][T15453] netlink: 'syz.1.2662': attribute type 1 has an invalid length. [ 319.480269][T15461] netlink: 'syz.4.2663': attribute type 1 has an invalid length. [ 319.513734][T15466] netlink: 'syz.0.2664': attribute type 1 has an invalid length. [ 319.541039][T15467] netlink: 'syz.0.2664': attribute type 1 has an invalid length. [ 319.707833][T15475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2666'. [ 319.871622][T15383] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.896287][T15383] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.915320][T15383] bridge_slave_0: entered allmulticast mode [ 319.932911][T15383] bridge_slave_0: entered promiscuous mode [ 319.942979][T15383] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.951847][T15383] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.971418][T15383] bridge_slave_1: entered allmulticast mode [ 319.994696][T15383] bridge_slave_1: entered promiscuous mode [ 320.114363][T15383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.119116][T15499] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2670'. [ 320.162299][T15383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.180886][T15496] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2670'. [ 320.240200][T15383] team0: Port device team_slave_0 added [ 320.252572][T15383] team0: Port device team_slave_1 added [ 320.288703][T15383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.295867][T15383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.322583][T15383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.338025][T15383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.345282][T15383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.372577][T15383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.515852][T15383] hsr_slave_0: entered promiscuous mode [ 320.533496][T15383] hsr_slave_1: entered promiscuous mode [ 320.549456][T15383] debugfs: 'hsr0' already exists in 'hsr' [ 320.561408][T15383] Cannot create hsr debugfs directory [ 321.265087][ T5638] Bluetooth: hci6: command tx timeout [ 323.198412][T15503] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 323.252176][T15383] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 323.310844][T15383] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 323.346586][T15383] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 323.353565][ T5638] Bluetooth: hci6: command tx timeout [ 323.385753][T15549] netlink: 'syz.1.2678': attribute type 64 has an invalid length. [ 323.406395][T15551] netlink: 11562 bytes leftover after parsing attributes in process `syz.5.2680'. [ 323.435017][T15549] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2678'. [ 323.440082][T15383] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 323.464454][T15383] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 323.497761][T15383] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 323.539878][T15383] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 323.564244][T15383] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 323.804937][T15578] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2684'. [ 323.952721][T15383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.036298][T15383] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.078173][T15590] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 324.110180][T10414] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.117433][T10414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.188366][T10414] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.195643][T10414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.512101][T15616] bond3: entered allmulticast mode [ 324.529810][T15610] netlink: 'syz.5.2696': attribute type 1 has an invalid length. [ 324.559449][T15616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2697'. [ 324.602905][T15612] bond3: left allmulticast mode [ 325.092217][T15643] netlink: 'syz.4.2703': attribute type 1 has an invalid length. [ 325.204953][T15643] macvlan4: entered promiscuous mode [ 325.210339][T15643] macvlan4: entered allmulticast mode [ 325.217613][T15643] bond9: entered promiscuous mode [ 325.226319][T15643] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 325.268016][T15643] bond9: left promiscuous mode [ 325.423650][ T5638] Bluetooth: hci6: command tx timeout [ 325.488327][T15664] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2709'. [ 325.496820][T15383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.553121][T15669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2710'. [ 325.728755][T15672] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2711'. [ 326.001881][T15691] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2713'. [ 326.023476][T15700] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2716'. [ 326.103049][T15705] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 326.153043][T15683] syzkaller0: entered promiscuous mode [ 326.173598][T15683] syzkaller0: entered allmulticast mode [ 329.332708][T15383] veth0_vlan: entered promiscuous mode [ 329.365353][T15383] veth1_vlan: entered promiscuous mode [ 329.377852][T15747] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2726'. [ 329.609356][T15383] veth0_macvtap: entered promiscuous mode [ 329.720939][T15383] veth1_macvtap: entered promiscuous mode [ 329.727456][T15767] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.2731'. [ 329.755822][T15767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2731'. [ 329.830557][T15383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.911107][T15383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.977283][ T9168] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.993278][ T9168] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.001888][T15787] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 330.015025][ T9168] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.029060][ T5766] IPVS: starting estimator thread 0... [ 330.124389][T15790] IPVS: using max 36 ests per chain, 86400 per kthread [ 330.133028][T15783] bond12: entered promiscuous mode [ 330.156196][ T9168] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.239810][T15801] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2738'. [ 330.253003][T15785] bond13: entered promiscuous mode [ 330.531324][ T9156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.573858][ T9156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.591780][T15807] netlink: 404 bytes leftover after parsing attributes in process `syz.5.2740'. [ 330.610461][T15807] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2740'. [ 330.632489][T15807] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2740'. [ 330.671503][T15807] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2740'. [ 330.762972][ T9157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.774682][ T9157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.972715][T15825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2745'. [ 331.526856][T15856] netlink: 144 bytes leftover after parsing attributes in process `syz.6.2755'. [ 331.778063][T15865] netem: change failed [ 331.942544][T15870] netlink: 'syz.1.2758': attribute type 5 has an invalid length. [ 331.970854][T15874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.288787][ T5635] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 332.306597][ T5635] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 332.316252][ T5635] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 332.325484][ T5635] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 332.334562][ T5635] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 332.668704][T15898] netlink: 'syz.1.2764': attribute type 26 has an invalid length. [ 332.700894][T15898] netlink: 'syz.1.2764': attribute type 26 has an invalid length. [ 332.787173][T15898] openvswitch: netlink: VLAN attribute unexpected. [ 332.824811][T15898] netlink: 'syz.1.2764': attribute type 26 has an invalid length. [ 332.951386][T10412] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.009909][T10412] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.128181][T15898] netlink: 'syz.1.2764': attribute type 26 has an invalid length. [ 333.195749][T10412] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.230206][T10412] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.342396][T10412] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.401665][T10412] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.587587][T10412] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.614432][T10412] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.786532][T15864] lo speed is unknown, defaulting to 1000 [ 334.106071][T15961] macsec0: entered promiscuous mode [ 334.161567][T15961] macsec0: entered allmulticast mode [ 334.237122][T15965] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 334.255509][T15965] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 334.265829][T15965] macsec0: left promiscuous mode [ 334.270908][T15965] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 334.294889][T15965] macsec0: left allmulticast mode [ 334.300956][T15979] tipc: Failed to remove unknown binding: 66,0,0/0:4182955514/4182955515 [ 334.315214][T15965] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 334.326124][T15979] tipc: Failed to remove unknown binding: 66,0,0/0:4182955514/4182955515 [ 334.339539][T15965] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 334.391324][ T5635] Bluetooth: hci7: command tx timeout [ 334.393888][T15979] __nla_validate_parse: 7 callbacks suppressed [ 334.393906][T15979] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2777'. [ 334.587640][T15988] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2780'. [ 334.598205][T15989] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2780'. [ 334.617454][T15988] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2780'. [ 334.911481][T16003] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 334.919326][T16012] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2784'. [ 334.986637][T10412] bridge_slave_1: left promiscuous mode [ 335.027605][T10412] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.445955][T16041] xt_TCPMSS: Only works on TCP SYN packets [ 336.427706][T10412] bond1 (unregistering): Released all slaves [ 336.451523][T10412] bond2 (unregistering): Released all slaves [ 336.463546][ T5635] Bluetooth: hci7: command tx timeout [ 336.472956][T10412] bond3 (unregistering): Released all slaves [ 336.491519][T10412] bond4 (unregistering): Released all slaves [ 336.538172][T10412] bond5 (unregistering): Released all slaves [ 336.571087][T10412] bond6 (unregistering): Released all slaves [ 336.589251][T10412] bond7 (unregistering): Released all slaves [ 336.612839][T10412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.622356][T10412] bond_slave_1: left allmulticast mode [ 336.629828][T10412] bond0 (unregistering): Released all slaves [ 336.649109][T10412] bond8 (unregistering): Released all slaves [ 336.662645][T10412] bond9 (unregistering): Released all slaves [ 336.774865][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 336.945477][T16079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2796'. [ 336.993779][ C1] tc action pedit offset must be on 32 bit boundaries [ 337.002001][ C1] tc action pedit offset must be on 32 bit boundaries [ 337.008850][ C1] tc action pedit offset must be on 32 bit boundaries [ 337.015692][ C1] tc action pedit offset must be on 32 bit boundaries [ 337.022477][ C1] tc action pedit offset must be on 32 bit boundaries [ 337.029367][ C1] tc action pedit offset must be on 32 bit boundaries [ 337.036207][ C1] tc action pedit offset must be on 32 bit boundaries [ 337.043022][ C1] tc action pedit offset must be on 32 bit boundaries [ 337.049861][ C1] tc action pedit offset must be on 32 bit boundaries [ 337.056705][ C1] tc action pedit offset must be on 32 bit boundaries [ 337.063536][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 337.142869][T10412] : left promiscuous mode [ 337.312172][T10412] tipc: Disabling bearer [ 337.334491][T16095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2800'. [ 337.376732][T10412] tipc: Left network mode [ 337.744309][T16118] netlink: 'syz.0.2804': attribute type 2 has an invalid length. [ 337.752436][T16117] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2805'. [ 337.773719][T16118] netlink: 'syz.0.2804': attribute type 1 has an invalid length. [ 337.824190][T16117] netlink: 'syz.6.2805': attribute type 1 has an invalid length. [ 337.834944][T16117] netlink: 'syz.6.2805': attribute type 2 has an invalid length. [ 338.470206][T15864] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.484602][T15864] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.510953][T15864] bridge_slave_0: entered allmulticast mode [ 338.524407][T15864] bridge_slave_0: entered promiscuous mode [ 338.545381][ T5635] Bluetooth: hci7: command tx timeout [ 338.555257][T16150] xt_ecn: cannot match TCP bits for non-tcp packets [ 338.697238][T15864] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.730702][T15864] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.770335][T15864] bridge_slave_1: entered allmulticast mode [ 338.795180][T15864] bridge_slave_1: entered promiscuous mode [ 338.809341][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 338.931613][T16154] wireguard0: entered promiscuous mode [ 338.961666][T16154] wireguard0: entered allmulticast mode [ 339.194586][T15864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.240966][T15864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.436236][T15864] team0: Port device team_slave_0 added [ 339.465603][T15864] team0: Port device team_slave_1 added [ 339.847876][T15864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.876047][T15864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.973299][T15864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.008324][T16202] syzkaller1: entered allmulticast mode [ 340.073792][T15864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.086411][T15864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.133067][T15864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.147793][T16216] syzkaller1: left allmulticast mode [ 340.525479][T16221] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2826'. [ 340.582604][T16221] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2826'. [ 340.595845][T16221] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 340.623489][ T5635] Bluetooth: hci7: command tx timeout [ 340.700672][T16234] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 340.735135][T16234] bond0 (unregistering): Released all slaves [ 340.851406][T15864] hsr_slave_0: entered promiscuous mode [ 340.858744][T15864] hsr_slave_1: entered promiscuous mode [ 340.866936][T15864] debugfs: 'hsr0' already exists in 'hsr' [ 340.874022][T15864] Cannot create hsr debugfs directory [ 340.882447][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 340.920539][T10412] hsr_slave_0: left promiscuous mode [ 340.928109][T10412] hsr_slave_1: left promiscuous mode [ 340.934801][T10412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.942295][T10412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.956639][T10412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.966942][T10412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.004557][T10412] veth0_macvtap: left allmulticast mode [ 341.010280][T10412] veth0_to_batadv: left promiscuous mode [ 341.017918][T10412] veth1_vlan: left promiscuous mode [ 341.119514][T16249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2833'. [ 341.304638][T10412] team0 (unregistering): Port device vlan0 removed [ 341.385173][T10412] team0 (unregistering): Port device team_slave_1 removed [ 341.401720][T10412] team0 (unregistering): Port device team_slave_0 removed [ 341.519202][T16223] lo speed is unknown, defaulting to 1000 [ 341.619020][T16256] netlink: 'syz.0.2835': attribute type 10 has an invalid length. [ 342.164039][T16276] netlink: 'syz.5.2839': attribute type 1 has an invalid length. [ 342.220762][T16276] netlink: 9188 bytes leftover after parsing attributes in process `syz.5.2839'. [ 342.440406][T10412] IPVS: stop unused estimator thread 0... [ 342.599227][T16293] xt_TCPMSS: Only works on TCP SYN packets [ 343.082606][T16317] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2848'. [ 343.299868][T16322] vlan2: entered promiscuous mode [ 343.322784][T16322] geneve1: entered promiscuous mode [ 343.344926][T16322] vlan2: entered allmulticast mode [ 343.356696][T16322] geneve1: entered allmulticast mode [ 343.502027][T16339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2855'. [ 344.334555][T16377] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 344.524945][T16384] x_tables: duplicate entry at hook 3 [ 344.600858][T16382] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2867'. [ 344.690243][T16389] IPv6: addrconf: prefix option has invalid lifetime [ 344.709559][T11192] hid-generic 0005:0B57:0A0E.0001: item fetching failed at offset 0/1 [ 344.720846][T16389] atomic_op ffff888051bfe998 conn xmit_atomic 0000000000000000 [ 344.764316][T11192] hid-generic 0005:0B57:0A0E.0001: probe with driver hid-generic failed with error -22 [ 344.796307][T15864] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 344.845137][T15864] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 344.889272][T15864] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 344.952567][T15864] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 344.977898][T15864] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 345.070558][T15864] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 345.104753][T15864] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 345.169115][T16415] nft_compat: unsupported protocol 5 [ 345.172632][T15864] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 345.332361][T16435] syzkaller0: entered promiscuous mode [ 345.339016][T16435] syzkaller0: entered allmulticast mode [ 345.376637][T16435] xt_CT: You must specify a L4 protocol and not use inversions on it [ 345.629454][T15864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.630370][T16450] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2878'. [ 345.695436][T15864] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.747505][T10414] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.754706][T10414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.811695][T10414] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.819109][T10414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.948216][T16461] netlink: 'syz.5.2880': attribute type 1 has an invalid length. [ 345.990926][T16461] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2880'. [ 346.290387][T16473] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2883'. [ 346.480052][T16487] netlink: 'syz.1.2886': attribute type 1 has an invalid length. [ 346.614344][T16487] 8021q: adding VLAN 0 to HW filter on device bond14 [ 346.649847][T16491] bond4: (slave veth0_to_bond): Releasing active interface [ 346.739765][T16491] bond14: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 346.757793][T16503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2888'. [ 346.876838][T16491] bond14: entered promiscuous mode [ 346.902017][T16491] bond14: entered allmulticast mode [ 347.289388][T16529] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2893'. [ 347.315654][T16529] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2893'. [ 347.376425][T16529] netlink: 'syz.6.2893': attribute type 12 has an invalid length. [ 347.427485][T16529] netlink: 190972 bytes leftover after parsing attributes in process `syz.6.2893'. [ 347.488521][T16533] netlink: 'syz.6.2893': attribute type 4 has an invalid length. [ 347.621245][T16529] netlink: 'syz.6.2893': attribute type 4 has an invalid length. [ 347.718414][T16556] syzkaller0: entered promiscuous mode [ 347.734633][T16556] syzkaller0: entered allmulticast mode [ 347.778368][T15864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.435018][T16593] netlink: 'syz.6.2903': attribute type 1 has an invalid length. [ 348.510657][T16593] netlink: 248 bytes leftover after parsing attributes in process `syz.6.2903'. [ 348.784988][T15864] veth0_vlan: entered promiscuous mode [ 348.853265][T15864] veth1_vlan: entered promiscuous mode [ 349.077172][T15864] veth0_macvtap: entered promiscuous mode [ 349.116950][T16614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2907'. [ 349.142814][T15864] veth1_macvtap: entered promiscuous mode [ 349.283693][T16622] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 349.485342][T16614] bond14: (slave veth0_to_bond): Releasing active interface [ 349.548409][T16614] bridge10: port 1(veth0_to_bond) entered blocking state [ 349.564774][T16614] bridge10: port 1(veth0_to_bond) entered disabled state [ 349.593931][T16614] veth0_to_bond: entered allmulticast mode [ 349.607598][T16614] veth0_to_bond: entered promiscuous mode [ 349.697609][T15864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.782861][T15864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.870594][ T9157] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.895546][ T9157] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.938377][ T9157] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.975389][ T9157] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.275716][T16662] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode [ 350.299562][ T9157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.322265][ T9157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.434493][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.448582][T16668] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.2916'. [ 350.467905][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.482079][T16668] openvswitch: netlink: Missing key (keys=40, expected=100) [ 351.469703][ T5638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 351.481978][ T5638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 351.490673][ T5638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 351.499976][ T5638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 351.514363][ T5638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 352.022229][ T5629] syz_tun (unregistering): left allmulticast mode [ 352.054123][ T5629] syz_tun (unregistering): left promiscuous mode [ 352.072981][ T5629] bridge0: port 3(syz_tun) entered disabled state [ 352.238354][T16708] lo speed is unknown, defaulting to 1000 [ 352.450583][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 352.645581][T16751] netlink: 'syz.4.2935': attribute type 1 has an invalid length. [ 352.734130][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 352.789927][T16754] vlan0: entered promiscuous mode [ 352.818061][T16754] team0: Port device vlan0 added [ 353.082456][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 353.173018][T16773] __nla_validate_parse: 1 callbacks suppressed [ 353.173036][T16773] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.2940'. [ 353.189462][T16778] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2941'. [ 353.206541][T16778] netlink: 'syz.6.2941': attribute type 30 has an invalid length. [ 353.284556][T16778] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2941'. [ 353.395503][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 353.424441][T16778] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2941'. [ 353.449112][T16778] netlink: 'syz.6.2941': attribute type 30 has an invalid length. [ 353.484928][T16778] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2941'. [ 353.586187][ T5635] Bluetooth: hci1: command tx timeout [ 353.629722][T16794] x_tables: unsorted underflow at hook 4 [ 353.782301][T16798] vlan0: entered promiscuous mode [ 353.837181][T16811] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 353.850714][T16798] team0: Port device vlan0 added [ 353.876085][T16805] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2948'. [ 354.042984][T16811] ip6gre1: entered allmulticast mode [ 354.300232][T16799] syzkaller0: entered promiscuous mode [ 354.307842][T16799] syzkaller0: entered allmulticast mode [ 354.353790][T16844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2955'. [ 354.404678][T16843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2955'. [ 354.619166][T16858] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2956'. [ 355.663388][ T5635] Bluetooth: hci1: command tx timeout [ 357.570922][T16858] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2956'. [ 357.743669][ T5635] Bluetooth: hci1: command tx timeout [ 357.852800][T16916] netlink: 'syz.6.2964': attribute type 16 has an invalid length. [ 357.901359][ T12] bridge_slave_1: left allmulticast mode [ 357.911335][ T12] bridge_slave_1: left promiscuous mode [ 357.918120][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.927694][ T12] bridge_slave_0: left allmulticast mode [ 357.934251][ T12] bridge_slave_0: left promiscuous mode [ 357.942637][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.248777][T16938] x_tables: duplicate underflow at hook 3 [ 358.367928][ T12] pimreg: left allmulticast mode [ 358.542342][ T12] bond10 (unregistering): (slave gretap2): Releasing active interface [ 358.553852][ T12] bond10 (unregistering): (slave gretap2): the permanent HWaddr of slave - 8a:f3:5b:4a:f3:51 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 358.897218][ T12] bond10 (unregistering): (slave bridge4): Releasing active interface [ 359.088188][ T12] team0: Port device bridge7 removed [ 359.167305][ T12] bond1 (unregistering): Released all slaves [ 359.181092][ T12] bond2 (unregistering): Released all slaves [ 359.198934][ T12] bond3 (unregistering): Released all slaves [ 359.212484][ T12] bond4 (unregistering): Released all slaves [ 359.232272][ T12] bond5 (unregistering): Released all slaves [ 359.246188][ T12] bond6 (unregistering): Released all slaves [ 359.261995][ T12] bond7 (unregistering): Released all slaves [ 359.281489][ T12] bond8 (unregistering): (slave lo): Releasing backup interface [ 359.289838][ T12] bond8 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 359.302676][ T12] bond8 (unregistering): Released all slaves [ 359.317079][ T12] bond9 (unregistering): Released all slaves [ 359.330780][ T12] bond10 (unregistering): Released all slaves [ 359.344826][ T12] bond11 (unregistering): Released all slaves [ 359.358940][ T12] bond12 (unregistering): Released all slaves [ 359.372374][ T12] bond13 (unregistering): Released all slaves [ 359.392278][ T12] bond14 (unregistering): Released all slaves [ 359.417636][T16922] __nla_validate_parse: 3 callbacks suppressed [ 359.417654][T16922] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2966'. [ 359.435884][T16923] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2966'. [ 359.628410][T16945] netlink: 'syz.5.2967': attribute type 1 has an invalid length. [ 359.711021][T16708] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.723682][T16708] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.764811][T16708] bridge_slave_0: entered allmulticast mode [ 359.775169][T16708] bridge_slave_0: entered promiscuous mode [ 359.823541][ T5635] Bluetooth: hci1: command tx timeout [ 359.929586][T16960] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2969'. [ 359.966580][T16945] bond1: entered promiscuous mode [ 359.979690][T16945] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.003035][T16708] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.021339][T16708] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.028913][T16708] bridge_slave_1: entered allmulticast mode [ 360.036691][T16708] bridge_slave_1: entered promiscuous mode [ 360.046418][ T12] tipc: Left network mode [ 360.081402][T16960] macvtap1: entered promiscuous mode [ 360.098424][T16960] team0: entered promiscuous mode [ 360.111218][T16960] team_slave_0: entered promiscuous mode [ 360.128853][T16960] team_slave_1: entered promiscuous mode [ 360.150030][T16960] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 360.259602][T16941] bond1: (slave bridge1): making interface the new active one [ 360.281489][T16941] bridge1: entered promiscuous mode [ 360.307806][T16941] bridge1: left promiscuous mode [ 360.401495][ T12] IPVS: stopping backup sync thread 9395 ... [ 360.478549][T16708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.597410][T16974] IPv6: Can't replace route, no match found [ 360.636098][T16708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.717528][T16979] netlink: 'syz.1.2975': attribute type 1 has an invalid length. [ 360.752351][T16976] h: entered promiscuous mode [ 360.902437][T16992] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2977'. [ 360.913121][T16979] 8021q: adding VLAN 0 to HW filter on device bond15 [ 360.921736][T16983] ip_vti0: entered promiscuous mode [ 360.978565][T16996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2978'. [ 360.982158][T16708] team0: Port device team_slave_0 added [ 361.160904][T16708] team0: Port device team_slave_1 added [ 361.360193][T16708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.381847][T16708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.411873][T16708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.502483][T16708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.529727][T16708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.605954][T16708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.898955][T17045] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2989'. [ 361.927465][T16708] hsr_slave_0: entered promiscuous mode [ 361.944759][T16708] hsr_slave_1: entered promiscuous mode [ 361.962012][T16708] debugfs: 'hsr0' already exists in 'hsr' [ 361.978885][T16708] Cannot create hsr debugfs directory [ 362.039923][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 362.270955][T17066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2994'. [ 362.295228][T17058] SET target dimension over the limit! [ 362.380313][T17062] team0: No ports can be present during mode change [ 362.418470][T17066] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 362.597598][T17076] vlan0: entered promiscuous mode [ 362.644966][T17082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2998'. [ 362.674171][T17076] team0: Port device vlan0 added [ 362.737656][ T12] hsr_slave_0: left promiscuous mode [ 362.759268][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.795624][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.036268][ T12] pim6reg (unregistering): left allmulticast mode [ 363.160779][ T12] team0 (unregistering): Port device vlan0 removed [ 363.201521][T17111] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3003'. [ 363.254700][T17115] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3003'. [ 363.270861][ T9157] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 363.608220][ T12] team0 (unregistering): Port device team_slave_1 removed [ 363.704250][ T12] smc: removing net device team0 with user defined pnetid SYZ2 [ 363.765241][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 363.903901][T17109] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 364.646184][T17165] __nla_validate_parse: 2 callbacks suppressed [ 364.646203][T17165] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.3019'. [ 364.738304][T17167] : entered promiscuous mode [ 364.865961][ T12] IPVS: stop unused estimator thread 0... [ 364.936389][T17181] netlink: 4508 bytes leftover after parsing attributes in process `syz.6.3023'. [ 365.168883][T17193] bridge1: entered allmulticast mode [ 365.340005][T17200] siw: device registration error -23 [ 365.431724][T17207] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3028'. [ 365.797995][T17224] netlink: 'syz.6.3032': attribute type 10 has an invalid length. [ 365.842852][T16708] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 365.885733][T16708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 365.894857][T17224] macvlan1: entered promiscuous mode [ 365.914987][T17224] macvlan1: entered allmulticast mode [ 365.941099][T17224] veth1_vlan: entered allmulticast mode [ 365.984910][T17224] team0: Port device macvlan1 added [ 366.011752][T17236] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3035'. [ 366.030898][T16708] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 366.062487][T16708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 366.075612][T16708] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 366.092225][T16708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 366.106329][T16708] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 366.117193][T16708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 366.700581][T17273] vxcan1 speed is unknown, defaulting to 1000 [ 366.711813][T17273] vxcan1 speed is unknown, defaulting to 1000 [ 366.720231][T17273] vxcan1 speed is unknown, defaulting to 1000 [ 366.949620][T14824] vxcan1 speed is unknown, defaulting to 1000 [ 366.955912][T17273] infiniband syz2: set active [ 366.962303][T17273] infiniband syz2: added vxcan1 [ 366.982521][T17273] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 366.997917][T17273] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 367.015577][T17273] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 367.067246][T17273] RDS/IB: syz2: added [ 367.074991][T17273] smc: adding ib device syz2 with port count 1 [ 367.081225][T17273] smc: ib device syz2 port 1 has no pnetid [ 367.087948][T14824] vxcan1 speed is unknown, defaulting to 1000 [ 367.099599][T17273] vxcan1 speed is unknown, defaulting to 1000 [ 367.316257][T17273] vxcan1 speed is unknown, defaulting to 1000 [ 367.566597][T17273] vxcan1 speed is unknown, defaulting to 1000 [ 367.787589][T17273] vxcan1 speed is unknown, defaulting to 1000 [ 368.018892][T17273] vxcan1 speed is unknown, defaulting to 1000 [ 368.254657][T17273] vxcan1 speed is unknown, defaulting to 1000 [ 368.488006][T17273] vxcan1 speed is unknown, defaulting to 1000 [ 368.876157][T17229] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 369.109114][T17354] netlink: 'syz.1.3045': attribute type 1 has an invalid length. [ 369.166460][T17354] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 369.270939][T16708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.385784][T16708] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.428808][T17379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3050'. [ 369.438452][T17374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3049'. [ 369.455424][ T9168] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.462616][ T9168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.474607][ T9168] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.481839][ T9168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.513894][T17374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.531921][T17385] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3051'. [ 369.541604][T17385] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3051'. [ 369.570417][T17374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.622384][T17379] : (slave team0): Releasing backup interface [ 369.636447][T17379] team0 (unregistering): Port device vlan0 removed [ 369.699418][T17373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.934150][T17399] openvswitch: netlink: IP tunnel dst address not specified [ 369.975609][T17403] netlink: 'syz.6.3055': attribute type 2 has an invalid length. [ 369.981860][T17399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.227905][T17419] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3059'. [ 370.486522][T16708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.625779][T16708] veth0_vlan: entered promiscuous mode [ 370.651288][T16708] veth1_vlan: entered promiscuous mode [ 370.673846][T17444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.698282][T16708] veth0_macvtap: entered promiscuous mode [ 370.719892][T16708] veth1_macvtap: entered promiscuous mode [ 370.745562][T16708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.761406][T16708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.776986][T17445] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3063'. [ 370.789068][T17445] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3063'. [ 370.798606][T10412] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.809588][T10412] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.827621][T17445] gretap2: entered promiscuous mode [ 370.834517][T17445] gretap2: entered allmulticast mode [ 370.841071][T10412] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.850327][T10412] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.953446][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.966750][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.992456][T10415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.000753][T10415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.106899][T17453] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3065'. [ 371.130000][T17453] macsec1: entered promiscuous mode [ 371.135976][T17453] bridge0: entered promiscuous mode [ 371.141685][T17453] macsec1: entered allmulticast mode [ 371.147663][T17453] bridge0: entered allmulticast mode [ 371.155800][T17453] bridge0: port 3(macsec1) entered blocking state [ 371.162411][T17453] bridge0: port 3(macsec1) entered disabled state [ 371.174733][T17453] bridge0: left allmulticast mode [ 371.193776][ T5766] bridge0: left promiscuous mode [ 371.567976][ T5638] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 371.571977][T17465] Unsupported ieee802154 address type: 0 [ 371.587555][ T5638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 371.598626][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 371.608417][ T5638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 371.618998][ T5638] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 371.724050][T17470] veth0_to_bond: entered allmulticast mode [ 371.873876][T17479] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3073'. [ 372.094260][T17491] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3076'. [ 372.095472][ T5628] syz_tun (unregistering): left allmulticast mode [ 372.131034][ T5628] syz_tun (unregistering): left promiscuous mode [ 372.143951][ T5628] bridge0: port 1(syz_tun) entered disabled state [ 372.187249][T17488] veth0_to_bond: entered allmulticast mode [ 372.224911][T17500] netlink: 51 bytes leftover after parsing attributes in process `syz.5.3078'. [ 372.337261][T17500] veth0_to_bond: entered allmulticast mode [ 372.389858][T10415] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 372.428839][T10415] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 372.468245][T17509] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3080'. [ 372.480767][T17497] syzkaller1: entered promiscuous mode [ 372.498702][T17497] syzkaller1: entered allmulticast mode [ 372.641138][T10415] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 372.673389][T10415] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 372.842227][T17463] lo speed is unknown, defaulting to 1000 [ 372.867538][T10415] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 372.896138][T10415] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 372.998536][T17530] bridge_slave_0: left allmulticast mode [ 373.030780][T17530] bridge_slave_0: left promiscuous mode [ 373.076042][T17530] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.117372][T17530] bridge_slave_1: left allmulticast mode [ 373.123614][T17530] bridge_slave_1: left promiscuous mode [ 373.129487][T17530] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.149734][T17530] bond0: (slave bond_slave_0): Releasing backup interface [ 373.196552][T17530] bond0: (slave bond_slave_1): Releasing backup interface [ 373.211418][T17530] team_slave_0: left promiscuous mode [ 373.224193][T17530] team0: Port device team_slave_0 removed [ 373.232107][T17530] team_slave_1: left promiscuous mode [ 373.241923][T17530] team0: Port device team_slave_1 removed [ 373.251031][T17530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.260218][T17530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.273932][T17530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.281583][T17530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.294086][T17530] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 373.332424][T17463] vxcan1 speed is unknown, defaulting to 1000 [ 373.431397][T10415] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 373.470676][T10415] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 373.576121][T17561] syzkaller0: entered promiscuous mode [ 373.583977][T17560] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3094'. [ 373.599286][T17561] syzkaller0: entered allmulticast mode [ 373.599407][T17560] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3094'. [ 373.665134][ T5635] Bluetooth: hci0: command tx timeout [ 373.924637][T17570] bond1: entered promiscuous mode [ 373.930317][T17570] bond1: entered allmulticast mode [ 373.937029][T17570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.112993][T17576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.376017][T10415] veth0_to_bond: left allmulticast mode [ 374.401057][T10415] veth0_to_bond: left promiscuous mode [ 374.421438][T10415] bridge10: port 1(veth0_to_bond) entered disabled state [ 374.571773][T17610] netlink: 'syz.5.3104': attribute type 10 has an invalid length. [ 374.998309][T17624] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20002 [ 375.095725][T10415] bond1 (unregistering): (slave geneve3): Releasing active interface [ 375.390050][T10415] bond8 (unregistering): (slave bridge5): Releasing backup interface [ 375.633032][T10415]  (unregistering): Released all slaves [ 375.644504][T10415] bond1 (unregistering): Released all slaves [ 375.658345][T10415] bond2 (unregistering): Released all slaves [ 375.672152][T10415] bond3 (unregistering): Released all slaves [ 375.694726][T10415] bond4 (unregistering): Released all slaves [ 375.708122][T10415] bond5 (unregistering): Released all slaves [ 375.721829][T10415] bond6 (unregistering): Released all slaves [ 375.736943][T10415] bond7 (unregistering): Released all slaves [ 375.743745][ T5635] Bluetooth: hci0: command tx timeout [ 375.764826][T10415] bond8 (unregistering): Released all slaves [ 375.780520][T10415] bond9 (unregistering): Released all slaves [ 375.794571][T10415] bond0 (unregistering): (slave lo): Releasing backup interface [ 375.802710][T10415] bond0 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 375.814484][T10415] bond0 (unregistering): Released all slaves [ 375.829405][T10415] bond10 (unregistering): Released all slaves [ 375.846545][T10415] bond11 (unregistering): Released all slaves [ 375.862900][T10415] bond12 (unregistering): Released all slaves [ 375.877943][T10415] bond13 (unregistering): Released all slaves [ 375.892060][T10415] bond14 (unregistering): Released all slaves [ 375.912591][T10415] bond15 (unregistering): Released all slaves [ 375.933990][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 375.953801][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 375.967962][T11191] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 376.008067][T17610] team0 (unregistering): Port device vlan0 removed [ 376.033499][T17621] bridge0: entered promiscuous mode [ 376.050754][T17621] bridge0: entered allmulticast mode [ 376.095207][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 376.229650][T10415] tipc: Left network mode [ 376.236264][T11192] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 376.921745][T17675] syzkaller0: entered promiscuous mode [ 376.943940][T11192] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 376.956480][T17675] syzkaller0: entered allmulticast mode [ 377.155502][T17687] netlink: 'syz.6.3121': attribute type 32 has an invalid length. [ 377.517751][T17699] __nla_validate_parse: 5 callbacks suppressed [ 377.517767][T17699] netlink: 1196 bytes leftover after parsing attributes in process `syz.5.3128'. [ 377.684735][T17699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.824716][ T5635] Bluetooth: hci0: command tx timeout [ 377.942831][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 377.943114][T17723] Bluetooth: MGMT ver 1.23 [ 377.956856][T17718] bond0: (slave gre0): refused to change device type [ 378.134975][T17463] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.152044][T17463] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.173755][T17463] bridge_slave_0: entered allmulticast mode [ 378.225227][T17463] bridge_slave_0: entered promiscuous mode [ 378.324272][T17745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3135'. [ 378.358357][T17463] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.398206][T17463] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.436758][T17463] bridge_slave_1: entered allmulticast mode [ 378.458216][T17463] bridge_slave_1: entered promiscuous mode [ 378.493712][T17753] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 378.507657][T17755] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3137'. [ 378.625766][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.694062][T17758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 378.734996][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 378.767617][T17463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.808854][T17463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.929609][T17463] team0: Port device team_slave_0 added [ 378.958100][T17463] team0: Port device team_slave_1 added [ 379.079045][T17463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.103513][T17463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.134815][T17463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.150463][T17772] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3142'. [ 379.162524][T17463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.169592][T17463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.196010][T17463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.306982][T10415] hsr_slave_0: left promiscuous mode [ 379.334744][T10415] veth1_vlan: left allmulticast mode [ 379.340702][T10415] veth1_macvtap: left promiscuous mode [ 379.351817][T10415] veth1_vlan: left promiscuous mode [ 379.811369][ T12] smc: removing ib device syz0 [ 379.866424][ T12] smbdirect: ib_dev[syz0] removed [ 379.892192][T17463] hsr_slave_0: entered promiscuous mode [ 379.912974][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 379.913827][ T5635] Bluetooth: hci0: command tx timeout [ 379.922374][T17463] hsr_slave_1: entered promiscuous mode [ 381.112644][T17734] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 381.408205][T17795] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3145'. [ 382.344206][T17463] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 382.412657][T17463] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 382.455859][T17463] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 382.552534][T17463] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 382.608324][T17463] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 382.617986][T17860] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3160'. [ 382.674561][T17463] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 382.790095][T17463] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 382.802568][T17463] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 383.046368][T17463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.083004][T10415] IPVS: stop unused estimator thread 0... [ 383.087536][T17463] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.127631][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.134987][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.187447][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.194722][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.779492][T17923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3171'. [ 383.818369][T17923] veth0_macvtap: left promiscuous mode [ 383.888086][T17933] netlink: 212328 bytes leftover after parsing attributes in process `syz.5.3174'. [ 383.907209][T17933] netlink: Unknown conntrack attr (type=2304, max=9) [ 384.049978][T17935] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3175'. [ 384.105756][T17944] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3175'. [ 384.301794][T17955] netlink: 'syz.4.3179': attribute type 1 has an invalid length. [ 384.328908][T17955] netlink: 'syz.4.3179': attribute type 3 has an invalid length. [ 384.338633][T17955] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3179'. [ 384.351407][T17955] NCSI netlink: No device for ifindex 813332851 [ 384.852707][T17463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.864906][ T5635] Bluetooth: hci0: command tx timeout [ 384.950376][T17988] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3185'. [ 385.062754][T17994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3185'. [ 385.147898][T17988] bond1 (unregistering): Released all slaves [ 385.229033][T18009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3189'. [ 385.269236][T18009] netlink: 'syz.0.3189': attribute type 3 has an invalid length. [ 385.319857][T17463] veth0_vlan: entered promiscuous mode [ 385.389780][T17463] veth1_vlan: entered promiscuous mode [ 385.594952][T17463] veth0_macvtap: entered promiscuous mode [ 385.651033][T17463] veth1_macvtap: entered promiscuous mode [ 385.750785][T17463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.782021][T18038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.807836][T17463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.861837][ T9168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.865804][T18044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3197'. [ 385.882255][T18044] netlink: 'syz.0.3197': attribute type 5 has an invalid length. [ 385.898677][ T9168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.925255][T18038] IPVS: Error connecting to the multicast addr [ 385.951398][ T9168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.012035][ T9168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.204178][T18053] sock: sock_set_timeout: `syz.0.3200' (pid 18053) tries to set negative timeout [ 386.246034][T18053] tcf_pedit_act: 7 callbacks suppressed [ 386.246049][T18053] tc action pedit offset must be on 32 bit boundaries [ 386.259890][T18053] tc action pedit offset must be on 32 bit boundaries [ 386.266719][T18053] tc action pedit offset must be on 32 bit boundaries [ 386.273559][T18053] tc action pedit offset must be on 32 bit boundaries [ 386.280518][T18053] tc action pedit offset must be on 32 bit boundaries [ 386.287374][T18053] tc action pedit offset must be on 32 bit boundaries [ 386.294200][T18053] tc action pedit offset must be on 32 bit boundaries [ 386.301061][T18053] tc action pedit offset must be on 32 bit boundaries [ 386.308379][T18053] tc action pedit offset must be on 32 bit boundaries [ 386.315557][T18053] tc action pedit offset must be on 32 bit boundaries [ 386.322539][T18053] 0: reclassify loop, rule prio 0, protocol 800 [ 386.365562][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.376216][T18056] netlink: 'syz.5.3201': attribute type 1 has an invalid length. [ 386.393031][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.487460][T18056] bond2: entered promiscuous mode [ 386.499789][T18056] 8021q: adding VLAN 0 to HW filter on device bond2 [ 386.518496][T18067] netlink: 'syz.5.3201': attribute type 3 has an invalid length. [ 386.591858][ T9168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.609004][ T9168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.875136][T18081] vlan0: entered promiscuous mode [ 386.920935][T18081] team0: Port device vlan0 added [ 387.132412][T18098] openvswitch: netlink: EtherType 50a is less than min 600 [ 387.702467][T18135] syzkaller1: entered promiscuous mode [ 387.719710][T18135] syzkaller1: entered allmulticast mode [ 387.779998][T18131] netlink: 'syz.1.3219': attribute type 10 has an invalid length. [ 387.851689][T18152] netlink: 'syz.5.3223': attribute type 1 has an invalid length. [ 387.878564][T18145] macvtap2: entered promiscuous mode [ 387.887429][T18145] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 387.897280][T18156] __nla_validate_parse: 4 callbacks suppressed [ 387.897296][T18156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3222'. [ 387.897573][T18145] team0: Device macvtap2 is already an upper device of the team interface [ 387.973855][T18131] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.983559][T18131] bond0: (slave team0): Enslaving as an active interface with an up link [ 388.005529][T18156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.055172][T18156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.157131][T18161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.223465][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 388.374505][T18171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3225'. [ 388.619355][T18177] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 388.634386][T18177] bond2 (unregistering): Released all slaves [ 388.666123][T18183] netlink: 'syz.1.3231': attribute type 33 has an invalid length. [ 388.674470][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3228'. [ 388.688416][T18186] IPv6: NLM_F_CREATE should be specified when creating new route [ 388.690721][T18180] pim6reg: entered allmulticast mode [ 388.758127][T18183] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 388.772825][T18183] bond1 (unregistering): Released all slaves [ 389.122469][T18209] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 389.167855][T18211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3235'. [ 389.488515][T18220] netlink: 'syz.6.3237': attribute type 12 has an invalid length. [ 389.845730][T18229] netlink: 'syz.5.3241': attribute type 1 has an invalid length. [ 389.936997][T18229] 8021q: adding VLAN 0 to HW filter on device bond3 [ 390.068687][T18240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3243'. [ 390.558260][T18266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3251'. [ 390.584960][T18266] netlink: 'syz.1.3251': attribute type 1 has an invalid length. [ 390.636021][T18266] netlink: 'syz.1.3251': attribute type 2 has an invalid length. [ 390.654452][T18266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3251'. [ 390.674873][T18271] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3253'. [ 390.705548][T18273] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3253'. [ 390.882048][T18282] netlink: 'syz.1.3255': attribute type 64 has an invalid length. [ 391.004861][T18288] netlink: 'syz.4.3258': attribute type 16 has an invalid length. [ 391.045939][T18288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3258'. [ 391.099621][T18294] vlan0: entered promiscuous mode [ 391.137012][T18294] team0: Port device vlan0 added [ 391.158309][T18292] tipc: Started in network mode [ 391.177217][T18292] tipc: Node identity ac14140f, cluster identity 4711 [ 391.196525][T18292] tipc: New replicast peer: 255.255.255.255 [ 391.212727][T18292] tipc: Enabled bearer , priority 10 [ 391.511890][T18318] netlink: 'syz.4.3270': attribute type 1 has an invalid length. [ 391.547618][T18318] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 391.715187][T18336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.848776][T18334] veth3: entered allmulticast mode [ 391.932194][T18351] bond0 (unregistering): Released all slaves [ 392.004704][T18360] netlink: 'syz.5.3279': attribute type 21 has an invalid length. [ 392.078677][T18360] netlink: 'syz.5.3279': attribute type 6 has an invalid length. [ 392.323862][T11191] tipc: Node number set to 2886997007 [ 392.439099][T18382] netlink: 'syz.6.3286': attribute type 1 has an invalid length. [ 392.927172][ T6445] IPVS: starting estimator thread 0... [ 392.990144][T18425] bridge2: entered promiscuous mode [ 393.000011][T18425] bridge2: entered allmulticast mode [ 393.008348][T18431] __nla_validate_parse: 14 callbacks suppressed [ 393.008365][T18431] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3300'. [ 393.053662][T18423] IPVS: using max 38 ests per chain, 91200 per kthread [ 393.192079][T18445] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3302'. [ 393.221246][T18448] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3305'. [ 393.234772][T18447] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3305'. [ 393.270160][T18446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3304'. [ 393.305163][T18446] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3304'. [ 393.519974][T18458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3307'. [ 393.642539][T18462] ipvlan2: entered allmulticast mode [ 393.649662][T18462] batadv_slave_1: entered allmulticast mode [ 393.658449][T18462] batman_adv: batadv0: Adding interface: ipvlan2 [ 393.668046][T18462] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.695412][T18462] batman_adv: batadv0: Interface activated: ipvlan2 [ 393.707432][T18464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.850685][T18470] macvlan0: entered promiscuous mode [ 393.865329][T18470] macvlan0: entered allmulticast mode [ 394.113081][T18493] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3315'. [ 394.174056][T18493] netem: change failed [ 394.211741][T18493] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.3315'. [ 394.470602][T18521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3323'. [ 394.518878][ T66] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.540252][ T66] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.579458][ T66] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.661832][ T66] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.708097][T18532] xt_hashlimit: size too large, truncated to 1048576 [ 394.826216][T18537] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 395.796854][T18598] bridge_slave_0: entered promiscuous mode [ 395.809533][T18598] bridge_slave_0: left promiscuous mode [ 395.903919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 396.070229][T18613] validate_nla: 4 callbacks suppressed [ 396.070246][T18613] netlink: 'syz.5.3342': attribute type 1 has an invalid length. [ 396.129884][T18617] tls_set_device_offload_rx: netdev not found [ 396.246788][T18613] bond4: entered promiscuous mode [ 396.270648][T18613] 8021q: adding VLAN 0 to HW filter on device bond4 [ 396.313710][T18633] xt_CT: You must specify a L4 protocol and not use inversions on it [ 396.394669][T18623] bond4: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 396.408016][T18623] bond4: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 396.420531][T18623] bond4: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 396.453011][T18634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.948157][T18675] netlink: 'syz.6.3359': attribute type 1 has an invalid length. [ 398.017918][T18707] __nla_validate_parse: 11 callbacks suppressed [ 398.017935][T18707] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3368'. [ 398.061352][T18707] veth1_macvtap: left promiscuous mode [ 398.175664][T18714] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3370'. [ 398.548040][T18724] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3373'. [ 398.588095][T18731] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3375'. [ 398.643926][T18731] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3375'. [ 398.985622][T18742] netlink: 'syz.0.3379': attribute type 10 has an invalid length. [ 399.021290][T18742] veth1_virt_wifi: entered promiscuous mode [ 399.209436][T18751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3382'. [ 399.221555][T18751] netlink: 'syz.0.3382': attribute type 1 has an invalid length. [ 399.243515][T18754] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3383'. [ 399.320946][T18755] tipc: Enabling of bearer rejected, failed to enable media [ 400.023009][T18778] syzkaller0: entered promiscuous mode [ 400.039753][T18778] syzkaller0: entered allmulticast mode [ 400.653006][T18647] Set syz1 is full, maxelem 65536 reached [ 402.694716][T18797] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 402.698157][T18799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 402.964917][T18816] netlink: 'syz.5.3402': attribute type 1 has an invalid length. [ 403.061867][T18824] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3404'. [ 403.116547][T18824] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3404'. [ 403.127685][T18827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3406'. [ 403.306446][T18839] Bluetooth: MGMT ver 1.23 [ 403.319447][T18839] syzkaller0: entered promiscuous mode [ 403.325667][T18839] syzkaller0: entered allmulticast mode [ 403.350271][T18841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3410'. [ 403.371622][T18843] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3411'. [ 403.422883][T18843] netlink: 'syz.5.3411': attribute type 2 has an invalid length. [ 403.430995][T18843] netlink: 'syz.5.3411': attribute type 2 has an invalid length. [ 403.518173][T18855] netlink: 'syz.0.3413': attribute type 1 has an invalid length. [ 403.571671][T18858] netlink: 'syz.4.3416': attribute type 21 has an invalid length. [ 403.580909][T18858] IPv6: NLM_F_CREATE should be specified when creating new route [ 403.639178][T18860] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3413'. [ 403.746685][T18855] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3413'. [ 403.772685][T18859] 8021q: adding VLAN 0 to HW filter on device bond2 [ 403.791510][T18859] bond1: (slave bond2): making interface the new active one [ 403.844011][T18859] bond1: (slave bond2): Enslaving as an active interface with an up link [ 403.891616][T18859] netlink: 'syz.0.3413': attribute type 1 has an invalid length. [ 403.911284][T18860] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 403.931313][T18855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 403.946597][T18860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3413'. [ 403.968444][T18863] syzkaller0: entered promiscuous mode [ 403.975126][T18863] syzkaller0: entered allmulticast mode [ 404.225186][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 404.455103][T18914] netlink: 'syz.5.3428': attribute type 1 has an invalid length. [ 404.487970][T18918] openvswitch: netlink: Duplicate key (type 2). [ 404.538959][T18920] 8021q: adding VLAN 0 to HW filter on device bond6 [ 404.548639][T18920] bond5: (slave bond6): making interface the new active one [ 404.558383][T18920] bond5: (slave bond6): Enslaving as an active interface with an up link [ 404.568788][T18914] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3428'. [ 404.578861][T18918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3429'. [ 404.861379][T18931] netlink: 'syz.5.3434': attribute type 2 has an invalid length. [ 405.228332][T18953] veth0: entered promiscuous mode [ 405.259019][T18952] veth0: left promiscuous mode [ 405.370482][T18964] netlink: 'syz.0.3444': attribute type 21 has an invalid length. [ 405.379519][T18964] netlink: 'syz.0.3444': attribute type 1 has an invalid length. [ 405.441197][T18968] nbd: couldn't find device at index 2958377 [ 405.460908][T18968] nbd: couldn't find device at index 2958377 [ 405.972009][T18982] lo speed is unknown, defaulting to 1000 [ 405.977969][T18982] lo speed is unknown, defaulting to 1000 [ 405.985374][T18982] lo speed is unknown, defaulting to 1000 [ 405.993185][T18982] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 406.008005][T18982] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 406.025345][T18982] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 406.039969][T18982] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 406.056221][T18982] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 406.087110][T18982] lo speed is unknown, defaulting to 1000 [ 406.094721][T18982] lo speed is unknown, defaulting to 1000 [ 406.103196][T18982] lo speed is unknown, defaulting to 1000 [ 406.110551][T18982] lo speed is unknown, defaulting to 1000 [ 406.119389][T18982] lo speed is unknown, defaulting to 1000 [ 406.126625][T18982] lo speed is unknown, defaulting to 1000 [ 406.133754][T18982] lo speed is unknown, defaulting to 1000 [ 409.244684][T18985] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 411.263776][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 411.762493][T19060] __nla_validate_parse: 9 callbacks suppressed [ 411.762511][T19060] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3473'. [ 411.811603][T19060] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3473'. [ 411.825734][T19060] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3473'. [ 412.092937][T19076] bond1: entered allmulticast mode [ 412.207936][T19084] team0: Device veth1_vlan failed to register rx_handler [ 412.286339][T19089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.297404][T19088] validate_nla: 2 callbacks suppressed [ 412.297421][T19088] netlink: 'syz.0.3481': attribute type 9 has an invalid length. [ 412.324529][T19088] netlink: 'syz.0.3481': attribute type 6 has an invalid length. [ 412.356021][T19089] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 412.359586][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 412.377906][ T5638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 412.395379][ T5638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 412.409422][ T5638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 412.423196][ T5638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 412.500897][T19100] netlink: 'syz.4.3484': attribute type 1 has an invalid length. [ 412.608620][T19108] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3486'. [ 412.629896][T19100] 8021q: adding VLAN 0 to HW filter on device bond2 [ 412.644137][T19101] ip_vti0: entered promiscuous mode [ 412.706993][T19106] bridge_slave_0: left allmulticast mode [ 412.726107][T19106] bridge_slave_0: left promiscuous mode [ 412.760104][T19106] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.772704][T19106] bridge_slave_1: left allmulticast mode [ 412.782767][T19106] bridge_slave_1: left promiscuous mode [ 412.791286][T19106] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.808579][T19106] bond0: (slave bond_slave_0): Releasing backup interface [ 412.822293][T19106] bond0: (slave bond_slave_1): Releasing backup interface [ 412.834836][T19106] team0: Port device team_slave_0 removed [ 412.845886][T19106] team0: Port device team_slave_1 removed [ 412.852685][T19106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.861220][T19106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.871441][T19125] netlink: 'syz.4.3488': attribute type 1 has an invalid length. [ 412.881219][T19106] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 412.901675][T19114] team0: No ports can be present during mode change [ 413.024353][T19129] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 413.029933][T19125] 8021q: adding VLAN 0 to HW filter on device bond3 [ 413.067894][T19132] netlink: 'syz.5.3489': attribute type 1 has an invalid length. [ 413.076079][T19124] tipc: Started in network mode [ 413.084496][T19124] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 413.094950][T19124] tipc: Enabled bearer , priority 0 [ 413.114499][T19120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3488'. [ 413.156469][T19132] bond7: entered promiscuous mode [ 413.176180][T19132] 8021q: adding VLAN 0 to HW filter on device bond7 [ 413.247998][T19141] 8021q: adding VLAN 0 to HW filter on device bond7 [ 413.259006][T19141] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 413.269929][T19141] bond7: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 413.295521][T19141] bond7: (slave vcan1): making interface the new active one [ 413.303425][T19141] vcan1: entered promiscuous mode [ 413.312385][T19141] bond7: (slave vcan1): Enslaving as an active interface with an up link [ 413.352351][T19120] team0 (unregistering): Port device team_slave_0 removed [ 413.368989][T19120] team0 (unregistering): Port device team_slave_1 removed [ 413.392829][T19120] team0 (unregistering): Port device vlan0 removed [ 413.496164][T19119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.496926][T19094] vxcan1 speed is unknown, defaulting to 1000 [ 413.955736][T19180] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3499'. [ 413.970499][T19094] lo speed is unknown, defaulting to 1000 [ 413.992438][T19180] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3499'. [ 414.236325][T11191] tipc: Node number set to 11578026 [ 414.264552][T19192] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3503'. [ 414.312341][T19192] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3503'. [ 414.404123][T19199] netlink: 'syz.5.3505': attribute type 21 has an invalid length. [ 414.412261][T19199] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3505'. [ 414.419118][T19200] xt_CT: You must specify a L4 protocol and not use inversions on it [ 414.474112][ T5638] Bluetooth: hci2: command tx timeout [ 414.806583][T19094] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.832724][T19094] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.859848][T19094] bridge_slave_0: entered allmulticast mode [ 414.892190][T19094] bridge_slave_0: entered promiscuous mode [ 414.930394][T19094] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.946250][T19094] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.967948][T19094] bridge_slave_1: entered allmulticast mode [ 414.983638][T19094] bridge_slave_1: entered promiscuous mode [ 415.088366][T19094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.128573][T19094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.192848][T19094] team0: Port device team_slave_0 added [ 415.202304][T19094] team0: Port device team_slave_1 added [ 415.242285][T19094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.249530][T19094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.277745][T19094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.300057][T19094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.307405][T19094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.334368][T19094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.456739][T19094] hsr_slave_0: entered promiscuous mode [ 415.471128][T19094] hsr_slave_1: entered promiscuous mode [ 415.485224][T19094] debugfs: 'hsr0' already exists in 'hsr' [ 415.498675][T19094] Cannot create hsr debugfs directory [ 415.648919][T19242] netlink: 'syz.4.3517': attribute type 1 has an invalid length. [ 416.256833][T19261] netlink: 'syz.5.3522': attribute type 2 has an invalid length. [ 416.277951][T19261] netlink: 'syz.5.3522': attribute type 1 has an invalid length. [ 416.333722][T19094] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 416.348776][T19094] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 416.359936][T19094] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 416.379264][T19094] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 416.392125][T19094] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 416.428717][T19094] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 416.451000][T19094] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 416.475140][T19094] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 416.553737][ T5638] Bluetooth: hci2: command tx timeout [ 416.750944][T19094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.816693][T19283] __nla_validate_parse: 2 callbacks suppressed [ 416.816713][T19283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3528'. [ 416.837246][T19094] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.873932][T10412] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.881119][T10412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.891798][T19285] Cannot find set identified by id 3 to match [ 416.923591][T10412] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.930815][T10412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.980016][T19289] netlink: 'syz.5.3530': attribute type 11 has an invalid length. [ 417.659968][T19311] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3536'. [ 417.913750][T19324] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3539'. [ 417.960746][T19325] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3539'. [ 418.028876][T19094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.333477][T19341] netlink: 'syz.4.3543': attribute type 1 has an invalid length. [ 418.358956][T19339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3542'. [ 418.368349][T19339] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3542'. [ 418.378055][T19339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3542'. [ 418.389756][T19339] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3542'. [ 418.623808][ T5638] Bluetooth: hci2: command tx timeout [ 418.749157][T19094] veth0_vlan: entered promiscuous mode [ 418.757574][T19355] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 418.764929][T19094] veth1_vlan: entered promiscuous mode [ 418.828472][T19094] veth0_macvtap: entered promiscuous mode [ 418.841322][T19094] veth1_macvtap: entered promiscuous mode [ 418.866659][T19094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.896473][T19094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.924659][T10412] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.934481][T10412] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.978284][T10412] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.040046][T10412] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.137816][T19368] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3548'. [ 419.183079][T19368] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3548'. [ 419.286904][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.312172][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.427845][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.453192][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.970644][T19405] netlink: 'syz.5.3557': attribute type 4 has an invalid length. [ 420.454403][T19426] IPVS: nq: FWM 3 0x00000003 - no destination available [ 420.477485][ T6445] IPVS: starting estimator thread 0... [ 420.490960][T19431] ieee802154 phy0 wpan0: encryption failed: -22 [ 420.566048][T19431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 420.573395][T19427] IPVS: using max 41 ests per chain, 98400 per kthread [ 420.580306][T19431] IPv6: NLM_F_CREATE should be set when creating new route [ 420.587618][T19431] IPv6: NLM_F_CREATE should be set when creating new route [ 420.622077][T19435] netlink: 'syz.4.3565': attribute type 1 has an invalid length. [ 420.670607][T19430] siw: device registration error -23 [ 420.706711][ T5638] Bluetooth: hci2: command tx timeout [ 420.936068][T19438] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 421.015542][T19438] bond1 (unregistering): Released all slaves [ 421.148090][T19445] bond0: entered promiscuous mode [ 421.167973][T19445] bond_slave_0: entered promiscuous mode [ 421.178757][T19456] netlink: 'syz.5.3570': attribute type 1 has an invalid length. [ 421.183181][T19455] netlink: 'syz.5.3570': attribute type 1 has an invalid length. [ 421.203088][T19445] bond_slave_1: entered promiscuous mode [ 421.211677][T19456] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 421.219006][T19456] IPv6: NLM_F_CREATE should be set when creating new route [ 421.232917][T19445] batadv0: entered promiscuous mode [ 421.247889][T19455] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 421.267673][T19445] debugfs: 'hsr1' already exists in 'hsr' [ 421.300476][T19445] Cannot create hsr debugfs directory [ 421.329327][T19445] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 421.357109][T19445] bond0: left promiscuous mode [ 421.371375][T19445] bond_slave_0: left promiscuous mode [ 421.395101][T19445] bond_slave_1: left promiscuous mode [ 421.445851][T19445] batadv0: left promiscuous mode [ 421.829547][T19478] __nla_validate_parse: 10 callbacks suppressed [ 421.829565][T19478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3579'. [ 421.917821][T19483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3578'. [ 422.009285][T19490] ipt_REJECT: TCP_RESET invalid for non-tcp [ 422.033763][T19478] 8021q: adding VLAN 0 to HW filter on device bond1 [ 422.127732][T19486] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 422.257807][T19505] netlink: 16215 bytes leftover after parsing attributes in process `syz.7.3585'. [ 422.570815][T19525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3589'. [ 422.685269][T19529] syz_tun: entered promiscuous mode [ 422.702116][T19529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3590'. [ 423.019606][T19540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3593'. [ 423.221148][T19554] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 423.606673][T19567] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3597'. [ 424.706785][ T5638] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 424.711021][ T5635] Bluetooth: hci0: command 0x0c1a tx timeout [ 425.098813][T19497] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 425.320470][T19575] syz_tun: entered allmulticast mode [ 425.344452][T19570] netlink: 'syz.7.3598': attribute type 1 has an invalid length. [ 425.363489][T19570] netlink: 2108 bytes leftover after parsing attributes in process `syz.7.3598'. [ 425.746144][T19604] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3608'. [ 425.782335][T19606] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3609'. [ 426.235309][T19632] netlink: 'syz.5.3616': attribute type 15 has an invalid length. [ 426.359011][T19635] xt_connbytes: Forcing CT accounting to be enabled [ 426.419653][T19653] netlink: 'syz.4.3622': attribute type 1 has an invalid length. [ 426.440535][T19653] netlink: 'syz.4.3622': attribute type 1 has an invalid length. [ 426.498700][T19656] netlink: 'syz.4.3622': attribute type 1 has an invalid length. [ 426.546885][T19656] netlink: 'syz.4.3622': attribute type 1 has an invalid length. [ 426.619946][T19661] netlink: 'syz.7.3625': attribute type 5 has an invalid length. [ 426.836446][T19675] veth0_macvtap: left promiscuous mode [ 426.885542][T19684] __nla_validate_parse: 10 callbacks suppressed [ 426.885560][T19684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3632'. [ 426.910302][T19684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3632'. [ 426.961690][T19686] veth0: entered promiscuous mode [ 427.000973][T19690] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3635'. [ 427.005718][T19689] netlink: 'syz.5.3634': attribute type 4 has an invalid length. [ 427.088858][T14824] lo speed is unknown, defaulting to 1000 [ 427.109668][T19695] netlink: 'syz.4.3636': attribute type 21 has an invalid length. [ 427.115883][T14824] syz0: Port: 1 Link DOWN [ 427.192933][T19698] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3637'. [ 427.245905][T19701] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3638'. [ 427.284786][T19702] : entered promiscuous mode [ 427.299986][T19701] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.305491][T19704] xt_hashlimit: size too large, truncated to 1048576 [ 427.333728][T19701] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3638'. [ 427.363900][T19705] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3639'. [ 427.397289][T19701] netlink: 'syz.5.3638': attribute type 3 has an invalid length. [ 427.742914][T19683] veth0: left promiscuous mode [ 428.012660][T19724] bond1 (unregistering): Released all slaves [ 428.033048][T19736] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3644'. [ 428.627559][T19776] geneve2: entered promiscuous mode [ 428.704142][T19778] bond4: Unable to set up delay as MII monitoring is disabled [ 428.737887][T19778] bond4 (unregistering): Released all slaves [ 429.166051][T19804] syzkaller0: entered promiscuous mode [ 429.174414][T19804] syzkaller0: entered allmulticast mode [ 429.181958][T19813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.328869][T19819] xt_addrtype: ipv6 does not support BROADCAST matching [ 432.640177][T19853] team0: Port device vlan0 removed [ 432.827463][T19888] validate_nla: 1 callbacks suppressed [ 432.827483][T19888] netlink: 'syz.0.3691': attribute type 8 has an invalid length. [ 432.897572][T19891] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3693'. [ 433.127314][T19905] mac80211_hwsim hwsim34 ÿ: renamed from wlan1 [ 433.259692][T19912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3700'. [ 433.291936][T19912] team0 (uninitialized): Failed to send options change via netlink (err -105) [ 433.391754][T19921] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3702'. [ 433.439304][T19912] team0: entered promiscuous mode [ 433.445162][T19912] team0: entered allmulticast mode [ 433.776201][T19948] tipc: Enabled bearer , priority 10 [ 433.793108][T19946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3710'. [ 434.141735][T19974] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3720'. [ 434.183702][T19977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3721'. [ 434.199885][T19975] tipc: Started in network mode [ 434.212450][T19975] tipc: Node identity 00000000000000002d2e00000000407f, cluster identity 4711 [ 434.259810][T19979] netlink: 'syz.1.3722': attribute type 1 has an invalid length. [ 434.291388][T19979] netlink: 'syz.1.3722': attribute type 3 has an invalid length. [ 434.306251][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 434.316914][T19979] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3722'. [ 434.617045][T20009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3730'. [ 434.634308][T20005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3731'. [ 434.661907][T20005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3731'. [ 434.727949][T20014] syzkaller0: entered promiscuous mode [ 434.736533][T20014] syzkaller0: entered allmulticast mode [ 434.858801][T20022] syzkaller0: entered promiscuous mode [ 434.865244][T20022] syzkaller0: entered allmulticast mode [ 435.119887][T19984] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 435.149249][T19984] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 435.169565][T20030] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 435.647075][T20055] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 435.667383][T20055] netlink: 'syz.4.3749': attribute type 1 has an invalid length. [ 435.684188][T20055] netlink: 'syz.4.3749': attribute type 1 has an invalid length. [ 435.723676][T20051] syzkaller0: entered promiscuous mode [ 435.729274][T20051] syzkaller0: entered allmulticast mode [ 437.023382][ T5638] Bluetooth: hci5: command 0x0406 tx timeout [ 438.650849][T20084] netlink: 'syz.0.3756': attribute type 30 has an invalid length. [ 438.808295][T20090] __nla_validate_parse: 15 callbacks suppressed [ 438.808314][T20090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3759'. [ 438.822558][T20098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.997213][T20105] tipc: Trying to set illegal importance in message [ 439.027241][T20107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.088265][T20113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3765'. [ 439.411010][T20122] vxcan1 speed is unknown, defaulting to 1000 [ 439.470484][T20137] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.3772'. [ 439.642640][T20142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.665826][T20153] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 439.747913][T20157] syzkaller0: entered promiscuous mode [ 439.763043][T20157] syzkaller0: entered allmulticast mode [ 439.902569][T20161] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3779'. [ 439.932176][T20122] lo speed is unknown, defaulting to 1000 [ 440.046840][T20165] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3778'. [ 440.067205][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.068477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 440.088939][T20169] netlink: 'syz.5.3781': attribute type 2 has an invalid length. [ 440.130919][T20169] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3781'. [ 440.278776][T20179] netlink: 'syz.4.3783': attribute type 1 has an invalid length. [ 440.294081][T20181] netlink: 'syz.5.3784': attribute type 21 has an invalid length. [ 440.306563][T20179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3783'. [ 440.334934][T20181] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3784'. [ 440.360206][T20183] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 440.383909][T20183] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 440.413604][T20184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 442.943786][ T9170] wlan0: Trigger new scan to find an IBSS to join [ 443.046736][T20167] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 443.058567][T20172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3780'. [ 443.071461][T20181] netlink: 'syz.5.3784': attribute type 2 has an invalid length. [ 443.130155][T20181] netlink: 'syz.5.3784': attribute type 2 has an invalid length. [ 443.156822][T20182] netlink: 'syz.5.3784': attribute type 2 has an invalid length. [ 443.172653][T20182] netlink: 'syz.5.3784': attribute type 2 has an invalid length. [ 443.319461][T20208] netlink: 'syz.0.3789': attribute type 1 has an invalid length. [ 443.419893][T20208] bond4: entered promiscuous mode [ 443.434605][T20208] 8021q: adding VLAN 0 to HW filter on device bond4 [ 443.455142][T20222] ip6erspan0: entered promiscuous mode [ 443.615916][T20229] bond4: (slave bridge5): making interface the new active one [ 443.624788][T20229] bridge5: entered promiscuous mode [ 443.643965][T20229] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 443.910306][T20250] syzkaller1: entered promiscuous mode [ 443.916237][T20250] syzkaller1: entered allmulticast mode [ 445.903789][ T47] wlan0: Trigger new scan to find an IBSS to join [ 446.297314][T20207] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 446.309556][T20238] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3796'. [ 446.581441][T20256] ip6tnl2: entered promiscuous mode [ 446.742959][T20273] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 446.775969][T20279] Timeout policy `syz0' can only be used by L3 protocol number 56026 [ 446.791247][T20275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3809'. [ 446.806971][T20275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3809'. [ 446.943082][T20283] netlink: 'syz.0.3810': attribute type 7 has an invalid length. [ 446.966017][T20283] netlink: 'syz.0.3810': attribute type 8 has an invalid length. [ 446.982870][T20283] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3810'. [ 447.125016][T20299] netlink: 'syz.0.3815': attribute type 1 has an invalid length. [ 447.212828][T20307] xt_hashlimit: size too large, truncated to 1048576 [ 447.263657][ T5638] Bluetooth: hci6: command 0x0406 tx timeout [ 447.309958][T20299] bond5: entered promiscuous mode [ 447.316407][T20299] 8021q: adding VLAN 0 to HW filter on device bond5 [ 447.343305][T20302] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.409498][T20302] bridge_slave_0 (unregistering): left allmulticast mode [ 447.446966][T20302] bridge_slave_0 (unregistering): left promiscuous mode [ 447.476601][T20302] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.565772][T20317] 8021q: VLANs not supported on lo [ 447.822141][T20340] netlink: 'syz.7.3828': attribute type 12 has an invalid length. [ 447.863112][T20340] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3828'. [ 447.920139][T20338] vlan2: entered allmulticast mode [ 447.959561][T20338] bond0: entered allmulticast mode [ 448.008448][T20340] netlink: 'syz.7.3828': attribute type 12 has an invalid length. [ 448.016774][ T9160] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.034918][ T9160] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.045366][T20340] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3828'. [ 448.054892][ T9160] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.146368][ T9160] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.302558][T20370] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 448.326520][T20370] bond4 (unregistering): Released all slaves [ 448.548099][T20391] openvswitch: netlink: Flow key attr not present in new flow. [ 448.757309][T20407] syzkaller0: entered promiscuous mode [ 448.771998][T20407] syzkaller0: entered allmulticast mode [ 448.954178][ T47] wlan0: Trigger new scan to find an IBSS to join [ 449.282332][T20429] A link change request failed with some changes committed already. Interface ipvlan2 may have been left with an inconsistent configuration, please check. [ 449.355054][ T5749] vxcan1 speed is unknown, defaulting to 1000 [ 449.401813][T20448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3857'. [ 449.761757][T20473] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 449.924637][ T9170] wlan0: Creating new IBSS network, BSSID 3e:54:82:2e:46:88 [ 449.946777][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805e31c000: rx timeout, send abort [ 450.012274][T20479] netlink: 'syz.4.3868': attribute type 4 has an invalid length. [ 450.294962][T20493] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3871'. [ 450.446966][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805e31fc00: rx timeout, send abort [ 450.455571][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805e31c000: abort rx timeout. Force session deactivation [ 450.955445][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805e31fc00: abort rx timeout. Force session deactivation [ 451.041211][T20535] netlink: 'syz.1.3883': attribute type 1 has an invalid length. [ 451.122091][T20540] netlink: 'syz.7.3885': attribute type 1 has an invalid length. [ 451.195910][T20535] 8021q: adding VLAN 0 to HW filter on device bond2 [ 451.250735][T20543] bond2: (slave gretap1): making interface the new active one [ 451.261941][T20543] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 451.277099][T20545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 451.557676][T20565] openvswitch: netlink: EtherType 50a is less than min 600 [ 451.935362][T20595] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 451.963036][T20597] IPVS: Scheduler module ip_vs_sip not found [ 452.134092][T20604] syzkaller0: entered promiscuous mode [ 452.146883][T20604] syzkaller0: entered allmulticast mode [ 452.151808][T20609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3905'. [ 452.196027][T20606] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3904'. [ 452.207506][T20612] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3904'. [ 452.303489][T20619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3909'. [ 452.514583][T20630] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3912'. [ 452.548707][T20632] ip6gre1: entered allmulticast mode [ 452.577559][T20632] team0: Device ip6gre1 is of different type [ 452.611045][T20628] netlink: 'syz.0.3911': attribute type 7 has an invalid length. [ 453.708195][T20694] ip6gre0: entered promiscuous mode [ 453.716440][T20694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3926'. [ 453.826296][T20702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3931'. [ 454.136905][T20721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3936'. [ 454.146851][ T30] INFO: task syz.2.2518:14896 blocked for more than 143 seconds. [ 454.172792][ T30] Not tainted syzkaller #0 [ 454.188226][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 454.212182][ T30] task:syz.2.2518 state:D stack:27608 pid:14896 tgid:14895 ppid:5642 task_flags:0x400140 flags:0x00080002 [ 454.236155][ T30] Call Trace: [ 454.239624][ T30] [ 454.242748][ T30] __schedule+0x1821/0x5740 [ 454.248617][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 454.254059][ T30] ? __pfx___schedule+0x10/0x10 [ 454.265691][ T30] ? schedule+0x90/0x360 [ 454.273506][ T30] schedule+0x164/0x360 [ 454.279770][ T30] schedule_preempt_disabled+0x13/0x30 [ 454.289872][ T30] __mutex_lock+0x7f7/0x1550 [ 454.296988][ T30] ? __mutex_lock+0x608/0x1550 [ 454.305313][ T30] ? nfsd_nl_threads_set_doit+0x2bb/0xde0 [ 454.314493][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 454.319578][ T30] ? net_generic+0x1e/0x240 [ 454.324334][ T30] ? net_generic+0x1e/0x240 [ 454.328894][ T30] nfsd_nl_threads_set_doit+0x2bb/0xde0 [ 454.337252][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 454.342868][ T30] ? __asan_memcpy+0x40/0x70 [ 454.348040][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 454.356331][ T30] ? bpf_lsm_capable+0x9/0x20 [ 454.361068][ T30] ? security_capable+0x7e/0x2c0 [ 454.366525][ T30] genl_rcv_msg+0x61c/0x7a0 [ 454.371088][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 454.376547][ T30] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 454.382691][ T30] netlink_rcv_skb+0x232/0x4b0 [ 454.388141][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 454.394536][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 454.399910][ T30] ? down_read+0x270/0x2e0 [ 454.404737][ T30] ? genl_rcv+0xd/0x40 [ 454.413886][ T30] genl_rcv+0x28/0x40 [ 454.418088][ T30] netlink_unicast+0x75c/0x8e0 [ 454.423067][ T30] netlink_sendmsg+0x813/0xb40 [ 454.428806][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.434463][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 454.439475][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 454.446706][ T30] ____sys_sendmsg+0x972/0x9f0 [ 454.451536][ T30] ? __might_fault+0xaf/0x130 [ 454.456356][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 454.461673][ T30] ? import_iovec+0x73/0xa0 [ 454.467173][ T30] ___sys_sendmsg+0x2a5/0x360 [ 454.471930][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 454.477129][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 454.482402][ T30] ? futex_wait+0x2a2/0x390 [ 454.487035][ T30] ? __fget_files+0x2a/0x420 [ 454.491681][ T30] ? __fget_files+0x3a0/0x420 [ 454.497638][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 454.502631][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 454.508209][ T30] ? rcu_is_watching+0x15/0xb0 [ 454.513014][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.519299][ T30] do_syscall_64+0x15f/0xf80 [ 454.524000][ T30] ? trace_irq_disable+0x3b/0x140 [ 454.529051][ T30] ? clear_bhb_loop+0x40/0x90 [ 454.533769][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.539674][ T30] RIP: 0033:0x7f6000d9ce59 [ 454.544325][ T30] RSP: 002b:00007f6001d0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.552817][ T30] RAX: ffffffffffffffda RBX: 00007f6001015fa0 RCX: 00007f6000d9ce59 [ 454.561911][ T30] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 454.569999][ T30] RBP: 00007f6000e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 454.578084][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.586140][ T30] R13: 00007f6001016038 R14: 00007f6001015fa0 R15: 00007ffc0df016e8 [ 454.595459][ T30] [ 454.598617][ T30] [ 454.598617][ T30] Showing all locks held in the system: [ 454.606688][ T30] 1 lock held by khungtaskd/30: [ 454.611594][ T30] #0: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 454.621662][ T30] 5 locks held by kworker/u8:3/47: [ 454.627384][ T30] #0: ffff8880b873aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 454.637977][ T30] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 454.646913][ T30] #2: ffff8880b8726118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 454.655956][ T30] #3: ffffffff9a6abe38 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 454.666336][ T30] #4: ffffffff9a708dc0 (&obj_hash[i].lock){-.-.}-{2:2}, at: unwind_next_frame+0xa6/0x2550 [ 454.676533][ T30] 1 lock held by klogd/4988: [ 454.681183][ T30] #0: ffff8880b873aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 454.691268][ T30] 2 locks held by getty/5386: [ 454.696025][ T30] #0: ffff8880365de0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 454.707082][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 454.717574][ T30] 3 locks held by kworker/1:5/5749: [ 454.722894][ T30] #0: ffff88801aeaed40 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 454.734036][ T30] #1: ffffc9000424fc40 ((work_completion)(&(&ssp->srcu_sup->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 454.748082][ T30] #2: ffffffff8e95dc88 (&ssp->srcu_sup->srcu_gp_mutex){+.+.}-{4:4}, at: process_srcu+0x6e/0x1630 [ 454.759108][ T30] 5 locks held by kworker/u8:23/9170: [ 454.764628][ T30] #0: ffff8880b873aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 454.776721][ T30] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 454.786436][ T30] #2: ffff8880b8726118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 454.795720][ T30] #3: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 454.805812][ T30] #4: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550 [ 454.815574][ T30] 2 locks held by syz.3.2293/14082: [ 454.820858][ T30] #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 454.829375][ T30] #1: ffffffff8ec8aca0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 454.840019][ T30] 2 locks held by syz.2.2518/14896: [ 454.845341][ T30] #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 454.853672][ T30] #1: ffffffff8ec8aca0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2bb/0xde0 [ 454.863861][ T30] 2 locks held by syz.6.3359/18674: [ 454.869092][ T30] #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 454.877396][ T30] #1: ffffffff8ec8aca0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 454.887522][ T30] 2 locks held by syz-executor/19094: [ 454.892919][ T30] 2 locks held by syz.7.3897/20576: [ 454.898240][ T30] #0: ffff88804f966e40 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 454.909793][ T30] #1: ffffffff8e9630a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 454.920998][ T30] 4 locks held by syz.4.3936/20719: [ 454.926443][ T30] #0: ffff88807f51fa40 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 454.936964][ T30] #1: ffffffff8fe3db88 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 454.948639][ T30] #2: ffff888029d06cd0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x13d/0xe00 [ 454.959131][ T30] #3: ffffffff8e9630a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 454.970161][ T30] 2 locks held by syz.0.3938/20727: [ 454.975438][ T30] #0: ffff88806439cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_close+0x100/0x260 [ 454.984980][ T30] #1: ffff88806439c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 454.994804][ T30] 2 locks held by syz.0.3938/20733: [ 455.000136][ T30] #0: ffff88802a11b260 (sk_lock-AF_BLUETOOTH-BTPROTO_HCI){+.+.}-{0:0}, at: hci_sock_bind+0x11b/0x1080 [ 455.012524][ T30] #1: ffff88806439c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_sock_bind+0xc5c/0x1080 [ 455.021899][ T30] [ 455.035530][ T30] ============================================= [ 455.035530][ T30] [ 455.061475][ T30] NMI backtrace for cpu 0 [ 455.061501][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 455.061516][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 455.061523][ T30] Call Trace: [ 455.061529][ T30] [ 455.061535][ T30] dump_stack_lvl+0xe8/0x150 [ 455.061557][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 455.061575][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 455.061592][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 455.061611][ T30] sys_info+0x135/0x170 [ 455.061625][ T30] watchdog+0xfd3/0x1030 [ 455.061651][ T30] ? watchdog+0x1c9/0x1030 [ 455.061676][ T30] kthread+0x389/0x470 [ 455.061695][ T30] ? __pfx_watchdog+0x10/0x10 [ 455.061713][ T30] ? __pfx_kthread+0x10/0x10 [ 455.061733][ T30] ret_from_fork+0x514/0xb70 [ 455.061753][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 455.061769][ T30] ? __switch_to+0xc79/0x1410 [ 455.061791][ T30] ? __pfx_kthread+0x10/0x10 [ 455.061811][ T30] ret_from_fork_asm+0x1a/0x30 [ 455.061841][ T30] [ 455.061859][ T30] Sending NMI from CPU 0 to CPUs 1: [ 455.177966][ C1] NMI backtrace for cpu 1 [ 455.177985][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 455.178002][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 455.178012][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 455.178040][ C1] Code: ab 7d 02 e9 93 f7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 a1 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 455.178053][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 455.178067][ C1] RAX: 000000000011a83d RBX: ffffffff819a958a RCX: 0000000080000001 [ 455.178078][ C1] RDX: 0000000000000001 RSI: ffffffff8dfa6b31 RDI: ffffffff8c28af60 [ 455.178088][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 455.178099][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 455.178109][ C1] R13: 1ffff11003b5c000 R14: 0000000000000001 R15: 1ffff11003b5c000 [ 455.178119][ C1] FS: 0000000000000000(0000) GS:ffff88812538a000(0000) knlGS:0000000000000000 [ 455.178131][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 455.178142][ C1] CR2: 00007f5a825ea2f8 CR3: 0000000011fec000 CR4: 00000000003526f0 [ 455.178156][ C1] Call Trace: [ 455.178164][ C1] [ 455.178170][ C1] default_idle+0x9/0x20 [ 455.178185][ C1] default_idle_call+0x72/0xb0 [ 455.178202][ C1] do_idle+0x36a/0x5f0 [ 455.178223][ C1] ? __pfx_do_idle+0x10/0x10 [ 455.178241][ C1] ? do_idle+0x5c7/0x5f0 [ 455.178259][ C1] cpu_startup_entry+0x43/0x60 [ 455.178276][ C1] start_secondary+0x101/0x110 [ 455.178291][ C1] common_startup_64+0x13e/0x147 [ 455.178319][ C1] [ 455.348113][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 455.355000][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 455.364135][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 455.374300][ T30] Call Trace: [ 455.377577][ T30] [ 455.380498][ T30] vpanic+0x56c/0xa60 [ 455.384521][ T30] ? __pfx___schedule+0x10/0x10 [ 455.389375][ T30] ? __pfx_vpanic+0x10/0x10 [ 455.393871][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 455.400021][ T30] panic+0xc5/0xd0 [ 455.403740][ T30] ? __pfx_panic+0x10/0x10 [ 455.408153][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 455.413517][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 455.419686][ T30] watchdog+0x102c/0x1030 [ 455.424120][ T30] ? watchdog+0x1c9/0x1030 [ 455.428555][ T30] kthread+0x389/0x470 [ 455.432625][ T30] ? __pfx_watchdog+0x10/0x10 [ 455.437295][ T30] ? __pfx_kthread+0x10/0x10 [ 455.441893][ T30] ret_from_fork+0x514/0xb70 [ 455.446497][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 455.451609][ T30] ? __switch_to+0xc79/0x1410 [ 455.456289][ T30] ? __pfx_kthread+0x10/0x10 [ 455.460876][ T30] ret_from_fork_asm+0x1a/0x30 [ 455.465643][ T30] [ 455.469264][ T30] Kernel Offset: disabled [ 455.473582][ T30] Rebooting in 86400 seconds..