last executing test programs: 3m19.686695966s ago: executing program 2 (id=3449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000101000010000000000000000840080000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000001400020073797a32000000000400010073797a3000001700080005400000000e0a01020000000000000000010000000900000080100001800400305a15baa64793aa3dc8e529660280715d0180008e9c4fc63546d07d797a3000a7d200140000001000010000000000e6ff0000000000000000"], 0xc8}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x31, "1312026f8c3904a7ddbbd3c8f8e27107c983a6ff0f64f8d2f8b9bc90f6ae129b01f628306090389f811317656fd88d52a4"}, &(0x7f0000000080)=0x39) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x3ff, 0x9, 0xb, 0xd536, 0x6, 0x2, 0x1ff, 0x0, r2}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000101000010000000000000000840080000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000001400020073797a32000000000400010073797a3000001700080005400000000e0a01020000000000000000010000000900000080100001800400305a15baa64793aa3dc8e529660280715d0180008e9c4fc63546d07d797a3000a7d200140000001000010000000000e6ff0000000000000000"], 0xc8}}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x31, "1312026f8c3904a7ddbbd3c8f8e27107c983a6ff0f64f8d2f8b9bc90f6ae129b01f628306090389f811317656fd88d52a4"}, &(0x7f0000000080)=0x39) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x3ff, 0x9, 0xb, 0xd536, 0x6, 0x2, 0x1ff, 0x0, r2}, 0x20) (async) 3m19.602490773s ago: executing program 2 (id=3450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x44, r1, 0x101, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='%'}, @chandef_params, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x2, 0x1, 0x0, {0x800, 0x0, 0x0, 0x3c0, 0x0, 0x1, 0x0, 0x2}, 0x400, 0x2009, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4890}, 0x4010) 3m19.484075298s ago: executing program 2 (id=3451): syz_emit_ethernet(0x3b6, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x2, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f026"}, {0x21, 0x7, "b8a3e100906e61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015c883747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e7ff6f50ca0ee2ebcac4da3574ab0b8f14c4b7a94fe18e8860"}]}}}}}}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) (async) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x8371, 0x5}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0x5}, {0x1, 0xfff1}}, [@filter_kind_options=@f_flower={{0xffffffffffffff49}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_CT_LABELS={0x0, 0x61, "70f1c844e48fc771ad47929783d1e45c"}]}}]}, 0x44}}, 0x24000041) (async) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m19.245973026s ago: executing program 2 (id=3452): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x40, 0x80, 0x9, 0x10001, {{0x26, 0x4, 0x0, 0x5, 0x98, 0x65, 0x0, 0x8, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x32}, {[@lsrr={0x83, 0xf, 0x11, [@empty, @empty, @remote]}, @timestamp_addr={0x44, 0x44, 0xe9, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@rand_addr=0x64010102, 0x4}, {@remote, 0x1}, {@multicast2, 0xe9}, {@rand_addr=0x64010102, 0x9}, {@private=0xa010102, 0x6}, {@local, 0x5}, {@broadcast, 0x2e}]}, @timestamp={0x44, 0x1c, 0x8a, 0x0, 0x0, [0x921, 0x7a5, 0x10001, 0x2000000, 0x6, 0x4]}, @rr={0x7, 0x13, 0x4, [@empty, @local, @private=0xa010101, @rand_addr=0x64010101]}]}}}}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000008500000000000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r5}, 0x90) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_ext={0x1c, 0x25, &(0x7f0000000840)=@raw=[@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x30}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ldst={0x3, 0xc63bf194e6653d5c, 0x3, 0x6, 0x7, 0x6, 0x4}, @exit], &(0x7f0000000980)='GPL\x00', 0x427b4454, 0xb4, &(0x7f00000009c0)=""/180, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0x10, 0xffffffff, 0x3}, 0x10, 0x21193, 0xffffffffffffffff, 0x0, &(0x7f0000000b00)=[0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffff000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000cc0)={0xffffffffffffffff, 0x1000}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000dc0), &(0x7f0000000e00)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000e80), &(0x7f0000000ec0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xe, &(0x7f0000000180)=@raw=[@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xffffebee}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb307, 0x0, 0x0, 0x0, 0x6}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x2b4, 0xf9, &(0x7f00000005c0)=""/249, 0x41100, 0x2, '\x00', r3, @fallback=0x36, r4, 0x8, &(0x7f00000007c0)={0x3ff, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x2, 0x9, 0x4}, 0x10, r6, r7, 0x5, &(0x7f0000000f80)=[r8, r9, r10, r11, r12, r13], &(0x7f0000000fc0)=[{0x3, 0x5, 0xb, 0x9}, {0x0, 0x3, 0x2, 0x2}, {0x2, 0x4, 0x5}, {0x4, 0x4, 0x3}, {0x2, 0x3, 0xa, 0xf}], 0x10, 0x100000}, 0x94) listen(r2, 0x80) accept$netrom(r2, &(0x7f0000000000)={{0x3, @rose}, [@rose, @default, @default, @default, @remote, @null, @rose, @rose]}, &(0x7f0000000080)=0x48) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502ddffff0800010073797a300000000008000240000000032c000000030a01010000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$FIOCLEX(r1, 0x5451) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x158, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x11c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'wg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x180}}, 0x0) r15 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0x49}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x4}, @TCA_CODEL_CE_THRESHOLD={0xffffffffffffff79}]}}]}, 0x44}}, 0x0) 3m18.24547799s ago: executing program 2 (id=3460): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd00000a000000740000006809c2b4000333ff00000000000020000000000000000000ff020000000000000000000000000001"], 0x9e) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=ANY=[], 0x18}}], 0x1, 0x0) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @local}}, 0x24) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x870b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$packet(0x11, 0x3, 0x300) clock_gettime(0x5, &(0x7f0000000040)) sendto$packet(r7, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000040)="6003f9b7b7a5251ed3a8b1dc2896cdf2493b8ac936bd35c00be0022d837a83fbe2044ef3a1d89a91aa07c5d3770aa06dbd735ebc616b5bd882f9c0be9864c9cb379ad6b4b39116dc4fda0b50913b7d7fb739e88a3e517c3d5eae3f62f529fe52e99dc1ce8b8629d4f8b1856c509ea01f23c1e7572035372ab4a0e0254d9114d39c0f", 0x82}, {&(0x7f0000000140)="f25657ab0974a8c23f890d90e90152729f128d63f9f0cca07ea8ef38f4e6724ddae27c6fd2e04905c16ae7477408e64cacfac32cbcfe4227345ae298d9775a77032b21d532526550e671716855f86212b8f832724327c1d4165c92ecb0e4b1fb29293434935d45dc21b488264dc7f9f0dd17ae1b81c7618553a2781778e01fb8cd0dac206986bd4c299adb267dc6eb9ce15f3211e1de2bb970b11d2ab08e7e755705ad6be47b67162ee92420c6323c4d12a78384d5b1b56a9992d8dc072f83890fb15331d721e043b264abf1c99c7c2255b7e25536058dbf0a2bea7766d2636c0c", 0xe1}, {&(0x7f0000000240)="1b69ceb1aa56c6383dd13c654f4093ae0cc88216585304a8c83bc98734bedf0f8916995b69cccd600e940007efa7cc45fefff62b26007b64daf05f7fb208f52bd950a58db08550e4b75340c02620b5c9efe82ce899be55dea2f6e7283815c0405b3c73ea2cfff24002dc1259d23bcd6daae60ae1e4ab6b943d353b10b769bfcb06386c0db811cdceb591da98a9573e84fa8d561a911cc31101c994ad941efb7049a51f6763ae34958dfcbf9ddc461256c68991692718f37a394f348f7496a130f0f5f259aba52bb628fbe8", 0xcb}, {&(0x7f0000000340)="6fec6208c0232576dd2257deb4f3706987d03c30b066898c1bd03c2dd33956b3668904ac45eee334c5aeea81532247738a8a07132e238cfc742601300821a2cda1fece49ec4835a639ca87307215ffe0eb9a73df3f8db6c6117807859c35e20d41d8d047affe2435036836c248911dccf7a7504f9132a9a6b7b54c642eb0fbf067a46b3b45ce8c036eeda686dfc6eafa18674f", 0x93}, {&(0x7f0000000400)="89b9e117c5f9161d5f62c96120808904feff9c02bc59bd04b029e7d7e153a94a6bf13c559590a7da2344cdb9bbd2d9eab6a849c1b527dfb47b25c611644392188478633719e71541a8584ab86f8bcd54c245470d0de774c2c8fd1b45a82cd977db988048729c61ed87a609e457b1c908b53d91db9adaf611fcf3c8024aa8e4e1d8ae9c2bea51ce920a1f8409989eb5040901a493b05ce6a14703d4d010c1f96f89bf5b4274d61d35827a856c6933cd9ed5a92725b57fa55f264f38867a35601a3259c6fffcc37d85bc8264", 0xcb}, {&(0x7f0000000500)="4ad91f8fa218a78a0eace7353e19fab08a6162d026cd04b3e49d49ff212dacdd0e9b5d941e1e87b0d1", 0x29}, {&(0x7f0000000540)="bc820e39edf025523cacbee3eb2f067da8252fd272921f8d61aa", 0x1a}], 0x7, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @private=0xa010101}}}], 0x38}, 0xc845) 3m17.570145771s ago: executing program 2 (id=3465): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x4}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0xa}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048001}, 0x4044) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x4010, r5, 0xe44a0000) (async) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r8 = epoll_create1(0x80000) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000001200)={0x60000010}) (async) epoll_pwait(r8, &(0x7f0000000280)=[{}], 0x1, 0x7, 0x0, 0x0) (async, rerun: 32) shutdown(r7, 0x0) (rerun: 32) 3m2.698487019s ago: executing program 32 (id=3465): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x4}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0xa}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048001}, 0x4044) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x4010, r5, 0xe44a0000) (async) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r8 = epoll_create1(0x80000) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000001200)={0x60000010}) (async) epoll_pwait(r8, &(0x7f0000000280)=[{}], 0x1, 0x7, 0x0, 0x0) (async, rerun: 32) shutdown(r7, 0x0) (rerun: 32) 1m44.789841032s ago: executing program 0 (id=3883): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0xfffffffffffffeeb}]}, 0x18}, 0x1, 0x0, 0x0, 0x40c0}, 0x44010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408b, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1m44.713932476s ago: executing program 0 (id=3885): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000000c0)=0x3, 0x4) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async, rerun: 32) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async, rerun: 64) sendmsg$sock(r1, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x30}, 0x40000) (async, rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0xfffffffb, 0x0, 0x1, 0x5, '\x00', 0x0, r0, 0x2, 0x4, 0x2}, 0x50) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000200)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) write$cgroup_devices(r4, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000380)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x13, 0xe, &(0x7f0000000280)=@raw=[@map_idx={0x18, 0x3, 0x5, 0x0, 0xfffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xd}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0xf}, 0x94) 1m44.62440789s ago: executing program 0 (id=3888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="940000000002010400000000000000000200000020000280140001a00800010000000000080002007f00000106000340000200003c0003802c00018014000300000000000000000000000000000000001400040000000000000000000000ffffe00000010c00010000000000240001801400018008000100ac1e000108000200ac1414020c000280050001"], 0x94}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000080)=ANY=[@ANYBLOB="130000001900010000000000ffdbdf251d010900"], 0x24}, 0x1, 0x0, 0x0, 0x20048c04}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000080)=ANY=[@ANYBLOB="130000001900010000000000ffdbdf251d010900"], 0x24}, 0x1, 0x0, 0x0, 0x20048c04}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) 1m44.474379269s ago: executing program 0 (id=3890): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=@acquire={0x128, 0x17, 0x200, 0x70bd2b, 0x25dfdbff, {{@in=@private=0xa010101, 0x4d4, 0xff}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {@in=@loopback, @in=@local, 0x4e23, 0x2, 0x4e22, 0x0, 0x2, 0x20, 0x80, 0x11, 0x0, 0xee01}, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x37, 0x4e21, 0x48, 0x2, 0x20, 0x20, 0x32}, {0x7fffffffffffffff, 0x721b, 0x7, 0x80000000, 0x5, 0x7, 0x5, 0x3}, {0x81, 0x4, 0x5}, 0x10, 0x6e6bb8, 0x0, 0x0, 0x1, 0x3}, 0x800, 0x40, 0x10000, 0x70bd2c}}, 0x128}, 0x1, 0x0, 0x0, 0x2000}, 0x41) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x174}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'vxcan1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000540)={'gretap0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) r14 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x8044) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r14, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) close(r14) 1m44.252451612s ago: executing program 0 (id=3895): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r1, 0xf482ae2867f7f3b6, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x74}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]]}, 0x58}, 0x1, 0x0, 0x0, 0xc002}, 0x20000081) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x1402, 0x400, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0, 0x46, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x69, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000800)={@ipv4={""/10, ""/2, @remote}, 0x0}, &(0x7f0000000840)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000900)={'gretap0\x00', &(0x7f0000000880)={'gretap0\x00', 0x0, 0x1, 0x7, 0x92, 0x7, {{0x9, 0x4, 0x2, 0x12, 0x24, 0x68, 0x0, 0x4, 0x2f, 0x0, @private=0xa010102, @remote, {[@generic={0x88, 0xe, "a2786edd3d616d8ac6aa196a"}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'ip6_vti0\x00', 0x0, 0x4, 0xf, 0xc0, 0x101, 0x14, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x40, 0x6, 0x7}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ac0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000bc0)={'gre0\x00', &(0x7f0000000b00)={'syztnl2\x00', 0x0, 0x7800, 0x80, 0x5, 0xe, {{0x1c, 0x4, 0x1, 0x0, 0x70, 0x65, 0x0, 0x4, 0x2f, 0x0, @broadcast, @local, {[@ssrr={0x89, 0x17, 0x5f, [@local, @private=0xa010100, @empty, @local, @loopback]}, @cipso={0x86, 0xc, 0x4, [{0x5, 0x6, "e94fb1c6"}]}, @ssrr={0x89, 0xf, 0xa7, [@remote, @multicast1, @private=0xa010100]}, @lsrr={0x83, 0x27, 0x35, [@multicast2, @empty, @multicast2, @multicast2, @private=0xa010100, @empty, @dev={0xac, 0x14, 0x14, 0x44}, @empty, @multicast1]}, @end]}}}}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={0xffffffffffffffff, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000c00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x40, &(0x7f0000000cc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0x83, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001200)={0xffffffffffffffff, 0xe0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0], 0x0, 0x4e, &(0x7f0000001000)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001040), &(0x7f0000001080), 0x8, 0x69, 0x8, 0x8, &(0x7f00000010c0)}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001240)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001300)={'syztnl1\x00', &(0x7f0000001280)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x80, 0x10000, 0x10, @remote, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xc017, 0x20, 0x6, 0x7fff}}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001340)={0x0, @empty, @broadcast}, &(0x7f0000001380)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001440)={'syztnl0\x00', &(0x7f00000013c0)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x80, 0x2, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x7800, 0x1, 0x800}}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001480)={'veth1_virt_wifi\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001600)={'gretap0\x00', &(0x7f0000001500)={'syztnl1\x00', 0x0, 0x40, 0x1, 0x2a5, 0x1, {{0x2b, 0x4, 0x1, 0x0, 0xac, 0x64, 0x0, 0x1, 0x2f, 0x0, @broadcast, @private=0xa010102, {[@noop, @cipso={0x86, 0x5c, 0x1, [{0x7, 0x4, 'zg'}, {0x1, 0x6, "5e7af302"}, {0x0, 0x9, "92db823300e01a"}, {0x6, 0xf, "485e9677e5580a49eee6eda756"}, {0x2, 0x12, "c4ad1b6d612d22426248764a679b6349"}, {0x2, 0x4, "7aad"}, {0x6, 0xa, "05b1f57bd8b2dc16"}, {0x7, 0x5, "d136c8"}, {0x0, 0xf, "6a5e41fb0288490a1ac87a6d86"}]}, @noop, @noop, @noop, @noop, @ssrr={0x89, 0x23, 0x16, [@multicast1, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x37}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @end, @lsrr={0x83, 0x13, 0x98, [@local, @multicast2, @loopback, @loopback]}]}}}}}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001640)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001f00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001680)={0x80c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x140, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x724}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x17c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xbb8f}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}]}}, {{0x8, 0x1, r20}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xc0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r21}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r23}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r24}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r25}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x80c}, 0x1, 0x0, 0x0, 0x4001}, 0x800) 1m44.138417532s ago: executing program 0 (id=3897): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) connect(r1, &(0x7f0000000040)=@in6={0xa, 0x4e23, 0x2, @loopback, 0x401}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) (async) connect(r1, &(0x7f0000000040)=@in6={0xa, 0x4e23, 0x2, @loopback, 0x401}, 0x80) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) 1m29.067915032s ago: executing program 33 (id=3897): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) connect(r1, &(0x7f0000000040)=@in6={0xa, 0x4e23, 0x2, @loopback, 0x401}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) (async) connect(r1, &(0x7f0000000040)=@in6={0xa, 0x4e23, 0x2, @loopback, 0x401}, 0x80) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) 1.581315731s ago: executing program 3 (id=4817): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.418680462s ago: executing program 3 (id=4820): r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@sco={0x1f, @none}, &(0x7f0000000140)=0x80, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0x3, 0x2) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) r6 = accept$alg(r5, 0x0, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}]}}}]}, 0x3c}}, 0x0) (async) sendmmsg$alg(r6, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8dfec6af2ae8080b56c53c12b8431d17955ae1ec78709eee9acf825fdb672651f7eafb44b576930aff4b6a86ced3e4392cfe57a2c11b97e93f38debd6dc69f3a50d5742daa7081df08bd8118dcd6d9d18830c7d79d8", 0x6c}, {&(0x7f00000000c0)="23ade41881a1e7ca07379924e2cb53138ec1e2ac415947eb6c7f56119ff98596d7469564e6d7c49134d1d57bf4cf20e6ba85156f3c5aa55a181146316537eceea0fff85f05333feea12645495ffa", 0x4e}, {&(0x7f0000000140)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a23", 0x34}, {&(0x7f0000000180)="fe6abb1be48e556b473cabd427d746ca7d9bbf4f24ec7659b1c254940281f0a248dfc8c103fad1369a53e3402210b77170735064ceae5fcf381d21cc8960440e0a459705262c4c53065f369fe8e63bc7650112b91fdccaceff93fd8cdab5a479b9614318eebc5a609b633b114fe330c840cc077cd6a6f6ca2bca0cc48c06177e0bc3b7fe6320e9f2e5a824d74aa3cccac383bacd0a126a58fa999675ad5c41c171807570ac0501332c2794950f4633a074325e58cd43d58340513dbc10eaaf4ff3c4b8d98621267d8b1abdbf01d7de9a86c2d4373dd907da5a", 0xd9}, {&(0x7f0000000280)="1b1eb47967b88f89e960c59413baaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c1d3f6607ce5a2183a169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0ff662c2c83431c0c2e2ece5ca6a104d1d45c1c15ca4d75cab6b1bb92", 0x6a}], 0x5}], 0x1, 0x4814) (async) recvmmsg(r6, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000340)=""/21, 0x15}, {&(0x7f0000000400)=""/151, 0x97}, {&(0x7f0000000680)=""/246, 0xf6}], 0x4}, 0x3}], 0x1, 0x2001, 0x0) (async) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, r8, 0x301, 0x70bd31, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x14840}, 0x40844) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) shutdown(r2, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r10, @ANYBLOB="08000500", @ANYRES32=r10, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) (async) syz_emit_ethernet(0x3a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb810010000800", @ANYRES32=0x41424344], 0x0) (async) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xfce) 1.323307762s ago: executing program 4 (id=4821): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001400078008000640200000000800134000"], 0x64}}, 0x0) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) mmap(&(0x7f0000ff6000/0x7000)=nil, 0x7000, 0x2000004, 0x4000010, r1, 0x80664000) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x1e, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x84}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 1.32221418s ago: executing program 5 (id=4822): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.277568278s ago: executing program 3 (id=4823): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0006"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x4}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.153728881s ago: executing program 4 (id=4824): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000600), &(0x7f0000000640)=r3}, 0x1c) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff7fff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r2, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048000) syz_emit_ethernet(0x42, &(0x7f0000000340)={@broadcast, @random="0000060000ff", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d0800090003", 0x17}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, &(0x7f0000000040)={0x2, 0xfffffffffffffff9}) 1.153557496s ago: executing program 3 (id=4825): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) close(0x4) 1.122901981s ago: executing program 5 (id=4826): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) (async) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@initdev, @in6}}, {{}, 0x0, @in6}}, &(0x7f0000000600)=0xe8) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) (async) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xa1, "b6c08a4561c85a2fb313061e978c66ef"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40c41}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x24, 0x64, 0xf31, 0xf7fffffb, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0, 0x8}, {0xd, 0xffff}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0xe8, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_AF_SPEC={0xc8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x8, 0x0, 0x0, 0x5}, {0x8, 0xd, 0x0, 0x0, 0x2}]}}, @AF_INET6={0x50, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET={0x50, 0x2, 0x0, 0x1, {0x4c, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0xda}, {0x8, 0xf, 0x0, 0x0, 0x8}, {0x8, 0x6, 0x0, 0x0, 0x4}, {0x8, 0x21, 0x0, 0x0, 0x5}, {0x8, 0x6, 0x0, 0x0, 0x1}, {0x8, 0x1e, 0x0, 0x0, 0x101}, {0x8, 0x1c, 0x0, 0x0, 0xf}, {0x8, 0x4, 0x0, 0x0, 0x6}, {0x8, 0x21, 0x0, 0x0, 0x4d}]}}]}]}, 0xe8}}, 0x20004808) 1.053324601s ago: executing program 3 (id=4827): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000100000001dcdf250100000008000100", @ANYRES32=r7, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5], 0x5c}, 0x1, 0x400000000000000}, 0x40810) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r12 = socket$packet(0x11, 0x3, 0x300) splice(r11, 0x0, r12, 0x0, 0x10500, 0x0) close(0x4) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r9) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r14, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r15, 0x10, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004081}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r17 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r13, 0xd66771a5e8224ded, 0x3, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r16}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r17}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb965cd8ca87617d6}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r16}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c0800}, 0x20004080) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="3fab000046d43ab2f39252"], 0x14}}, 0x0) 950.568613ms ago: executing program 5 (id=4828): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x8, 0x1, 0x6, 0x5, {{0x16, 0x4, 0x3, 0x8, 0x58, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, @loopback, {[@end, @timestamp_prespec={0x44, 0x14, 0xb, 0x3, 0x0, [{@private=0xa010102, 0x5}, {@multicast2, 0x9}]}, @timestamp_prespec={0x44, 0x2c, 0xda, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}, {@private=0xa010100, 0x1}, {@empty, 0x4}]}]}}}}}) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x6000}, 0xc, &(0x7f0000000800)={&(0x7f0000000400)={0x3f8, 0x13, 0x200, 0x70bd2c, 0x25dfdbfc, {0x1e, 0x5d, 0x98, 0x0, {0x4e22, 0x4e20, [0x3, 0x7, 0x1, 0x3], [0x3, 0xb2f2], r1, [0x5, 0x3cf61731]}, 0x800, 0xf280000}, [@INET_DIAG_REQ_BYTECODE={0xe0, 0x1, "799382acafe445ad426d8565345378900d37c8f1dd585cef6907c59ac16e4cb4a01e780a13bb18cb6f24a4642a8b789549eecd003106ad55a73b066fd1f59faa2e9af429f503c9623ce290334eab2e285d7554829e7d4dadd34b712937454e1356d0cc9d02fb2823ae6cd58536b5f9392aaaccfc74f69919613faaf9e2baa2f44319f79160df9709655a0442b49f99035939931bd92f413dbd5514f1e6f9bb081b48d45e555c52031348118660e7a8a9cfe72dca8508f1217f4cc93b3605db9e7e66f5469241287360c764eceeb4414cfedcbd466a57a9129bef3998"}, @INET_DIAG_REQ_BYTECODE={0xaf, 0x1, "227f6dac4738c5331db9b705a5ec67fefaea2527f695ca45387780f496059452784d58d1a6bb1d237001df3f160c2af32c2499853e0e3c11bc09c1c8dee5c40fe36ee074c887c840538dfd306cad7e97138abd2507b2c8d9b993b9048e84aebbbfc3c270649f3ef1360585e1100384cf6b06b39650f140932f7352a274df9b6f7d5911572c0c10c76c6a685ffb057b129df2d1dc4c5b2280b87f54ca51508216fec84c4f345906402d0ce9"}, @INET_DIAG_REQ_BYTECODE={0x40, 0x1, "cfe7ae2dad1c276a908502b158dcaadedabaa725d3c6a444c710433f0faa9242330a773747def5a4f873c10a6c7ac89b1d805aa5bf6e7d9d5ef38aed"}, @INET_DIAG_REQ_BYTECODE={0x37, 0x1, "1c205ae13ddfec97528bbcb15800fe612deccd6ff425a487235a6d3a96fb8edd881bfaf88b0e9bdfb61c9c1f736cb7bfb78e3e"}, @INET_DIAG_REQ_BYTECODE={0xb8, 0x1, "4312cc3aa277e010fa1c44741771705241ed2340a46cbc083e23899a377ef01f696031fe94403f9eb259a17bcc8150959457fce9a77c37d43845bb5b5fdc9da4f0d1edda7e5d08bfb1348718c3f39825be8a97067b1aebf843935fc6f864c7ca32811764615bb26e479513d6622dd8b4149b24f31cb0aeeaa7bc7fc6e4e20acd609a3e501730cffaa4dc940daffe028884511988fc32d3b1116a90ac5ab93cb42a0ece312c7d580755f91e38ce7b0d5e5696e076"}, @INET_DIAG_REQ_BYTECODE={0xe9, 0x1, "b4b47bdaae6dfa351647c40f14197306fe19777f18957f300f152541e6ca2685b4e680938c3055e5f54573d92da26baa2384e60b9e422b76b50ff551eb308b2f4209116e828860eb834c3ef1c0b1d80e8abf5fe59ad453c178c18035b808845ae4a8600525b29f40cae1860ec3651bd912c23342fd88dcb70b547e02ec86d7788dbf348487f582fc56f6d4cca42d69038bf4d2e0d133aa84246527d62fae7acf58f71aa333af32e87ec32b15a02a0780a41bcfba2ca6b0f791fbd241cf7bf50fd666645f5e45629232377ddad6b59d709538599ee798510e56fd14d9a03499e3cdcb1234e0"}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x20000002}, 0x40400) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0xd, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000011}, 0x4000000) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x8, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x841) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000006000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000200900020025647a31010000000900010073797a30000000000800054000000021"], 0xc4}}, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000880)=@sack_info={r6, 0x52792ec0, 0x7}, 0xc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000008c0)=@assoc_value={r5, 0x1}, 0x8) 949.923576ms ago: executing program 6 (id=4829): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x29, 0x4b, 0x0, &(0x7f0000000040)) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) getsockopt$inet6_int(r2, 0x29, 0x4b, 0x0, &(0x7f0000000040)) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) (async) 861.821292ms ago: executing program 4 (id=4830): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="600030800500020000000000140004"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 855.682589ms ago: executing program 1 (id=4831): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x188, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x4cb9}, {0xc, 0x90, 0xf997}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x4c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0xe59f}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc}, {0xc, 0x90, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x56c}, {0xc, 0x90, 0x6}}]}, 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x8005) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10, 0x20000000, 0xc7, 0x4e, 0xbf, {0x50, 0x0, 0xc, 0x9, 0x907, 0x6}, {0x8, 0x1, 0x3, 0x6, 0x6}, 0x1017, 0x5, 0x5}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 730.589883ms ago: executing program 5 (id=4832): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f0000000200)={0x27, 0x0, 0x0, 0x3, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3d}, 0x60) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r6, &(0x7f0000000200)={0x27, 0x0, 0x0, 0x3, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3d}, 0x60) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001c00010029bd7000fedbdf2507000000", @ANYRES32=r8, @ANYBLOB="7700000a0a000200aaaaaaaaaa0c"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r9 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001418000000120800040043000000a80016000a0001400600d4c140e99d5a57dfcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8004cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed92d2f52eb233dcb9ef3d93452a", 0xd8}], 0x1}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="0380c6000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa030490781200183f2500000000000000000100007f0000013e00000100186e71ae9b1c03d6ada6"], 0x0) 718.282955ms ago: executing program 1 (id=4833): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000200000000000018110000", @ANYRES32=r0, @ANYBLOB="00000000000000002702000014000000b703000000000000850000009c000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) (async) accept4(r1, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000200000000000018110000", @ANYRES32=r0, @ANYBLOB="00000000000000002702000014000000b703000000000000850000009c000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) (async) 699.324425ms ago: executing program 6 (id=4834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b04000000000000000002000000eb0023d9eca29672fb707301d6f2460900020073797a32000000006c00048068000b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a86091f523c7000000000000006422a6330a000100484d41524b00000008000240000000000900010073797a30000000000000"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 578.773869ms ago: executing program 5 (id=4835): r0 = socket(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006000600800a000006002000800a000004000280ab43214e9e582f4cc7906033056dd52199530bd425ba6318ee0eeea9c0376bd42e8edbe28da90fdd257fde2c6af92ffbeffa357d43b325ea9fbaec1bcac7a5c6c909be93c45e0d95106ed3edc4b3d8b89a323b6473913dc89a68e1c103bd9dd3d7053ad131baf725971922a78091963acd"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)={@val={0x0, 0x4305}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@hopopts={0x11}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, '*zc', 0x3ff, 0x0, 0x1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@routing={0x2f, 0x10, 0x1, 0xa3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @local, @private2, @empty, @private0, @empty, @remote, @private1={0xfc, 0x1, '\x00', 0x1}]}, @hopopts={0x3a, 0x1d8, '\x00', [@generic={0x2, 0xebf, "c9ac4a70ba84646eba50f5859f31f4d9286aaa1792ed14ee4547c4956d4a971cbb5943ff64def2e0d1ded05bd5360357e2296fe1969dda8dda4c22b408f36fa9304a55e25c397d7549ced7ea2a33d05664862232e0c905d4787a86f07900b5e46bafb81c0172b1a37f80d45da7d7db810f0ce8cf826a145c82e35954006a0983dc7ea81e60c7fc155f021fd73f84c23b5a2fffed1a8a6557200050872970c9c98557b169f6da6be0c8e68640cc68607cf8aae3cd6769f0d553e7b5637b912f421157bc5e0a561ec9afe882b9555df4e2fb81b44925179b6021ad454c87a8fcd5e995696ff452611f000126d09297b3b8ed118dd6aa049f386fa0805cdbd997e6dd1622e5c9715458b79e11a9117a786b86a332ad123bbbe1854d4b4a4f1894a52b045516d73880e6be6f2ab043d75f145ebf5ea5ce7fc48fc6fef5d3668b5e68b394e596f44e08b70f966da035f95ad9fce927f6cf9431ab0e918622cb409a58effbbbd81760159a00010765b80e651d81d3850f1ea176347f1672f8d0c9f995c300c97563eeb8dd8bc9d39d40040ed36c0beb6d760f975944a7991739fa296c23c80a2f50c55d69c3741aeeac2e2ff5ba1331adee3590ffa1da2eda6406d8bfa19bc633582baa5f4e85383c6dcee60e47558f43dd6ec67522084c07b6739b391a9728cee6e86ad90c6ec699a5ff20511625e0fc207c405efd1993535116766cc2d29e427dac73da1338211d075cbc352321530b6b98346ade12f626c0be812d2eb571b0bd3c4b335d797bb37bd3826db203e3c89ded2a6d6f95f1744410a0da344329d3bd0cabbfa8e22ec43a8ae8ce43ed8facf77c4f0709e84c8f31d0612485475ae27a3302ecfc04172553c019c3c29a134ec62b4f5ae1c49674af502b2076c4d2e9ed108147135072472fd321dbbe32e15f123d7c9229ad7edc90b0ad3e1dc2ee48a7f384e0271c91c44a0a508df345fbebf9559ad6e3496593ef62139aa5723033209fd80f807638d5b24088e8cb896b499d6d872d42a8d938a77651c28cef73f00ada83257742e08c8c79aef569198542584b408ada5df6f0096ec9a6a8c78fd6d78c5c0944845a5fbcb1936e16a59f05ac6d82c6c2c99c9cae379ece8ddf805e618a61e35361cc4c83b5a07dafe2fe96c7599d6de1a3c5035c77a86b021b72d81bff0c2b6f9665840bf8c98debc219d3d75d451b60293f099ed171c5e566d2591e4bd507a51b925d09aa3ce8c7b8f56d1e35158839484e663de76545c818b0ea8646120eca0b75da4c0e648ae0d56aa168b19f48460923d8d38d3cd570a4c9d6ae1af48b28964db4d5eb89aa2845b8bdddd89f9272ad3e5d04e5624089ae1d124b0eef9ad7ebae1ea2557f946e2a824ed497d45826f26f089fabd54be895fece37564a13f716451a3cb549bece785de9ffa233c8cd10591986b5e5d2bd7349d508b6b504fff44ca31f386383b9da747d0c688bfde3725ebe669571340addd8f83157cdd04bfa060a6b9446e6231d235ecc28ff84ec9f6882bf1eefba15d7b1e47f3233a9dba73c6a027dc9be90e21892545b5d0a4402e9b69b82658b5f8a05977f4b385854814747655b0795e738723ef152b6b3199c41521c8bd86a9d3868b2a969697301b5fbca39bf541849ace04ed8b1b481a3bc80baeaece999cd09a828ae1471482a74cd5e63bb5c80c20050c053fe22fe7375267f84370f0ef1832732f1e0c49b9689d2911d1ea925db9cfce33e9b69d05f6d605e6fce75f65940136f5f55dfe7a8983a9edbc086937ec9f4100bb3e874c075f3d6caeaf46780bcc104dd83825ae45fd5a423d743d817b95e432ba28d994d65883c0532d208f6e90d951de4780b741b4810feee7d3dbd75267666b98510792533ad80bc57d3d6970d2e38504e76c6cc2cf4fb6e1358d49a1a0a30c0bc0d07d29845d9cb2371861fb9f01eb064a18f9e61a5682ef07c31ff8fb1050211fa22f01ef57f042a95756796d4c853360915e5e9c408bc09874d9bcf300c47d74a16c7b85842e22b5734bb84fb4de5dc241708408cb2b379d55be7dc8085f32fd1726a7e6c2fd58041e695596e0c2806c81906d33029c120d7c7e7f145680668fee3e5f010798364713d8c87832a51a934dcd448ac6cd35856ccc3e27c21ff9e25f1cb710d2b1796f637479fa32b003f110b0e2ac9c153941dad387a9edc7c16f50823bcd98a8618cc8735cbaa521a3d6484fc842b9185c740337838e12cf13c9efde323e8bbd33965d2bc435dcdb0cc7c26bf407063ca7a254c33800dd06b191b871fe6b2aae140d1cc1d6f22c1e5c4bc025375b77d3c4edc4cfb9dc558a9ae4814ed5dc83ad963fb590af7c109d2d35df528fa898ac5ea4db299c563fcc7d722a97d68a8e3f7771e5fff804f623ff0b2f25231bbd50ba1bc3a4d4ed857aaef212601bfdb0e183fd85f607e5cccbd4c8452b9b1e4c8376a687a59d34ac1c2dc20645a59efbc022bbd0f30999aafd2796ab3deaf29d0ce9bad1d1eda5f34dfd24cf05c8f3298566d255f75ec91919248c99abe29d5c9879758f68808f2a24dfeb386328dae00d06286a0d46b6b7ea117ad7fdbb5d9f833abf36984190a45bbeb9cd2e45af3f9077b208147e798370bd9e5373881ffa94267b82fc7cc4f11b5258cf219950a5a5732fbe10d385e9053c6fd7b5cc3098aedba588a2b619bc54e7f12228b907aea4f4544c65990baaad1b522635dfe5bb6b71721707f815d7a8ee24c8328d67b46e199c0e5c0c7fdb44b3e9defd5726317f74f4cb87909b00f1f4df8858a980a86f87d27dcf33d6d89bc4c7ec088a7270aff9470d7ef12835eddb86f7471af31e8f2cde0cf102d9c9df7cbf1064d1f61acc5897959df60a6e2861c90316c36f20cfb25d069a21a28441003ea5530e842e6112bc90d3cf67184c063bb33182b59aa49c97eee50f6141ba81518b95963b66f20a7296e911ad472e79ffa926feb2e5c5da5e97ff007445beff0c8711a90c7c7525d48e463c30997d530cab0a845ac173f399effcf6af84f50c6319a1ce3565eef74df335cab14daa748ce2037364d90a2ba428d56d5b3b602b2030ea6b721ffb19078bcfe3bbcace66fb3058745b92ff01de9ddb4dd4e0e460b090bc3983946c007e5f465cd9869cd67c5bcd5881c4557c81c69289bca96d4dc4f4cfa421547d5d5c92279b996173704616c1d50e2016efaee7acfb01c56323bad976ffb39f7d3407f7995742a63751a746e6ef6035923e4e879d92ec3e5d2390fe363270cfdadb75f1db87a71d2343229ec140cf75a25e98a298c98c22fd144b675e5fcf39115b243d8c29ab8d6f7c87a7313481fb99bdeb759072cc9a6ec5153d94298bbfdf80bc3075a503c232e3be025004d281d3478bcbdd0f5549be09fca89da7d0e34af97302607c20c464e034c6428cbe326c07615b39fc72ab6f254c7aad6102f813b9623c6a7601b6ea29f84e86999b1287bd111bfa49672c886cca6eb8786eefc96a84cb0aa04ee0334d3fe23a0cef39078bce8f22cc35eeb2fcbe22280df1209ffb05347cbc3611915e7fedbdc752c658c199b23b3346367cc5a68be6a79069a188f6a6efb2d2aaa387ebed66eeb411b9094254041932876a1120a4ae1d20dfaa8709c62828a3ee332cbbe997b6eae047bd493535a25042e1fb3f2b2933c17f6ef96c1793c0ff79fe740b9282416e5e65ef58254055e38afa2e8cec89274f4e542153896baae0e50c37c83bf1034a5b722c874652182954d271991110e43333a48fd85f9b3427915ff9bd2e3b5342858fd2d86801d1cddb55b66bda6c7df3b04ceeae4a7ce74391255ede63695046d8c27241514ceebbc0a5e6a119f7830600385c3b67583ad2e48f8517c4f31349d2d3535a71b1ba2543fca666e1a06f62ce20557ef459e419e0534feec1958cd6fb5c4413eaa1c7e7a64cb19f6a592fd74def605d69a5e6fe14ad77f60ef0424a8f6b7026c1f4b493c71b6428a826fa731022276888b0dd9fcf6dd67cfdfd2fd1765c3c5d9c5fe4d2012bf8217b9dc91b583d945f70d0df13d3b3380200f02753e86f0de109129586629db95d829235e0db826de6e17c830c1aeca17573cbf95cd18c92b8e12c57e93e189d25fe6e71c32526f82e52de09355ca7f5105a61e059d5924d227119175714b5ab610b8dfa9c53d0b4105481bd5f3d47dd6d9d0eee798d7e38644ecd4971b2663a8c628cf51016597eb2c70640a0fea463f9012eca14e957b4280866ad8490fe7c3db57cd40684dc5655bafdd28e8a24217ca96e6ea1ded591b0b8f0cc9f79059fca8c22a884fab4be708e50a38ed1c0350015f3e4326f0af07c57b31d13868167e6ae776f3203f9f03b316233a4d7045b4652b506238a9be0b68b54e6bc52cc1c0894fbfe5071616170ca4895f6636f9be5df32e09f7429c7569aa42715809969b3f8a88080f57155b4c0cbe54039fa8996c4614657a9e4c4b1eafaaf0a663c0d461380ecd907688668d119c0361c6ac486cda549521ad2702d54053e4c2747e710399e235fc8defe54c64218915598c14de35cec58f24328d950ba6548595bc4b9e6c45e3ccdaed1b1dfe9ae3e7dfa2e768d75d7408242d0c504ef2fa583703d8509e5520db9692003b34c9e4ed48aabaa6908cf599667a4ce679ccbadd440900bd917522eeecd73dc2d90446db4d7d40323ec7971477d061fbd6d1c6434c8614ef7a909f46acb4657c4828601a30b993cd9c1b14215674471fceb9777917d6b3cf6c217d453d01ae5007f7ed70f92aaddae11d2f9bcb5854c1292303c3324fef63eff0a3e7ed487310c81a23bb2f89f68a44af31ffc759827b9855fbc6b9e1321bdbed45679c14d5d72b89a7e684ca8fb434352632533b622c8b5ebd162148c301496c0a18fbf31f10e2319020f5f59e81050f21bbed6b007775bc87b3f0ef643d0294dc7db502a0a45d3c68024fad13885d0212fc96067b2de27c2ec471b201cd50f38fc777a6123931e148c4d888097e6ea4f379ff69ba12cda93b2f48ffbb7286395232a4a78094014fbf8f5b1ae3d0ac780efad2721b2996711f6c3ff54468028fc8fcab62fdd160e1e0b18a8b1726dc1bdf34c2ee35ece720716f01f495eb9adc8361e6bcd0f7fdf7a21abb2ea14ab6563f6a9e580c3e5dd0ee7dcaf5d36f04696ddae6b36039cc611020c783504fa233179397f40dee4199528bd2adf4dd0037d0709fcb0c989ed2a26b0b6d475d6c3e25ef26a87d8b25974ed4a84453df731a3d3d496a4807b5ebc5f310dfa6b72f52634cb5705cca5253899ab69035290a0e1f78d148b80c35cac0275c8a5bab51670e7aca0120"}]}], "ab0924172f9c2a1d"}}}}}}, 0xfce) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet6(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000240)=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r9, &(0x7f0000000640)="06", &(0x7f0000000440)=@tcp=r8, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03076804268c989e140088a8", 0x0, 0x4ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r10, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000340)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d0012"], 0x184}}, 0x0) recvmsg(r1, &(0x7f0000001580)={&(0x7f0000001280)=@hci, 0x80, &(0x7f0000001480)=[{&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000001380)=""/167, 0xa7}, {&(0x7f0000001440)=""/48, 0x30}], 0x3, &(0x7f00000014c0)=""/139, 0x8b}, 0x41) 545.739344ms ago: executing program 1 (id=4836): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="780000000300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdffffff0100"/28], 0x50) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa0}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) (rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f00000000c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) (async, rerun: 32) r1 = socket(0x10, 0x3, 0x0) (rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000520001002bbd7000000000000200000008000700"], 0x1c}}, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 509.646926ms ago: executing program 4 (id=4837): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x200000}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_cred(r1, 0x1, 0x11, 0xfffffffffffffffd, &(0x7f0000000280)=0x7f) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000140)) listen(r2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000001140)=0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) sendmsg$802154_dgram(r6, &(0x7f0000002480)={&(0x7f0000002380)={0x24, @long={0x3, 0x2}}, 0x14, &(0x7f0000002440)={0x0}}, 0x4040044) 426.519758ms ago: executing program 6 (id=4838): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000100)='\xaa\xaa\xaa\xaa\xaa', 0x400, &(0x7f0000000280)={@_ha_fsid={[0x0, 0x5]}, {0x1, 0x1, 0xd7, 0x4}}, 0x10, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0xffff}) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000000600", 0x1c) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'ip6_vti0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xe8, r2, 0x200, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000800) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x2) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={0x0, @vsock={0x28, 0x0, 0x2710}, @qipcrtr={0x2a, 0xffffffff, 0x4000}, @l2={0x1f, 0xff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1ff, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)='veth0_macvtap\x00', 0xd, 0x6}) sendto$inet(r6, &(0x7f0000000d40)='<', 0xffdc, 0x24040005, 0x0, 0x0) recvmmsg(r6, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}, 0xb43}], 0x1, 0x22, 0x0) 398.381618ms ago: executing program 1 (id=4839): r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0xfffffffc, &(0x7f00000000c0)={[0x200]}, 0x8) (async) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0xfffffffc, &(0x7f00000000c0)={[0x200]}, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xe, 0x401, 0xfffffff2, 0x7, 0xa89}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0x0, 0x8d2e, 0x3, 0x6, 0x6bd}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001740)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x4000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000825b0748c1b1c182e6228140a8e8a848ee7d89ed831b66935003eef20bf864f94bb4b98762dc175bbd95753a71bfc02821b72a6ce74cedd8afd834b0151b", @ANYRES16=r4, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="1c005e8010000100ffffffff00ffff000008000200fcffffff000000"], 0x38}, 0x1, 0x0, 0x0, 0x1000000}, 0x4c041) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x1, 0x706, 0x16, @private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, 0x700, 0xbec, 0x5f35}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x1, 0x706, 0x16, @private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, 0x700, 0xbec, 0x5f35}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) (async) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x47}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x2b}, @exit]}, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x9a, &(0x7f0000000300)=""/154, 0x41000, 0x4, '\x00', r5, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x5, 0x7, 0x5, 0x200}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000500)=[0x1], &(0x7f0000000540)=[{0x0, 0x3, 0xb, 0xb}, {0x5, 0x1, 0x2, 0xa}, {0x2, 0x4, 0xe, 0xb}, {0x0, 0x3, 0x7, 0xa}, {0x4, 0x5, 0xb, 0x2}, {0x3, 0x3, 0x6, 0x7}, {0x3, 0x3, 0xa, 0x9}]}, 0x94) 335.117751ms ago: executing program 6 (id=4840): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18060000000000000000000000000000711076000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073790900000000000900010073797a30006d29b8dc000a40000000042c000000080a01080000000000000000010000000900020073797a32000000000900010073797a30"], 0xa8}}, 0x0) 333.489776ms ago: executing program 4 (id=4841): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000078c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000007980)={0x0, 0x0, &(0x7f0000007940)={&(0x7f0000007900)={0x24, r0, 0xccd495925cefb39, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x45}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x200040c0}, 0x800) (async) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "85f32f0a887130ebcad580f09d2604bb988cab295c5c7527d853d26cd74e83dd", "1cdde36751077a0258c5398b1f749e8f84542562f9023beb958bbe8fd36ccfb9", "28dd038b866b5ce68575f1eafc63bf169b1959a0718b9254945e6539a6af90e3", "b1148921ee9dd79fb881abd54c7e275e6c5b0273215b6ca5887aa46c91cbd211", "52b289bfc4d317e1e36be35d98d657ccbce94bf4f44b9aa90640146c0542331d", "0993d43fc40f59b0f334108b", 0x2, 0x1, 0x0, 0x9, 0x6}}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x10, &(0x7f0000000080)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9}, @tail_call, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x613}, @jmp={0x5, 0x1, 0x4, 0x4, 0x2, 0x0, 0x8}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x81}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, &(0x7f0000000280), 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xf, 0x5, 0x811a}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000340)=[0x1, 0xffffffffffffffff, r3], &(0x7f0000000380)=[{0x2, 0x3, 0x10, 0x2}, {0x3, 0x3, 0xe, 0x4}, {0x4, 0x4, 0x9, 0x1}, {0x3, 0x1, 0x10, 0x2}], 0x10, 0xffff}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000500)=r5, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a4c000000060a010400000000000000000200000a9aff04801c0001800000010074756e6e656c000000000640000000000000000200000a400000000114000000010000000000000000000200000a"], 0x74}}, 0x4) 210.367834ms ago: executing program 6 (id=4842): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x2000c800) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, &(0x7f0000000100)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="c3ff", 0x2}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x300) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r7) sendmsg$IEEE802154_SCAN_REQ(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)={0x1c, r8, 0xd5c15c672e322a81, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@getchain={0x2c, 0x66, 0x100, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x5, 0x7}, {0xb, 0x3}, {0x5, 0xe}}, [{0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000100"/20, @ANYRESDEC, @ANYRES64], 0x44}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) 209.499331ms ago: executing program 4 (id=4843): socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0x9}, {&(0x7f0000000040)="1af3a4f5e8e00bbb128deda636283397eccb9a9698bae4b0abe5a66dd8506328f13662bd0f9282d36c717a62da20686f6b0de8ecdf1e57800e3a9328db37cd67ed49bb025109a00f5927de7770a13d70a8d9a1b6158819bfb94a4cc47662f57ba058677f42e44987a2dbdeaf2a2cfd1f0bcc65532880a8f444", 0x79}], 0x2, 0x0, 0x0, 0x1f000000}, 0x7565bf581e95b363) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2082) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 181.316885ms ago: executing program 5 (id=4844): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000100)=0x2be628de19587dbc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000000000)=0x18000) sendmsg$nl_route_sched(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000300)=@deltaction={0x1a0, 0x31, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1e7}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x24, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffb}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x1a0}}, 0x0) read$alg(r2, &(0x7f0000002200)=""/4138, 0x102a) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000b, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 169.771992ms ago: executing program 1 (id=4845): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffc}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8fffdffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 75.048157ms ago: executing program 3 (id=4846): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x1ff, {{0x2, 0x4e24, @loopback}}, 0x0, 0x7, [{{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e24, @rand_addr=0x64010100}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e22, @loopback}}]}, 0x410) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x1, 0x2ce, [0x0, 0x200000000480, 0x2000000006ee, 0x20000000071e], 0x0, &(0x7f0000000440), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0x3, 0x1, [{0x13, 0x55, 0xd, 'macsec0\x00', 'caif0\x00', '\x00', 'batadv_slave_0\x00', @multicast, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @broadcast, [], 0x6e, 0x10e, 0x23e, [], [@common=@log={'log\x00', 0x28, {{0xff, "06a6c1126b8a484b464afb8aa1761c38701196def315b1395596af77058d", 0x4}}}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x2, {0x3}}}}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x9, 'system_u:object_r:ipmi_device_t:s0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x346) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000800)={'vxcan0\x00'}) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000840)={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x28}}, 0xc) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000880), &(0x7f00000008c0)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)=@ipv4_newroute={0x24, 0x18, 0x400, 0x70bd2d, 0x25dfdbfb, {0x2, 0x80, 0x10, 0x5c, 0xfe, 0x4, 0xc8, 0x0, 0x1000}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8005) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000a40)={0x0, 0x4}, &(0x7f0000000a80)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000ac0)={r4, 0x8001}, &(0x7f0000000b00)=0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r2) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x20, r5, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x39}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x40, r7, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3d}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004841}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)=@getnetconf={0x14, 0x52, 0x4, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x44) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x38, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x24000804) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x3c, r5, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x12, 0x34, @random="07f878c5c2e1be15eacde8fab1fa"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d590cd0de28b619025ab5856f1a52341"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x6001) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r8, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x28, r9, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x2048040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001280)={r3, 0x58, &(0x7f0000001200)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000012c0)={r10, 0x1, 0x10}, 0xc) openat$cgroup_ro(r3, &(0x7f0000001300)='cgroup.events\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2002000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x20, 0x2, 0x8, 0x201, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008801) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001480), r8) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x24, r11, 0x900, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfffffff7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001680)={&(0x7f00000015c0)={0x90, r5, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0xd}}}}, [@NL80211_ATTR_KEYS={0x4c, 0x51, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "e1682e8c7affae04ffe7975676"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_SEQ={0xb, 0x4, "743c64cda8f517"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8}]}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}]}, 0x90}, 0x1, 0x0, 0x0, 0x24000841}, 0x8880) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) 44.409417ms ago: executing program 6 (id=4847): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000080), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c0002800500010000000000028005000100000000002c00018014000300fc01000000000000000000000000000014000400fe8000000000000000000000000000aa08000740000000003800068014000500200100000000000000000000000000040001000000000014000400"/199], 0xcc}}, 0x0) 0s ago: executing program 1 (id=4848): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3cfaffff0f001fff0100000000000000182a6a04bdbf62ec00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): 41] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 346.253807][T17041] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 346.278808][T17041] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 346.288509][T17041] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 346.301888][T17256] netlink: 'syz.0.3117': attribute type 2 has an invalid length. [ 346.313776][T17041] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 346.353834][T17269] netlink: 'syz.3.3119': attribute type 2 has an invalid length. [ 346.564188][T17041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.597120][T17041] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.631686][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.639009][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.691109][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.698453][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.821851][T17286] : renamed from bond0 (while UP) [ 347.058093][T17298] netlink: 'syz.3.3124': attribute type 12 has an invalid length. [ 347.185036][T17041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.266535][T17041] veth0_vlan: entered promiscuous mode [ 347.303992][T17041] veth1_vlan: entered promiscuous mode [ 347.459081][T17041] veth0_macvtap: entered promiscuous mode [ 347.509918][T17041] veth1_macvtap: entered promiscuous mode [ 347.620707][T17317] F: renamed from ip6_vti0 (while UP) [ 347.636265][T17317] F: entered allmulticast mode [ 347.659937][T17041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.715507][T17041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.752201][ T6761] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.781597][ T6761] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.876762][ T6761] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.908100][ T6761] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.336878][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.344777][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.500659][ T6758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.509481][ T6758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.709858][T17373] unsupported nlmsg_type 40 [ 348.782514][T17373] syzkaller1: entered promiscuous mode [ 348.793674][T17373] syzkaller1: entered allmulticast mode [ 349.316330][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 349.334952][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 349.357561][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 349.377374][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 349.390571][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 349.998666][ T5841] syz_tun (unregistering): left allmulticast mode [ 350.117007][T17423] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 350.360069][T17398] lo speed is unknown, defaulting to 1000 [ 350.436388][T17439] __nla_validate_parse: 74 callbacks suppressed [ 350.436412][T17439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3158'. [ 350.659105][T17443] netlink: 'syz.2.3160': attribute type 18 has an invalid length. [ 350.727449][T17445] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3161'. [ 350.742254][ T6758] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.751309][ T6758] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.762059][ T6758] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.796810][ T6758] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.932625][T17398] lo speed is unknown, defaulting to 1000 [ 351.132210][T17473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3167'. [ 351.249156][T17471] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 351.293877][T17484] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3168'. [ 351.304626][T17484] netlink: 'syz.0.3168': attribute type 9 has an invalid length. [ 351.333186][T17484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3168'. [ 351.357963][T17485] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3168'. [ 351.473003][T17398] chnl_net:caif_netlink_parms(): no params data found [ 351.497236][ T5831] Bluetooth: hci0: command tx timeout [ 351.635087][T17494] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3171'. [ 351.674167][T17494] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.3171'. [ 351.848361][T17398] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.856154][T17398] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.863628][T17398] bridge_slave_0: entered allmulticast mode [ 351.871805][T17398] bridge_slave_0: entered promiscuous mode [ 351.883631][T17398] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.890943][T17398] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.902695][T17398] bridge_slave_1: entered allmulticast mode [ 351.911138][T17398] bridge_slave_1: entered promiscuous mode [ 352.233307][T17398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.347345][T17398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.491558][T17535] macvtap1: entered promiscuous mode [ 352.506124][T17535] vlan0: entered promiscuous mode [ 352.520413][T17535] macvtap1: entered allmulticast mode [ 352.526196][T17535] vlan0: entered allmulticast mode [ 352.531975][T17535] veth0_vlan: entered allmulticast mode [ 352.561982][T17398] team0: Port device team_slave_0 added [ 352.583156][T17398] team0: Port device team_slave_1 added [ 352.684327][T17398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.705329][T17398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.777240][T17398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.807679][T17398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.837069][T17398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.864718][T17546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3181'. [ 352.934171][T17398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.107265][T17398] hsr_slave_0: entered promiscuous mode [ 353.114226][T17398] hsr_slave_1: entered promiscuous mode [ 353.149260][T17398] debugfs: 'hsr0' already exists in 'hsr' [ 353.155173][T17398] Cannot create hsr debugfs directory [ 353.180009][T17555] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3181'. [ 353.200669][T17561] netlink: 'syz.2.3185': attribute type 2 has an invalid length. [ 353.430433][T17563] vxcan7: entered promiscuous mode [ 353.454887][T17563] netlink: 'syz.4.3186': attribute type 29 has an invalid length. [ 353.577101][ T5831] Bluetooth: hci0: command tx timeout [ 353.632647][T17398] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.672608][T17544] delete_channel: no stack [ 353.705933][T17545] sctp: [Deprecated]: syz.3.3180 (pid 17545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 353.705933][T17545] Use struct sctp_sack_info instead [ 353.738605][T17573] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 353.759688][T17545] sctp: [Deprecated]: syz.3.3180 (pid 17545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 353.759688][T17545] Use struct sctp_sack_info instead [ 353.844466][T17398] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.999830][T17398] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.190812][T17398] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.512691][T17606] netlink: zone id is out of range [ 354.523885][T17606] netlink: zone id is out of range [ 354.529359][T17606] netlink: zone id is out of range [ 354.536172][T17606] netlink: zone id is out of range [ 354.542207][T17604] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ1 [ 354.577579][T17606] netlink: zone id is out of range [ 354.594896][T17606] netlink: zone id is out of range [ 354.601208][T17606] netlink: zone id is out of range [ 354.609302][T17606] netlink: set zone limit has 4 unknown bytes [ 354.660630][T17398] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 354.690928][T17613] openvswitch: netlink: Message has 1 unknown bytes. [ 354.722014][T17398] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 354.745371][T17398] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 354.764060][T17398] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 354.773117][T17617] syzkaller1: entered promiscuous mode [ 354.780547][T17617] syzkaller1: entered allmulticast mode [ 354.791184][T17398] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 354.803171][T17398] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 354.816507][T17398] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 354.838191][T17398] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 354.859642][T17617] netlink: 'syz.3.3201': attribute type 1 has an invalid length. [ 354.987014][T17617] bond0: entered promiscuous mode [ 354.992688][T17617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.050040][T17617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.058178][T17617] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 355.069284][T17617] bond0: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 355.082933][T17617] bond0: (slave ip6gre1): making interface the new active one [ 355.090884][T17617] ip6gre1: entered promiscuous mode [ 355.100157][T17617] bond0: (slave ip6gre1): Enslaving as an active interface with an up link [ 355.140568][T17642] netlink: 'syz.2.3204': attribute type 1 has an invalid length. [ 355.148357][T17641] syzkaller0: entered promiscuous mode [ 355.148420][T17641] syzkaller0: entered allmulticast mode [ 355.265582][T17398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.299256][T17398] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.319804][ T6761] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.327043][ T6761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.376329][ T6761] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.383587][ T6761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.460247][T17653] __nla_validate_parse: 9 callbacks suppressed [ 355.460273][T17653] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3207'. [ 355.632138][T17663] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠźu ™crµ±K:‘Ł˙ĚĄÝBŤßÝŁ| “ĽÚ [ 355.668767][ T5831] Bluetooth: hci0: command tx timeout [ 355.877053][T17398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.963655][T17676] netlink: 'syz.3.3215': attribute type 16 has an invalid length. [ 355.979160][T17676] netlink: 'syz.3.3215': attribute type 3 has an invalid length. [ 355.995990][T17676] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3215'. [ 356.027829][T17398] veth0_vlan: entered promiscuous mode [ 356.042757][T17398] veth1_vlan: entered promiscuous mode [ 356.084643][T17398] veth0_macvtap: entered promiscuous mode [ 356.101804][T17398] veth1_macvtap: entered promiscuous mode [ 356.164377][T17398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.201371][T17398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.236484][ T1154] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.256163][ T1154] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.309093][T17693] syzkaller1: entered promiscuous mode [ 356.329820][T17693] syzkaller1: entered allmulticast mode [ 356.346187][ T1154] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.369755][ T1154] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.731768][T17711] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.3224'. [ 356.754933][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.764862][T17711] net_ratelimit: 3 callbacks suppressed [ 356.764884][T17711] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 356.787172][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.893417][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.906432][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.135053][T17724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3227'. [ 357.404338][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 357.418405][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 357.448864][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 357.465545][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 357.474254][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 357.740996][T17753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.752666][ T5831] Bluetooth: hci0: command tx timeout [ 358.664818][T17793] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3244'. [ 358.678329][T17792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3244'. [ 358.694467][T17738] lo speed is unknown, defaulting to 1000 [ 358.953169][T17798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3245'. [ 359.125690][T17738] lo speed is unknown, defaulting to 1000 [ 359.301599][T17814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3250'. [ 359.315118][T17809] xt_addrtype: ipv6 does not support BROADCAST matching [ 359.345189][T17816] netlink: 4240 bytes leftover after parsing attributes in process `syz.2.3251'. [ 359.355197][T17814] netlink: 'syz.3.3250': attribute type 1 has an invalid length. [ 359.359781][T17816] netlink: 'syz.2.3251': attribute type 1 has an invalid length. [ 359.472477][T17825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3252'. [ 359.509239][T17814] bond1: entered promiscuous mode [ 359.514810][T17814] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.566049][T17821] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 359.579914][T17821] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 359.593884][ T5831] Bluetooth: hci4: command tx timeout [ 359.656290][T17816] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 359.677268][T17738] chnl_net:caif_netlink_parms(): no params data found [ 359.876614][T17831] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 360.098247][T17738] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.105624][T17738] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.113461][T17738] bridge_slave_0: entered allmulticast mode [ 360.122048][T17738] bridge_slave_0: entered promiscuous mode [ 360.152640][T17738] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.160134][T17738] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.168852][T17738] bridge_slave_1: entered allmulticast mode [ 360.177580][T17738] bridge_slave_1: entered promiscuous mode [ 360.268331][T17859] tipc: Started in network mode [ 360.273307][T17859] tipc: Node identity 46ce6088a1ec, cluster identity 4711 [ 360.281469][T17859] tipc: Enabled bearer , priority 0 [ 360.302737][T17866] netlink: 'syz.2.3262': attribute type 3 has an invalid length. [ 360.320317][T17738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.334246][T17738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.433721][T17738] team0: Port device team_slave_0 added [ 360.473235][T17859] tipc: Disabling bearer [ 360.485568][T17738] team0: Port device team_slave_1 added [ 360.530125][T17871] __nla_validate_parse: 4 callbacks suppressed [ 360.530149][T17871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3263'. [ 360.581318][T17738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.594224][T17738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.680610][T17738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.697658][T17881] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3266'. [ 360.713854][T17885] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3266'. [ 360.798291][T17888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3264'. [ 360.812510][T17738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.820391][T17738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.875385][T17738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.903336][T17892] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3267'. [ 360.955333][T17892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3267'. [ 361.032443][T17738] hsr_slave_0: entered promiscuous mode [ 361.042495][T17738] hsr_slave_1: entered promiscuous mode [ 361.050818][T17738] debugfs: 'hsr0' already exists in 'hsr' [ 361.056998][T17738] Cannot create hsr debugfs directory [ 361.120956][T17899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3270'. [ 361.187159][T17903] netlink: 'syz.0.3271': attribute type 16 has an invalid length. [ 361.195071][T17903] netlink: 'syz.0.3271': attribute type 17 has an invalid length. [ 361.323975][T17909] netlink: 'syz.1.3272': attribute type 2 has an invalid length. [ 361.347864][T17909] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3272'. [ 361.659807][ T5831] Bluetooth: hci4: command tx timeout [ 362.969645][T17903] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.982253][T17903] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.059916][T17903] macvlan0: left promiscuous mode [ 363.084334][T17914] netlink: 'syz.2.3273': attribute type 1 has an invalid length. [ 363.091805][T17903] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 363.102420][T17903] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 363.267647][T17914] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 363.347921][T17924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3276'. [ 363.434787][T17921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3275'. [ 363.737039][ T5831] Bluetooth: hci4: command tx timeout [ 364.052379][T17949] netlink: 'syz.3.3280': attribute type 12 has an invalid length. [ 364.203072][T17958] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 364.389616][T17964] netlink: 'syz.0.3282': attribute type 11 has an invalid length. [ 364.572464][T17927] lo speed is unknown, defaulting to 1000 [ 364.952323][T17982] netlink: 'syz.0.3286': attribute type 1 has an invalid length. [ 365.033202][T17982] bond1: entered promiscuous mode [ 365.039626][T17982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 365.088398][T17738] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 365.100567][T17738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 365.110844][T17738] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 365.153495][T17738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 365.184325][T17738] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 365.196301][T17738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 365.210955][T17927] lo speed is unknown, defaulting to 1000 [ 365.217605][T17738] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 365.231140][T17738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 365.382583][T17995] syzkaller0: entered promiscuous mode [ 365.390967][T17995] syzkaller0: entered allmulticast mode [ 365.608170][T17738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.662387][T17738] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.691810][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.699178][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.719418][T18003] netlink: 'syz.3.3290': attribute type 3 has an invalid length. [ 365.727778][T18003] netlink: 'syz.3.3290': attribute type 3 has an invalid length. [ 365.743030][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.750339][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.822776][ T5831] Bluetooth: hci4: command tx timeout [ 365.876934][T17738] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 365.887928][T17738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.275594][T18014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.366485][T17738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.131474][T17738] veth0_vlan: entered promiscuous mode [ 367.172386][T17738] veth1_vlan: entered promiscuous mode [ 367.260866][ T1604] block nbd5: Possible stuck request ffff888026678000: control (read@0,1024B). Runtime 120 seconds [ 367.274060][ T1604] block nbd5: Possible stuck request ffff888026678200: control (read@1024,1024B). Runtime 120 seconds [ 367.286183][ T1604] block nbd5: Possible stuck request ffff888026678400: control (read@2048,1024B). Runtime 120 seconds [ 367.298191][ T1604] block nbd5: Possible stuck request ffff888026678600: control (read@3072,1024B). Runtime 120 seconds [ 367.335325][T17738] veth0_macvtap: entered promiscuous mode [ 367.370330][T17738] veth1_macvtap: entered promiscuous mode [ 367.403720][T18051] netlink: 'syz.1.3301': attribute type 11 has an invalid length. [ 367.412338][T18051] __nla_validate_parse: 3 callbacks suppressed [ 367.412359][T18051] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3301'. [ 367.462126][T18054] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3302'. [ 367.474921][T17738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.489711][T18052] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3301'. [ 367.489711][T18051] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3301'. [ 367.522115][T17738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.541141][T18054] netlink: 'syz.3.3302': attribute type 4 has an invalid length. [ 367.555878][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.570417][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.597531][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.606467][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.658581][T18053] delete_channel: no stack [ 367.795426][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.813054][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.925933][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.944270][T18066] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3305'. [ 367.950191][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.045470][T18066] syzkaller0: entered promiscuous mode [ 368.067666][T18066] syzkaller0: entered allmulticast mode [ 368.162115][T18075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3308'. [ 368.189928][T18075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3308'. [ 368.230121][T18078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.365592][T18083] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 369.130764][T18105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3319'. [ 369.226111][T18110] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3321'. [ 369.302894][T18115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3320'. [ 369.366915][T18119] netlink: 'syz.4.3322': attribute type 1 has an invalid length. [ 369.381479][T18115] netlink: 'syz.1.3320': attribute type 10 has an invalid length. [ 369.392870][T18119] netlink: 'syz.4.3322': attribute type 1 has an invalid length. [ 369.402060][T18115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.428611][T18115] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 369.491823][T18119] team0: Device ip6gre1 is of different type [ 369.938494][T18141] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.189319][T18147] bond0: (slave batadv0): Releasing backup interface [ 370.242561][T18147] bridge_slave_0: left allmulticast mode [ 370.249425][T18147] bridge_slave_0: left promiscuous mode [ 370.255342][T18147] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.339498][T18147] bridge_slave_1: left allmulticast mode [ 370.345290][T18147] bridge_slave_1: left promiscuous mode [ 370.351491][T18147] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.389486][T18147] bond0: (slave bond_slave_0): Releasing backup interface [ 370.451801][T18147] bond0: (slave bond_slave_1): Releasing backup interface [ 370.490479][T18147] team0: Port device team_slave_0 removed [ 370.524278][T18147] team0: Port device team_slave_1 removed [ 370.542814][T18147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.576072][T18147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.595855][T18147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.615344][T18147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.643236][T18147] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 370.717879][T18158] netlink: 'syz.0.3334': attribute type 10 has an invalid length. [ 370.751249][T18158] batadv0: entered promiscuous mode [ 370.756645][T18158] batadv0: entered allmulticast mode [ 370.763707][T18158] bridge0: port 3(batadv0) entered blocking state [ 370.785991][T18158] bridge0: port 3(batadv0) entered disabled state [ 371.083170][ T1154] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 371.093435][ T1154] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 371.105776][T18181] IPVS: set_ctl: invalid protocol: 46 10.1.1.2:20002 [ 371.255185][T18185] bond2: invalid ARP target 0.0.0.0 specified for addition [ 371.314626][T18185] bond2: option arp_ip_target: invalid value (0) [ 371.387176][T18185] bond2 (unregistering): Released all slaves [ 371.489613][T18212] netlink: 'syz.1.3347': attribute type 10 has an invalid length. [ 371.777438][T18212] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 372.113525][T18235] netlink: 'syz.2.3351': attribute type 5 has an invalid length. [ 372.576513][T18266] syzkaller1: entered promiscuous mode [ 372.589971][T18266] syzkaller1: entered allmulticast mode [ 372.827761][T18287] netlink: 'syz.1.3368': attribute type 3 has an invalid length. [ 372.835575][T18287] __nla_validate_parse: 9 callbacks suppressed [ 372.835595][T18287] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3368'. [ 373.313304][T18315] netlink: 'syz.1.3379': attribute type 1 has an invalid length. [ 373.346869][T18315] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3379'. [ 373.374452][T18315] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3379'. [ 373.405170][T18315] netlink: 'syz.1.3379': attribute type 1 has an invalid length. [ 373.415198][T18315] netlink: 'syz.1.3379': attribute type 8 has an invalid length. [ 373.423709][T18318] sctp: [Deprecated]: syz.3.3377 (pid 18318) Use of int in maxseg socket option. [ 373.423709][T18318] Use struct sctp_assoc_value instead [ 373.436153][T18315] netlink: 606 bytes leftover after parsing attributes in process `syz.1.3379'. [ 373.454646][T18310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3377'. [ 373.468867][T18321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3380'. [ 373.480240][T18311] netlink: 'syz.1.3379': attribute type 1 has an invalid length. [ 373.497540][T18311] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3379'. [ 373.512955][T18311] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3379'. [ 373.543910][T18311] netlink: 'syz.1.3379': attribute type 1 has an invalid length. [ 373.566783][T18311] netlink: 'syz.1.3379': attribute type 8 has an invalid length. [ 373.581421][T18321] vlan2: entered allmulticast mode [ 373.586871][T18311] netlink: 606 bytes leftover after parsing attributes in process `syz.1.3379'. [ 373.587895][T18321] bridge3: entered allmulticast mode [ 373.651392][T18321] bridge3: port 1(bond2) entered blocking state [ 373.659516][T18321] bridge3: port 1(bond2) entered disabled state [ 373.668512][T18321] bond2: entered allmulticast mode [ 373.677602][T18321] bond2: entered promiscuous mode [ 373.838401][T18336] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3384'. [ 374.016090][T18347] netlink: 'syz.3.3386': attribute type 30 has an invalid length. [ 374.572817][T18374] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 374.598557][T18374] bond2 (unregistering): Released all slaves [ 375.203425][T18399] openvswitch: netlink: IPv4 tun info is not correct [ 375.583244][ T1604] block nbd3: Possible stuck request ffff8880265d9400: control (read@0,1024B). Runtime 60 seconds [ 375.594510][ T1604] block nbd3: Possible stuck request ffff8880265d9600: control (read@1024,1024B). Runtime 60 seconds [ 375.605868][ T1604] block nbd3: Possible stuck request ffff8880265d9800: control (read@2048,1024B). Runtime 60 seconds [ 375.617836][ T1604] block nbd3: Possible stuck request ffff8880265d9a00: control (read@3072,1024B). Runtime 60 seconds [ 375.860125][T18432] x_tables: duplicate underflow at hook 1 [ 375.907853][T18426] macvtap1: entered promiscuous mode [ 375.937233][T18426] vlan0: entered promiscuous mode [ 375.984094][T18426] macvtap1: entered allmulticast mode [ 376.005800][T18426] vlan0: entered allmulticast mode [ 376.024890][T18426] veth0_vlan: entered allmulticast mode [ 376.418928][T18461] netlink: 'syz.0.3422': attribute type 12 has an invalid length. [ 376.472513][T18461] netlink: 'syz.0.3422': attribute type 29 has an invalid length. [ 376.773557][T18486] Bluetooth: MGMT ver 1.23 [ 377.007398][T18499] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 377.014624][ T29] IPVS: starting estimator thread 0... [ 377.015457][T18500] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 377.117661][T18506] IPVS: using max 26 ests per chain, 62400 per kthread [ 377.194833][T18513] Bluetooth: MGMT ver 1.23 [ 377.429869][T18503] lo speed is unknown, defaulting to 1000 [ 377.862711][T18534] bond3: (slave gretap1): making interface the new active one [ 377.871455][T18534] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 377.890011][T18537] bridge0: port 4(syz_tun) entered blocking state [ 377.923896][T18537] bridge0: port 4(syz_tun) entered disabled state [ 377.956636][T18537] syz_tun: entered allmulticast mode [ 378.046957][T18537] syz_tun: entered promiscuous mode [ 378.089486][T18503] lo speed is unknown, defaulting to 1000 [ 378.433716][T18552] __nla_validate_parse: 10 callbacks suppressed [ 378.433741][T18552] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3451'. [ 378.755153][T18561] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3453'. [ 378.805970][T18559] vlan3: entered allmulticast mode [ 378.814320][T18563] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3454'. [ 378.830908][T18559] bond0: entered allmulticast mode [ 378.841135][T18559] bond_slave_0: entered allmulticast mode [ 378.850463][T18559] bond_slave_1: entered allmulticast mode [ 379.005135][T18561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.037360][T18561] bond_slave_0: left allmulticast mode [ 379.072596][T18561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.104663][T18561] bond_slave_1: left allmulticast mode [ 379.176887][T18561] bond0 (unregistering): Released all slaves [ 379.285331][T18579] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3457'. [ 380.042467][T18619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.105950][T18622] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3468'. [ 380.183326][T18626] bond0: Error: Cannot enslave bond to itself. [ 380.306414][T18634] vlan1: entered allmulticast mode [ 380.324373][T18634] veth0_vlan: entered allmulticast mode [ 380.638082][T18646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3476'. [ 380.666095][T18646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3476'. [ 380.786990][T18656] validate_nla: 2 callbacks suppressed [ 380.787013][T18656] netlink: 'syz.1.3477': attribute type 2 has an invalid length. [ 381.124240][T18669] netlink: 'syz.3.3482': attribute type 4 has an invalid length. [ 381.167677][T18676] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3483'. [ 381.307510][T18686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3486'. [ 381.355618][T18691] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3488'. [ 381.559479][T18695] tipc: Enabling of bearer rejected, failed to enable media [ 381.564461][T18701] netlink: 'syz.3.3489': attribute type 12 has an invalid length. [ 381.938489][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.947443][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.968434][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.987089][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.044324][T18731] gretap1: entered promiscuous mode [ 382.050790][T18731] batman_adv: batadv0: Adding interface: gretap1 [ 382.058397][T18731] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 382.078738][T18731] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 382.546317][T18738] lo speed is unknown, defaulting to 1000 [ 382.780647][T18738] lo speed is unknown, defaulting to 1000 [ 382.959160][T18766] erspan0: entered allmulticast mode [ 383.182656][T18771] netlink: 'syz.0.3509': attribute type 13 has an invalid length. [ 383.218867][T18771] netlink: 'syz.0.3509': attribute type 13 has an invalid length. [ 383.770019][T18801] __nla_validate_parse: 5 callbacks suppressed [ 383.770044][T18801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3515'. [ 383.855107][T18804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3518'. [ 384.006739][T18806] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3519'. [ 384.043408][T18804] macvtap1: entered promiscuous mode [ 384.050625][T18804] vlan0: entered promiscuous mode [ 384.056179][T18804] macvtap1: entered allmulticast mode [ 384.062683][T18804] vlan0: entered allmulticast mode [ 384.068204][T18804] veth0_vlan: entered allmulticast mode [ 384.369099][T18823] netlink: 'syz.0.3524': attribute type 1 has an invalid length. [ 384.575140][T18837] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3530'. [ 384.623565][T18838] syzkaller0: entered promiscuous mode [ 384.632808][T18838] syzkaller0: entered allmulticast mode [ 384.747309][T18844] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3532'. [ 384.884667][T18851] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3534'. [ 384.907332][T18848] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3533'. [ 384.924485][T18854] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3534'. [ 385.241428][T18864] syzkaller0: entered promiscuous mode [ 385.255560][T18864] syzkaller0: entered allmulticast mode [ 385.409684][T18881] netlink: 'syz.3.3541': attribute type 24 has an invalid length. [ 387.236627][ T5196] udevd[5196]: worker [10012] /devices/virtual/block/nbd3 is taking a long time [ 387.843189][T18940] sctp: [Deprecated]: syz.1.3547 (pid 18940) Use of int in max_burst socket option. [ 387.843189][T18940] Use struct sctp_assoc_value instead [ 388.045617][T18957] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3553'. [ 388.085728][T18957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3553'. [ 388.161242][T18968] xt_HMARK: spi-set and port-set can't be combined [ 388.359181][T18985] netlink: 'syz.1.3560': attribute type 4 has an invalid length. [ 388.431209][T18985] netlink: 'syz.1.3560': attribute type 4 has an invalid length. [ 388.729639][T18999] netlink: 'syz.1.3565': attribute type 3 has an invalid length. [ 388.822686][T19003] __nla_validate_parse: 6 callbacks suppressed [ 388.822712][T19003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3567'. [ 388.878860][T19005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3568'. [ 388.891536][T19005] openvswitch: netlink: Flow actions attr not present in new flow. [ 389.061915][T19020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.408241][T19051] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3581'. [ 389.475577][T19049] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3579'. [ 389.492498][T19057] netlink: 'syz.0.3582': attribute type 1 has an invalid length. [ 389.500611][T19057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.538340][T19049] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3579'. [ 389.568745][T19049] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3579'. [ 389.581996][T19049] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3579'. [ 389.598637][T19062] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 389.626127][T19068] netlink: 'syz.4.3583': attribute type 16 has an invalid length. [ 389.628122][T19049] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3579'. [ 389.638237][T19068] netlink: 'syz.4.3583': attribute type 17 has an invalid length. [ 389.682562][T19060] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3583'. [ 389.733350][T19068] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 389.752842][T19049] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3579'. [ 389.763473][T19071] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 389.965704][T19083] veth3: entered allmulticast mode [ 389.992958][T19084] geneve2: entered promiscuous mode [ 390.411892][T19108] IPVS: Error joining to the multicast group [ 390.504098][T19113] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.513591][T19113] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.633300][T19115] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.759370][T19115] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.807262][T19122] IPv6: NLM_F_CREATE should be specified when creating new route [ 390.875563][T19115] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.881856][T19126] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 391.003235][T19115] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.067315][T19132] veth0: entered promiscuous mode [ 391.076954][T19132] veth0: left promiscuous mode [ 391.220087][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.250597][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.360369][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.378183][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.803608][T19176] netlink: 'syz.1.3624': attribute type 1 has an invalid length. [ 391.929971][T19182] veth0: entered promiscuous mode [ 391.955063][T19181] netlink: 'syz.1.3626': attribute type 2 has an invalid length. [ 392.244567][T19178] veth0: left promiscuous mode [ 392.551021][T19196] bond2: option all_slaves_active: invalid value (222) [ 392.561491][T19196] bond2 (unregistering): Released all slaves [ 392.593265][T19200] syzkaller0: entered promiscuous mode [ 392.602917][T19200] syzkaller0: entered allmulticast mode [ 392.788495][T19208] netlink: 'syz.3.3635': attribute type 6 has an invalid length. [ 392.806936][T19209] netlink: 'syz.3.3635': attribute type 6 has an invalid length. [ 393.230240][T19223] syzkaller0: entered promiscuous mode [ 393.236122][T19223] syzkaller0: entered allmulticast mode [ 395.239610][T19264] __nla_validate_parse: 38 callbacks suppressed [ 395.239632][T19264] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3650'. [ 395.465892][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 395.481539][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 395.499592][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 395.508584][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 395.522821][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 395.542233][T19273] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3653'. [ 396.042622][T19300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3661'. [ 396.054448][T19299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3660'. [ 396.071842][T19300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3661'. [ 396.089806][T19301] IPv6: NLM_F_CREATE should be specified when creating new route [ 396.098319][T19299] IPv6: NLM_F_CREATE should be specified when creating new route [ 396.106356][T19299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3660'. [ 396.116566][T19301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3660'. [ 396.134370][T19300] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3661'. [ 396.137152][T19271] lo speed is unknown, defaulting to 1000 [ 396.166647][T19300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3661'. [ 396.338123][T19311] netlink: 'syz.0.3662': attribute type 10 has an invalid length. [ 396.338501][T19309] wg2: entered promiscuous mode [ 396.351481][T19309] wg2: entered allmulticast mode [ 396.360970][T19312] netlink: 'syz.0.3662': attribute type 10 has an invalid length. [ 396.433447][T19314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3665'. [ 396.503908][T19305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.592028][T19271] lo speed is unknown, defaulting to 1000 [ 397.130514][T19271] chnl_net:caif_netlink_parms(): no params data found [ 397.278390][T19357] Cannot find del_set index 1 as target [ 397.341422][ T1604] block nbd5: Possible stuck request ffff888026678000: control (read@0,1024B). Runtime 150 seconds [ 397.352651][ T1604] block nbd5: Possible stuck request ffff888026678200: control (read@1024,1024B). Runtime 150 seconds [ 397.365277][ T1604] block nbd5: Possible stuck request ffff888026678400: control (read@2048,1024B). Runtime 150 seconds [ 397.377720][ T1604] block nbd5: Possible stuck request ffff888026678600: control (read@3072,1024B). Runtime 150 seconds [ 397.473756][T19271] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.493917][T19271] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.525211][T19271] bridge_slave_0: entered allmulticast mode [ 397.536214][T19271] bridge_slave_0: entered promiscuous mode [ 397.546120][T19271] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.553524][T19271] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.561507][T19271] bridge_slave_1: entered allmulticast mode [ 397.570686][T19271] bridge_slave_1: entered promiscuous mode [ 397.577545][ T5830] Bluetooth: hci1: command tx timeout [ 397.626270][T19271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.643430][T19271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.690607][T19271] team0: Port device team_slave_0 added [ 397.700101][T19271] team0: Port device team_slave_1 added [ 397.710715][T19368] netlink: 'syz.0.3679': attribute type 10 has an invalid length. [ 397.784123][T19368] netlink: 'syz.0.3679': attribute type 2 has an invalid length. [ 397.792391][T19368] netlink: 'syz.0.3679': attribute type 1 has an invalid length. [ 397.802290][T19271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.820019][T19271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.866930][T19271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.889546][T19271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.908323][T19271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.960491][T19271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.986570][T19381] xt_hashlimit: invalid interval [ 398.068507][T19382] syzkaller0: entered promiscuous mode [ 398.093945][T19382] syzkaller0: entered allmulticast mode [ 398.217781][T19271] hsr_slave_0: entered promiscuous mode [ 398.225491][T19271] hsr_slave_1: entered promiscuous mode [ 398.232544][T19271] debugfs: 'hsr0' already exists in 'hsr' [ 398.238889][T19271] Cannot create hsr debugfs directory [ 399.031403][T19271] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 399.285021][T19271] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 399.358194][T19271] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 399.395202][T19271] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 399.435237][T19271] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 399.460728][T19271] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 399.664035][ T5830] Bluetooth: hci1: command tx timeout [ 400.030043][T19271] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 400.054328][T19271] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 400.105422][T19479] syzkaller0: entered promiscuous mode [ 400.116832][T19479] syzkaller0: entered allmulticast mode [ 400.379430][ T10] IPVS: starting estimator thread 0... [ 400.446476][T19496] bridge0: port 1(team0) entered blocking state [ 400.468153][T19495] IPVS: using max 31 ests per chain, 74400 per kthread [ 400.475480][T19496] bridge0: port 1(team0) entered disabled state [ 400.493074][T19496] team0: entered allmulticast mode [ 400.501833][T19496] team0: entered promiscuous mode [ 400.620097][T19509] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 400.628224][T19509] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 400.681928][T19509] __nla_validate_parse: 7 callbacks suppressed [ 400.681952][T19509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3717'. [ 400.726060][T19271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.755154][T19511] netlink: 'syz.1.3718': attribute type 1 has an invalid length. [ 400.783455][T19511] netlink: 'syz.1.3718': attribute type 3 has an invalid length. [ 400.795709][T19271] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.824288][T19511] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3718'. [ 400.837018][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.844286][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.888417][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.895862][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.922979][T19521] netlink: 'syz.0.3721': attribute type 11 has an invalid length. [ 400.931469][T19521] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.3721'. [ 401.107544][T19531] netlink: 'syz.3.3725': attribute type 21 has an invalid length. [ 401.115509][T19531] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3725'. [ 401.208871][T19532] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.3724'. [ 401.423770][T19271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.664689][T19271] veth0_vlan: entered promiscuous mode [ 401.679246][T19271] veth1_vlan: entered promiscuous mode [ 401.713597][T19271] veth0_macvtap: entered promiscuous mode [ 401.723943][T19271] veth1_macvtap: entered promiscuous mode [ 401.738097][ T5830] Bluetooth: hci1: command tx timeout [ 401.755445][T19271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.773270][T19271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.788592][ T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.799756][ T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.811302][ T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.822329][ T58] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.901083][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.922791][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.953111][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.961972][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.043331][T19555] netlink: 212360 bytes leftover after parsing attributes in process `syz.5.3647'. [ 403.817350][ T5830] Bluetooth: hci1: command tx timeout [ 405.668551][ T1604] block nbd3: Possible stuck request ffff8880265d9400: control (read@0,1024B). Runtime 90 seconds [ 405.679342][ T1604] block nbd3: Possible stuck request ffff8880265d9600: control (read@1024,1024B). Runtime 90 seconds [ 405.690501][ T1604] block nbd3: Possible stuck request ffff8880265d9800: control (read@2048,1024B). Runtime 90 seconds [ 405.701876][ T1604] block nbd3: Possible stuck request ffff8880265d9a00: control (read@3072,1024B). Runtime 90 seconds [ 405.897489][ T5830] Bluetooth: hci1: command tx timeout [ 427.418857][ T1604] block nbd5: Possible stuck request ffff888026678000: control (read@0,1024B). Runtime 180 seconds [ 427.429852][ T1604] block nbd5: Possible stuck request ffff888026678200: control (read@1024,1024B). Runtime 180 seconds [ 427.441189][ T1604] block nbd5: Possible stuck request ffff888026678400: control (read@2048,1024B). Runtime 180 seconds [ 427.452366][ T1604] block nbd5: Possible stuck request ffff888026678600: control (read@3072,1024B). Runtime 180 seconds [ 429.188161][ T5196] udevd[5196]: worker [5890] /devices/virtual/block/nbd5 timeout; kill it [ 429.199409][ T5196] udevd[5196]: seq 17186 '/devices/virtual/block/nbd5' killed [ 435.737698][ T1604] block nbd3: Possible stuck request ffff8880265d9400: control (read@0,1024B). Runtime 120 seconds [ 435.748606][ T1604] block nbd3: Possible stuck request ffff8880265d9600: control (read@1024,1024B). Runtime 120 seconds [ 435.760798][ T1604] block nbd3: Possible stuck request ffff8880265d9800: control (read@2048,1024B). Runtime 120 seconds [ 435.772053][ T1604] block nbd3: Possible stuck request ffff8880265d9a00: control (read@3072,1024B). Runtime 120 seconds [ 442.296940][ T5831] Bluetooth: hci5: command 0x0406 tx timeout [ 452.538740][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 457.497884][ T1604] block nbd5: Possible stuck request ffff888026678000: control (read@0,1024B). Runtime 210 seconds [ 457.508842][ T1604] block nbd5: Possible stuck request ffff888026678200: control (read@1024,1024B). Runtime 210 seconds [ 457.519971][ T1604] block nbd5: Possible stuck request ffff888026678400: control (read@2048,1024B). Runtime 210 seconds [ 457.531139][ T1604] block nbd5: Possible stuck request ffff888026678600: control (read@3072,1024B). Runtime 210 seconds [ 458.621365][T19562] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3729'. [ 458.687534][T19575] netlink: 'syz.4.3733': attribute type 51 has an invalid length. [ 458.791996][T19580] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3734'. [ 459.068691][T19599] netlink: 'syz.4.3739': attribute type 14 has an invalid length. [ 459.332084][T19609] sit0: entered promiscuous mode [ 459.353738][T19609] netlink: 'syz.5.3745': attribute type 1 has an invalid length. [ 459.362307][T19609] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3745'. [ 459.408559][T19614] netlink: 'syz.4.3747': attribute type 1 has an invalid length. [ 459.687614][T19611] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.3746'. [ 459.845552][T19633] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3750'. [ 459.875833][T19633] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3750'. [ 459.930876][T19635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3751'. [ 460.034697][T19646] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 460.078285][T19646] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3750'. [ 460.185152][T19652] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3756'. [ 460.347922][T19662] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3758'. [ 460.537099][T19675] netlink: 'syz.1.3763': attribute type 33 has an invalid length. [ 460.591144][T19675] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 460.613567][T19675] bond1 (unregistering): Released all slaves [ 460.792788][T19688] IPv6: sit1: Disabled Multicast RS [ 461.012392][T19701] netlink: 'syz.4.3770': attribute type 2 has an invalid length. [ 462.777002][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 463.871310][T19777] netlink: 'syz.5.3788': attribute type 8 has an invalid length. [ 463.889509][T19777] __nla_validate_parse: 2 callbacks suppressed [ 463.889534][T19777] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3788'. [ 463.914028][T19777] bond0: entered promiscuous mode [ 463.959545][T19777] bond_slave_0: entered promiscuous mode [ 463.972263][T19777] bond_slave_1: entered promiscuous mode [ 463.986198][T19777] gretap0: entered promiscuous mode [ 463.993219][T19784] netlink: 'syz.3.3790': attribute type 2 has an invalid length. [ 464.001867][T19782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3789'. [ 464.013648][T19777] bond0: left promiscuous mode [ 464.019032][T19777] bond_slave_0: left promiscuous mode [ 464.026051][T19777] bond_slave_1: left promiscuous mode [ 464.034156][T19777] gretap0: left promiscuous mode [ 464.074492][T19785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3789'. [ 464.206179][T19791] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3794'. [ 464.239825][T19792] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3793'. [ 464.305496][T19799] xt_hashlimit: size too large, truncated to 1048576 [ 464.366030][T19791] vlan0 (unregistering): left allmulticast mode [ 464.399835][T19791] veth0_vlan (unregistering): left allmulticast mode [ 464.420786][T19791] vlan0 (unregistering): left promiscuous mode [ 464.536072][T19813] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3793'. [ 464.581979][T19816] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3793'. [ 464.775211][T19814] pimreg: entered allmulticast mode [ 464.799107][ T6758] batman_adv: batadv0: IGMP Querier appeared [ 464.805238][ T6758] batman_adv: batadv0: MLD Querier appeared [ 464.816234][T19823] mac80211_hwsim hwsim40 ˙: renamed from wlan1 (while UP) [ 465.188400][T19848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3805'. [ 465.824603][ T1604] block nbd3: Possible stuck request ffff8880265d9400: control (read@0,1024B). Runtime 150 seconds [ 465.836069][ T1604] block nbd3: Possible stuck request ffff8880265d9600: control (read@1024,1024B). Runtime 150 seconds [ 465.849597][ T1604] block nbd3: Possible stuck request ffff8880265d9800: control (read@2048,1024B). Runtime 150 seconds [ 465.860951][ T1604] block nbd3: Possible stuck request ffff8880265d9a00: control (read@3072,1024B). Runtime 150 seconds [ 467.097039][ T5831] Bluetooth: hci5: command 0x0406 tx timeout [ 467.103216][T19843] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 467.109661][T19843] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 467.933775][T19830] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 467.933796][T19843] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 467.961450][T19843] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 468.081194][T19864] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3810'. [ 468.092016][T19862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3809'. [ 468.165100][T19843] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 468.186998][T19843] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 468.375830][T19843] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 468.397069][T19843] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 468.488031][T19883] IPVS: Unknown mcast interface: netpci0 [ 468.617353][T19843] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 468.639156][T19843] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 468.908585][T19902] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 468.928420][T19907] netlink: 'syz.5.3823': attribute type 21 has an invalid length. [ 469.069047][T19915] netlink: 'syz.4.3825': attribute type 10 has an invalid length. [ 469.132527][T19915] team0: Port device dummy0 added [ 469.258238][T19923] __nla_validate_parse: 3 callbacks suppressed [ 469.258260][T19923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3828'. [ 469.300752][T19925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3830'. [ 469.306320][T19923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3828'. [ 469.319392][T19923] netlink: 'syz.1.3828': attribute type 15 has an invalid length. [ 469.340379][T19925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3830'. [ 469.391065][ T6761] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 469.404697][T19933] Unknown options in mask b7f2 [ 469.413437][ T6761] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 469.446045][ T6761] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 469.473489][ T6761] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 469.597845][T19939] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3834'. [ 469.666905][T19939] netlink: ct family unspecified [ 469.855941][T19904] lo speed is unknown, defaulting to 1000 [ 470.001969][T19904] lo speed is unknown, defaulting to 1000 [ 470.548932][T19974] netlink: 'syz.0.3843': attribute type 21 has an invalid length. [ 470.563124][T19974] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3843'. [ 470.584744][T19974] netlink: 'syz.0.3843': attribute type 4 has an invalid length. [ 470.629562][T19974] netlink: 'syz.0.3843': attribute type 5 has an invalid length. [ 470.655699][T19975] netlink: 'syz.0.3843': attribute type 21 has an invalid length. [ 470.684372][T19974] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3843'. [ 470.705179][T19975] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3843'. [ 470.765389][T19975] netlink: 'syz.0.3843': attribute type 4 has an invalid length. [ 470.780496][T19975] netlink: 'syz.0.3843': attribute type 5 has an invalid length. [ 470.789548][T19975] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3843'. [ 471.052075][T19995] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3847'. [ 471.200495][T20003] netlink: 'syz.0.3850': attribute type 9 has an invalid length. [ 471.209500][T20001] xt_limit: Overflow, try lower: 271964/0 [ 471.683435][T20030] syzkaller0: entered promiscuous mode [ 471.689924][T20030] syzkaller0: entered allmulticast mode [ 472.490742][T20082] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 472.533313][T20083] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 472.633118][T20085] syzkaller0: entered promiscuous mode [ 472.644921][T20085] syzkaller0: entered allmulticast mode [ 472.748589][T20095] syzkaller0: entered promiscuous mode [ 472.754344][T20095] syzkaller0: entered allmulticast mode [ 472.772849][T20091] tc action pedit offset must be on 32 bit boundaries [ 472.897454][T20101] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 473.334834][T20132] gretap0: entered promiscuous mode [ 473.357101][T20132] gretap0: entered allmulticast mode [ 473.968912][T20175] validate_nla: 4 callbacks suppressed [ 473.968936][T20175] netlink: 'syz.1.3903': attribute type 4 has an invalid length. [ 474.294822][T20188] bond0: (slave gre0): refused to change device type [ 474.637293][T20198] netlink: 'syz.3.3907': attribute type 9 has an invalid length. [ 475.036868][T20212] __nla_validate_parse: 23 callbacks suppressed [ 475.036893][T20212] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3912'. [ 475.138137][T20212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3912'. [ 475.340483][T20225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3915'. [ 475.388509][T20225] hsr0: entered promiscuous mode [ 475.394429][T20225] macvlan2: entered allmulticast mode [ 475.404541][T20225] hsr0: entered allmulticast mode [ 475.411611][T20225] hsr_slave_0: entered allmulticast mode [ 475.417757][T20228] openvswitch: netlink: Tunnel attr 335 out of range max 16 [ 475.436802][T20225] hsr_slave_1: entered allmulticast mode [ 475.637660][T20244] sctp: [Deprecated]: syz.5.3921 (pid 20244) Use of int in maxseg socket option. [ 475.637660][T20244] Use struct sctp_assoc_value instead [ 476.325655][T20285] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3932'. [ 476.342090][T20285] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3932'. [ 476.539695][T20293] netlink: 'syz.5.3936': attribute type 2 has an invalid length. [ 476.559496][T20293] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3936'. [ 476.809938][T20308] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3940'. [ 476.823624][T20308] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3940'. [ 476.829496][T20310] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 476.849413][T20312] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 476.926544][T20317] netlink: 'syz.3.3943': attribute type 1 has an invalid length. [ 477.013785][T20324] netlink: 'syz.3.3946': attribute type 2 has an invalid length. [ 477.024237][T20324] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3946'. [ 477.033893][T20324] openvswitch: netlink: Flow key attr not present in new flow. [ 477.106956][T20329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3947'. [ 477.130860][ T1154] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.139790][ T1154] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.150521][ T1154] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.168077][ T1154] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.701440][T20366] syzkaller0: entered promiscuous mode [ 477.707079][T20366] syzkaller0: entered allmulticast mode [ 477.717573][T20366] TC_ACT_REPEAT abuse ? [ 477.820764][T20374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.889877][T20375] tipc: Started in network mode [ 477.895203][T20375] tipc: Node identity , cluster identity 4711 [ 477.904259][T20375] tipc: Failed to obtain node identity [ 477.910667][T20375] tipc: Enabling of bearer rejected, failed to enable media [ 477.928282][T20375] sctp: [Deprecated]: syz.4.3959 (pid 20375) Use of struct sctp_assoc_value in delayed_ack socket option. [ 477.928282][T20375] Use struct sctp_sack_info instead [ 478.151541][T20400] netlink: 'syz.5.3964': attribute type 29 has an invalid length. [ 478.193377][T20391] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.254210][T20404] netlink: 'syz.1.3968': attribute type 24 has an invalid length. [ 478.300470][T20409] netlink: 'syz.3.3970': attribute type 6 has an invalid length. [ 478.495843][T20421] syzkaller0: entered promiscuous mode [ 478.506801][T20421] syzkaller0: entered allmulticast mode [ 478.516264][T20421] TC_ACT_REPEAT abuse ? [ 478.840684][T20436] gre3: entered promiscuous mode [ 478.894600][T20438] gre3: entered promiscuous mode [ 479.071041][T20445] netlink: 'syz.5.3980': attribute type 4 has an invalid length. [ 479.667778][T20472] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 479.697395][T20472] bond4 (unregistering): Released all slaves [ 479.769945][T20481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 479.786341][T20458] netlink: 'syz.4.3986': attribute type 1 has an invalid length. [ 479.828423][T20483] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 479.839722][T20483] bond1 (unregistering): Released all slaves [ 480.053112][T20493] IPv6: sit1: Disabled Multicast RS [ 480.077977][T20493] sit1: entered allmulticast mode [ 480.177344][T20495] ip6gre1: entered allmulticast mode [ 480.336208][T20514] syzkaller1: entered allmulticast mode [ 480.815490][T20544] __nla_validate_parse: 12 callbacks suppressed [ 480.815513][T20544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4011'. [ 480.890772][T20523] ip6erspan0: entered allmulticast mode [ 480.975971][T20549] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4013'. [ 481.152012][T20553] bond1: option fail_over_mac: invalid value (16) [ 481.190362][T20564] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4018'. [ 481.220049][T20553] bond1 (unregistering): Released all slaves [ 481.263477][T20570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4015'. [ 481.463959][T20579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4021'. [ 481.475081][T20580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4021'. [ 481.490627][T20579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4021'. [ 481.814151][T20606] pimreg: left allmulticast mode [ 482.088740][T20627] sctp: [Deprecated]: syz.3.4032 (pid 20627) Use of int in max_burst socket option. [ 482.088740][T20627] Use struct sctp_assoc_value instead [ 482.112978][T20628] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 482.122329][T20627] sctp: [Deprecated]: syz.3.4032 (pid 20627) Use of int in max_burst socket option. [ 482.122329][T20627] Use struct sctp_assoc_value instead [ 482.350319][T20641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4036'. [ 482.362891][T20643] netlink: 'syz.3.4035': attribute type 1 has an invalid length. [ 482.419039][T20643] bond4: (slave gretap2): making interface the new active one [ 482.429606][T20643] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 483.077219][T20673] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.189666][T20678] syzkaller0: entered promiscuous mode [ 483.195226][T20678] syzkaller0: entered allmulticast mode [ 483.202473][T20681] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4049'. [ 483.223421][T20681] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4049'. [ 483.447329][T20694] netlink: 'syz.4.4052': attribute type 1 has an invalid length. [ 483.844586][T20720] vcan0: entered allmulticast mode [ 484.077276][T20735] ksmbd: Unknown IPC event: 3, ignore. [ 484.210082][T20737] netlink: 'syz.5.4063': attribute type 1 has an invalid length. [ 484.232207][T20737] netlink: 'syz.5.4063': attribute type 1 has an invalid length. [ 484.303671][T20713] lo speed is unknown, defaulting to 1000 [ 484.401914][T20748] xt_ecn: cannot match TCP bits for non-tcp packets [ 484.877926][T20713] lo speed is unknown, defaulting to 1000 [ 485.442270][T20798] netlink: 'syz.5.4077': attribute type 2 has an invalid length. [ 485.704797][T20812] netlink: 'syz.5.4080': attribute type 1 has an invalid length. [ 485.775732][T20813] syzkaller0: entered promiscuous mode [ 485.782429][T20813] syzkaller0: entered allmulticast mode [ 485.980920][T20825] __nla_validate_parse: 7 callbacks suppressed [ 485.980944][T20825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4085'. [ 486.070134][T20829] netlink: 'syz.5.4083': attribute type 10 has an invalid length. [ 486.139465][T20829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 486.166054][T20829] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 486.218359][T20831] netlink: 'syz.4.4086': attribute type 1 has an invalid length. [ 486.237645][T20831] netlink: 'syz.4.4086': attribute type 2 has an invalid length. [ 486.245448][T20831] netlink: 'syz.4.4086': attribute type 1 has an invalid length. [ 486.274265][T20831] netlink: 'syz.4.4086': attribute type 3 has an invalid length. [ 486.313531][T20831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4086'. [ 486.353707][T20842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4089'. [ 486.875539][T20867] netlink: 'syz.5.4097': attribute type 51 has an invalid length. [ 487.540525][T20904] Bluetooth: MGMT ver 1.23 [ 487.569866][T20906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.579562][ T1604] block nbd5: Possible stuck request ffff888026678000: control (read@0,1024B). Runtime 240 seconds [ 487.590476][ T1604] block nbd5: Possible stuck request ffff888026678200: control (read@1024,1024B). Runtime 240 seconds [ 487.601627][ T1604] block nbd5: Possible stuck request ffff888026678400: control (read@2048,1024B). Runtime 240 seconds [ 487.612943][ T1604] block nbd5: Possible stuck request ffff888026678600: control (read@3072,1024B). Runtime 240 seconds [ 487.615549][T20910] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4109'. [ 487.665473][T20910] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4109'. [ 487.696365][T20910] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4109'. [ 487.828201][T20928] xt_CONNSECMARK: invalid mode: 0 [ 487.908404][T20938] xt_hashlimit: size too large, truncated to 1048576 [ 488.200092][T20947] Bluetooth: MGMT ver 1.23 [ 488.211478][T20947] Bluetooth: hci1: too big key_count value 32778 [ 488.230026][T20951] netlink: zone id is out of range [ 488.235589][T20951] netlink: zone id is out of range [ 488.257635][T20951] netlink: zone id is out of range [ 488.262854][T20951] netlink: zone id is out of range [ 488.275438][T20951] netlink: zone id is out of range [ 488.283439][T20951] netlink: zone id is out of range [ 488.291430][T20951] netlink: zone id is out of range [ 488.319680][T20951] netlink: zone id is out of range [ 488.336774][T20951] netlink: zone id is out of range [ 488.421156][T20960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4124'. [ 488.679927][T20976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4130'. [ 488.797094][T20987] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4135'. [ 488.882710][T20995] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4136'. [ 488.981519][ T5830] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 488.993378][ T5830] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 489.017226][ T5830] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 489.033441][ T5830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 489.046938][ T5830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 489.106117][ T5831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 489.113773][ T5831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 489.121268][ T5831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 489.130616][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 489.138974][ T5831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 489.697276][T20998] lo speed is unknown, defaulting to 1000 [ 490.070631][T20998] lo speed is unknown, defaulting to 1000 [ 490.369793][T21057] syzkaller0: entered promiscuous mode [ 490.380592][T21057] syzkaller0: entered allmulticast mode [ 490.573883][T20998] chnl_net:caif_netlink_parms(): no params data found [ 490.709515][T21076] IPVS: ip_vs_edit_dest(): server weight less than zero [ 490.717212][ T7923] IPVS: starting estimator thread 0... [ 490.762472][T21076] IPVS: ip_vs_edit_dest(): server weight less than zero [ 490.837157][T21077] IPVS: using max 24 ests per chain, 57600 per kthread [ 491.003713][T20998] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.022154][T20998] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.035333][T20998] bridge_slave_0: entered allmulticast mode [ 491.050876][T20998] bridge_slave_0: entered promiscuous mode [ 491.065973][T21094] __nla_validate_parse: 3 callbacks suppressed [ 491.065997][T21094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4162'. [ 491.084999][T21094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4162'. [ 491.104289][T21094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4162'. [ 491.125361][T21095] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4162'. [ 491.145701][T21095] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4162'. [ 491.172459][T21095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4162'. [ 491.187714][ T5830] Bluetooth: hci6: command tx timeout [ 491.191864][T20998] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.227412][T20998] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.234980][T20998] bridge_slave_1: entered allmulticast mode [ 491.289044][T20998] bridge_slave_1: entered promiscuous mode [ 491.396064][T20998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.945502][T20998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.193532][T21120] geneve0: entered promiscuous mode [ 492.264690][ T1117] bond5: left allmulticast mode [ 492.284361][T21130] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4172'. [ 492.291918][ T1117] bond5: left promiscuous mode [ 492.310928][ T1117] bridge4: port 1(bond5) entered disabled state [ 492.407816][ T1117] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 492.752223][ T1117] bond11 (unregistering): (slave geneve4): Releasing active interface [ 492.773958][ T1117] bond7 (unregistering): (slave geneve3): Releasing active interface [ 492.814818][ T1117] bond4 (unregistering): (slave geneve2): Releasing active interface [ 493.234847][ T1117] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 493.245272][ T1117] bond0 (unregistering): Released all slaves [ 493.257326][ T5830] Bluetooth: hci6: command tx timeout [ 493.274402][ T1117] bond1 (unregistering): Released all slaves [ 493.302270][ T1117] bond2 (unregistering): Released all slaves [ 493.335305][ T1117] bond3 (unregistering): Released all slaves [ 493.389028][ T1117] bond4 (unregistering): Released all slaves [ 493.419407][ T1117] bond5 (unregistering): Released all slaves [ 493.444144][ T1117] bond6 (unregistering): (slave veth5): Releasing active interface [ 493.462071][ T1117] bond6 (unregistering): Released all slaves [ 493.480302][ T1117] bond7 (unregistering): Released all slaves [ 493.495441][ T1117] bond8 (unregistering): Released all slaves [ 493.513680][ T1117] bond9 (unregistering): Released all slaves [ 493.537226][ T1117] bond10 (unregistering): Released all slaves [ 493.552399][ T1117] bond11 (unregistering): Released all slaves [ 493.568007][ T1117] bond12 (unregistering): Released all slaves [ 493.595769][ T1117] bond13 (unregistering): Released all slaves [ 493.626091][T20998] team0: Port device team_slave_0 added [ 493.635020][T20998] team0: Port device team_slave_1 added [ 493.652096][T21135] validate_nla: 1 callbacks suppressed [ 493.652114][T21135] netlink: 'syz.5.4173': attribute type 29 has an invalid length. [ 493.667863][T21135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4173'. [ 493.824280][T21165] netlink: 'syz.5.4177': attribute type 2 has an invalid length. [ 493.895887][ T1117] tipc: Left network mode [ 493.909732][T20998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.926836][T20998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.986117][T20998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.000361][T20998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.007614][T20998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.034202][T20998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.144719][T21173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4180'. [ 494.217779][T20998] hsr_slave_0: entered promiscuous mode [ 494.236565][T20998] hsr_slave_1: entered promiscuous mode [ 494.253797][T20998] debugfs: 'hsr0' already exists in 'hsr' [ 494.260880][T20998] Cannot create hsr debugfs directory [ 494.569894][T21145] lo speed is unknown, defaulting to 1000 [ 494.603186][T21190] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4181'. [ 494.689413][T21181] net_ratelimit: 134 callbacks suppressed [ 494.689437][T21181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 494.718396][T21181] xt_cgroup: invalid path, errno=-2 [ 495.050180][T21204] netlink: 'syz.3.4186': attribute type 2 has an invalid length. [ 495.283978][T21145] lo speed is unknown, defaulting to 1000 [ 495.297330][T21216] netlink: 'syz.3.4189': attribute type 21 has an invalid length. [ 495.347163][ T5830] Bluetooth: hci6: command tx timeout [ 495.599966][T21223] 8021q: adding VLAN 0 to HW filter on device bond2 [ 495.693638][T20998] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 495.737230][T20998] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 495.761358][T20998] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 495.838922][T20998] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 495.897238][ T1604] block nbd3: Possible stuck request ffff8880265d9400: control (read@0,1024B). Runtime 180 seconds [ 495.909758][ T1604] block nbd3: Possible stuck request ffff8880265d9600: control (read@1024,1024B). Runtime 180 seconds [ 495.920985][ T1604] block nbd3: Possible stuck request ffff8880265d9800: control (read@2048,1024B). Runtime 180 seconds [ 495.932564][ T1604] block nbd3: Possible stuck request ffff8880265d9a00: control (read@3072,1024B). Runtime 180 seconds [ 496.084715][T21238] syzkaller1: entered promiscuous mode [ 496.096948][T21238] syzkaller1: entered allmulticast mode [ 496.114042][T20998] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 496.204878][T20998] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 496.229810][T20998] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 496.245088][T20998] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 496.447660][ T1117] hsr_slave_0: left promiscuous mode [ 496.489825][ T1117] hsr_slave_1: left promiscuous mode [ 497.217648][T21273] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 497.416903][ T5830] Bluetooth: hci6: command tx timeout [ 497.653435][T20998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.703303][T20998] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.758400][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.765586][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.841693][ T6758] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.849309][ T6758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.923099][ T1117] IPVS: stop unused estimator thread 0... [ 498.082625][T21309] __nla_validate_parse: 6 callbacks suppressed [ 498.082648][T21309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4206'. [ 498.117233][T21309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4206'. [ 498.388985][T21328] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4211'. [ 498.471388][T20998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.914150][T20998] veth0_vlan: entered promiscuous mode [ 498.945035][T20998] veth1_vlan: entered promiscuous mode [ 498.985571][T20998] veth0_macvtap: entered promiscuous mode [ 499.000530][T20998] veth1_macvtap: entered promiscuous mode [ 499.036333][T20998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.059140][T20998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.080440][ T58] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.093746][ T58] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.109139][ T58] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.126693][ T58] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.350782][T21325] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 501.360020][T21332] netlink: 'syz.1.4212': attribute type 1 has an invalid length. [ 501.368532][T21332] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.4212'. [ 501.492476][T21375] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 501.510914][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.558772][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.582484][T21380] 8021q: VLANs not supported on wg0 [ 501.590809][T21380] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4220'. [ 501.677198][ T6761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.690296][ T6761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.185992][T21393] netdevsim netdevsim4: Direct firmware load for .. @ failed with error -2 [ 502.208380][T21393] netdevsim netdevsim4: Falling back to sysfs fallback for: .. @ [ 502.353501][T21408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4229'. [ 502.384582][T21411] netlink: 'syz.3.4230': attribute type 9 has an invalid length. [ 502.412470][T21411] netlink: 'syz.3.4230': attribute type 6 has an invalid length. [ 502.813585][T21428] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4234'. [ 502.867887][T21435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4236'. [ 502.877068][T21435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4236'. [ 502.886033][T21435] netlink: 'syz.3.4236': attribute type 12 has an invalid length. [ 502.894713][T21435] netlink: 'syz.3.4236': attribute type 11 has an invalid length. [ 502.921263][T21432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4236'. [ 502.952908][T21436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.955750][T21431] batadv1: entered allmulticast mode [ 503.334119][T21454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4244'. [ 503.398659][T21455] netlink: 'syz.1.4243': attribute type 3 has an invalid length. [ 503.429313][T21457] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4245'. [ 503.756407][T21465] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4247'. [ 504.060968][T21472] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4249'. [ 504.070978][T21472] netlink: 'syz.6.4249': attribute type 64 has an invalid length. [ 504.084588][T21472] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4249'. [ 504.487333][T21493] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4254'. [ 504.674318][T21505] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 504.720615][T21505] bridge0: entered allmulticast mode [ 504.751980][T21505] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4259'. [ 504.875639][T21513] netlink: 'syz.4.4261': attribute type 4 has an invalid length. [ 504.899480][T21513] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4261'. [ 505.130574][T21527] netlink: 'syz.3.4265': attribute type 10 has an invalid length. [ 505.177772][T21527] : (slave wlan1): Enslaving as an active interface with an up link [ 505.203457][T21526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.241982][T21530] netlink: 'syz.4.4266': attribute type 10 has an invalid length. [ 505.265521][T21533] xt_TPROXY: Can be used only with -p tcp or -p udp [ 505.276509][T21530] bridge_slave_1: left allmulticast mode [ 505.290426][T21530] bridge_slave_1: left promiscuous mode [ 505.296446][T21530] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.311099][T21530] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 505.326999][T21533] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4267'. [ 505.700797][T21540] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 505.752184][T21555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4271'. [ 505.808154][T21557] bond3: invalid ARP target 0.0.0.0 specified for addition [ 505.815823][T21557] bond3: option arp_ip_target: invalid value (0) [ 505.858900][T21557] bond3 (unregistering): Released all slaves [ 506.101018][T21557] bond3: invalid ARP target 0.0.0.0 specified for addition [ 506.120438][T21557] bond3: option arp_ip_target: invalid value (0) [ 506.129494][T21557] bond3 (unregistering): Released all slaves [ 506.271851][T21576] 8021q: adding VLAN 0 to HW filter on device bond1 [ 506.315234][T21557] bond3: invalid ARP target 0.0.0.0 specified for addition [ 506.325380][T21557] bond3: option arp_ip_target: invalid value (0) [ 506.335803][T21557] bond3 (unregistering): Released all slaves [ 506.358317][T21586] x_tables: duplicate underflow at hook 1 [ 506.379773][T21581] bond1: (slave geneve2): making interface the new active one [ 506.391445][T21581] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 506.431031][T21586] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ1 [ 506.439486][T21583] xt_l2tp: v2 tid > 0xffff: 1114244 [ 506.472217][T21557] bond3: invalid ARP target 0.0.0.0 specified for addition [ 506.480582][T21557] bond3: option arp_ip_target: invalid value (0) [ 506.489526][T21557] bond3 (unregistering): Released all slaves [ 506.554147][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.573741][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.679726][T21557] bond3: invalid ARP target 0.0.0.0 specified for addition [ 506.690779][T21557] bond3: option arp_ip_target: invalid value (0) [ 506.704275][T21557] bond3 (unregistering): Released all slaves [ 506.791604][ T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.826270][ T13] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.872152][ T13] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.930217][ T13] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.188626][T21623] validate_nla: 3 callbacks suppressed [ 507.188647][T21623] netlink: 'syz.5.4286': attribute type 1 has an invalid length. [ 507.235535][T21620] netlink: 'syz.1.4287': attribute type 1 has an invalid length. [ 507.295310][T21620] netlink: 'syz.1.4287': attribute type 1 has an invalid length. [ 507.502477][T21640] netlink: 'syz.6.4291': attribute type 10 has an invalid length. [ 507.639924][T21640] veth0_vlan: left promiscuous mode [ 507.660975][T21640] veth0_vlan: entered promiscuous mode [ 507.691839][T21640] team0: Device veth0_vlan failed to register rx_handler [ 508.447616][T21678] bridge0: port 2(batadv1) entered blocking state [ 508.462700][T21678] bridge0: port 2(batadv1) entered disabled state [ 508.480440][T21678] batadv1: entered allmulticast mode [ 508.504880][T21678] batadv1: entered promiscuous mode [ 508.624613][T21685] tunl0: entered promiscuous mode [ 508.633880][T21685] netlink: 'syz.4.4303': attribute type 3 has an invalid length. [ 508.642314][T21685] __nla_validate_parse: 23 callbacks suppressed [ 508.642331][T21685] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4303'. [ 508.756129][T21691] netlink: 'syz.4.4304': attribute type 39 has an invalid length. [ 508.944751][ T6761] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 508.954200][ T6761] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 509.065720][T21691] hsr_slave_1 (unregistering): left promiscuous mode [ 509.241817][T21704] netlink: 'syz.1.4306': attribute type 21 has an invalid length. [ 509.283422][T21704] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4306'. [ 509.315646][T21704] netlink: 'syz.1.4306': attribute type 21 has an invalid length. [ 509.406957][T21704] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4306'. [ 509.416345][T21704] netlink: 'syz.1.4306': attribute type 21 has an invalid length. [ 509.425121][T21704] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4306'. [ 509.434917][T21704] netlink: 'syz.1.4306': attribute type 21 has an invalid length. [ 509.484545][T21712] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4308'. [ 509.496360][T21704] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4306'. [ 509.537042][T21704] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4306'. [ 509.615208][T21704] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4306'. [ 509.755216][T21728] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4311'. [ 509.767370][T21704] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4306'. [ 510.446044][T21765] xt_hashlimit: size too large, truncated to 1048576 [ 510.590990][T21768] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 511.000586][T21796] bond2 (unregistering): Released all slaves [ 511.138001][ T7924] hid-generic 0005:0D36:0006.0002: item fetching failed at offset 0/1 [ 511.190141][ T7924] hid-generic 0005:0D36:0006.0002: probe with driver hid-generic failed with error -22 [ 511.387219][T21822] x_tables: unsorted underflow at hook 1 [ 511.533032][T21837] syzkaller0: entered promiscuous mode [ 511.542606][T21831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.552358][T21837] syzkaller0: entered allmulticast mode [ 511.794389][T21840] syzkaller0: entered promiscuous mode [ 511.806135][T21840] syzkaller0: entered allmulticast mode [ 512.000400][T21858] x_tables: unsorted underflow at hook 4 [ 512.007918][T21842] lo speed is unknown, defaulting to 1000 [ 512.725602][T21886] syzkaller0: entered promiscuous mode [ 512.731453][T21886] syzkaller0: entered allmulticast mode [ 512.774527][T21886] validate_nla: 30 callbacks suppressed [ 512.774554][T21886] netlink: 'syz.5.4354': attribute type 1 has an invalid length. [ 513.578989][T21918] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 513.652473][T21924] xt_l2tp: unknown flags: 10 [ 513.795889][T21933] __nla_validate_parse: 72 callbacks suppressed [ 513.795911][T21933] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4369'. [ 513.834968][T21935] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4371'. [ 513.855739][T21933] netlink: 21 bytes leftover after parsing attributes in process `syz.6.4369'. [ 513.877577][T21933] netlink: 21 bytes leftover after parsing attributes in process `syz.6.4369'. [ 513.910285][T21933] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4369'. [ 513.921170][T21933] netlink: 21 bytes leftover after parsing attributes in process `syz.6.4369'. [ 513.930860][T21933] netlink: 21 bytes leftover after parsing attributes in process `syz.6.4369'. [ 514.079546][T21946] veth0: entered promiscuous mode [ 514.088355][T21944] veth0: left promiscuous mode [ 514.129026][T21937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4370'. [ 514.207181][T21937] veth0_macvtap: left promiscuous mode [ 514.650176][T21958] netlink: 'syz.1.4377': attribute type 142 has an invalid length. [ 514.805686][T21977] veth0: entered promiscuous mode [ 514.922304][T21969] veth0: left promiscuous mode [ 514.935622][T21972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4380'. [ 514.963400][T21972] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 515.028649][T21985] netlink: 'syz.6.4383': attribute type 1 has an invalid length. [ 515.121036][T21987] Can't find ip_set type bitmap:ip,mac [ 517.626692][T21963] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 517.658226][ T1604] block nbd5: Possible stuck request ffff888026678000: control (read@0,1024B). Runtime 270 seconds [ 517.669229][ T1604] block nbd5: Possible stuck request ffff888026678200: control (read@1024,1024B). Runtime 270 seconds [ 517.681259][ T1604] block nbd5: Possible stuck request ffff888026678400: control (read@2048,1024B). Runtime 270 seconds [ 517.692613][ T1604] block nbd5: Possible stuck request ffff888026678600: control (read@3072,1024B). Runtime 270 seconds [ 517.875888][T22017] netlink: 'syz.6.4392': attribute type 7 has an invalid length. [ 517.902931][T22018] netlink: 187064 bytes leftover after parsing attributes in process `syz.5.4391'. [ 518.090584][T22030] netlink: 'syz.3.4396': attribute type 1 has an invalid length. [ 518.136578][T22035] nbd: must specify a size in bytes for the device [ 518.203968][T22030] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 518.467467][T22046] bond0: entered promiscuous mode [ 518.480480][T22046] bond_slave_0: entered promiscuous mode [ 518.498913][T22046] bond_slave_1: entered promiscuous mode [ 518.542090][T22046] batadv0: entered promiscuous mode [ 518.557914][T22046] debugfs: 'hsr1' already exists in 'hsr' [ 518.598186][T22046] Cannot create hsr debugfs directory [ 518.612819][T22046] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 518.634980][T22046] bond0: left promiscuous mode [ 518.645725][T22046] bond_slave_0: left promiscuous mode [ 518.680086][T22046] bond_slave_1: left promiscuous mode [ 518.716331][T22046] batadv0: left promiscuous mode [ 518.768257][T22071] netlink: 'syz.5.4407': attribute type 7 has an invalid length. [ 518.936533][T22041] infiniband sy‡1: set active [ 519.000309][T22041] infiniband sy‡1: added bond0 [ 519.192117][T22091] netlink: 'syz.5.4413': attribute type 3 has an invalid length. [ 519.232746][T22041] RDS/IB: sy‡1: added [ 519.261157][T22041] smc: adding ib device sy‡1 with port count 1 [ 519.286559][T22041] smc: ib device sy‡1 port 1 has no pnetid [ 519.733395][T22104] __nla_validate_parse: 1 callbacks suppressed [ 519.733418][T22104] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4416'. [ 520.187442][T22104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4416'. [ 520.237379][T22104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4416'. [ 520.289658][T22090] syzkaller0: mtu less than device minimum [ 520.312557][T22090] syzkaller0: entered allmulticast mode [ 520.533888][T22126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4420'. [ 520.627087][T22125] syzkaller1: entered promiscuous mode [ 520.649023][T22125] syzkaller1: entered allmulticast mode [ 521.123822][T22156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4423'. [ 521.386182][T22168] netlink: 'syz.3.4429': attribute type 9 has an invalid length. [ 521.927028][T22193] openvswitch: netlink: Invalid VLAN frame [ 521.966404][T22197] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4438'. [ 521.987482][T22197] netlink: 'syz.5.4438': attribute type 33 has an invalid length. [ 522.257946][ T5196] udevd[5196]: worker [10012] /devices/virtual/block/nbd3 timeout; kill it [ 522.299189][ T5196] udevd[5196]: seq 19955 '/devices/virtual/block/nbd3' killed [ 522.359397][T22213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.398255][T22213] xt_hashlimit: size too large, truncated to 1048576 [ 522.682015][T22225] veth0_macvtap: entered promiscuous mode [ 522.721559][T22225] macvlan0: entered promiscuous mode [ 522.731179][T22225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4447'. [ 522.877510][T22215] geneve2: entered promiscuous mode [ 522.886742][ T6758] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 39654 - 0 [ 522.893618][T22234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.904703][ T6758] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 39654 - 0 [ 522.904752][ T6758] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 39654 - 0 [ 522.904792][ T6758] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 39654 - 0 [ 523.121658][ T13] tipc: Subscription rejected, illegal request [ 523.961266][T22267] netlink: 'syz.1.4459': attribute type 22 has an invalid length. [ 523.976830][T22267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4459'. [ 523.992620][T22267] netlink: 'syz.1.4459': attribute type 22 has an invalid length. [ 524.005704][T22267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4459'. [ 524.048540][T22269] syzkaller0: entered promiscuous mode [ 524.054192][T22269] syzkaller0: entered allmulticast mode [ 524.085692][T22269] tipc: Started in network mode [ 524.090811][T22269] tipc: Node identity daa979896de6, cluster identity 4711 [ 524.099509][T22269] tipc: Enabled bearer , priority 0 [ 524.125222][T22268] tipc: Resetting bearer [ 524.158326][T22268] tipc: Disabling bearer [ 524.182050][T22273] xt_hashlimit: size too large, truncated to 1048576 [ 524.370579][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a003400: rx timeout, send abort [ 524.870752][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bcb1800: rx timeout, send abort [ 524.879432][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a003400: abort rx timeout. Force session deactivation [ 525.379108][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bcb1800: abort rx timeout. Force session deactivation [ 525.980656][ T1604] block nbd3: Possible stuck request ffff8880265d9400: control (read@0,1024B). Runtime 210 seconds [ 525.991531][ T1604] block nbd3: Possible stuck request ffff8880265d9600: control (read@1024,1024B). Runtime 210 seconds [ 526.002709][ T1604] block nbd3: Possible stuck request ffff8880265d9800: control (read@2048,1024B). Runtime 210 seconds [ 526.013972][ T1604] block nbd3: Possible stuck request ffff8880265d9a00: control (read@3072,1024B). Runtime 210 seconds [ 547.741239][ T1604] block nbd5: Possible stuck request ffff888026678000: control (read@0,1024B). Runtime 300 seconds [ 547.752277][ T1604] block nbd5: Possible stuck request ffff888026678200: control (read@1024,1024B). Runtime 300 seconds [ 547.763520][ T1604] block nbd5: Possible stuck request ffff888026678400: control (read@2048,1024B). Runtime 300 seconds [ 547.774651][ T1604] block nbd5: Possible stuck request ffff888026678600: control (read@3072,1024B). Runtime 300 seconds [ 550.109188][T22312] netlink: 'syz.4.4473': attribute type 1 has an invalid length. [ 550.132688][T22312] netlink: 2108 bytes leftover after parsing attributes in process `syz.4.4473'. [ 550.144246][T22319] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 550.166165][T22319] bridge1: entered promiscuous mode [ 550.177185][T22319] bridge1: entered allmulticast mode [ 550.361191][T22334] x_tables: ip_tables: NETMAP target: only valid in nat table, not /dev/net/tun [ 550.510315][T22345] netlink: 'syz.3.4478': attribute type 1 has an invalid length. [ 550.521351][T22345] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4478'. [ 550.551830][T22350] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4480'. [ 550.686146][T22352] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4481'. [ 550.733203][T22361] netlink: 'syz.6.4482': attribute type 21 has an invalid length. [ 550.742203][T22361] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4482'. [ 550.755262][T22361] netlink: 'syz.6.4482': attribute type 5 has an invalid length. [ 550.772319][T22361] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4482'. [ 550.930702][T22373] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4485'. [ 550.986278][T22375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4487'. [ 551.149492][T22382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4489'. [ 551.317164][T22402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 551.439911][T22406] gretap1: entered promiscuous mode [ 551.458374][T22406] batman_adv: batadv0: Adding interface: gretap1 [ 551.464794][T22406] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 551.517345][T22406] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 551.726974][T22429] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4502'. [ 551.755876][T22417] bond2: entered promiscuous mode [ 551.763764][T22417] bond2: entered allmulticast mode [ 551.791666][T22417] 8021q: adding VLAN 0 to HW filter on device bond2 [ 551.945409][T22438] syzkaller1: entered promiscuous mode [ 551.958203][T22438] syzkaller1: entered allmulticast mode [ 552.255765][T22455] syzkaller1: entered promiscuous mode [ 552.266442][T22455] syzkaller1: entered allmulticast mode [ 552.375609][T22462] netlink: 'syz.4.4510': attribute type 3 has an invalid length. [ 552.398836][T22462] netlink: 'syz.4.4510': attribute type 1 has an invalid length. [ 552.472206][T22461] veth3: entered allmulticast mode [ 552.718149][T22479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 552.751776][T22485] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 552.933011][T22501] netlink: 'syz.6.4520': attribute type 6 has an invalid length. [ 552.979761][T22501] netlink: 'syz.6.4520': attribute type 5 has an invalid length. [ 553.427805][T22523] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 553.461336][T22523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 553.674363][T22545] team1: entered promiscuous mode [ 553.697868][T22545] team1: entered allmulticast mode [ 553.708322][T22498] lo speed is unknown, defaulting to 1000 [ 554.128513][T22566] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 554.358978][T22522] lo speed is unknown, defaulting to 1000 [ 554.926201][T22589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.972938][T22589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.268316][T22605] netlink: 'syz.4.4547': attribute type 62 has an invalid length. [ 555.589121][T22620] netlink: zone id is out of range [ 555.594649][T22620] netlink: zone id is out of range [ 555.601617][T22620] netlink: zone id is out of range [ 555.608886][T22620] netlink: zone id is out of range [ 555.615535][T22619] __nla_validate_parse: 9 callbacks suppressed [ 555.615554][T22619] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.4551'. [ 556.057829][ T1604] block nbd3: Possible stuck request ffff8880265d9400: control (read@0,1024B). Runtime 240 seconds [ 556.070708][ T1604] block nbd3: Possible stuck request ffff8880265d9600: control (read@1024,1024B). Runtime 240 seconds [ 556.082747][ T1604] block nbd3: Possible stuck request ffff8880265d9800: control (read@2048,1024B). Runtime 240 seconds [ 556.094008][ T1604] block nbd3: Possible stuck request ffff8880265d9a00: control (read@3072,1024B). Runtime 240 seconds [ 556.203704][T22638] IPVS: sync thread started: state = MASTER, mcast_ifn = team0, syncid = 1, id = 0 [ 556.442936][T22646] netlink: 23 bytes leftover after parsing attributes in process `syz.3.4559'. [ 556.479630][T22646] syzkaller0: entered promiscuous mode [ 556.485229][T22646] syzkaller0: entered allmulticast mode [ 556.554337][T22648] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4560'. [ 556.809623][T22651] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 557.018280][T22657] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4563'. [ 557.575566][T22692] netlink: 288 bytes leftover after parsing attributes in process `syz.1.4574'. [ 557.801110][T22698] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4576'. [ 557.847703][T22698] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4576'. [ 557.897388][T22698] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4576'. [ 558.052828][T22709] syzkaller0: entered promiscuous mode [ 558.101961][T22709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4579'. [ 558.148297][T22685] lo speed is unknown, defaulting to 1000 [ 560.533043][T22752] netlink: 'syz.3.4588': attribute type 1 has an invalid length. [ 560.647647][T22752] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 560.653161][T22732] lo speed is unknown, defaulting to 1000 [ 560.825310][T22768] SET target dimension over the limit! [ 560.838761][T22725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 560.854261][T22768] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 560.867841][T22768] netlink: 'syz.3.4590': attribute type 10 has an invalid length. [ 561.054634][T22772] netlink: 'syz.3.4592': attribute type 1 has an invalid length. [ 561.072607][T22772] netlink: 280 bytes leftover after parsing attributes in process `syz.3.4592'. [ 561.150561][T22776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4592'. [ 561.611751][T22785] netlink: 'syz.3.4595': attribute type 1 has an invalid length. [ 561.624910][T22785] netlink: 'syz.3.4595': attribute type 1 has an invalid length. [ 561.705946][T22787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4596'. [ 562.539797][T22819] netlink: 'syz.5.4604': attribute type 1 has an invalid length. [ 562.637937][T22823] x_tables: duplicate underflow at hook 2 [ 562.644700][T22823] net_ratelimit: 9 callbacks suppressed [ 562.644720][T22823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.669598][ T30] audit: type=1800 audit(1776058433.861:3): pid=22823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4606" name="memory.events" dev="tmpfs" ino=1568 res=0 errno=0 [ 562.710622][T22823] siw: device registration error -23 [ 562.723679][T22821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4605'. [ 562.753332][ T30] audit: type=1804 audit(1776058433.911:4): pid=22823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4606" name="/newroot/303/memory.events" dev="tmpfs" ino=1568 res=1 errno=0 [ 562.860101][T22827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4608'. [ 562.886017][T22827] netlink: 'syz.1.4608': attribute type 6 has an invalid length. [ 562.933716][T22827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4608'. [ 563.134631][ T1154] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 563.153599][T22836] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4610'. [ 563.154942][ T1154] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 563.182040][ T1154] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 563.216995][ T1154] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 563.237962][ T1154] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.251099][ T1154] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.279047][ T1154] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.308117][ T1154] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.371344][T22841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4613'. [ 563.396086][T22843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4613'. [ 563.560345][T22850] netlink: 'syz.3.4616': attribute type 5 has an invalid length. [ 563.590489][T22850] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4616'. [ 563.721148][T22861] openvswitch: netlink: EtherType 50a is less than min 600 [ 563.812701][T22863] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 563.859728][T22865] hsr0 (unregistering): left allmulticast mode [ 564.010544][T22877] netlink: 'syz.3.4625': attribute type 1 has an invalid length. [ 564.132311][T22884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.398105][T22903] netlink: 'syz.5.4632': attribute type 1 has an invalid length. [ 564.468639][T22903] sctp: [Deprecated]: syz.5.4632 (pid 22903) Use of int in max_burst socket option. [ 564.468639][T22903] Use struct sctp_assoc_value instead [ 564.638959][T22915] ipt_REJECT: TCP_RESET invalid for non-tcp [ 564.683059][T22928] openvswitch: netlink: IP tunnel dst address not specified [ 564.770842][T22929] 8021q: adding VLAN 0 to HW filter on device bond2 [ 564.859042][T22929] bond2: (slave veth5): Enslaving as an active interface with a down link [ 564.906270][T22943] bond2: (slave veth0_to_bond): making interface the new active one [ 564.943429][T22943] veth0_to_bond: entered promiscuous mode [ 564.950535][T22943] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 564.977506][T22929] team0: Port device dummy0 removed [ 565.310778][T22964] x_tables: unsorted underflow at hook 3 [ 565.428537][T22913] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 566.151579][T22996] __nla_validate_parse: 59 callbacks suppressed [ 566.151601][T22996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4655'. [ 566.219507][T23002] netlink: 808 bytes leftover after parsing attributes in process `syz.5.4657'. [ 566.243178][T23002] netlink: 808 bytes leftover after parsing attributes in process `syz.5.4657'. [ 566.264923][T23005] netlink: 404 bytes leftover after parsing attributes in process `syz.6.4658'. [ 566.295477][T23002] netlink: 808 bytes leftover after parsing attributes in process `syz.5.4657'. [ 566.544075][T23025] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4662'. [ 566.580204][T23022] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4662'. [ 566.585486][T23024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4663'. [ 566.633680][T23032] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4665'. [ 566.821439][T23044] validate_nla: 2 callbacks suppressed [ 566.821460][T23044] netlink: 'syz.5.4668': attribute type 5 has an invalid length. [ 567.261094][T23079] netlink: 'syz.3.4678': attribute type 1 has an invalid length. [ 567.322710][T23083] netlink: 'syz.5.4679': attribute type 10 has an invalid length. [ 567.431274][T23085] bond7: (slave bridge9): Enslaving as a backup interface with an up link [ 567.444815][T23088] netlink: 'syz.5.4679': attribute type 3 has an invalid length. [ 567.717130][T23101] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4683'. [ 567.753792][T23101] syzkaller0: entered promiscuous mode [ 567.797125][T23101] syzkaller0: entered allmulticast mode [ 567.957507][T23112] syzkaller0: entered promiscuous mode [ 567.973448][T23112] syzkaller0: entered allmulticast mode [ 568.635525][T23155] 8021q: adding VLAN 0 to HW filter on device bond2 [ 568.684260][T23172] netlink: 'syz.6.4701': attribute type 1 has an invalid length. [ 568.694240][T23172] netlink: 'syz.6.4701': attribute type 3 has an invalid length. [ 568.702210][T23172] netlink: 'syz.6.4701': attribute type 7 has an invalid length. [ 568.710204][T23172] netlink: 'syz.6.4701': attribute type 8 has an invalid length. [ 568.718149][T23172] NCSI netlink: No device for ifindex 131092 [ 568.742095][T23165] bond2: entered promiscuous mode [ 568.787452][T23165] bond2: entered allmulticast mode [ 568.794529][T23165] 8021q: adding VLAN 0 to HW filter on device bond2 [ 568.819211][T23165] team0: Port device bond2 added [ 568.895050][T23179] xt_limit: Overflow, try lower: 271964/0 [ 568.904070][T23155] vxcan1: entered promiscuous mode [ 568.917043][T23155] bond2: (slave vxcan1): refused to change device type [ 569.087866][T23182] netlink: 'syz.4.4705': attribute type 24 has an invalid length. [ 569.254374][T23201] netlink: 'syz.1.4709': attribute type 1 has an invalid length. [ 569.303075][T23201] 8021q: adding VLAN 0 to HW filter on device bond3 [ 569.363202][T23202] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 569.423924][T23201] 8021q: adding VLAN 0 to HW filter on device bond4 [ 569.453566][T23201] bond3: (slave bond4): Enslaving as an active interface with a down link [ 569.477625][T23207] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 570.542900][T23272] block nbd6: Unsupported socket: should be TCP or UNIX. [ 570.651460][T23274] bond4: option all_slaves_active: invalid value (222) [ 570.662033][T23274] bond4 (unregistering): Released all slaves [ 570.924437][T23295] tipc: Started in network mode [ 570.944017][T23295] tipc: Node identity d2369109d809, cluster identity 4711 [ 570.966264][T23295] tipc: Enabled bearer , priority 0 [ 570.980864][T23295] syzkaller0: entered promiscuous mode [ 570.993457][T23295] syzkaller0: entered allmulticast mode [ 571.033001][T23296] tipc: Resetting bearer [ 571.057808][T23296] tipc: Disabling bearer [ 571.163645][ T58] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.182004][ T58] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.219354][T23308] ksmbd: Unknown IPC event: 8, ignore. [ 571.226182][ T58] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.254854][ T58] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.296900][T23315] __nla_validate_parse: 18 callbacks suppressed [ 571.296924][T23315] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4739'. [ 571.349866][T23315] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.357668][T23315] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.611948][T23335] netem: incorrect gi model size [ 571.619031][T23335] netem: change failed [ 571.625248][T23335] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4746'. [ 571.763309][T23344] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4749'. [ 571.774512][T23344] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4749'. [ 571.810732][T23344] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4749'. [ 571.824858][T23344] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4749'. [ 571.837385][T23344] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4749'. [ 571.847244][T23344] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4749'. [ 571.890011][T23344] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4749'. [ 571.910352][T23344] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4749'. [ 571.928061][T23351] validate_nla: 5 callbacks suppressed [ 571.928081][T23351] netlink: 'syz.1.4750': attribute type 33 has an invalid length. [ 572.002995][T23351] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 572.021353][T23351] bond5 (unregistering): Released all slaves [ 572.142745][T23361] xt_cluster: node mask cannot exceed total number of nodes [ 572.162088][T23361] xt_cluster: node mask cannot exceed total number of nodes [ 572.182333][T23361] xt_cluster: node mask cannot exceed total number of nodes [ 572.209044][T23361] xt_cluster: node mask cannot exceed total number of nodes [ 572.219929][T23361] xt_cluster: node mask cannot exceed total number of nodes [ 572.354764][ T5830] block nbd8: Receive control failed (result -107) [ 572.407455][T23369] nbd8: detected capacity change from 0 to 127 [ 572.425146][T16395] block nbd8: Dead connection, failed to find a fallback [ 572.437860][T16395] block nbd8: shutting down sockets [ 572.446746][T16395] blk_print_req_error: 138 callbacks suppressed [ 572.446766][T16395] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 572.478684][T16395] buffer_io_error: 138 callbacks suppressed [ 572.478703][T16395] Buffer I/O error on dev nbd8, logical block 0, async page read [ 572.492760][T23373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 572.503159][T16395] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 572.528278][T16395] Buffer I/O error on dev nbd8, logical block 1, async page read [ 572.536283][T16395] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 572.549144][T16395] Buffer I/O error on dev nbd8, logical block 2, async page read [ 572.587730][T16395] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 572.598029][T16395] Buffer I/O error on dev nbd8, logical block 3, async page read [ 572.605895][T16395] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 572.659629][T16395] Buffer I/O error on dev nbd8, logical block 0, async page read [ 572.684696][T16395] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 572.716344][T16395] Buffer I/O error on dev nbd8, logical block 1, async page read [ 572.748241][T16395] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 572.775689][T16395] Buffer I/O error on dev nbd8, logical block 2, async page read [ 572.796455][T16395] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 572.826821][T16395] Buffer I/O error on dev nbd8, logical block 3, async page read [ 572.855199][T16395] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 573.034576][T16395] Buffer I/O error on dev nbd8, logical block 0, async page read [ 573.162210][T23400] gretap2: entered promiscuous mode [ 573.177249][T16395] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 573.197745][T23400] batman_adv: batadv0: Adding interface: gretap2 [ 573.207706][T16395] Buffer I/O error on dev nbd8, logical block 1, async page read [ 573.217367][T16395] ldm_validate_partition_table(): Disk read failed. [ 573.224794][T23400] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.233566][T16395] Dev nbd8: unable to read RDB block 0 [ 573.264728][T16395] nbd8: unable to read partition table [ 573.265567][T23400] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 573.315487][T16395] ldm_validate_partition_table(): Disk read failed. [ 573.332546][T16395] Dev nbd8: unable to read RDB block 0 [ 573.351886][T16395] nbd8: unable to read partition table [ 573.714803][T23420] bond8: entered allmulticast mode [ 574.235858][T23453] atomic_op ffff888041638998 conn xmit_atomic 0000000000000000 [ 574.394710][T23461] delete_channel: no stack [ 574.451995][T23458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 574.466211][T23457] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 574.981040][T23503] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 573 [ 574.998913][T23503] netlink: 'syz.6.4796': attribute type 4 has an invalid length. [ 575.265379][T23518] netlink: 'syz.4.4800': attribute type 1 has an invalid length. [ 575.347971][T23518] bond3: entered promiscuous mode [ 575.353616][T23518] 8021q: adding VLAN 0 to HW filter on device bond3 [ 575.659019][T23539] netem: incorrect ge model size [ 575.664853][T23539] netem: change failed [ 575.721084][T23545] team0 (unregistering): Port device team_slave_0 removed [ 575.757996][T23545] team0 (unregistering): Port device team_slave_1 removed [ 576.029606][T23562] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode [ 576.068009][ T1154] veth0_to_bond: left promiscuous mode [ 576.342027][T23577] team0: Port device team_slave_0 removed [ 576.399217][T23580] ˙˙˙˙˙˙: renamed from virt_wifi0 [ 576.507507][T23592] __nla_validate_parse: 32 callbacks suppressed [ 576.507529][T23592] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4822'. [ 576.565798][T23596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 576.576460][T23592] 8021q: adding VLAN 0 to HW filter on device bond4 [ 576.702383][T23606] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.4824'. [ 576.730381][T23607] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4826'. [ 576.847975][T23613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4827'. [ 576.865825][T23613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4827'. [ 576.927266][T23615] sctp: [Deprecated]: syz.5.4828 (pid 23615) Use of struct sctp_assoc_value in delayed_ack socket option. [ 576.927266][T23615] Use struct sctp_sack_info instead [ 577.087640][T23629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 577.169626][T23634] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4834'. [ 577.470461][T23652] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4840'. [ 577.815630][T23678] netlink: 124 bytes leftover after parsing attributes in process `syz.6.4847'. [ 577.826478][ T1604] block nbd5: Possible stuck request ffff888026678000: control (read@0,1024B). Runtime 330 seconds [ 577.837946][ T1604] block nbd5: Possible stuck request ffff888026678200: control (read@1024,1024B). Runtime 330 seconds [ 577.849128][ T1604] block nbd5: Possible stuck request ffff888026678400: control (read@2048,1024B). Runtime 330 seconds [ 577.860786][ T1604] block nbd5: Possible stuck request ffff888026678600: control (read@3072,1024B). Runtime 330 seconds [ 577.885896][ T1154] [ 577.888296][ T1154] ====================================================== [ 577.892263][T23679] netlink: 'syz.1.4848': attribute type 1 has an invalid length. [ 577.895359][ T1154] WARNING: possible circular locking dependency detected [ 577.895408][ T1154] syzkaller #0 Not tainted [ 577.914607][ T1154] ------------------------------------------------------ [ 577.921652][ T1154] kworker/u8:10/1154 is trying to acquire lock: [ 577.927937][ T1154] ffffffff8e883760 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 577.937949][ T1154] [ 577.937949][ T1154] but task is already holding lock: [ 577.945354][ T1154] ffff888062aac220 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 577.955003][ T1154] [ 577.955003][ T1154] which lock already depends on the new lock. [ 577.955003][ T1154] [ 577.965427][ T1154] [ 577.965427][ T1154] the existing dependency chain (in reverse order) is: [ 577.974475][ T1154] [ 577.974475][ T1154] -> #7 (k-sk_lock-AF_INET){+.+.}-{0:0}: [ 577.982429][ T1154] lock_sock_nested+0x48/0x100 [ 577.987839][ T1154] mptcp_setsockopt+0x2766/0x36a0 [ 577.993419][ T1154] do_sock_setsockopt+0x17c/0x1b0 [ 577.999027][ T1154] __x64_sys_setsockopt+0x13d/0x1b0 [ 578.004809][ T1154] do_syscall_64+0x14d/0xf80 [ 578.009953][ T1154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.016396][ T1154] [ 578.016396][ T1154] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 578.024070][ T1154] lock_sock_nested+0x48/0x100 [ 578.029381][ T1154] inet_shutdown+0x6a/0x390 [ 578.034451][ T1154] nbd_mark_nsock_dead+0x2e9/0x560 [ 578.040118][ T1154] recv_work+0x1c7f/0x1d90 [ 578.045105][ T1154] process_scheduled_works+0xb6e/0x18c0 [ 578.051221][ T1154] worker_thread+0xa53/0xfc0 [ 578.056364][ T1154] kthread+0x388/0x470 [ 578.061170][ T1154] ret_from_fork+0x51e/0xb90 [ 578.066322][ T1154] ret_from_fork_asm+0x1a/0x30 [ 578.071665][ T1154] [ 578.071665][ T1154] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 578.079349][ T1154] __mutex_lock+0x19f/0x1300 [ 578.084588][ T1154] nbd_queue_rq+0x37b/0x1100 [ 578.089728][ T1154] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 578.095828][ T1154] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 578.102801][ T1154] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 578.109351][ T1154] blk_mq_run_hw_queue+0x348/0x4f0 [ 578.115015][ T1154] blk_mq_dispatch_list+0xd16/0xe10 [ 578.120765][ T1154] blk_mq_flush_plug_list+0x48d/0x570 [ 578.126687][ T1154] __blk_flush_plug+0x3ed/0x4d0 [ 578.132222][ T1154] __submit_bio+0x28d/0x580 [ 578.137279][ T1154] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 578.143567][ T1154] block_read_full_folio+0x599/0x830 [ 578.149413][ T1154] filemap_read_folio+0x137/0x3b0 [ 578.155043][ T1154] do_read_cache_folio+0x358/0x590 [ 578.160719][ T1154] read_part_sector+0xb6/0x2b0 [ 578.166056][ T1154] adfspart_check_ICS+0xa5/0xa40 [ 578.171604][ T1154] bdev_disk_changed+0x7ba/0x1550 [ 578.177201][ T1154] blkdev_get_whole+0x380/0x510 [ 578.182618][ T1154] bdev_open+0x31e/0xd30 [ 578.187411][ T1154] blkdev_open+0x470/0x610 [ 578.192441][ T1154] do_dentry_open+0x785/0x14e0 [ 578.197765][ T1154] vfs_open+0x3b/0x340 [ 578.202417][ T1154] path_openat+0x2e08/0x3860 [ 578.207557][ T1154] do_file_open+0x23e/0x4a0 [ 578.212612][ T1154] do_sys_openat2+0x113/0x200 [ 578.217864][ T1154] __x64_sys_openat+0x138/0x170 [ 578.223363][ T1154] do_syscall_64+0x14d/0xf80 [ 578.228626][ T1154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.235090][ T1154] [ 578.235090][ T1154] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 578.242430][ T1154] __mutex_lock+0x19f/0x1300 [ 578.247592][ T1154] nbd_queue_rq+0xc6/0x1100 [ 578.252656][ T1154] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 578.258761][ T1154] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 578.265644][ T1154] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 578.272182][ T1154] blk_mq_run_hw_queue+0x348/0x4f0 [ 578.277851][ T1154] blk_mq_dispatch_list+0xd16/0xe10 [ 578.283605][ T1154] blk_mq_flush_plug_list+0x48d/0x570 [ 578.289529][ T1154] __blk_flush_plug+0x3ed/0x4d0 [ 578.294944][ T1154] __submit_bio+0x28d/0x580 [ 578.300002][ T1154] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 578.306183][ T1154] block_read_full_folio+0x599/0x830 [ 578.312021][ T1154] filemap_read_folio+0x137/0x3b0 [ 578.317606][ T1154] do_read_cache_folio+0x358/0x590 [ 578.323274][ T1154] read_part_sector+0xb6/0x2b0 [ 578.328633][ T1154] adfspart_check_ICS+0xa5/0xa40 [ 578.334131][ T1154] bdev_disk_changed+0x7ba/0x1550 [ 578.339709][ T1154] blkdev_get_whole+0x380/0x510 [ 578.345118][ T1154] bdev_open+0x31e/0xd30 [ 578.349932][ T1154] blkdev_open+0x470/0x610 [ 578.354901][ T1154] do_dentry_open+0x785/0x14e0 [ 578.360222][ T1154] vfs_open+0x3b/0x340 [ 578.364892][ T1154] path_openat+0x2e08/0x3860 [ 578.370041][ T1154] do_file_open+0x23e/0x4a0 [ 578.375090][ T1154] do_sys_openat2+0x113/0x200 [ 578.380319][ T1154] __x64_sys_openat+0x138/0x170 [ 578.385720][ T1154] do_syscall_64+0x14d/0xf80 [ 578.390887][ T1154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.397330][ T1154] [ 578.397330][ T1154] -> #3 (set->srcu){.+.+}-{0:0}: [ 578.404488][ T1154] __synchronize_srcu+0xca/0x300 [ 578.409984][ T1154] elevator_switch+0x1e8/0x7a0 [ 578.415335][ T1154] elevator_change+0x2cc/0x450 [ 578.420669][ T1154] elevator_set_default+0x36c/0x430 [ 578.426464][ T1154] blk_register_queue+0x366/0x430 [ 578.432052][ T1154] __add_disk+0x677/0xd50 [ 578.436939][ T1154] add_disk_fwnode+0xfb/0x480 [ 578.442172][ T1154] nbd_dev_add+0x72c/0xb50 [ 578.447139][ T1154] nbd_init+0x168/0x1f0 [ 578.451840][ T1154] do_one_initcall+0x250/0x8d0 [ 578.457165][ T1154] do_initcall_level+0x104/0x190 [ 578.462663][ T1154] do_initcalls+0x59/0xa0 [ 578.467635][ T1154] kernel_init_freeable+0x2a6/0x3e0 [ 578.473377][ T1154] kernel_init+0x1d/0x1d0 [ 578.478257][ T1154] ret_from_fork+0x51e/0xb90 [ 578.483402][ T1154] ret_from_fork_asm+0x1a/0x30 [ 578.488717][ T1154] [ 578.488717][ T1154] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 578.496600][ T1154] __mutex_lock+0x19f/0x1300 [ 578.501811][ T1154] elevator_change+0x1b3/0x450 [ 578.507162][ T1154] elevator_set_none+0xb5/0x140 [ 578.512749][ T1154] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 578.519112][ T1154] nbd_start_device+0x17f/0xb10 [ 578.524514][ T1154] nbd_genl_connect+0x165b/0x1cf0 [ 578.530223][ T1154] genl_family_rcv_msg_doit+0x22a/0x330 [ 578.536322][ T1154] genl_rcv_msg+0x61c/0x7a0 [ 578.541408][ T1154] netlink_rcv_skb+0x232/0x4b0 [ 578.546729][ T1154] genl_rcv+0x28/0x40 [ 578.551262][ T1154] netlink_unicast+0x80f/0x9b0 [ 578.556577][ T1154] netlink_sendmsg+0x813/0xb40 [ 578.561899][ T1154] ____sys_sendmsg+0x972/0x9f0 [ 578.567216][ T1154] ___sys_sendmsg+0x2a5/0x360 [ 578.572624][ T1154] __x64_sys_sendmsg+0x1bd/0x2a0 [ 578.578237][ T1154] do_syscall_64+0x14d/0xf80 [ 578.583475][ T1154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.589917][ T1154] [ 578.589917][ T1154] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 578.598649][ T1154] blk_alloc_queue+0x546/0x680 [ 578.603968][ T1154] __blk_mq_alloc_disk+0x197/0x390 [ 578.609638][ T1154] nbd_dev_add+0x499/0xb50 [ 578.614608][ T1154] nbd_init+0x168/0x1f0 [ 578.619314][ T1154] do_one_initcall+0x250/0x8d0 [ 578.624638][ T1154] do_initcall_level+0x104/0x190 [ 578.630135][ T1154] do_initcalls+0x59/0xa0 [ 578.635014][ T1154] kernel_init_freeable+0x2a6/0x3e0 [ 578.640769][ T1154] kernel_init+0x1d/0x1d0 [ 578.645646][ T1154] ret_from_fork+0x51e/0xb90 [ 578.650787][ T1154] ret_from_fork_asm+0x1a/0x30 [ 578.656116][ T1154] [ 578.656116][ T1154] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 578.663355][ T1154] __lock_acquire+0x15a5/0x2cf0 [ 578.668762][ T1154] lock_acquire+0xf0/0x2e0 [ 578.673729][ T1154] fs_reclaim_acquire+0x71/0x100 [ 578.679393][ T1154] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 578.685762][ T1154] __alloc_skb+0x1d0/0x7d0 [ 578.690759][ T1154] tcp_stream_alloc_skb+0x3f/0x580 [ 578.696429][ T1154] tcp_connect+0x1527/0x5370 [ 578.701568][ T1154] tcp_v4_connect+0x10f6/0x19b0 [ 578.706969][ T1154] __inet_stream_connect+0x25a/0xdd0 [ 578.712833][ T1154] inet_stream_connect+0x66/0xa0 [ 578.718421][ T1154] kernel_connect+0x141/0x1c0 [ 578.723756][ T1154] rds_tcp_conn_path_connect+0x6f6/0x930 [ 578.729945][ T1154] rds_connect_worker+0x1d8/0x290 [ 578.735530][ T1154] process_scheduled_works+0xb6e/0x18c0 [ 578.741747][ T1154] worker_thread+0xa53/0xfc0 [ 578.746921][ T1154] kthread+0x388/0x470 [ 578.751560][ T1154] ret_from_fork+0x51e/0xb90 [ 578.756943][ T1154] ret_from_fork_asm+0x1a/0x30 [ 578.762301][ T1154] [ 578.762301][ T1154] other info that might help us debug this: [ 578.762301][ T1154] [ 578.772749][ T1154] Chain exists of: [ 578.772749][ T1154] fs_reclaim --> sk_lock-AF_INET --> k-sk_lock-AF_INET [ 578.772749][ T1154] [ 578.785567][ T1154] Possible unsafe locking scenario: [ 578.785567][ T1154] [ 578.793305][ T1154] CPU0 CPU1 [ 578.798814][ T1154] ---- ---- [ 578.804211][ T1154] lock(k-sk_lock-AF_INET); [ 578.808833][ T1154] lock(sk_lock-AF_INET); [ 578.815807][ T1154] lock(k-sk_lock-AF_INET); [ 578.823042][ T1154] lock(fs_reclaim); [ 578.827239][ T1154] [ 578.827239][ T1154] *** DEADLOCK *** [ 578.827239][ T1154] [ 578.835499][ T1154] 4 locks held by kworker/u8:10/1154: [ 578.840975][ T1154] #0: ffff888078005948 ((wq_completion)krds_cp_wq#14/0#2){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 578.852949][ T1154] #1: ffffc90004cffc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 578.865787][ T1154] #2: ffff88803ddf58c8 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x930 [ 578.876889][ T1154] #3: ffff888062aac220 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 578.886963][ T1154] [ 578.886963][ T1154] stack backtrace: [ 578.892888][ T1154] CPU: 1 UID: 0 PID: 1154 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 578.892910][ T1154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 578.892923][ T1154] Workqueue: krds_cp_wq#14/0 rds_connect_worker [ 578.892959][ T1154] Call Trace: [ 578.892969][ T1154] [ 578.892977][ T1154] dump_stack_lvl+0xe8/0x150 [ 578.893003][ T1154] print_circular_bug+0x2e1/0x300 [ 578.893034][ T1154] check_noncircular+0x12e/0x150 [ 578.893064][ T1154] __lock_acquire+0x15a5/0x2cf0 [ 578.893090][ T1154] ? inet_sk_rebuild_header+0x93/0x1da0 [ 578.893119][ T1154] ? __lock_acquire+0x6b5/0x2cf0 [ 578.893144][ T1154] lock_acquire+0xf0/0x2e0 [ 578.893166][ T1154] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 578.893187][ T1154] ? lockdep_hardirqs_on+0x7a/0x110 [ 578.893213][ T1154] fs_reclaim_acquire+0x71/0x100 [ 578.893235][ T1154] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 578.893253][ T1154] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 578.893272][ T1154] ? __alloc_skb+0x1d0/0x7d0 [ 578.893293][ T1154] ? ipv4_default_advmss+0x20/0x340 [ 578.893319][ T1154] __alloc_skb+0x1d0/0x7d0 [ 578.893342][ T1154] tcp_stream_alloc_skb+0x3f/0x580 [ 578.893367][ T1154] ? __asan_memset+0x22/0x50 [ 578.893385][ T1154] tcp_connect+0x1527/0x5370 [ 578.893411][ T1154] ? __lock_acquire+0x146e/0x2cf0 [ 578.893444][ T1154] ? __pfx_tcp_connect+0x10/0x10 [ 578.893473][ T1154] ? __asan_memset+0x22/0x50 [ 578.893491][ T1154] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 578.893509][ T1154] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 578.893535][ T1154] ? sk_setup_caps+0x9ef/0xc40 [ 578.893559][ T1154] ? sk_setup_caps+0x29/0xc40 [ 578.893582][ T1154] tcp_v4_connect+0x10f6/0x19b0 [ 578.893608][ T1154] ? __pfx___schedule+0x10/0x10 [ 578.893639][ T1154] ? __pfx_tcp_v4_connect+0x10/0x10 [ 578.893669][ T1154] __inet_stream_connect+0x25a/0xdd0 [ 578.893697][ T1154] ? do_raw_spin_lock+0x12b/0x2f0 [ 578.893716][ T1154] ? __pfx___inet_stream_connect+0x10/0x10 [ 578.893742][ T1154] ? inet_stream_connect+0x51/0xa0 [ 578.893767][ T1154] ? __local_bh_enable_ip+0xd0/0x130 [ 578.893797][ T1154] inet_stream_connect+0x66/0xa0 [ 578.893823][ T1154] kernel_connect+0x141/0x1c0 [ 578.893849][ T1154] ? net_generic+0x1e/0x240 [ 578.893874][ T1154] ? __pfx_kernel_connect+0x10/0x10 [ 578.893907][ T1154] ? __local_bh_enable_ip+0xd0/0x130 [ 578.893932][ T1154] rds_tcp_conn_path_connect+0x6f6/0x930 [ 578.893965][ T1154] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 578.894001][ T1154] rds_connect_worker+0x1d8/0x290 [ 578.894024][ T1154] ? process_scheduled_works+0xa8d/0x18c0 [ 578.894048][ T1154] process_scheduled_works+0xb6e/0x18c0 [ 578.894084][ T1154] ? __pfx_process_scheduled_works+0x10/0x10 [ 578.894110][ T1154] ? assign_work+0x3d5/0x5e0 [ 578.894133][ T1154] worker_thread+0xa53/0xfc0 [ 578.894168][ T1154] kthread+0x388/0x470 [ 578.894185][ T1154] ? __pfx_worker_thread+0x10/0x10 [ 578.894207][ T1154] ? __pfx_kthread+0x10/0x10 [ 578.894222][ T1154] ret_from_fork+0x51e/0xb90 [ 578.894248][ T1154] ? __pfx_ret_from_fork+0x10/0x10 [ 578.894269][ T1154] ? __switch_to+0xc7d/0x1450 [ 578.894289][ T1154] ? __pfx_kthread+0x10/0x10 [ 578.894305][ T1154] ret_from_fork_asm+0x1a/0x30 [ 578.894339][ T1154] [ 579.276518][T23679] 8021q: adding VLAN 0 to HW filter on device bond5 [ 579.285176][T23682] bond5: option mode: unable to set because the bond device is up [ 586.136929][ T1604] block nbd3: Possible stuck request ffff8880265d9400: control (read@0,1024B). Runtime 270 seconds [ 586.147920][ T1604] block nbd3: Possible stuck request ffff8880265d9600: control (read@1024,1024B). Runtime 270 seconds [ 586.159604][ T1604] block nbd3: Possible stuck request ffff8880265d9800: control (read@2048,1024B). Runtime 270 seconds [ 586.170739][ T1604] block nbd3: Possible stuck request ffff8880265d9a00: control (read@3072,1024B). Runtime 270 seconds