last executing test programs: 1.833087407s ago: executing program 0 (id=14051): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x1c, 0x35, 0x107, 0xffffffff, 0xfffffffe, {0x5, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x8, 0x5, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56661, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x6}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xffff, 0xfffd}}}]}, 0x38}}, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x10003, 0x8, 0x20000000, 0x3, 0x2}, 0x2, r4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) 1.707508197s ago: executing program 0 (id=14056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}]}], {0x14}}, 0x7c}}, 0x20000840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r5, 0x10f, 0x89, &(0x7f0000000480), &(0x7f00000004c0)=0x4) sendmsg$AUDIT_TRIM(r4, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f6, 0x20, 0x70bd2d, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x801) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r3, 0x1, 0x0, 0x3, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}]}], {0x14}}, 0x7c}}, 0x20000840) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) socket$tipc(0x1e, 0x5, 0x0) (async) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r5, 0x10f, 0x89, &(0x7f0000000480), &(0x7f00000004c0)=0x4) (async) sendmsg$AUDIT_TRIM(r4, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f6, 0x20, 0x70bd2d, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x801) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r3, 0x1, 0x0, 0x3, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) 1.629478955s ago: executing program 4 (id=14057): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x9, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x82e, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x40005, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610434000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000080)={'syztnl0\x00', r1, 0x1, 0x8, 0x9, 0x8, {{0x6, 0x4, 0x3, 0x27, 0x18, 0x67, 0x0, 0xe3, 0x29, 0x0, @multicast1, @multicast2, {[@ra={0x94, 0x4}]}}}}}) 1.549534239s ago: executing program 0 (id=14059): sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xec, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4efa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x81}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xa32}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x1}, 0x14) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x40, 0x8, 0x16, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x7, 0x10, 0x7}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x401}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x48000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0xc, &(0x7f0000000400)=@raw=[@exit, @map_val={0x18, 0x5, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x68}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, @generic={0x7, 0x9, 0xe, 0xc0b}], &(0x7f0000000480)='GPL\x00', 0x2, 0x63, &(0x7f00000004c0)=""/99, 0x41100, 0x10, '\x00', r1, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0xe, 0x2, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f00000005c0)=[0xffffffffffffffff], &(0x7f0000000600)=[{0x1, 0x5, 0x1, 0x6}, {0x0, 0x5, 0x6, 0x2}], 0x10, 0xfffffffd}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000800)={0xffffffffffffffff, &(0x7f0000000700)='\x00', 0x200081, &(0x7f0000000740)={@align=0x2, {0xf2, 0x6, 0x3, 0x1}}, 0x7fff, &(0x7f0000000780), &(0x7f00000007c0)=0x2}) r4 = gettid() r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000900)={r2, r3, 0x2f, 0x0, @val=@uprobe_multi={&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)=[0x10001, 0x6, 0x6, 0x8, 0x5], &(0x7f00000008c0)=[0x1, 0x3, 0x2, 0x0], 0x2, 0x5, 0x0, r4}}, 0x40) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x10001, 0x0, 0x1, 0x9354, '\x00', r1, r3, 0x3, 0x1}, 0x50) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000a00), r3) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x65e8f9e7da719326) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f0000000b00)=@fragment={0x73, 0x0, 0x8, 0x0, 0x0, 0x6, 0x68}, 0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000bc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r7, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x10048004) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000001200)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000d40)={0x448, r10, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x110, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x76d6cedbb350fda4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x24, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x3c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x164, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xede2d9284cd3d63e}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xd4, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x448}, 0x1, 0x0, 0x0, 0x20020000}, 0x41) getsockname$qrtr(r3, &(0x7f0000001240), &(0x7f0000001280)=0xc) r11 = accept(r5, &(0x7f00000012c0)=@hci, &(0x7f0000001340)=0x80) sendmsg$IPCTNL_MSG_EXP_NEW(r11, &(0x7f0000001500)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000014c0)={&(0x7f00000013c0)={0xd8, 0x0, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT={0xa0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r9, 0xc0389423, &(0x7f0000001580)={0x5, 0x20, [0x75, 0xf, 0x9455, 0x7fffffffffffffff], &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0]}) bind$802154_dgram(r3, &(0x7f00000015c0)={0x24, @short={0x2, 0x3}}, 0x14) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000001680)={'filter\x00', 0x0, 0x3, 0x3e, [0xc, 0x2, 0x0, 0x6b, 0x1d, 0xc], 0x3, &(0x7f0000001600)=[{}, {}, {}], &(0x7f0000001640)=""/62}, &(0x7f0000001700)=0x78) sendmsg$NL80211_CMD_JOIN_OCB(r9, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x38, r7, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4a}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x372}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48005}, 0x40051) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000001840)=r1) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000001900)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4b0, 0x98, 0x350, 0x350, 0x240, 0x180, 0x418, 0x418, 0x418, 0x418, 0x418, 0x6, &(0x7f0000001880), {[{{@ip={@rand_addr=0x64010102, @rand_addr=0x64010102, 0xff000000, 0xffffffff, 'veth0_to_hsr\x00', 'team0\x00', {0xff}, {}, 0x5e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x0, 0x3}}}, {{@ip={@multicast2, @broadcast, 0xffffff00, 0xff000000, 'veth1_to_bond\x00', 'netdevsim0\x00', {}, {}, 0x33, 0x1, 0x6b}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x11}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x1, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x30}, 0xff000000, 0x0, 'rose0\x00', 'macvtap0\x00', {}, {}, 0x6c, 0x1, 0x2}, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x3, 0x1, 0x1, 0x0, 0x4, 0x1], 0x6, 0x4}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x1, 0x6, 0x6, 0x9], 0x5, 0x1}, {0x2, [0x4, 0x1, 0x6, 0x4], 0x4, 0x4}}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x40, 0x800, 0x0, 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x7f}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) 1.429143436s ago: executing program 3 (id=14062): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x12, 0x0, 0xd, 0xb, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e20, @remote}}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_x_sec_ctx={0x2, 0x18, 0xca, 0x4, 0x1, "c4"}]}, 0x58}}, 0x10) r4 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) ioctl$SIOCX25GDTEFACILITIES(r4, 0x89ea, &(0x7f00000000c0)) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x61}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 1.330749828s ago: executing program 2 (id=14063): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a00000005000100060000001300"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r5) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000001500)={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "8908981864d689ac43445c1c26e95299e94ccad8794114ae3061e328af342f99", "e4d0ce57abcb41f7f5c8ab8f63dd38a1", {"bb3ce5a4bbb68671a2892fa0317a823c", "be9d98ca816f77013a778b6c40b49ea9"}}}}}}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), r2) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r8, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044884}, 0x4040000) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000190001090000000000000000021800000000dd010000000008000100ac1414"], 0x38}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) write$tun(r9, &(0x7f0000000080)={@val={0x0, 0x8917}, @void, @eth={@link_local, @remote, @void, {@can={0xc, {{0x4, 0x1}, 0x4, 0x2, 0x0, 0x0, "85d5cbf95e9b1646"}}}}}, 0x22) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x3}, 0x4) close(r0) 1.28482107s ago: executing program 0 (id=14064): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x28008000}, 0x20000800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="ab7c2ab5700007dcdf251200000008000300", @ANYRES32=r6, @ANYBLOB="06001200090000000a0006000802110000010000"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40002084) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x4040000) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x5}, @TCA_FQ_QUANTUM={0x8, 0x2, 0x3001029}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000140)=0x30) syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd30800180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00034001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600270789f29320202812f648110091b0502e08613f18137040000"], 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x28008000}, 0x20000800) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="ab7c2ab5700007dcdf251200000008000300", @ANYRES32=r6, @ANYBLOB="06001200090000000a0006000802110000010000"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40002084) (async) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x4040000) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000180)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x5}, @TCA_FQ_QUANTUM={0x8, 0x2, 0x3001029}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000140)=0x30) (async) syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd30800180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00034001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600270789f29320202812f648110091b0502e08613f18137040000"], 0x0) (async) 1.26143363s ago: executing program 1 (id=14065): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r1}, 0x20) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r2, 0x101, 0xc, &(0x7f0000000080)=0x10000, 0x4) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000180)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, 0x44}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)="256fc5c46bbc149ab46625913ef1dec09d769ea5aedc45fa8aef28d8a17ad5e4926f5985", &(0x7f0000000000)=""/82}, 0x20) 1.240710964s ago: executing program 4 (id=14066): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, 0x2500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="400002"], 0x6) openat$nci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0) (async) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, 0x2500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) (async) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) (async) write$nci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="400002"], 0x6) (async) 1.18332643s ago: executing program 3 (id=14067): syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') openat$cgroup(r1, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') openat$cgroup(r2, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) getsockname$packet(r4, 0x0, &(0x7f0000000480)) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x3, 0x4, 0x12, 0x0, r0, 0xfffff801}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000080)={r6, 0x6, 0x3ff, 0xbc}) sendmsg$IPSET_CMD_PROTOCOL(r7, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x4c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r8 = gettid() syz_open_procfs$namespace(r8, &(0x7f0000000380)='ns/time_for_children\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, &(0x7f00000002c0), &(0x7f0000000440)=r3}, 0x20) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x3}}, 0x26) 1.137712072s ago: executing program 2 (id=14068): socket$kcm(0x10, 0x2, 0x10) socket$can_raw(0x1d, 0x3, 0x1) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r1) socket(0x40000000015, 0x5, 0x0) (async) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x50}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x17, 0x0, 0x1, 0xf8}, 0x14) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x17, 0x0, 0x1, 0xf8}, 0x14) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES32=r7, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newtfilter={0x3c, 0x28, 0xd27, 0x7f2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xe40ca4f7c51e5624, 0xf}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newtfilter={0x3c, 0x28, 0xd27, 0x7f2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xe40ca4f7c51e5624, 0xf}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) (async) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r2, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f0000019580)=[{0x10}, {0x10, 0x114, 0x2}], 0x20}, 0x0) (async) sendmsg(r2, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f0000019580)=[{0x10}, {0x10, 0x114, 0x2}], 0x20}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r9}, 0x10) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) r11 = socket(0x10, 0x3, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x1000, 0x4) write(r11, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d00)={@cgroup, 0xffffffffffffffff, 0x1f, 0x4, 0xffffffffffffffff, @void, @value=r10}, 0x20) ioctl$sock_inet_SIOCGARP(r11, 0x8954, &(0x7f0000000140)={{0x2, 0x4e20, @local}, {0x6, @multicast}, 0x58, {0x2, 0x4e22, @multicast2}, 'veth0_to_bond\x00'}) (async) ioctl$sock_inet_SIOCGARP(r11, 0x8954, &(0x7f0000000140)={{0x2, 0x4e20, @local}, {0x6, @multicast}, 0x58, {0x2, 0x4e22, @multicast2}, 'veth0_to_bond\x00'}) 1.095434277s ago: executing program 0 (id=14069): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)=0x4) vmsplice(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="05b81f0c94c1b6248baf51fff9276fa6406c6c63a210b8d7e2d83733349fe52030432eb4096672ffdac81e19ea188178b4a20ab9724f88206ae3940de4ba621295b78e6bd4da09cf116ec7d4464bc9f9456c484345ca1da7f9d777587073472b8d742ac6979c4d79c61bd691bac04b6abce241119078f5c4d37e1ae060e491dc5b60e3ac65eaa92e74c8a715fb5a1aac289c6f8b2a14c0b71a34", 0x9a}, {&(0x7f0000000180)="a272376cd3e66c809a583ed8e1e3c6bda30990b187e261ac8f6164302bb7f89a978ed335e921797729111c78d9984f9d68f43edfd7e496258d8fe9f3afc0c112d3aff498393c11baf72de7d74a2410125935021eae6cd7cd0ae39389dae23d239fcd21bdf7749cd227c2e869def60771368424", 0x73}, {&(0x7f0000000240)}], 0x3, 0x6) close(r1) close(r0) 1.013169877s ago: executing program 1 (id=14070): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="7c0000002000010000000000000000000a00100000000001000000001400110076657446305f746f5f6873720000000014000100fc01000000000007000000000000000008000a000700000008000f00ffffffff140002"], 0x7c}}, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="23020000000000000000030000001400010000e0ffff00000000000000000000000122343cbc4d072d4acd2f919f39803dfbeb18b57ec94a16292f6b18bdf8d1111a95b320274606b82459062d8d9cf1c07cae01223e930e3ab6a5682de41122e12ebc8a8f384bfae2cdc66df86e3e0a2172d4c0c16e5f832fdaeeb9c7e47c149d9c13967004e12f4009fbe5a0b11a93d7d9268d1aba0482ae88542ec4d35e332b5212c9bc01d866482222d4022e4e9e4b80ace5ab48944c95463a4312c41ab55ed4c4c3ac6b7d6d"], 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044801}, 0x10000) socket$netlink(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="7c0000002000010000000000000000000a00100000000001000000001400110076657446305f746f5f6873720000000014000100fc01000000000007000000000000000008000a000700000008000f00ffffffff140002"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="23020000000000000000030000001400010000e0ffff00000000000000000000000122343cbc4d072d4acd2f919f39803dfbeb18b57ec94a16292f6b18bdf8d1111a95b320274606b82459062d8d9cf1c07cae01223e930e3ab6a5682de41122e12ebc8a8f384bfae2cdc66df86e3e0a2172d4c0c16e5f832fdaeeb9c7e47c149d9c13967004e12f4009fbe5a0b11a93d7d9268d1aba0482ae88542ec4d35e332b5212c9bc01d866482222d4022e4e9e4b80ace5ab48944c95463a4312c41ab55ed4c4c3ac6b7d6d"], 0x28}}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) (async) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044801}, 0x10000) (async) 970.812854ms ago: executing program 3 (id=14071): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000180)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x7, 0x0, 0x20040001, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0x400, 0x3a}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000040)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x4a, &(0x7f00000000c0)=""/74, 0x40f00, 0x67, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x1, 0x5}, 0x10, 0x1ef2e, 0xffffffffffffffff, 0x5, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000240)=[{0x0, 0x1, 0xe, 0x7}, {0x1, 0x3, 0x4, 0x3}, {0x1, 0x5, 0xe, 0x9}, {0x0, 0x2, 0xb, 0x7}, {0x0, 0x2, 0x3, 0x5}], 0x10, 0x6}, 0x94) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000180)={0x0, 0x9, "b9ed42", 0x7, 0x3}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'erspan0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x7, 0x8000, 0x9, 0x7, {{0x2f, 0x4, 0x1, 0x18, 0xbc, 0x66, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @rand_addr=0x64010100, {[@end, @cipso={0x86, 0x4e, 0x2, [{0xf, 0xe, "df10daefb6005f8a8139ce85"}, {0x0, 0xd, "aa649b8e2b89ae65c5463b"}, {0x5, 0x2}, {0xe159fbecb8ad668d, 0xf, "b33b1f0f238f02873f4434d42c"}, {0x7, 0xf, "51a84a00c7450f35981a82e3fd"}, {0x7, 0x3, "dd"}, {0x1, 0xa, "2276e9640b16a470"}]}, @rr={0x7, 0x27, 0xa9, [@multicast2, @private=0xa010100, @private=0xa010100, @rand_addr=0x64010102, @multicast1, @multicast2, @multicast1, @multicast2, @private=0xa010101]}, @lsrr={0x83, 0x13, 0x8a, [@dev={0xac, 0x14, 0x14, 0x27}, @multicast1, @loopback, @multicast1]}, @ssrr={0x89, 0x1b, 0x83, [@private=0xa010100, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1, @multicast1]}, @end, @end]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=@newlink={0xd0, 0x10, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2180, 0x1}, [@IFLA_PORT_SELF={0x20, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6d649005c90d37040f00e8c759b353ca"}, @IFLA_PORT_PROFILE={0x7, 0x2, '/\\\x00'}]}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x6}}]}]}, @IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bond={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0xa}, @IFLA_BOND_PRIMARY={0x8, 0xb, r5}, @IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}, @IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x9}, @IFLA_BOND_ARP_VALIDATE={0x8}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x7fff}]}}}, @IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}]}, @IFLA_MTU={0x8, 0x4, 0x1b1}, @IFLA_EVENT={0x8, 0x2c, 0x1fd}]}, 0xd0}}, 0x0) 946.128275ms ago: executing program 4 (id=14072): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000005000000010001004900080001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="feffffff0000000000000000000000000000000000000000000000006f0cbebf30feda378e91a7e7f301dfc4bb42ca713ecaa4c74376015cf97af2ffb777b8fa90973d4b6ff99114593109ad2a66ef0fed55bdc95a587fc8b2f0d74f6d9a496eda402dc8eae9d79e08101258387ed0e5d6a7673b7b08"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x68, {0x2, 0xce23, @empty}, 'lo\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710044000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1d, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710445000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x14, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0xffffffffffffff1a) 837.303227ms ago: executing program 0 (id=14073): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNSETNOCSUM(r2, 0xff06, 0x0) r3 = socket(0x2b, 0x80801, 0x1) close(r0) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000040)=0x8, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb4, 0x1}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffeac}, 0x94) 800.962858ms ago: executing program 2 (id=14074): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0c0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b1e2b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51857ad3c04594282423424d000000fd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r6, &(0x7f0000004f80)=[{{&(0x7f0000000a00)=@ax25={{0x3, @default}, [@rose, @netrom, @default, @bcast, @default, @default, @rose, @null]}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000005180)=""/4110, 0x1000}, {&(0x7f0000000a80)=""/145, 0x91}, {&(0x7f0000000b40)=""/192, 0xc0}, {&(0x7f0000000c00)=""/214, 0xd6}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000d80)=""/104, 0x68}, {&(0x7f0000000d00)=""/54, 0x36}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)=""/101, 0x65}, {&(0x7f0000000ec0)=""/67, 0x43}], 0xa, &(0x7f0000001000)=""/174, 0xae}, 0x10}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/59, 0x3b}, {&(0x7f0000001100)=""/172, 0xb7}, {&(0x7f00000011c0)=""/37, 0x25}, {&(0x7f0000001200)=""/199, 0xc7}, {&(0x7f0000001300)=""/232, 0x3d}], 0x5, &(0x7f0000001480)=""/17, 0x11}, 0x5}, {{&(0x7f00000014c0)=@ieee802154, 0x80, &(0x7f0000001580)=[{&(0x7f0000001540)=""/8, 0x8}], 0x1}, 0x5}, {{&(0x7f00000015c0)=@nl, 0x80, &(0x7f00000027c0)=[{&(0x7f0000001640)=""/12, 0xc}, {&(0x7f00000026c0)=""/255, 0xfffffffffffffe10}], 0x2, &(0x7f0000002800)=""/181, 0xb5}, 0x7f}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000005100)=""/101, 0x65}, {&(0x7f0000002940)=""/217, 0xd9}], 0x2}, 0x2}, {{&(0x7f0000002a80)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000002b00)=""/229, 0xe5}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/89, 0x59}, {&(0x7f0000003c80)=""/156, 0x9c}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/1, 0x1}, {&(0x7f0000004d80)=""/29, 0x1d}, {&(0x7f0000004dc0)=""/124, 0x7c}, {&(0x7f0000004e40)=""/74, 0x4a}], 0x9}, 0x7}], 0x6, 0x20, 0x0) write$bt_hci(r6, &(0x7f00000008c0)={0x1, @le_read_remote_features={{0x2016, 0x2}, {0xc9}}}, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r7) sendmsg$NFC_CMD_LLC_SET_PARAMS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000037bfb3752b83753b802fa64d1d44a5cc730f4e1670113e33f6f75765bb2d9c2e90d6abb5268b7f", @ANYRES16=r8, @ANYBLOB="010025bd7000fedbdf251000000008000100", @ANYRES32=0x0, @ANYBLOB="0600110021010000"], 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x20040880) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x11, 0x0, 0x89, 0x0, @remote, @private}}}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r9, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000004c0)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x1548d935, 0x7ff, 0x9, 0x0, r10, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x3}, 0x50) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000006c0)={0x6, &(0x7f0000000240)=[{0x7, 0x6, 0x4, 0x4}, {0x5, 0x7, 0x0, 0x4fc9}, {0x0, 0xf, 0x7, 0x2}, {0x6, 0x80, 0x5, 0x65}, {0x0, 0x2, 0x3, 0x7}, {0x9, 0x3d, 0x0, 0x10}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x27, &(0x7f0000001680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x7}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff}, @alu={0x7, 0x1, 0x2, 0x7, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) 765.675315ms ago: executing program 1 (id=14075): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r2, &(0x7f0000000140)="41000200010001", 0x7) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001140)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="f51cd12150816a2ba4e93c70d3ab9251d011a119c0a0bd", 0x17}, {&(0x7f0000000040)="2321fd251640680e0722dcaec284fae45fd5c283cf1e6d3b3b46f5a735d1f8a711b14865707257c158e9896d6e557bcc1920", 0x32}, {&(0x7f00000000c0)="f1a9ad35b3c771d20c8ea152002a996f8c88bff86701c572467ace190c1da1c009582d76f18b3625117011524ad108dd524159b94751ab47cc11603d5cca6d554b49a98ce552f6dc0c2a01655dfff2a25398d3bbf8e56a3fd9adab0c7cf8a4d04e9c4a6b5e69864481d1e0c219af659b40615364169058b44f717f790262b7b5ebd274811ad58a44c5ffa35a38c569fe06f9180cd0267aea3b493f05798af2dfda0e9580895e1ff02e94afed108d57d4ade0b7c74a69c5cf7cdb98f8422ebef7f66e554f9c", 0xc5}, {&(0x7f00000022c0)="ccd14d667a379245ad18210cb3811662cb41bda64c221f5f63940ed5484fbf6549b540935a8c38ecf7df4ab5089365e6108ad6619cd32997b49d57c62c2fd744254689a2a959d26c0478baa9da5d908117af89ee2b42ae2025f6311003dd31feb466264a7eb16aaf4b5e4164cc2360d494fe5551c4802172ec1a128154cb8bae8a5a8b598bb9bf66c61cca42df91fee89ab2dd65ea553acb6a5f3f6e1fd790b803bed568f99a152da6a470a1efcbdfa5f7ac7d97d135d040bc5b472953e62971399b839fa7c7d999e5d60a69dabd13", 0xcf}], 0x4, 0x0, 0x0, 0x400c080}], 0x1, 0x8080) (async) recvmmsg(r4, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)=""/211, 0xd3}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000640)=""/35, 0x23}], 0x3}, 0x5}], 0x1, 0x2001, 0x0) (async) write(r2, 0x0, 0x0) (async) close(r2) (async) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={r6, @in6={{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x82e}}}, 0x84) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={r6, 0x0, 0x10, 0xfffffffffffffffc}, &(0x7f0000000140)=0x18) 764.61067ms ago: executing program 4 (id=14076): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a5c000000060a010400000000000000000a0004050900010073797a3100000000300004802c0001800b00010065787468647200001c000280080001400000000e080003400000003408000740000000110900020073797a3200000000140000001100010000000000000000000100000a"], 0x84}}, 0x24000000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000700000000000000000000000000000050f37a00", @ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x4a, 0x0, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, 0x0, 0x90) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x2, {{0xa, 0x4e24, 0x0, @mcast2, 0xffffffff}}}, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x3, @mcast2}}, {{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x8}}}, 0x108) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7f, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000240), &(0x7f00000003c0), 0x8, 0xc9, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) sendmmsg(r3, &(0x7f0000002e40)=[{{&(0x7f0000000880)=@ll={0x11, 0xd, r5, 0x1, 0xd, 0x6, @remote}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000900)="90b068a49db8ffb66b21efdfa2694b93bb0e8600984f4e10c10d1af9a90fd5a974e5e9bcc0319fe92e4dd8b45778cd5eb76ebd1fb7e89b1243393f17478bc7588ba48af7728c2d5c062e1ca7999dbe3bf0bf9459726359ca3ffc5718d29ccdefd2a6e8ada5a61d2fc2f72e93c08a6216518cb5e4d7ec4cf0ff8c4b02ce54842973fb0fe0411f4b87b421632e9e4c3fc3b85d800977e2ba671ad771b97d68ad110da1340225416b632ea54c3874ab3950ac81219a997537ea18ee7d491d8791b49d7db33653c099ae", 0xc8}, {&(0x7f0000000a00)="4ba81d6d976a16886ef3ec0b2c008f13d283983a2babf5fc5fb65d4b15515ddc72561cd765caa9fd1e5a146d334702bb6948b818f13ecde91bf4b32db2a07f5957b79afb5406075f4066b24bd1733f1d26791fbc669ea31d27902cc795098f12bfb5e22a6e975718dd03722ef84c8e1e6e502d94cdea4416d28a116a2be82241ad58f1d14d3b459dca0c8448d4cdc11d1860cbf6e46272d63473ce14b718e506745698f0f01ee3e05be73b26e92fe6d66e3f1cadb97221163334c7f7b8952801d8b889a25dc960bf575f4be1fe231f2eb90f16480ba70480f1e43ee1", 0xdc}, {&(0x7f0000000140)="b592ddfbc100000000", 0x9}, {&(0x7f0000000b40)="306b71ec7576cf7a672267e00dbf03e5a6b06635f64981f95d679411a00c0a3d6ccdff4d67d328af3b897cfdd3498d5781d3f507fb63d8eba2e22faa96008f1d1fb73fa17f1ddceaf2788c93b82b59229818a990000fde06b9a88af787def30d991aa6f3bacb0d8143d232a5798fdd12509f5aef22e5469ee7348ae496e5d179a1f2746937ca85e58cae3c0730239ac4dcd1cf1694def01a9397aff397a38558d9fadb50c7", 0xa5}], 0x4, &(0x7f0000001600)=ANY=[@ANYRES32=r2], 0x1260}}, {{&(0x7f0000000680)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x10000000}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000000700)="79794a414b2c636414a3ff136e14b2e96fe70c0bec6473d7bb379716b1f290652caba346a4b1ff19d2c1f87ae3bb2b4cfa9ff02e030ccc0800000000000000cd606df9cc3f2d235f801ce0a22ac52ec772b417b6b1c9e3132fd1bc935e82b71c75a3582ea345c7f03ea5cddc50efc29da2e696e8a6dc6ae9090643980d5db620e00cf58d711a565d7933806d37f6c44a35641350cd5d9c7a088cf3431dcc641b27cacef857c60a87ad00a91fe78588ecf4422e8dbe038b8e16dc4b4036b038afd0", 0xc1}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="3000000000000000ff0000002bcb00006ee457fd520290536e49c689ad6f991105699f348a1536ffcc37bb25d4ec1f0020fdffffffffffff02010000ff0000ac1f1b44a6d001e25e800ade00c8000000000000003a000000000800000b079a2cb2bab09e368325dd8145eb2f5384aae543c3a60b6f0d9cc32248c3495d338061c25344594353dcb05bc8f5f936d4a2c32e3cb027ee02ee08762424a6dec28e5a33d3caec2fd5d0160a01bac89649c08346dc9430665b2e388187016e62ba8a61fdd7b7cba53c8c7ffcbb1912f45cf94d8ce1e01f94dc1aa44ac3e81c8208cd26f67c755e466cf238bb79666a55a61027ee7d9c1e5eb35d6bdbfc1ec1a78621332e386005c230d31589a36d255e0ab4350c170000d00000000000000009010000040000007c41b72063966d2743094f4e6101b6d39503c0f66970d0f6bc1e9ea3f7326e2f75748c1aca81274e1f6603df3696de2e7b37688825e951bbaf252e1608ee5b452708787d9769e2f8cc8140d821460522f703c203a6abc18923c5ac70e7d75af2b6fd3c6db23fa5112fdde73728151ba3deab55128021f4df245814c80de3647a40b99959afd8967ab19e1d5e1d8c06c57c2aa62f36f185f44df6650d13e0da0d44367120fd796f155ec8a9b8d536304b7b3c714892ac59433806796b7df26204636fece03e00000000e8000000000000000a01000009000000dc7f0fc2e02770eb18aedf5cf2ebdbc3dce35813ac205b1bf9834bf7d1d556b6ef50361564264f5db33b374bde50d77400514468fdb06579650ac844a09ddbe9813fe9c6b7b2d38e9b1f9d893645927eeccaa07689be8558c60008fa1710c4c70d4bff4911e1c1c396895640438471918caefc200f22c6bb1eca22be65f6472975e0d28c716f240b7dd6d9f15f66d44b68299d9e04267f801dc6a21dff1e72f72f423491c7e42a5c83096c86333ced15ab40e251d65ca031d9de78c2cea5f6e0fe54790aa1b6c0038fbe8d9e59f7cc2db47e053812163e107000000000000000020100007f0000004ea242659e68e2738ffb98dc3bba89d9356bda6fa2a06b87db2ed137bc47b74b9c3c07730fc4afad316ef029ffcb81fdca564b9591f7706db625bfa5b00cb92929b72216e48fcc0b7b18b2eae655ac654ee6ae50cc16f5c2addc288e00000000a80000000000000013010000040000002d7fbc09161b036a0175bbaa1d286baf2dc108dd323793ae4537ecc21ba71921068d60e66cfe5db5ecdddf853e0f787372bcd2964eded03599c633e17cd5d7f3720d9c093454eb51a15423c8fa179111c3fc4172ab32ecec65283553b2ca6213698f42eeec60d234be16988cf87ef8a0febd1464caa6e6300df27e5f5515e04bf48f479cae7aa7f8fcfbe80b083b24083cef000000000000"], 0x3d8}}], 0x2, 0x4014) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socket(0x14, 0x2, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x20003}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r6], 0x4c}}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000001040)={0x1, 'syz_tun\x00', {}, 0x8001}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) 661.177078ms ago: executing program 3 (id=14077): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfffffffffffffde2}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @private=0xa010102, 0x0, "4f6fb4d1af0f72b0efcdf5a284da144a011a00", 0x4, 0x1}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x6}, 0x3c) 633.773613ms ago: executing program 1 (id=14078): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x5452, &(0x7f0000000080)) sendmsg$kcm(r2, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x20000081) setsockopt$inet6_int(r1, 0x29, 0x22, &(0x7f0000000040), 0x4) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000300000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) 409.264283ms ago: executing program 4 (id=14079): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0xffffffffffffffff}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x88}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0xffffffffffffffff}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x88}}, 0x0) r1 = socket(0x8, 0x3, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc0000000}]}, 0xa0}, 0x1, 0xfffff000}, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x61e1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x2e, 0x0, &(0x7f0000000000)) (async) getsockopt$inet6_buf(r1, 0x29, 0x2e, 0x0, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040014}, 0x810) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x20, 0x1, 0x3ff, 0x5, {{0x7, 0x4, 0x1, 0x3d, 0x1c, 0x64, 0x0, 0x4, 0x29, 0x0, @loopback, @multicast2, {[@end, @rr={0x7, 0x3, 0x1a}, @timestamp={0x44, 0x4, 0x74, 0x0, 0xd}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x20, 0x8000, 0x8d, 0xa, {{0x1c, 0x4, 0x2, 0x5, 0x70, 0x64, 0x0, 0xf2, 0x4, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0x84, 0x3, 0x0, [{@multicast2, 0xffff2fe1}, {@private=0xa010100, 0x81}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x43, 0x0, [{0x6, 0x10, "243df4162d109599dd2b815dfcf9"}, {0x6, 0x2}, {0x2, 0x10, "70c638060433edcd59ab1d050491"}, {0x5, 0xf, "883b5ae02fc6a93b8cb12d50cd"}, {0x1, 0xc, "000909c5cfbac30309ce"}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x20, 0x8000, 0x8d, 0xa, {{0x1c, 0x4, 0x2, 0x5, 0x70, 0x64, 0x0, 0xf2, 0x4, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0x84, 0x3, 0x0, [{@multicast2, 0xffff2fe1}, {@private=0xa010100, 0x81}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x43, 0x0, [{0x6, 0x10, "243df4162d109599dd2b815dfcf9"}, {0x6, 0x2}, {0x2, 0x10, "70c638060433edcd59ab1d050491"}, {0x5, 0xf, "883b5ae02fc6a93b8cb12d50cd"}, {0x1, 0xc, "000909c5cfbac30309ce"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x6, 0x6, 0x7f, 0x1, 0x8, @ipv4={'\x00', '\xff\xff', @local}, @remote, 0x7800, 0x10, 0x2, 0x9}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, r4, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x240000d0}, 0x20000001) 361.169493ms ago: executing program 2 (id=14080): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x64}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004804e2d"], 0x1c}}, 0x400c010) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000004600070128bd700000000000017c000030"], 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x18, &(0x7f0000001880)=[{&(0x7f0000000200)="f4000900062b2b25fe80000000000000dc8b850f238466cc00007a000000ad6f911b51430437121d3ca7", 0x2a}], 0x1}, 0x20008060) 359.854883ms ago: executing program 1 (id=14081): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690022000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r3, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast]}, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000180)={r1, &(0x7f0000000080)='\x00', 0x1c1500, &(0x7f00000000c0)={@_ha_fsid={[0x8]}, {0x9, 0x8, 0x9892, 0xfffffffffffff001}}, 0x630d552, &(0x7f0000000100), &(0x7f0000000140)=0xfffffffb}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002040)={0x28, r2, 0x47918d5eb2b4e5e9, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x4, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) 246.182884ms ago: executing program 2 (id=14082): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 200.262366ms ago: executing program 4 (id=14083): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000040)=0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'vxcan1\x00', &(0x7f0000000080)=@ethtool_stats={0x1d, 0x7, [0xffffffff, 0x0, 0x4, 0x5, 0x10001, 0x3, 0x40f1]}}) ioctl$OCFS2_IOC_UNRESVSP64(r1, 0x4030582b, &(0x7f0000000100)={0x0, 0x1, 0x9, 0x3, 0x401, 0x5}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, &(0x7f0000000140)={0x6065, 0xd, 0x1, 0xffff, 0x4, 0x0, 0x1}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1160}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f00000002c0)={0x0, 0x9, [0x7fffffffffffffff, 0x7, 0x8, 0x4, 0xd7c0000000000000, 0x9]}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x23, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, 0xfffffff9, 0xc05, 0x3, 0x9, 0xfd45}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000480)={0x4, 0x8, 0x1000, 0x6, r4}, &(0x7f00000004c0)=0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000580)=r5) r6 = accept4$bt_l2cap(r0, &(0x7f00000005c0), &(0x7f0000000600)=0xe, 0x0) sendmsg(r6, &(0x7f0000000ac0)={&(0x7f0000000640)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x7}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)="cfb8f33e0c5931b6fe56b6c53dc2efe65bad0f5a154e97ea86b57f49b87fe0fd52dbcbce3a4213a881ba45c92fafadb2271f24fca528093f530a6062d7093bb94fac98b090c3edceffb30da85520fdf267932a7cd070c822edcdb1f8eb4d66a16bfb208f28394c31fbca4acf0c8e606d8799de6836a0c40585ace011ec54e139b6ad087edd71b8391c9040d9c1c21dd79e0d958e41b02c5afd069a3619805c56bb36b5fbaa0866c1dbe4c649aa17d2477e065e3de9db4860719b79a717380fc4e767f8f956d161bdac985b067bd1a4d4d83d96d43b17dd79", 0xd8}], 0x1, &(0x7f0000000800)=[{0x70, 0x109, 0x7fffffff, "f5c7c60dc7b3bc60dea56c761518b4ee53df446e532bc0f5b0aa6e90ac8a02b3e3f6957a0fd384859329aa31eea630cc1ed3f703526d27a108e3394fdf3e65fa4354cf7567dfe5dfec2767ea2755dcd89839072d7305f2693e5d79391b"}, {0x30, 0x1, 0x9ad, "d2f9b5471241f1e8f8f863955cdc1d973d7aab8f7fdae7c1521717dcbfeb85"}, {0xb8, 0x106, 0x7fff, "8993d727b2fef1b262a7ae4cf831680ef9fdebbb05b35e30c79fbf030d9c7996c93fcefdc726639840143f24bd6464293a3c660208e7fd33a47d3e1435f8e5bd0f66389a31cb7c3a2ba2217b0d3938776b08eb0ef8c3ff1e604a175985e1b1b62e481d15a75603ad63a9192341734f0a1f433ba062d7ca6fc48b21ce855fd5adcd8d19cf5c3bc02c6f54947f454f78de8a1a9562ec9d1e10d28d045e2151b89f25"}, {0x18, 0x1, 0x3, "9d"}, {0xe8, 0x113, 0x3a12, "8988112a574f233158a375a9a35909d23e0a33cbabe4216790876eb8e3a4321311050f78c940489fbe3525844237cba69790f9266a609c419ccf97bdbc3d60068f2f5b188dc2609a069b12c866f06f8661b850653939abe9f6ae30edb7415ffb583f10e5ff67c207a640db03a5c6c4f21c9074d5bf67637b37ba4a2ec8ce9461a3685e0a955ff3850c7390695584cd83e575b5f9fd6b6af07725ee120533e83321feecc6725407abe2add1169b9d2bf5d95909b13baebdc87e369504acbee419a5c42ba7352befe68ce6b7351f497523c80ba9cebf464947"}, {0x38, 0x116, 0x400080, "77e52011339072f64d69613f76fecb02f614c993cab7df4a55336fa58f09df64ff3f65f1"}, {0x10, 0x114, 0x2}], 0x2a0}, 0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000b00), 0x10) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) accept$netrom(r1, 0x0, &(0x7f0000000b40)) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000b80)={'batadv_slave_1\x00', {0x2, 0x0, @multicast2}}) pwrite64(r3, &(0x7f0000000bc0)="8e7b06c469a9a243a91ed780", 0xc, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), r0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000c80)={@broadcast, @multicast1, 0x0}, &(0x7f0000000cc0)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000d00)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000d40)={'batadv0\x00', 0x0}) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000d80)={@mcast1, 0x0}, &(0x7f0000000dc0)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000f40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0xa0, r8, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x810}, 0x0) 89.107367ms ago: executing program 3 (id=14084): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0x7, 0x1, 0x7fff, 0x1, 0x4, 0x5, 0xa4, 0x80000000, 0x7, 0xb69, 0xc1, 0x6, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x80, 0xbed4, 0x1623, 0x8000100, 0x3, 0x2, 0x11000, 0x808, 0x5, 0x79b, 0x2, 0xf3b, 0x3, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa08602, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8f, 0x5, 0x2af, 0xf7, 0xfffff0df, 0x1, 0x6, 0x9, 0x7, 0x7, 0x4009, 0x6b000000, 0x4, 0x100202, 0x8, 0x752, 0x0, 0x3, 0x0, 0xa7, 0x2, 0xffffffff, 0x6, 0x8, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x100000, 0x83, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0x136, 0x2a2, 0xffffffff, 0xba4, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x8, 0x8, 0x4, 0x80000000, 0x401, 0x66ca, 0x80000001, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e24, 0x3, @remote, 0x3}}, 0x4e, 0x6, 0x503, 0x3, 0x414d6714bf78e175, 0x80000001, 0x3}, 0x9c) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'bridge_slave_1\x00', 0x1000}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) 83.673758ms ago: executing program 1 (id=14085): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="190000000400000024000000ff07000000000000", @ANYRES32, @ANYBLOB="7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cmac-aes-neon\x00'}, 0x58) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="0911008d0c00"}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd0, 0x12, 0x400, 0x70bd2d, 0x25dfdbff, {0x5}, [@generic="480bbb00a44a0055774eaa7b56c3909ee04df0ea0087ccca1d943fcfe54707c3f613172a817276c4f2095d3448190177a92bdb109cc6b656ef49f27744087705ed708105a4ba852800f94e9dbe1ed2a467379d7f7a964b7b3ea9a6b7d2fb3508606b9559f3e145f6c11f7b004105cd1260873f25b28875364f952cad5925c46627418a20973b13bcd32281095d829bf48b5b3452edcdab1022483f7020d4689a20d0e719e9214abe69f087058469e378ddc739dbc4147ed59f1f8585"]}, 0xd0}}, 0x855) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r4) sendmsg$alg(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000880)="9991ebcf25a3893cb367ba89edca2652", 0x10}], 0x1, &(0x7f0000000d40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8890}, 0x4048001) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, {0x306}, 0x0, {0x2, 0x4e24, @rand_addr=0x64010100}, 'batadv0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={r5, 0x8, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff27, 0x0, 0x0}, 0x19) 23.208444ms ago: executing program 3 (id=14086): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f00000003c0)=@name, &(0x7f0000000400)=0x10, 0x80000) r4 = accept4$rose(0xffffffffffffffff, &(0x7f0000000640)=@full={0xb, @dev, @rose, 0x0, [@rose, @bcast, @bcast, @netrom, @rose, @netrom]}, &(0x7f0000000680)=0x40, 0x80000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0x1, 0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000840)={0xffffffffffffffff, &(0x7f0000000740)='{@-)\x00', 0x8001, &(0x7f0000000780)={@align=0xb1a3, {0xac94, 0x40, 0x2, 0x3ddd}}, 0x7c, &(0x7f00000007c0), &(0x7f0000000800)=0x7}) r8 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0, 0x0}, &(0x7f00000008c0)=0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000900)={0xffffffffffffffff}) r11 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000940), 0x4) r13 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000ac0)={{0xffffffffffffffff, &(0x7f0000000980)='-.%&\x00', 0x113600, &(0x7f00000009c0)={@align=0x4, {0x2, 0x101, 0x2, 0x7}}, 0x9, &(0x7f0000000a00), &(0x7f0000000a40)=0x10000}, {[0x2, 0x0, 0x4, 0x6]}, 0x0, 0x11, &(0x7f0000000a80)=""/17}) r15 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000b40)) r16 = socket$inet6(0xa, 0x2, 0x80000000) r17 = socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$netlink(r0, &(0x7f0000000c40)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x2000}, 0xc, &(0x7f0000000600)=[{&(0x7f0000000040)={0x84, 0x27, 0x8, 0x70bd29, 0x25dfdbfd, "", [@nested={0x71, 0x6f, 0x0, 0x1, [@generic="4f0e36b340a09182c7aa38255ab55d810547923f35f87f42f4b238dabbdc5c1123a746be0cc0814a0be0837cd26d3af44912637f19e24fc2c6a3d8770acda7dbe6353ba0059ddc0d84d4caf7df70f34d8e20c1ab738d0da7811cbefc2a106f2809", @typed={0x7, 0x48, 0x0, 0x0, @str='\\-\x00'}, @nested={0x4, 0x143}]}]}, 0x84}, {&(0x7f0000000180)={0x1a0, 0x15, 0x2, 0x70bd26, 0x25dfdbfc, "", [@nested={0xb9, 0x5, 0x0, 0x1, [@generic="c79d72efdb5a0bffd6938641e2306c6c76a22a0f3b893ea6963e51bea97bd2543bb8140cdc18368cd5fd09069e0c729ac4e7eb309bdf9e9a326ca9599073645343eb500468973007f05b75f4de2f0c37308d526967219b653301bc944707dc0e1c5489ebe3f2fb1b1f2b6b8ac4dc8844897515e686f4e90a38e65cc353d7fac7ac1e0cc773a2792e82e308e24a534788da9c21a5bdb340ccf90c0e9fd561c64cac88273b4678ce95b14de05a42991228368365eb54"]}, @generic="0ae38095eee8468f046a983048dfee08ac67fe275ccca53ead5f8db8827e1643ba1438ebd773023cf8066d86c153d69ac5d10b557f11160c030e63f8cea11e7c288841824de45fdd2efc30518a0acaaef247fc6e6af73e3d6ba784a2493e467b2338f6097cda98e0f2084d88249230516cd88f61e6bf36c2c79736947291ab0841642647f893b96dfeba68b7251d1e81c34c6334e1a054ad9989068f608e443a67618b96e544233decb9d64a88ae0c72422b0639021f5d4aaae398528502abefba017d93f62693c673e2d1", @typed={0x8, 0x99, 0x0, 0x0, @fd=r1}]}, 0x1a0}, {&(0x7f0000000440)={0x1c0, 0x30, 0x20, 0x70bd25, 0x25dfdbfb, "", [@generic="3c17c14fbfbc1c5b50ca4558b3acb1563c096138138deb7af9ca069987c0c30cd264ced90a5eedb0f6a41ade222d410e8b5f2fe41e999c0334f005639b24d00e6b5bafc6fe44463ead5d5387e773f9a571c40b35ba4119ad97a851c9105a863420fbf2eafec89e4f6d87843673101faa37dd6d193123642a18d4389a4fe3727bb4b433063db1b87f165713c0dcb254c278", @typed={0x8, 0x118, 0x0, 0x0, @u32=0xa}, @typed={0x8, 0x122, 0x0, 0x0, @fd}, @typed={0x8, 0xf3, 0x0, 0x0, @uid=r2}, @typed={0x8, 0x8, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0xff, 0x0, 0x0, @fd=r3}, @nested={0x10, 0xf3, 0x0, 0x1, [@nested={0x4, 0x74}, @nested={0x4, 0x71}, @nested={0x4, 0x147}]}, @typed={0x5, 0x12d, 0x0, 0x0, @str='\x00'}, @generic="726eae6c253a5c7ecb55259afcd6bfd9408927b7acc439b755f0b7ee2cef507826b9aa7fd93527f4ec58f27fa4418460cdb89cb86876793de7ff299e1308b3363eadff37b475c270c37c3ce196e1fd0e7732ea3d79e33c2fe13ba9b2db411dd3315c8f7f340563763542bc0d03decd4381cd4e701b0d103abc7dec0c96de44ac7037be13a14ad2a668623ac5fe1c1011186ca3ab1fe419ab7dfb015d578cb6d38c4d16b40e6cab114c107ecb09a788a585940183ae4264e5fefa840f2d80f0766fa507b9d4176718a48979644acbf16d0cdd98408004e1533e7d8b65bbcb9c"]}, 0x1c0}], 0x3, &(0x7f0000000b80)=[@rights={{0x24, 0x1, 0x1, [r4, r5, 0xffffffffffffffff, r6, r7]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8, r9}}}, @rights={{0x2c, 0x1, 0x1, [r10, r11, r12, 0xffffffffffffffff, 0xffffffffffffffff, r13, r14]}}, @rights={{0x1c, 0x1, 0x1, [r15, r16, r17]}}], 0x98, 0x4000}, 0x40) r18 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f0000000c80)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x56a, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x4, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) sendmmsg(r18, &(0x7f00000050c0)=[{{&(0x7f0000000d00)=@phonet={0x23, 0xf0, 0x0, 0x6}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000d80)="4932d5979cf9008e36c6b15ac6fc31fb6a5eb1ace47ef3159384f75940e53cbaa0df1f8587073985e2fe8df13cab5cdad2bc7bb4a13d10bec2963240b7dbf5bf6b30aed582ae091dd8c28751e23d80da56a3243b5a6c507e26a99a793fa48a365630b3fa3abae4e4ad", 0x69}, {&(0x7f0000000e00)="3640e7e44b799a058ff7d44c9a66b0d8086d079e4f869e4a98a6fba6a4d7f3a96f3ef7187e614b9fe1a7b5733e8d2b2c386f7a938a73c9b935b4f68060135ae98f97928220faf6aa5d9028d21646b161b2a46b44bcc491ed4822eb57e9eaf5712487a9fc0a8aa50c", 0x68}, {&(0x7f0000000e80)="1394713a421c6e51d79d29da1e18c70b201916d2e875fd60f0828c5fec04cd7c7e98ab2c7c9937087b9bc7b6bf55f917ed68400052c379a2e7400814384e9a15b644e93b54333f3940628812670de84ccc88d33ad091d6533d1603eef2dc64e3abdf5234876f66f5ece2a8f43506e70aef339ba2742a91a5f48fa056729454d8ccf0654502b58f36c27ef24de5b183f23e973b3d107d3b30c80c081253d185d6e3558f3ef6596e68837be66f591a4d5c14f2244aff80b12529e079f7004337b2b3866c13ab954810ecfa55d6b9f4dabf308ec7566011670cd62f1d94df14a0fdbf17d8dc8ef3dba28c184436ae021e", 0xef}, {&(0x7f0000000f80)="5257f60e82e1d95e1f828e82916a0d97793581edbbf2272ab56c3ee3ca39e53f181f3b9f468a98f399b2d34a45f4b6e094c697c964bb1621a9d088d23740fc24ed5b27fd4f5157f4e7421ce888448179d251bf1649bd51624cedea875d8ab1103c2011c5c5552eb8402003046e15b8b803c728e8756bf9f2e92a6e88b07e9fb51abf79f81e7b7df5cdbb5bd094d68aaae89182e671fbef266437f26c95e30f92a2c00bffe78aa121309e3264a59985c38f957df5baf5d0", 0xb7}, {&(0x7f0000001040)="9a5a0a0ab8e1e3807ba1b6483b40f69a11972b0c1eaa246402da7671915a8f4f7aaf4d558b750dbef5e81523678f1f9030264458e5da294096049c9e6307e317ce99f885aad37a4013cfdabfed05b24ac6a6d66a5f3a672a606416213060fd6a1b347e380ee48b23a4bfe4d4708876544de6983d78726a4557ab1ada150cbc53e78740c554c93b7e562e5ce7dc10", 0x8e}, {&(0x7f0000001100)="18fb0a5643d64f0dcb68930e1c85d48a3ed4e02e6c6e437547c046c8db07583f0c77711f234b7f3d7f169df357", 0x2d}, {&(0x7f0000001140)="ca108f2ece8aec3c254965ee8652d62e3b042e174be19658b0019a1644ac8c1055e7813fcaaa3b55fb89583bf73a9c868c814b27f8cdf6f44b", 0x39}, {&(0x7f0000001180)="2a3397ac1ab0712159fe5f265349f80cd4961d6bff3db6e90b166aefe197a32be3342ba0f8a21b3fba4d998f937f6a0131b102e3cf881946f1bb1073841fd8a259dd0542b41883f0211839bdd13565aa6c1936e85470dcdb3a12709a81375e3bd3750c641402ea5c838467ab12894002aa58feae53e731be7bf836b8edd0d1cfc65e304928a5c9cc3fc8ca56bfb8f00932a19c67888500dc2ca6c97131d0e8ff2147c6564cdecec2a99bcc5e90ad42f22d9e14571ca8e177a7a1ef303139e7707e48463b09465cb13743871e840aaf908c0966a97ebec670c39521b5a1e15f879757daa9657c015305a60994a8", 0xed}, {&(0x7f0000001280)="fe87c875999a69fb111c6a529eb9dbbb87e42424e417335c6318dfbcbaa066e02d4b379c1b2f6829252126489cbf42ebf5fe05a61b7ddd6b03ca8f630e5c1499f89f90fb34cf2dc5284cd07f008f6f916569a36e78b297abe8b1c60f5b0ec0f9d2f71069e74e9e477fb7952e78c6050dd6fab390f25e29bebeba8d1251ca729e316e86a48f20219581e8874122841a", 0x8f}, {&(0x7f0000001340)="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", 0xfa}], 0xa, &(0x7f0000001500)=[{0xf8, 0x117, 0x7, "1a781bc18d854b4c94dda13615ee6362dcae723ea6b3903ff399436f1272acbc2f3d3004580887112232c4a63ce96ae7c7083bd0aa2c9263bfd0236e1713c18d917f0eb9b6b389fbee460d2f071433be3a83337fe7d470cf171cbfd29d13fd98e6d35aeb2967515ce9477a73eb20403675b31d20f988dfb86542d1d173317ce0f6b344823f2e3e13292a2eaf2bf170775985c3ebfa550000091b2d77f8076e9a2f01da6981e721c8da3503bf731b21ccd4c6ff2df2894520187592bdac9d99d0562ecb42bd3871e00dfa48814cb12014dab64085e414534bf026d44824213da9589b60"}, {0x98, 0x109, 0xfffffffb, "95196b287aa9ba5cc8d8a99a8030ac144bfe648cb9cbbd8deef56459444e74708927b39a79aa301eeab4f0025654cdc1d71529ec0981fea085884f5c80910d59f163515eb5f70966df82c5b32522cffba82475d9590643485e00ea635f4390ac94aa14d3a192d3514583cd9c42b5a1afe06dac595144b748c2c75e6dab415e41097d"}, {0x98, 0x10d, 0x3, "a3bf78adf00d000fdfe83b4ac7d16e870e7c5b50dc2628f561e21ed6cd71008366f1f43bbd099bc8956a3dd39637ef7435c823eb35623a38883d3501b9c92047d303c663b824d887eb632831a50b190290f1c6ee842b2b0753324d44f21443c249221b75a58cc925079bd8336f22c22b7e7bc921ffb76eb7476dd7b6ba66b36ab9ba35a677b7ba7d"}, {0xe8, 0x10c, 0x4, "61e521a4f1623f16d273a54a3cfa5d6be0edc87fa3d27697eaeca421f21b2d5d3ab7bb3b348c7de9cef02d7a77d901059ed1423bd626cae30ad3e77782ce6a04d0d2cfe4824dfb991cbb1069aa0aa46b90af2230942f181f9ed9616fd258a40511bd1b1f97f8f84887b560a1dcbdb30afd39ba27b920c18e3376cd91c6e4720da73fb62bdeaa3c714cfa1bea40869bd009edd0eae0dfa9eadd0d1ddaa1089799af2ebff089829c053954f0560a8d8733600abf904d639fda9a1e49333c0b6813393b17d545d210ca1b8d7376dc8d340cd1bca2c9ad"}, {0xc8, 0x88, 0x5, "ba9975fb6877c37b079be24f9c99bb33ec15f922d920ef9f6835b2ecbe262786da860a6d77e5ad079ca3b20996a6f1675ea6b714ede7af9bb1f7e06eeecc88ac7e7fbba4080588e7c9e2db127869173c6b0693521ceee4f0a71f33f7edd5fa5b971f0af9bce5918393bbb36e68a82ee2b602345e88af40daea8f801454b71e7a2d9243499bdac54d03d38fdcb8c39f197c1a3aaa24a196997ed0d612e133ea16a46e4f98701ec386a010f82af3b496e01a321c"}, {0x90, 0x104, 0x6, "2ed032307a1ec0727db430ef6daba9609043b778075c88113540ca5fcc98c29b9768ce91b057bf86495485f375673ff0bce0cbe0c12a4917e424ba4b15e25fe2feeb09905dade3cbbf0f4d556813e870a42a60a8f6567f97310c2eb8da32193f11ce8356d84b5b5c12a92dd46aef7b0c05f92a4c3e3e2f46ffd0"}, {0x1010, 0x118, 0x2, "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"}, {0xa0, 0x109, 0x3, "1bb1a230c6046c65402464ee5631331fc8126feef74019640a4b49025d7560b6443017cfd8520b891f7b7af9311fb69e13e13af57273fac3f95374c800e279de1a41dc485cef4dd74ebcc320aab5f4238e37bce7c756062ad3b600c770987a7c227011fc427f74c7e72defcac37e00c29b14a7209f16cc2bb4da26633c1610d59feac49e9073c6b646c981c1"}, {0x18, 0x113, 0x7, '%'}], 0x1530}}, {{0x0, 0x0, &(0x7f0000004b40)=[{&(0x7f0000002a40)="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", 0x1000}, {&(0x7f0000003a40)="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", 0x1000}, {&(0x7f0000004a40)="e6f45a0809a05b72c7e9802391af6f1897c67c1cfa3e63503cba82f6742fcc7b26130227dc58f7b4ca250d110b8a49b871aa502ad71120fe323c4356fb5bf7f1f38fe5c5048a236c5bb0c75bced961fd37b2512a7cd7f315e12341d4160324dc3131551745de5e7e712f4dd09366ef0d614342a1b199d84622e39df12eae0fd99fa0520242576c8d542e4fd24a9c0de85c8188fd5521d7b94214de2f9f6c27c4a3398a2d362ba9927eaac146e26dd74209cde8d58a5129c937c111a5fdfd34fc7d1c5ce094aec67f5c1a06adf0cd", 0xce}], 0x3, &(0x7f0000004b80)=[{0x108, 0xff, 0x1, "193a622c4f3915385fa016fa6cc28c09285304aae529fb7f647343afca290aee02d7aa460ae770ee595043c21f6c27842f1a848d67d841701191f998bda387120d97671733b046955a7defddb2dc6fa873f4be7121845a85e8b30b01305cfd598651adb91308ca3df071c10842cef72d1d7267aba56c63faac621be233d62086741d0868250d71bf9e28159909063a5918ca0d51a1d4a2bb392cd99b92f1ff49e41d564406cb4bf5f39ebe2ea03718d6a1ad2c28a225c0b1418a41b7f3389fd1d85f262ba4bb1e2c22ce24aca5ab1b3345e038fbbc415de8d7fa494101e1ae2a85bb31afda448ac8d9a22af152256520b4f6722a319b53"}, {0x110, 0x115, 0xf, "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"}, {0xf8, 0x117, 0x2776, "a7836d2a2510e5173e9e6625a2ff6d78851957c3aee488fd198b061e9eb4c99a7628cb7db31c2fe03cbcde7793b02f28b6ce814d2457b1aaeea89a95ff722d051bd0301c55611def6c2f2ddd698578526268b54413740e0bee9a9a136358dfa628edcf5fe554122d3694291eb01428b95f19c17463dd8c28873f6d9eddfea905a690c448ef9c710ed30ad8fcfce57b31312e64db7f3bc0d14682e50aa8ba3e42466bfd248cbab80cd23ac07da39354ea6311866102297b187fee0ce78d0c028b580a98e03aa84a8a7f2cb7e8d1aee185322a7418a81ae631d416ac71be94ca40c82205ba579a"}, {0xd0, 0x6, 0x5, "b27a139d142fb10a5c1379ca38a11ba72c0c64047b8ba8718a832ee051b8007385785bcc5051b5a1356ac134494ea41893b95e38fcaaa0c95a01630168dfb5ab49a1ae86ae62f6736b049581a28403558ed68277bf4e884cfdbb513b4390eb61a1fa593318101e33583cb055919ef6b37986a972086c530fe4d60da44b8025472bc333144bbdc2e53623d5b083a109e595af40e4298fafd7e28891194d86007388d118b26c90aae63e4fc9973154caebce3bdfab995113230c"}, {0xa0, 0x101, 0x61c, "f4ced27da724db34e87fa900ca1de34440cc2bce884772278c0e218775a7eb703ae451ea2f03a55f58fedc764297a5c91ad2bb61d089fe246a8dcaf8ef4d52df135bc19a4161c596b7a3b8c3cf830524e56226d2df7e89f502f9229bde61a999a7da7c1138fa8effcaa57380180c8d74b40daf7e13bcf583dc6d048203a73d11d78d60cf2f195a3092e5dac95f9931"}, {0x28, 0x108, 0x1, "e625e57d0c195a3a53cb52487e7692e40e247f43fe285dd2"}, {0x68, 0x29, 0x3, "906a6c9beaf5ab58141b9c70f741e6307a9effa1149b6860b3c9c0b417fc643bdb399e7f7c1d908c7b8c1b44b9ed6d14897f16166c2c331caaa62d53837ff21fa85c01bea6cd329b5d327f10b8b132fb64bc2b62fb9b"}], 0x510}}], 0x2, 0x4008090) r19 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BTRFS_IOC_SYNC(r19, 0x9408, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r10, 0x6, 0x3, &(0x7f0000005140), &(0x7f0000005180)=0x4) ioctl$SIOCGSTAMPNS(r15, 0x8907, &(0x7f00000051c0)) r20 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000005200), r20) setsockopt$bt_BT_FLUSHABLE(r10, 0x112, 0x8, &(0x7f0000005240)=0xf06, 0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000005280)={0x68b4, 0x4, 0x2, 0x8f, 0x18, 0x0, 0x4}, 0xc) 0s ago: executing program 2 (id=14087): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="140000001800eb8976156951b2ba29ef80"], 0xfe33) (async) write$cgroup_subtree(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="140000001800eb8976156951b2ba29ef80"], 0xfe33) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x4, 0x4, 0x3b0, 0xffffffff, 0x1a0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xffffff00, 0xffffffff, 0xffffffff], [0xffffffff, 0x0, 0xffffff00, 0xffffff00], 'veth0_to_bridge\x00', 'macvlan0\x00', {}, {}, 0x88, 0x40, 0x2}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x2}, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0x0, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x32, 0xe7, 0x4, 0x44}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0x80}}, @common=@unspec=@helper={{0x48}, {0x0, 'pptp\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x10}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000ac0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f00000008c0)=@newtaction={0x154, 0x30, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{0x140, 0x1, [@m_connmark={0x13c, 0x18, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffb, 0x4, 0x20000000, 0x9, 0x9}, 0x7f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xa, 0x1, 0x9, 0x7fff}, 0x1}}]}, {0xd2, 0x6, "9ae542361c0fc3c26bf475bb4da30965782864feff0764b97b5bd922d9504ddcba4c88b1607f6ab66bee042ac597688e1113e524cdedd6d3cd3506afb477c0cac45b29f8502275e9110d6f89caaa12d0219241ac2165d0a5461015a5272e0deba75ecd11d6c263b1e1cdf008eb1deaa96f6bdfee643326d1732e5cb2ed309e6fd8b28d76407a82425a4227f406d706251adf41842134732b0f8f424a674bbd7c0d15ab710906d5211b75cd476a2c4064a1da76845864002843632f2d69587b2c7ff71419b5dd60df05ed5ae417d6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x154}}, 0x2fcae025d5bc851e) recvmsg(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/208, 0xd0}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/36, 0x24}, {&(0x7f0000000740)=""/109, 0x6d}], 0x4, &(0x7f0000000800)=""/126, 0x7e}, 0x40002140) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000013c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001380)={&(0x7f0000000cc0)={0x690, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x204, 0x3, 0x0, 0x1, [{0x200, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1b8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5a, 0x1, "a8119fa069c12857ec1246c242c7456ca0ec2910a221e193db8cf1aaf89735ded981de5ff08452ba5c6761818119b1c205955089341087787520710c234a6f86b2653855b08be68a8db2a7391532a8a70b3feea303d9"}, @NFTA_DATA_VALUE={0x19, 0x1, "efeecd3cc27102db0c4a9a542775e5aae38c404512"}, @NFTA_DATA_VALUE={0x1f, 0x1, "693ccfd4d5418648df5e9f1cd94290d3c7faf26543bfc2775002f4"}, @NFTA_DATA_VALUE={0xb3, 0x1, "ebd3a0e94f8287407dc1b4bd42febf76f3523041d0c917079313384732c144f47674e5d60ddc269b4a259da3fe4ed4022a0fae0a70b7784d3b88a3d3b94fd4a7a7713ab29a9c7e93b77937b44385940768c6a5435db4c119b6e784c004c272df97d46ccb3a0265e39e416e38b763e5944166ad61aa55f73198a9e45a5c7bb9fedb11ce49607f3e1b2888cbaeb62de410d148e60a592d380378bfc3157c0048152650dd1cce2523173b2ef94f883b75"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000000}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x468, 0x3, 0x0, 0x1, [{0x204, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPR={0x54, 0x7, 0x0, 0x1, @socket={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xb9}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x9b}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x88}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_KEY={0x8}]}}}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_DATA={0x6c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x20, 0x1, "ebc7b666882750a4a6b82e14f710106ae1205a08c46df64699bf121d"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x84, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0x98, 0x6, 0x1, 0x0, "550bbb9165596409d7c4b46df22acfd613f0e6a44533310b0437512d73b9a961a7f74fecc3c1c9be2b69758762e9423afcd265dd62f37d859e79d86041c4ef91e6f5196356d38fbd8a694003be47dcf4f98cc794106cc9e3858bac3e8bd3a007b7506c50043cdbb4407c5cba374486a8c74daf3385fdef2200a33b0e3cd785c181c8873f56e52854f987f03dbc000315378a351c"}]}, {0x260, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xa4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x46, 0x1, "631fd7467fbe2552d9694abbbfb4aff3e918930674e6caf11278650dae66a4fb620b1ea9f05401ddcc710b9a4dc5bcf26a8dd02b680e4062e09921af5d631ce33a87"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3ff}, @NFTA_SET_ELEM_KEY={0x8c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x79, 0x1, "b870f2ab231b4d9fb0dea6834dd4560b68bf3926595036fecfce5f2479b5c334710fd2c86c60bdef3296479c1817e4de54a6d591e3c13be8bc44bc77311f074df6d44d12e80a15655cf8cc78569b7d8f95b57451083e94c2ae7c3af5400bb4d039732f4227a0192e16475f90547ec6cdad80a7153e"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0xfb, 0x6, 0x1, 0x0, "85038bb93da3c5bf56ff3a4ac9b2faaa4b3cadf73077e3b4168e68a809d04146bc7214b6caef0c6f14e3deb62d262fb0fb549858f9d1575d0dc9f5db536d40d7461130804c3bc0a7fc4a74e73a9bac737c1c51fcdd47f2a1b1d8ef6380b315127384f88d1580a786d7871c5c9403300b067d4198202d807402570587242563644b98ae1daa69fc4f647e5a8a5b3b3620fcd2de23176a2cc0fc9589351ee858a71ea9855a52e0b0b98438846147da6194a5fe3c21b0ed430f38a3e678c8a0cf9cfb8ac03290771b5c4984bed121194d5abbc6c8e0136c20a6c4337e025459ab730197d5db278e1b5db42d122de6e765cdf739f5f31ef943"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}, 0x690}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="08000d000000000008000400080008"], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8982, &(0x7f0000000000)={0x6, 'bridge_slave_0\x00', {}, 0xaf}) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNGETOBJECT(r8, 0x89e0, &(0x7f0000000180)) kernel console output (not intermixed with test programs): higher than upper threshold [ 1167.948769][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032d37800: rx timeout, send abort [ 1168.036258][T18291] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12076'. [ 1168.106866][T18291] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12076'. [ 1168.448896][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ec66c00: rx timeout, send abort [ 1168.465964][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032d37800: abort rx timeout. Force session deactivation [ 1168.943913][T16902] vlan2: left promiscuous mode [ 1168.957348][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ec66c00: abort rx timeout. Force session deactivation [ 1172.052588][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1172.060604][ C1] lec:lec_tx_timeout: lec0 [ 1177.430762][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1182.941921][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms [ 1182.949994][ C1] lec:lec_tx_timeout: lec0 [ 1230.199312][T18361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12086'. [ 1230.216187][T18362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12086'. [ 1230.236816][T18361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12086'. [ 1230.270765][T18366] Bluetooth: MGMT ver 1.23 [ 1230.280310][T18362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12086'. [ 1230.316271][T18367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12089'. [ 1230.569282][T18383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12094'. [ 1230.635826][T16903] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.648265][T18383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12094'. [ 1230.669747][T16903] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.704578][T18389] netlink: 'syz.2.12097': attribute type 1 has an invalid length. [ 1230.974695][T18405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1231.004156][T16903] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1231.013624][T16903] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1231.026582][T20152] lec:lec_start_xmit: lec0:No lecd attached [ 1231.051491][T18389] bond6: entered promiscuous mode [ 1231.058919][T18389] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1231.081264][T18396] bond6: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1231.094386][T18396] bond6: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 1231.106477][T18396] bond6: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 1231.234603][T18399] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.242482][T18399] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.519199][T18399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1231.590711][T18399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1231.935145][ T1169] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1231.965980][ T1169] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.998664][ T1169] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1232.032183][ T1169] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.057320][ T1169] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1232.077183][ T1169] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.128100][ T1169] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1232.191734][ T1169] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.567340][T18464] netlink: 204 bytes leftover after parsing attributes in process `syz.4.12113'. [ 1232.577496][T18464] netlink: 'syz.4.12113': attribute type 4 has an invalid length. [ 1232.637197][T18465] bridge1: entered promiscuous mode [ 1232.650975][T18465] bridge1: entered allmulticast mode [ 1232.699674][T18465] SET target dimension over the limit! [ 1232.726411][T18469] netlink: 'syz.4.12117': attribute type 39 has an invalid length. [ 1232.875847][T18472] netlink: 'syz.4.12118': attribute type 20 has an invalid length. [ 1232.938261][T18472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12118'. [ 1232.991540][T18472] netlink: 'syz.4.12118': attribute type 20 has an invalid length. [ 1233.018895][T18472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12118'. [ 1233.249530][T18488] netlink: 'syz.4.12122': attribute type 1 has an invalid length. [ 1233.289034][T18491] x_tables: duplicate underflow at hook 1 [ 1233.333129][T18494] x_tables: duplicate underflow at hook 1 [ 1233.354049][T18493] tipc: Started in network mode [ 1233.375906][T18493] tipc: Node identity ac14140f, cluster identity 4711 [ 1233.416652][T18493] tipc: New replicast peer: 255.255.255.255 [ 1233.448809][T18493] tipc: Enabled bearer , priority 10 [ 1234.159489][T18533] tunl0: entered promiscuous mode [ 1234.169054][T18533] netlink: 'syz.1.12137': attribute type 3 has an invalid length. [ 1234.562015][ T10] tipc: Node number set to 2886997007 [ 1234.697190][T18561] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 1234.751585][T18561] bond7 (unregistering): Released all slaves [ 1235.069451][T18584] IPv6: addrconf: prefix option has invalid lifetime [ 1235.083393][T18582] netlink: 'syz.2.12147': attribute type 1 has an invalid length. [ 1235.207659][T18582] bond7: entered promiscuous mode [ 1235.230398][T18582] bond7: entered allmulticast mode [ 1235.236708][T18582] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1235.261628][T18586] ip6gre0: left allmulticast mode [ 1235.288526][T18586] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1235.307452][T18586] bond7: (slave ip6gre0): The slave device specified does not support setting the MAC address [ 1235.334763][T18586] bond7: (slave ip6gre0): Error -95 calling set_mac_address [ 1235.416623][T18599] netlink: 'syz.3.12153': attribute type 10 has an invalid length. [ 1235.426874][T18600] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 1235.437944][T18592] netlink: 'syz.4.12151': attribute type 1 has an invalid length. [ 1235.460136][T18599] batman_adv: batadv0: Adding interface: netdevsim0 [ 1235.470693][T18599] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.499741][T18599] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1235.515018][T18596] syzkaller0: entered promiscuous mode [ 1235.520534][T18596] syzkaller0: entered allmulticast mode [ 1235.758955][T18613] syzkaller1: entered promiscuous mode [ 1235.792187][T18613] syzkaller1: entered allmulticast mode [ 1235.881385][T18608] __nla_validate_parse: 5 callbacks suppressed [ 1235.881406][T18608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12157'. [ 1235.911396][T18621] bond1: option min_links: invalid value (18446744073709551614) [ 1235.958302][T18621] bond1: option min_links: allowed values 0 - 2147483647 [ 1235.974563][T18621] bond1 (unregistering): Released all slaves [ 1236.052220][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1236.060442][ C1] lec:lec_tx_timeout: lec0 [ 1236.084459][T18638] xt_nat: multiple ranges no longer supported [ 1236.091244][T18638] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12161'. [ 1236.581161][T18668] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12170'. [ 1236.609548][T18668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12170'. [ 1236.750506][T18677] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12174'. [ 1237.023726][T18690] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12179'. [ 1237.125445][T18707] netlink: 'syz.1.12183': attribute type 11 has an invalid length. [ 1237.133755][T18707] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12183'. [ 1237.168336][T18704] netlink: 'syz.0.12180': attribute type 21 has an invalid length. [ 1237.314909][T18715] netlink: 'syz.3.12184': attribute type 1 has an invalid length. [ 1237.507226][T18726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12186'. [ 1237.534724][T18720] syzkaller0: entered promiscuous mode [ 1237.542975][T18725] netlink: 'syz.0.12188': attribute type 33 has an invalid length. [ 1237.551658][T18728] netlink: 'syz.0.12188': attribute type 33 has an invalid length. [ 1237.583730][T18729] : entered promiscuous mode [ 1237.797348][T18734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12190'. [ 1237.941266][T18737] FAULT_INJECTION: forcing a failure. [ 1237.941266][T18737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1237.960702][T18737] CPU: 1 UID: 0 PID: 18737 Comm: syz.2.12191 Not tainted syzkaller #0 PREEMPT(full) [ 1237.960730][T18737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1237.960743][T18737] Call Trace: [ 1237.960751][T18737] [ 1237.960760][T18737] dump_stack_lvl+0xe8/0x150 [ 1237.960792][T18737] should_fail_ex+0x412/0x560 [ 1237.960826][T18737] _copy_from_iter+0x1d3/0x1670 [ 1237.960862][T18737] ? rcu_is_watching+0x15/0xb0 [ 1237.960899][T18737] ? __pfx__copy_from_iter+0x10/0x10 [ 1237.960954][T18737] ? netlink_sendmsg+0x650/0xb40 [ 1237.960973][T18737] ? skb_put+0x11b/0x210 [ 1237.961001][T18737] netlink_sendmsg+0x6c0/0xb40 [ 1237.961032][T18737] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1237.961057][T18737] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1237.961092][T18737] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1237.961121][T18737] ____sys_sendmsg+0x972/0x9f0 [ 1237.961157][T18737] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1237.961192][T18737] ? import_iovec+0x73/0xa0 [ 1237.961220][T18737] ___sys_sendmsg+0x2a5/0x360 [ 1237.961252][T18737] ? __pfx____sys_sendmsg+0x10/0x10 [ 1237.961318][T18737] ? __fget_files+0x2a/0x420 [ 1237.961350][T18737] ? __fget_files+0x3a0/0x420 [ 1237.961393][T18737] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1237.961423][T18737] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1237.961459][T18737] ? __pfx_ksys_write+0x10/0x10 [ 1237.961497][T18737] do_syscall_64+0x14d/0xf80 [ 1237.961523][T18737] ? trace_irq_disable+0x3b/0x150 [ 1237.961542][T18737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.961562][T18737] ? clear_bhb_loop+0x40/0x90 [ 1237.961585][T18737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.961605][T18737] RIP: 0033:0x7f234bd9c819 [ 1237.961624][T18737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1237.961641][T18737] RSP: 002b:00007f234cbc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1237.961662][T18737] RAX: ffffffffffffffda RBX: 00007f234c015fa0 RCX: 00007f234bd9c819 [ 1237.961677][T18737] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1237.961689][T18737] RBP: 00007f234cbc8090 R08: 0000000000000000 R09: 0000000000000000 [ 1237.961700][T18737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1237.961712][T18737] R13: 00007f234c016038 R14: 00007f234c015fa0 R15: 00007ffd8b1c91d8 [ 1237.961743][T18737] [ 1238.877427][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1239.856692][T18746] gretap1: entered promiscuous mode [ 1240.091652][T18762] netlink: 'syz.1.12199': attribute type 1 has an invalid length. [ 1240.243055][T18773] ip6gre1: entered promiscuous mode [ 1240.423660][T18788] SET target dimension over the limit! [ 1240.439069][T18788] netlink: 'syz.0.12205': attribute type 3 has an invalid length. [ 1240.456777][T18788] netlink: 'syz.0.12205': attribute type 1 has an invalid length. [ 1240.566308][T16903] tipc: Subscription rejected, illegal request [ 1240.586216][T18791] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12205'. [ 1240.679153][T18804] 8021q: VLANs not supported on wg2 [ 1240.927896][T18822] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12219'. [ 1241.226582][T18835] bridge0: port 3(ipvlan2) entered blocking state [ 1241.235155][T18835] bridge0: port 3(ipvlan2) entered disabled state [ 1241.242087][T18835] ipvlan2: entered allmulticast mode [ 1241.247596][T18835] bridge0: entered allmulticast mode [ 1241.265726][T18835] ipvlan2: left allmulticast mode [ 1241.279433][T18835] bridge0: left allmulticast mode [ 1241.342707][T18844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12226'. [ 1241.528067][T18854] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1241.698678][T18863] xt_hashlimit: size too large, truncated to 1048576 [ 1242.276498][T18891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12239'. [ 1242.367945][T18876] pimreg3: entered allmulticast mode [ 1242.557285][T18894] vlan2: entered promiscuous mode [ 1242.591351][T18894] geneve1: entered promiscuous mode [ 1242.623719][T18894] vlan2: entered allmulticast mode [ 1242.628983][T18894] geneve1: entered allmulticast mode [ 1242.972191][T18916] batadv_slave_0: entered promiscuous mode [ 1243.080482][T18919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12246'. [ 1243.089963][T18918] netlink: 'syz.3.12247': attribute type 1 has an invalid length. [ 1243.117698][T18918] netlink: 'syz.3.12247': attribute type 1 has an invalid length. [ 1243.148604][T18919] bond0: entered promiscuous mode [ 1243.166234][T18919] bond_slave_0: entered promiscuous mode [ 1243.190378][T18919] bond_slave_1: entered promiscuous mode [ 1243.216622][T18919] bond0: left promiscuous mode [ 1243.221594][T18919] bond_slave_0: left promiscuous mode [ 1243.228519][T18919] bond_slave_1: left promiscuous mode [ 1243.315857][T18915] batadv_slave_0: left promiscuous mode [ 1243.651173][T18939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.689874][T18941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12254'. [ 1243.964207][T18955] netlink: 'syz.4.12258': attribute type 1 has an invalid length. [ 1243.983770][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5100 ms [ 1243.991871][ C1] lec:lec_tx_timeout: lec0 [ 1244.024592][T18959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12258'. [ 1244.058484][T18959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12258'. [ 1244.087912][T18955] bond6: entered promiscuous mode [ 1244.128433][T18955] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1244.164916][T18965] xt_hashlimit: size too large, truncated to 1048576 [ 1244.658965][T18984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12264'. [ 1244.692396][T18984] netlink: 'syz.3.12264': attribute type 1 has an invalid length. [ 1244.700449][T18984] netlink: 'syz.3.12264': attribute type 1 has an invalid length. [ 1244.720687][T18984] netlink: 'syz.3.12264': attribute type 2 has an invalid length. [ 1244.741159][T18986] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12265'. [ 1244.791991][T18984] netlink: 68 bytes leftover after parsing attributes in process `syz.3.12264'. [ 1244.895261][T18994] xt_hashlimit: overflow, try lower: 3/0 [ 1245.170908][T19013] netlink: 'syz.0.12274': attribute type 51 has an invalid length. [ 1245.190598][T19013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1245.207519][T19013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1245.255561][T19015] bridge0: Caught tx_queue_len zero misconfig [ 1245.978240][T19052] __nla_validate_parse: 4 callbacks suppressed [ 1245.978263][T19052] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12285'. [ 1246.356236][T19065] veth1_to_bond: entered allmulticast mode [ 1246.487048][T19075] netlink: 120 bytes leftover after parsing attributes in process `syz.1.12292'. [ 1246.498150][T19075] netlink: 'syz.1.12292': attribute type 1 has an invalid length. [ 1246.506889][T19075] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12292'. [ 1246.846847][T19096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12300'. [ 1246.856355][T19096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12300'. [ 1246.859510][T19094] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.12299'. [ 1247.089328][T19113] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12305'. [ 1247.107737][T19109] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12303'. [ 1247.169528][T19062] veth1_to_bond: left allmulticast mode [ 1247.276309][T19119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12306'. [ 1247.286663][T19119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12306'. [ 1247.441501][T19129] bond0: left promiscuous mode [ 1247.452069][T19129] bond_slave_0: left promiscuous mode [ 1247.457684][T19129] bond_slave_1: left promiscuous mode [ 1247.472205][T19129] bridge0: left promiscuous mode [ 1247.477378][T19129] bridge_slave_1: left promiscuous mode [ 1247.594827][T19134] netlink: 'syz.1.12310': attribute type 5 has an invalid length. [ 1247.786226][T16887] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 1247.810073][T16887] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 1247.850632][T16887] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 1247.872193][T16887] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 1248.027605][T19162] Cannot find add_set index 2 as target [ 1248.093403][T19172] syzkaller0: entered promiscuous mode [ 1248.154124][T19172] syzkaller0: entered allmulticast mode [ 1248.322820][T19185] openvswitch: netlink: IPv4 tun info is not correct [ 1248.714495][T19205] tipc: Enabling not permitted [ 1248.733500][T19205] tipc: Enabling of bearer rejected, failed to enable media [ 1248.774413][T19211] netlink: 'syz.4.12333': attribute type 1 has an invalid length. [ 1249.176721][T19190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1249.594251][ T8559] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1249.604640][ T8559] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1249.615643][ T8559] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1249.626018][ T8559] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1249.636149][ T8559] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1249.725569][T19260] C speed is unknown, defaulting to 1000 [ 1250.436009][T19260] chnl_net:caif_netlink_parms(): no params data found [ 1250.524132][T19260] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.531404][T19260] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.538804][T19260] bridge_slave_0: entered allmulticast mode [ 1250.546397][T19260] bridge_slave_0: entered promiscuous mode [ 1250.555867][T19260] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.563232][T19260] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.570477][T19260] bridge_slave_1: entered allmulticast mode [ 1250.578450][T19260] bridge_slave_1: entered promiscuous mode [ 1250.615057][T19260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1250.628046][T19260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1250.663067][T19260] team0: Port device team_slave_0 added [ 1250.671557][T19260] team0: Port device team_slave_1 added [ 1250.701234][T19260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1250.708320][T19260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1250.734753][T19260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1250.747679][T19260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1250.754817][T19260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1250.782061][T19260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1250.830968][T19260] hsr_slave_0: entered promiscuous mode [ 1250.838048][T19260] hsr_slave_1: entered promiscuous mode [ 1250.845073][T19260] debugfs: 'hsr0' already exists in 'hsr' [ 1250.850989][T19260] Cannot create hsr debugfs directory [ 1251.007918][T19260] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.019425][T19260] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.085206][T19260] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.095873][T19260] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.170522][T19260] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.181641][T19260] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.257986][T19260] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.270522][T19260] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.742510][ T8559] Bluetooth: hci4: command tx timeout [ 1252.385488][T19244] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1252.422758][T19260] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1252.506208][T19260] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1252.560909][T19260] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1252.580858][T19260] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1252.625373][T19301] bond8: entered promiscuous mode [ 1252.631034][T19307] __nla_validate_parse: 17 callbacks suppressed [ 1252.631057][T19307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12353'. [ 1252.682817][T19307] netlink: 'syz.1.12353': attribute type 1 has an invalid length. [ 1252.701332][T19307] netlink: 'syz.1.12353': attribute type 2 has an invalid length. [ 1252.722907][T19305] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12354'. [ 1252.810550][T19319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12356'. [ 1252.821181][T19319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12356'. [ 1252.831666][T19319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12356'. [ 1252.843432][T19319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12356'. [ 1252.852804][T19319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12356'. [ 1252.940471][T19260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1252.994859][T19260] 8021q: adding VLAN 0 to HW filter on device team0 [ 1253.015496][T16887] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.022711][T16887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.038783][T16887] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.045964][T16887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1253.309434][T19260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1253.559065][T19358] xt_hashlimit: invalid rate [ 1253.636647][T19260] veth0_vlan: entered promiscuous mode [ 1253.656924][T19260] veth1_vlan: entered promiscuous mode [ 1253.696949][T19260] veth0_macvtap: entered promiscuous mode [ 1253.708985][T19260] veth1_macvtap: entered promiscuous mode [ 1253.732643][T19260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1253.755720][T19260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1253.776420][T16900] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.786873][T16900] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.803636][T16900] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.812837][T16900] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.823936][ T8559] Bluetooth: hci4: command tx timeout [ 1255.590597][T19305] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1255.606091][T19362] netlink: 'syz.1.12362': attribute type 1 has an invalid length. [ 1255.622682][T19362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12362'. [ 1255.654693][T19362] netlink: 'syz.1.12362': attribute type 1 has an invalid length. [ 1255.795189][T16903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.809552][T16903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.890397][T16887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.905856][ T8559] Bluetooth: hci4: command tx timeout [ 1255.909500][T16887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1256.065293][T19382] netlink: 'syz.4.12342': attribute type 3 has an invalid length. [ 1256.083875][T19382] netlink: 'syz.4.12342': attribute type 1 has an invalid length. [ 1256.191200][T19385] syzkaller0: entered promiscuous mode [ 1256.197073][T19385] syzkaller0: entered allmulticast mode [ 1256.240924][T19387] veth0: entered promiscuous mode [ 1256.249097][T19387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12370'. [ 1256.305551][T19386] veth0: left promiscuous mode [ 1256.449614][T19403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12375'. [ 1256.484065][T19404] ipt_rpfilter: unknown options [ 1256.840199][T19421] bond0: (slave rose0): Error: Device can not be enslaved while up [ 1257.008067][T19436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1257.489388][T19469] bridge0: entered promiscuous mode [ 1257.496725][T19469] macsec1: entered promiscuous mode [ 1257.512423][T19471] netlink: 'syz.1.12396': attribute type 32 has an invalid length. [ 1257.518090][T19469] macsec1: entered allmulticast mode [ 1257.540821][T19469] bridge0: entered allmulticast mode [ 1257.552857][T19469] bridge0: port 3(macsec1) entered blocking state [ 1257.559759][T19469] bridge0: port 3(macsec1) entered disabled state [ 1257.575008][T19469] bridge0: left allmulticast mode [ 1257.583737][T19469] bridge0: left promiscuous mode [ 1257.628876][T19471] bond4: option coupled_control: invalid value (192) [ 1257.642318][T19471] bond4 (unregistering): Released all slaves [ 1257.749803][T19481] IPVS: length: 239 != 24 [ 1257.882744][T19484] __nla_validate_parse: 4 callbacks suppressed [ 1257.882768][T19484] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.12401'. [ 1257.984241][T19494] wg1: entered promiscuous mode [ 1257.990143][ T8559] Bluetooth: hci4: command tx timeout [ 1257.998084][T19494] wg1: entered allmulticast mode [ 1258.139029][T19503] tipc: Started in network mode [ 1258.146894][T19503] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 1258.168780][T19503] tipc: Enabling of bearer rejected, failed to enable media [ 1258.201303][T19503] netlink: zone id is out of range [ 1258.226330][T19503] netlink: zone id is out of range [ 1258.235402][T19503] netlink: zone id is out of range [ 1258.247353][T19503] netlink: zone id is out of range [ 1258.259083][T19503] netlink: zone id is out of range [ 1258.277407][T19503] netlink: zone id is out of range [ 1258.309906][T19503] netlink: zone id is out of range [ 1258.334828][T19503] netlink: zone id is out of range [ 1258.358304][T19503] netlink: zone id is out of range [ 1258.400507][T19504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12408'. [ 1260.423817][T19519] netdevsim netdevsim1: Direct firmware load for 0 failed with error -2 [ 1260.452077][T19519] netdevsim netdevsim1: Falling back to sysfs fallback for: 0 [ 1260.643768][T19540] syzkaller0: entered promiscuous mode [ 1260.649396][T19540] syzkaller0: entered allmulticast mode [ 1260.688469][T19540] netlink: 'syz.4.12415': attribute type 3 has an invalid length. [ 1260.928378][T19563] netlink: 'syz.2.12423': attribute type 10 has an invalid length. [ 1260.937708][T19563] netlink: 396 bytes leftover after parsing attributes in process `syz.2.12423'. [ 1260.957014][T19564] netlink: 'syz.2.12423': attribute type 10 has an invalid length. [ 1260.993472][T19564] netlink: 396 bytes leftover after parsing attributes in process `syz.2.12423'. [ 1261.019072][T19563] tipc: Enabling of bearer rejected, already enabled [ 1261.370830][T19582] netlink: 'syz.2.12426': attribute type 30 has an invalid length. [ 1261.556921][T19597] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12430'. [ 1261.644832][T19603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12431'. [ 1261.718728][T19603] netlink: 640 bytes leftover after parsing attributes in process `syz.1.12431'. [ 1262.061536][T19631] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12439'. [ 1262.074369][T19630] net_ratelimit: 439 callbacks suppressed [ 1262.074391][T19630] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1262.131432][T19623] syzkaller0: entered promiscuous mode [ 1262.180927][T19623] syzkaller0: entered allmulticast mode [ 1262.194724][T19630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12440'. [ 1262.472896][T19652] netlink: 'syz.4.12445': attribute type 1 has an invalid length. [ 1262.512626][T19652] netlink: 224 bytes leftover after parsing attributes in process `syz.4.12445'. [ 1264.701034][T19690] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.12452'. [ 1264.744101][T19692] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12453'. [ 1264.902109][T19688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12453'. [ 1265.029255][T19695] netem: unknown loss type 0 [ 1265.034919][T19695] netem: change failed [ 1265.237909][T19714] macvlan0: entered promiscuous mode [ 1265.309727][T19724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12462'. [ 1265.446153][T19724] bond1: Invalid ad_actor_system MAC address. [ 1265.453056][T19724] bond1: option ad_actor_system: invalid value (1) [ 1265.510899][T19724] bond1 (unregistering): Released all slaves [ 1265.657878][T19748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12468'. [ 1265.784112][T19736] syzkaller0: entered promiscuous mode [ 1265.802869][T19756] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1265.810749][T19736] syzkaller0: entered allmulticast mode [ 1265.857922][T19757] tipc: Enabling of bearer rejected, already enabled [ 1265.869942][T19757] netlink: 760 bytes leftover after parsing attributes in process `syz.2.12470'. [ 1265.920993][T19762] sock: sock_set_timeout: `syz.0.12472' (pid 19762) tries to set negative timeout [ 1266.103896][T19771] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12474'. [ 1266.122868][T19771] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12474'. [ 1266.220805][T19775] netlink: 'syz.0.12476': attribute type 1 has an invalid length. [ 1266.256359][T19775] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12476'. [ 1266.315090][T19780] pim6reg: entered allmulticast mode [ 1266.328237][T19780] pim6reg: left allmulticast mode [ 1266.437276][T19787] netlink: 'syz.2.12478': attribute type 10 has an invalid length. [ 1266.473934][T19787] bridge0: left allmulticast mode [ 1266.546574][T19787] bridge0: entered allmulticast mode [ 1266.568323][T19787] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1266.688057][T19798] netlink: 'syz.3.12482': attribute type 1 has an invalid length. [ 1266.740679][T19802] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12482'. [ 1266.783953][T19798] bond1: entered promiscuous mode [ 1266.793911][T19798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1266.976665][T19815] bond1: Invalid ad_actor_system MAC address. [ 1266.984746][T19815] bond1: option ad_actor_system: invalid value (1) [ 1266.994124][T19815] bond1 (unregistering): Released all slaves [ 1267.013391][T19822] Cannot find add_set index 0 as target [ 1267.030840][T19824] netlink: 'syz.2.12487': attribute type 5 has an invalid length. [ 1267.266070][T19842] mac80211_hwsim hwsim132 wlan1: entered allmulticast mode [ 1267.495221][T19851] tunl0: left promiscuous mode [ 1267.569846][T19851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.684481][T19851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1267.699187][T19851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1267.778962][T19851] mac80211_hwsim hwsim132 wlan1: left allmulticast mode [ 1267.795624][T19851] vlan2: left allmulticast mode [ 1267.800549][T19851] veth0_to_bond: left allmulticast mode [ 1267.893347][T16899] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.913215][T16899] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.937928][T19869] netlink: 'syz.3.12501': attribute type 11 has an invalid length. [ 1268.025893][T19874] netlink: 'syz.4.12503': attribute type 1 has an invalid length. [ 1268.070833][T19860] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.096853][T16899] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.366418][T19883] IPVS: Scheduler module ip_vs_sip not found [ 1270.163070][T19902] hsr_slave_0: left promiscuous mode [ 1270.176641][T19902] hsr_slave_1: left promiscuous mode [ 1270.210624][T19890] C speed is unknown, defaulting to 1000 [ 1270.514369][T19915] __nla_validate_parse: 4 callbacks suppressed [ 1270.514392][T19915] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12515'. [ 1270.643511][T19919] syzkaller0: entered promiscuous mode [ 1270.660426][T19919] syzkaller0: entered allmulticast mode [ 1270.691401][T19919] nbd: couldn't find device at index 0 [ 1270.801040][T19924] netlink: 'syz.2.12519': attribute type 2 has an invalid length. [ 1271.376604][T19944] netlink: 'syz.4.12525': attribute type 1 has an invalid length. [ 1271.522520][T19947] syzkaller0: entered promiscuous mode [ 1271.528173][T19947] syzkaller0: entered allmulticast mode [ 1271.619215][T19958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12530'. [ 1271.640929][T19960] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12531'. [ 1271.652023][T19960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12531'. [ 1271.660813][T19958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12530'. [ 1273.538995][T19967] mac80211_hwsim hwsim132 syzkaller0: entered promiscuous mode [ 1273.546809][T19967] mac80211_hwsim hwsim132 syzkaller0: entered allmulticast mode [ 1273.724144][T19978] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12537'. [ 1273.778194][T19978] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12537'. [ 1273.835172][T19986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12538'. [ 1273.856228][T19987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12538'. [ 1273.893646][T19993] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1274.243143][T20008] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 1274.483435][T20028] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.12552'. [ 1274.520884][T20028] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1274.719590][T20048] openvswitch: netlink: Unknown nsh attribute 0 [ 1275.303543][T20085] mac80211_hwsim hwsim143 wlan1: entered allmulticast mode [ 1275.366917][T20090] delete_channel: no stack [ 1275.487449][T20101] tipc: Started in network mode [ 1275.493600][T20101] tipc: Node identity 080211000001, cluster identity 4711 [ 1275.501786][T20101] tipc: Enabled bearer , priority 0 [ 1275.513743][T20101] syzkaller0: mtu less than device minimum [ 1275.630848][T20107] netlink: 'syz.3.12578': attribute type 1 has an invalid length. [ 1275.723723][T20114] __nla_validate_parse: 73 callbacks suppressed [ 1275.723747][T20114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12581'. [ 1275.995207][T20128] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12585'. [ 1276.010885][T20128] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12585'. [ 1276.177359][T20134] netlink: 'syz.1.12589': attribute type 1 has an invalid length. [ 1276.208640][T20134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12589'. [ 1276.523649][T20156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12593'. [ 1276.622734][T17549] tipc: Node number set to 134418688 [ 1276.658038][T20161] SET target dimension over the limit! [ 1276.674899][T20164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12596'. [ 1276.688696][T20164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12596'. [ 1276.735213][T20166] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.12595'. [ 1276.797237][T16903] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1276.797469][T20164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12596'. [ 1276.823290][T16903] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1276.838650][T16903] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1276.851989][T16903] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1276.873782][T20164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12596'. [ 1277.026792][T20176] xt_l2tp: unknown flags: 10 [ 1277.110729][T20177] sctp: [Deprecated]: syz.0.12600 (pid 20177) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1277.110729][T20177] Use struct sctp_sack_info instead [ 1277.243786][T20188] netlink: 'syz.1.12603': attribute type 1 has an invalid length. [ 1277.306034][T20188] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1277.427744][T20194] bond4: (slave geneve3): making interface the new active one [ 1277.476989][T20194] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 1277.525858][T16901] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20005 - 0 [ 1277.550330][T16901] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20005 - 0 [ 1277.571286][T16901] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20005 - 0 [ 1277.640418][T16901] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20005 - 0 [ 1277.730833][T20212] netlink: 'syz.4.12608': attribute type 5 has an invalid length. [ 1278.023856][T20228] openvswitch: netlink: IP tunnel dst address not specified [ 1279.247524][T20242] FAULT_INJECTION: forcing a failure. [ 1279.247524][T20242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1279.263562][T20242] CPU: 1 UID: 0 PID: 20242 Comm: syz.2.12617 Not tainted syzkaller #0 PREEMPT(full) [ 1279.263594][T20242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1279.263609][T20242] Call Trace: [ 1279.263618][T20242] [ 1279.263628][T20242] dump_stack_lvl+0xe8/0x150 [ 1279.263665][T20242] should_fail_ex+0x412/0x560 [ 1279.263705][T20242] _copy_to_user+0x31/0xb0 [ 1279.263733][T20242] simple_read_from_buffer+0xe1/0x170 [ 1279.263771][T20242] proc_fail_nth_read+0x1bb/0x230 [ 1279.263807][T20242] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1279.263844][T20242] ? rw_verify_area+0x2a6/0x4d0 [ 1279.263867][T20242] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1279.263901][T20242] vfs_read+0x20c/0xa70 [ 1279.263923][T20242] ? fdget_pos+0x246/0x320 [ 1279.263949][T20242] ? __pfx___mutex_lock+0x10/0x10 [ 1279.263990][T20242] ? __pfx_vfs_read+0x10/0x10 [ 1279.264016][T20242] ? __fget_files+0x2a/0x420 [ 1279.264053][T20242] ? __fget_files+0x3a0/0x420 [ 1279.264084][T20242] ? __fget_files+0x2a/0x420 [ 1279.264126][T20242] ksys_read+0x150/0x270 [ 1279.264151][T20242] ? __pfx_ksys_read+0x10/0x10 [ 1279.264187][T20242] do_syscall_64+0x14d/0xf80 [ 1279.264212][T20242] ? trace_irq_disable+0x3b/0x150 [ 1279.264231][T20242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.264253][T20242] ? clear_bhb_loop+0x40/0x90 [ 1279.264280][T20242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.264302][T20242] RIP: 0033:0x7f234bd5d04e [ 1279.264322][T20242] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1279.264341][T20242] RSP: 002b:00007f234cba6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1279.264364][T20242] RAX: ffffffffffffffda RBX: 00007f234cba76c0 RCX: 00007f234bd5d04e [ 1279.264380][T20242] RDX: 000000000000000f RSI: 00007f234cba70a0 RDI: 0000000000000009 [ 1279.264393][T20242] RBP: 00007f234cba7090 R08: 0000000000000000 R09: 0000000000000000 [ 1279.264406][T20242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1279.264426][T20242] R13: 00007f234c016128 R14: 00007f234c016090 R15: 00007ffd8b1c91d8 [ 1279.264461][T20242] [ 1279.532274][T20239] lec:lec_atm_close: lec0: Shut down! [ 1280.047300][T20329] mac80211_hwsim hwsim143 syzkaller0: entered promiscuous mode [ 1280.059831][T20329] mac80211_hwsim hwsim143 syzkaller0: entered allmulticast mode [ 1280.104286][T20329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1280.321667][T20348] mac80211_hwsim hwsim143 syzkaller0: left promiscuous mode [ 1280.330290][T20348] mac80211_hwsim hwsim143 syzkaller0: left allmulticast mode [ 1280.536818][T20316] lec:lec_atm_close: lec0: Shut down! [ 1281.151655][T20398] mac80211_hwsim hwsim132 wlan1: entered allmulticast mode [ 1281.167372][T20398] mac80211_hwsim hwsim132 syzkaller0: left promiscuous mode [ 1281.177058][T20398] mac80211_hwsim hwsim132 syzkaller0: left allmulticast mode [ 1281.187748][T20399] __nla_validate_parse: 11 callbacks suppressed [ 1281.187767][T20399] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12653'. [ 1281.207911][T20399] nbd: couldn't find device at index 2 [ 1281.326745][T20404] Cannot find add_set index 65532 as target [ 1281.903192][T20323] Bluetooth: hci5: command 0x0406 tx timeout [ 1282.048600][T20431] mac80211_hwsim hwsim136 wlan1: entered allmulticast mode [ 1282.087040][T20408] lec:lec_atm_close: lec0: Shut down! [ 1282.130095][T20439] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1282.312655][T20418] lec:lec_atm_close: lec0: Shut down! [ 1282.524044][T20451] netlink: 212304 bytes leftover after parsing attributes in process `syz.0.12669'. [ 1282.562211][T20451] openvswitch: netlink: Message has 6 unknown bytes. [ 1282.891016][T20466] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12672'. [ 1282.903213][T20459] netlink: 'syz.4.12672': attribute type 1 has an invalid length. [ 1282.996016][T20459] bond1: entered promiscuous mode [ 1283.013044][T20459] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1283.083804][T20477] bond1: (slave bridge1): making interface the new active one [ 1283.091352][T20477] bridge1: entered promiscuous mode [ 1283.098566][T20477] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1283.121555][T20478] netlink: 'syz.2.12675': attribute type 24 has an invalid length. [ 1283.190827][T20459] netlink: 165 bytes leftover after parsing attributes in process `syz.4.12672'. [ 1283.236074][T20472] netlink: 'syz.2.12675': attribute type 4 has an invalid length. [ 1283.337372][T20483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12678'. [ 1283.384117][T20484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12678'. [ 1283.444184][T20483] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12678'. [ 1283.699081][T20500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12683'. [ 1283.718341][T20500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12683'. [ 1283.792081][T20509] netlink: 'syz.4.12685': attribute type 8 has an invalid length. [ 1284.329403][T20526] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12690'. [ 1284.433947][T20526] bond2 (unregistering): Released all slaves [ 1285.492407][T20573] mac80211_hwsim hwsim139 wlan1: entered allmulticast mode [ 1285.727441][T20569] ip6tnl2: entered promiscuous mode [ 1285.953980][T20588] netlink: 'syz.0.12708': attribute type 9 has an invalid length. [ 1286.135410][T16904] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 1286.199872][T16904] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 1286.268622][T16904] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 1286.314568][T16904] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 1286.343165][T20609] __nla_validate_parse: 3 callbacks suppressed [ 1286.343185][T20609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12713'. [ 1286.520537][T20616] netlink: 'syz.2.12715': attribute type 4 has an invalid length. [ 1286.536731][T20619] bond0: (slave rose0): Error: Device can not be enslaved while up [ 1286.597344][T20621] netlink: 'syz.4.12718': attribute type 1 has an invalid length. [ 1286.624857][T20621] netlink: 96 bytes leftover after parsing attributes in process `syz.4.12718'. [ 1286.665564][T20621] netlink: 658 bytes leftover after parsing attributes in process `syz.4.12718'. [ 1286.713650][T20621] netlink: 1 bytes leftover after parsing attributes in process `syz.4.12718'. [ 1286.773281][T20626] bridge10: entered promiscuous mode [ 1286.807987][T20626] bridge10: entered allmulticast mode [ 1287.272878][T20655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12729'. [ 1287.358931][T20662] IPVS: stopping master sync thread 20663 ... [ 1287.358955][T20663] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_vlan, syncid = 2, id = 0 [ 1287.450319][T20665] sctp: [Deprecated]: syz.1.12731 (pid 20665) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1287.450319][T20665] Use struct sctp_sack_info instead [ 1287.709170][T20679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12735'. [ 1287.745168][T20679] openvswitch: : Dropping previously announced user features [ 1287.903814][T20689] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12739'. [ 1287.915115][T20688] netlink: 'syz.1.12738': attribute type 3 has an invalid length. [ 1287.963224][T20688] x_tables: duplicate entry at hook 3 [ 1287.981916][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5670 ms [ 1287.990041][ C1] lec:lec_tx_timeout: lec0 [ 1288.004253][T20691] netlink: 108 bytes leftover after parsing attributes in process `syz.0.12737'. [ 1288.285848][T20698] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 1288.422647][T20698] lec:lec_atm_close: lec0: Shut down! [ 1288.765298][T20732] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.12747'. [ 1288.804916][T20732] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1289.595652][T20759] C speed is unknown, defaulting to 1000 [ 1289.613266][T20323] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1289.626787][T20323] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1289.650567][T20323] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1289.672783][T20323] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1289.681453][T20323] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1289.773979][T20763] C speed is unknown, defaulting to 1000 [ 1289.796377][T20769] mac80211_hwsim hwsim132 syzkaller0: entered promiscuous mode [ 1289.830599][T20769] mac80211_hwsim hwsim132 syzkaller0: entered allmulticast mode [ 1290.347496][T20781] delete_channel: no stack [ 1290.375231][T20781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12760'. [ 1290.399620][T20781] netlink: 'syz.0.12760': attribute type 12 has an invalid length. [ 1290.408302][T20781] netlink: 'syz.0.12760': attribute type 11 has an invalid length. [ 1291.181357][T20821] netlink: 'syz.0.12764': attribute type 3 has an invalid length. [ 1291.526123][T20763] chnl_net:caif_netlink_parms(): no params data found [ 1291.626586][T20763] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.636357][T20763] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.645931][T20763] bridge_slave_0: entered allmulticast mode [ 1291.656219][T20763] bridge_slave_0: entered promiscuous mode [ 1291.669083][T20763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.677822][T20763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.686215][T20763] bridge_slave_1: entered allmulticast mode [ 1291.694470][T20763] bridge_slave_1: entered promiscuous mode [ 1291.729040][T20763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1291.742109][ T5832] Bluetooth: hci1: command tx timeout [ 1291.746347][T20763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1291.784768][T20763] team0: Port device team_slave_0 added [ 1291.793225][T20763] team0: Port device team_slave_1 added [ 1291.823061][T20763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1291.830057][T20763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1291.857403][T20763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1291.870401][T20763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1291.877649][T20763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1291.905389][T20763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1291.955590][T20763] hsr_slave_0: entered promiscuous mode [ 1291.962438][T20763] hsr_slave_1: entered promiscuous mode [ 1291.968776][T20763] debugfs: 'hsr0' already exists in 'hsr' [ 1291.974837][T20763] Cannot create hsr debugfs directory [ 1292.107483][T20763] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1292.160076][T20763] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1292.219737][T20763] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1292.266682][T20763] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1293.676267][T20800] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1293.711515][T20763] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1293.769810][T20763] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1293.813733][T20763] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1293.822775][ T5832] Bluetooth: hci1: command tx timeout [ 1293.870381][T20763] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1293.920131][T20850] netlink: 'syz.3.12771': attribute type 4 has an invalid length. [ 1293.938154][T20850] __nla_validate_parse: 5 callbacks suppressed [ 1293.938175][T20850] netlink: 17 bytes leftover after parsing attributes in process `syz.3.12771'. [ 1293.981857][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5560 ms [ 1293.989980][ C1] lec:lec_tx_timeout: lec0 [ 1294.289530][T20763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1294.362916][T20763] 8021q: adding VLAN 0 to HW filter on device team0 [ 1294.388352][T16887] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.395580][T16887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1294.432767][T20884] delete_channel: no stack [ 1294.486598][T16904] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.493957][T16904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1294.841219][T20891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12777'. [ 1295.080151][T20763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1295.301578][T20878] lec:lec_atm_close: lec0: Shut down! [ 1295.307645][T20763] veth0_vlan: entered promiscuous mode [ 1295.338104][T20763] veth1_vlan: entered promiscuous mode [ 1295.499104][T20908] netlink: 'syz.4.12782': attribute type 2 has an invalid length. [ 1295.557711][T20908] !: entered promiscuous mode [ 1295.587698][T20763] veth0_macvtap: entered promiscuous mode [ 1295.598670][T20763] veth1_macvtap: entered promiscuous mode [ 1295.629831][T20763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1295.652811][T20914] netlink: 148 bytes leftover after parsing attributes in process `syz.1.12784'. [ 1295.656474][ T5832] Bluetooth: hci4: link tx timeout [ 1295.668070][ T5832] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1295.694280][T20763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1295.725807][T16904] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.768539][T16904] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.802374][T16904] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.847331][T16900] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.902587][T20323] Bluetooth: hci1: command tx timeout [ 1295.943088][T20927] netlink: 'syz.1.12787': attribute type 13 has an invalid length. [ 1295.951088][T20927] netlink: 'syz.1.12787': attribute type 27 has an invalid length. [ 1296.058099][T16900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.080166][T16900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.178498][T16887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.187826][T16887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.267721][T20939] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12791'. [ 1296.339506][T20941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12751'. [ 1296.478593][T20946] nbd: nbd1 already in use [ 1296.506084][T20946] block nbd1: NBD_DISCONNECT [ 1296.521362][T20946] block nbd1: Send disconnect failed -32 [ 1296.540393][T20946] block nbd1: Send disconnect failed -32 [ 1296.565824][T20956] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12796'. [ 1296.586522][T20958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12793'. [ 1296.689608][T20961] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.12798'. [ 1296.880046][T16901] bond0 (unregistering): (slave geneve2): Releasing active interface [ 1297.111603][T16901] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 1297.121201][T16901] bridge4 (unregistering): left promiscuous mode [ 1297.407750][T16901] bond1 (unregistering): Released all slaves [ 1297.424070][T16901] bond0 (unregistering): Released all slaves [ 1297.440429][T16901] bond2 (unregistering): (slave vxcan3): Releasing backup interface [ 1297.460367][T16901] bond2 (unregistering): Released all slaves [ 1297.477118][T16901] bond3 (unregistering): Released all slaves [ 1297.496600][T16901] bond4 (unregistering): (slave C): Releasing backup interface [ 1297.508179][T16901] bond4 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 1297.522344][T16901] bond4 (unregistering): Released all slaves [ 1297.539079][T16901] bond5 (unregistering): (slave veth5): Releasing active interface [ 1297.549434][T16901] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1297.564622][T16901] bond5 (unregistering): Released all slaves [ 1297.579912][T16901] bond6 (unregistering): Released all slaves [ 1297.596400][T16901] bond7 (unregistering): Released all slaves [ 1297.612167][T16901] bond8 (unregistering): Released all slaves [ 1297.630185][T16901] bond9 (unregistering): Released all slaves [ 1297.660641][T20962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12797'. [ 1297.674208][T20961] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12798'. [ 1297.744977][T20323] Bluetooth: hci4: command 0x0406 tx timeout [ 1297.799858][T17551] C speed is unknown, defaulting to 1000 [ 1297.808155][T17551] syz0: Port: 1 Link DOWN [ 1297.972234][T16901] : left promiscuous mode [ 1297.983302][ T5832] Bluetooth: hci1: command tx timeout [ 1298.034954][T20996] netlink: 'syz.0.12805': attribute type 1 has an invalid length. [ 1298.134835][T16901] tipc: Disabling bearer [ 1298.180442][T16901] tipc: Disabling bearer [ 1298.212034][T16901] tipc: Left network mode [ 1298.431744][T21007] netlink: 'syz.0.12810': attribute type 2 has an invalid length. [ 1298.469982][T21007] netlink: 'syz.0.12810': attribute type 1 has an invalid length. [ 1298.823782][T21033] veth0: entered promiscuous mode [ 1298.852506][T21033] veth0: left promiscuous mode [ 1298.868651][T21033] netlink: 'syz.4.12818': attribute type 1 has an invalid length. [ 1299.259412][T16901] hsr_slave_1: left promiscuous mode [ 1299.278524][T16901] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1299.318086][T16901] batman_adv: batadv0: Removing interface: ipvlan2 [ 1299.359153][T16901] pim6reg (unregistering): left allmulticast mode [ 1299.534710][T16901] team0 (unregistering): Port device batadv1 removed [ 1299.576863][T16904] smc: removing ib device syz2 [ 1299.699996][T16901] veth0_to_team (unregistering): left allmulticast mode [ 1299.896090][T21084] mac80211_hwsim hwsim143 syzkaller0: entered promiscuous mode [ 1299.915331][T21084] mac80211_hwsim hwsim143 syzkaller0: entered allmulticast mode [ 1299.943793][T21085] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1299.980017][T21085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1300.057800][T21087] __nla_validate_parse: 7 callbacks suppressed [ 1300.057889][T21087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12832'. [ 1300.123804][T21087] netlink: 'syz.2.12832': attribute type 4 has an invalid length. [ 1300.437465][T21094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12837'. [ 1300.642263][T21104] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1300.955860][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms [ 1300.963966][ C1] lec:lec_tx_timeout: lec0 [ 1300.971005][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1301.548775][T21141] netlink: 'syz.2.12850': attribute type 9 has an invalid length. [ 1301.557288][T21141] netlink: 'syz.2.12850': attribute type 11 has an invalid length. [ 1301.570202][T21141] netlink: 'syz.2.12850': attribute type 12 has an invalid length. [ 1301.578434][T21141] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.12850'. [ 1301.590674][T21141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12850'. [ 1301.683282][T21145] netlink: 'syz.1.12851': attribute type 1 has an invalid length. [ 1301.703644][T21145] netlink: 'syz.1.12851': attribute type 2 has an invalid length. [ 1301.723971][T21145] netlink: 'syz.1.12851': attribute type 1 has an invalid length. [ 1301.744686][T21145] netlink: 'syz.1.12851': attribute type 3 has an invalid length. [ 1301.766694][T21145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12851'. [ 1302.014173][T21148] netlink: 'syz.2.12852': attribute type 1 has an invalid length. [ 1302.309711][T21157] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1302.410432][T21162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12857'. [ 1302.667993][T21171] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1302.785855][T21177] netlink: 216 bytes leftover after parsing attributes in process `syz.2.12862'. [ 1303.152490][T21194] netlink: 'syz.0.12866': attribute type 63 has an invalid length. [ 1303.249135][T21200] IPVS: set_ctl: invalid protocol: 46 10.1.1.1:20004 [ 1303.251386][T21201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12869'. [ 1303.324334][T21204] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12869'. [ 1303.376451][T21203] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12870'. [ 1303.414743][T21201] veth0: entered promiscuous mode [ 1303.421621][T21201] veth0: left promiscuous mode [ 1303.435663][ T30] audit: type=1804 audit(1775165382.797:13): pid=21207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.12871" name="/newroot/165/cgroup.controllers" dev="tmpfs" ino=857 res=1 errno=0 [ 1303.571944][ T30] audit: type=1800 audit(1775165382.837:14): pid=21207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.12871" name="cgroup.controllers" dev="tmpfs" ino=857 res=0 errno=0 [ 1303.747449][T21215] gtp2: entered promiscuous mode [ 1303.793393][T21215] gtp2: entered allmulticast mode [ 1303.809528][T21222] erspan0: entered promiscuous mode [ 1303.834034][T21222] erspan0: entered allmulticast mode [ 1304.279113][T21235] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1304.380327][T21240] bond2: (slave veth0_to_bond): making interface the new active one [ 1304.401172][T21240] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1304.477654][T21244] bond2: entered promiscuous mode [ 1304.484864][T21244] veth0_to_bond: entered promiscuous mode [ 1304.493590][T21244] bond2: entered allmulticast mode [ 1304.498757][T21244] veth0_to_bond: entered allmulticast mode [ 1304.584275][T16901] IPVS: stop unused estimator thread 0... [ 1304.852006][T21273] macvlan0: entered promiscuous mode [ 1304.908982][T21273] netlink: 'syz.1.12888': attribute type 11 has an invalid length. [ 1304.970534][T21277] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1305.073875][T21286] __nla_validate_parse: 10 callbacks suppressed [ 1305.073898][T21286] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12894'. [ 1305.109983][T21289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12895'. [ 1305.190192][T21296] h: entered promiscuous mode [ 1305.359108][T21309] validate_nla: 8 callbacks suppressed [ 1305.359129][T21309] netlink: 'syz.0.12899': attribute type 1 has an invalid length. [ 1305.399014][T21309] bond1: entered promiscuous mode [ 1305.407612][T21309] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1305.444263][T21312] bond1: (slave bridge1): making interface the new active one [ 1305.452166][T21312] bridge1: entered promiscuous mode [ 1305.458504][T21312] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1305.675816][T21319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12902'. [ 1305.909059][T21330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1305.981876][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1305.989965][ C1] lec:lec_tx_timeout: lec0 [ 1306.185317][T21340] bond5: option lp_interval: invalid value (0) [ 1306.191655][T21340] bond5: option lp_interval: allowed values 1 - 2147483647 [ 1306.216552][T21340] bond5 (unregistering): Released all slaves [ 1306.263081][T21342] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12907'. [ 1306.498296][T21354] sctp: [Deprecated]: syz.1.12915 (pid 21354) Use of int in maxseg socket option. [ 1306.498296][T21354] Use struct sctp_assoc_value instead [ 1307.039046][T21377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12922'. [ 1307.066075][T21377] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12922'. [ 1307.215492][T21379] tipc: Enabling of bearer rejected, already enabled [ 1307.316894][T21394] netlink: 80 bytes leftover after parsing attributes in process `syz.4.12926'. [ 1307.451177][T21391] netlink: 'syz.3.12927': attribute type 1 has an invalid length. [ 1307.484251][T21394] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1307.556750][T21398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1307.830963][T21411] syzkaller1: entered promiscuous mode [ 1307.858667][T21411] syzkaller1: entered allmulticast mode [ 1307.942901][T21413] netlink: 14 bytes leftover after parsing attributes in process `syz.4.12933'. [ 1308.282872][T21426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1308.384650][T21426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1308.467221][T21426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1308.540925][T21442] netlink: 'syz.4.12943': attribute type 1 has an invalid length. [ 1308.564926][T21442] netlink: 'syz.4.12943': attribute type 1 has an invalid length. [ 1308.588930][T21442] netlink: 9172 bytes leftover after parsing attributes in process `syz.4.12943'. [ 1308.635177][T21442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12943'. [ 1308.664130][T21442] geneve2: entered promiscuous mode [ 1308.672361][T21442] geneve2: entered allmulticast mode [ 1309.390576][T21486] tipc: Failed to obtain node identity [ 1309.409231][T21486] tipc: Enabling of bearer rejected, failed to enable media [ 1309.448109][T21488] tipc: Failed to obtain node identity [ 1309.462462][T21488] tipc: Enabling of bearer rejected, failed to enable media [ 1309.659661][T21501] netlink: 'syz.1.12962': attribute type 1 has an invalid length. [ 1309.680474][T21505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.687941][T21505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.023854][T21524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1310.115620][T21527] __nla_validate_parse: 3 callbacks suppressed [ 1310.115642][T21527] netlink: 72 bytes leftover after parsing attributes in process `syz.1.12970'. [ 1310.138813][T21528] netlink: 'syz.0.12969': attribute type 1 has an invalid length. [ 1310.166333][T21529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12969'. [ 1310.203829][T21528] nbd: error processing sock list [ 1310.223874][T21529] bridge_slave_1: left allmulticast mode [ 1310.252044][T21529] bridge_slave_1: left promiscuous mode [ 1310.270475][T21529] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.300988][T21529] bridge_slave_0: left promiscuous mode [ 1310.319110][T21529] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.365130][T21536] netlink: 'syz.3.12971': attribute type 11 has an invalid length. [ 1310.383649][T21536] netlink: 'syz.3.12971': attribute type 4 has an invalid length. [ 1310.403807][T21536] netlink: 'syz.3.12971': attribute type 5 has an invalid length. [ 1310.416921][T21536] netlink: 'syz.3.12971': attribute type 6 has an invalid length. [ 1310.441121][T21536] netlink: 199748 bytes leftover after parsing attributes in process `syz.3.12971'. [ 1310.640703][T21540] tipc: Enabling of bearer rejected, already enabled [ 1310.656040][T21538] tipc: Failed to remove unknown binding: 66,0,0/0:681647448/681647449 [ 1310.665999][T21538] tipc: Failed to remove unknown binding: 66,0,0/0:681647448/681647449 [ 1310.757088][T21547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12975'. [ 1311.110927][T21568] netlink: 'syz.3.12981': attribute type 1 has an invalid length. [ 1311.246231][T21580] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1311.258268][T21568] bond2: entered promiscuous mode [ 1311.304167][T21568] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1311.364703][T21567] bond2: (slave bridge2): making interface the new active one [ 1311.393996][T21567] bridge2: entered promiscuous mode [ 1311.403852][T21567] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1311.474408][T21587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12986'. [ 1311.523556][T21589] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1311.675069][T21593] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1311.738577][T21600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12991'. [ 1311.770498][T21605] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12990'. [ 1311.933886][T21609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12993'. [ 1311.966266][T21609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12993'. [ 1312.188135][T21624] netlink: 766 bytes leftover after parsing attributes in process `syz.1.12997'. [ 1312.611031][T21643] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1312.619090][T21643] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1312.627116][T21643] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1312.635118][T21643] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1312.643289][T21643] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1312.651265][T21643] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1312.659296][T21643] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1312.667376][T21643] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1312.675469][T21643] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1312.800877][T21664] netlink: 'syz.2.13009': attribute type 142 has an invalid length. [ 1312.816381][T21664] netlink: 'syz.2.13009': attribute type 1 has an invalid length. [ 1312.875893][T21669] sctp: [Deprecated]: syz.0.13010 (pid 21669) Use of int in maxseg socket option. [ 1312.875893][T21669] Use struct sctp_assoc_value instead [ 1312.999047][T21679] netlink: 'syz.2.13013': attribute type 39 has an invalid length. [ 1313.420832][T21696] vlan2: entered promiscuous mode [ 1313.435944][T21696] vlan2: entered allmulticast mode [ 1313.449042][T21696] hsr_slave_1: entered allmulticast mode [ 1313.988628][T21719] netlink: 'syz.0.13026': attribute type 1 has an invalid length. [ 1314.059569][T21723] bridge_slave_1: left allmulticast mode [ 1314.065660][T21721] netlink: 'syz.4.13025': attribute type 21 has an invalid length. [ 1314.073511][T21723] bridge_slave_1: left promiscuous mode [ 1314.092792][T21723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.106285][T21723] bridge_slave_0: left allmulticast mode [ 1314.130317][T21723] bridge_slave_0: left promiscuous mode [ 1314.138651][T21723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.121302][T21775] tipc: Started in network mode [ 1315.132224][T21778] __nla_validate_parse: 11 callbacks suppressed [ 1315.132246][T21778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13039'. [ 1315.149294][T21775] tipc: Node identity e0000001, cluster identity 4711 [ 1315.159424][T21775] tipc: Enabling of bearer rejected, failed to enable media [ 1315.195886][T21781] netlink: 'syz.2.13040': attribute type 2 has an invalid length. [ 1315.470957][T21800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13047'. [ 1315.900794][T21801] tipc: Resetting bearer [ 1316.512830][T21842] net_ratelimit: 45 callbacks suppressed [ 1316.512852][T21842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1316.631877][T21843] ip6tnl2: entered promiscuous mode [ 1316.654996][T21843] netlink: 'syz.1.13055': attribute type 10 has an invalid length. [ 1316.724832][T21843] team0: Device vxcan1 is of different type [ 1316.866844][T21857] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1317.181012][T21871] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13061'. [ 1317.454025][T21867] bridge_slave_0: left allmulticast mode [ 1317.459896][T21867] bridge_slave_0: left promiscuous mode [ 1317.466231][T21867] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.480571][T21867] bridge_slave_1: left allmulticast mode [ 1317.486838][T21867] bridge_slave_1: left promiscuous mode [ 1317.494418][T21867] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.512669][T21867] bond0: (slave bond_slave_0): Releasing backup interface [ 1317.514291][T21883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13064'. [ 1317.535228][T21867] bond0: (slave bond_slave_1): Releasing backup interface [ 1317.552184][T21867] team0: Port device team_slave_0 removed [ 1317.562872][T21867] team0: Port device team_slave_1 removed [ 1317.569967][T21867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1317.577975][T21867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1317.588995][T21867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1317.606223][T21867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1317.619841][T21867] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1317.876301][T21896] netlink: 'syz.4.13067': attribute type 4 has an invalid length. [ 1317.975670][T21900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13069'. [ 1318.787950][T21927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13075'. [ 1318.825552][T21927] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1318.987546][T21945] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13079'. [ 1319.598655][T21970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13083'. [ 1319.642533][T21970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13083'. [ 1319.675492][T21970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13083'. [ 1320.503773][T22016] tipc: Enabling of bearer rejected, media not registered [ 1320.726844][T22028] netlink: 'syz.0.13098': attribute type 12 has an invalid length. [ 1320.754853][T22025] : entered promiscuous mode [ 1321.064049][T22045] xt_ecn: cannot match TCP bits for non-tcp packets [ 1321.088804][T22036] netlink: 'syz.1.13104': attribute type 1 has an invalid length. [ 1321.104202][T22050] netlink: 'syz.1.13104': attribute type 1 has an invalid length. [ 1321.117740][T22045] netlink: 294 bytes leftover after parsing attributes in process `syz.4.13105'. [ 1321.131024][T22045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1321.381539][T22063] netlink: 'syz.0.13110': attribute type 21 has an invalid length. [ 1321.412778][T22063] netlink: 128 bytes leftover after parsing attributes in process `syz.0.13110'. [ 1321.453672][T22063] netlink: 'syz.0.13110': attribute type 5 has an invalid length. [ 1321.479878][T22063] netlink: 3 bytes leftover after parsing attributes in process `syz.0.13110'. [ 1321.493808][T22075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13113'. [ 1321.746158][T22085] netlink: 'syz.4.13118': attribute type 11 has an invalid length. [ 1321.958075][T22104] netlink: 'syz.1.13122': attribute type 1 has an invalid length. [ 1322.002472][T22106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13116'. [ 1322.022591][T22106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13116'. [ 1322.591049][T22114] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1323.048024][T22146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13135'. [ 1323.107421][T22146] syzkaller0: entered promiscuous mode [ 1323.113457][T22146] syzkaller0: entered allmulticast mode [ 1323.634240][T22183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13146'. [ 1323.671093][T22190] netlink: 'syz.3.13148': attribute type 39 has an invalid length. [ 1323.867534][T22197] netlink: 'syz.4.13150': attribute type 1 has an invalid length. [ 1323.908322][T22205] "syz.1.13152" (22205) uses obsolete ecb(arc4) skcipher [ 1323.919791][T22197] bond3: entered promiscuous mode [ 1323.927555][T22197] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1323.979150][T22197] bond3: (slave bridge3): making interface the new active one [ 1323.991206][T22197] bridge3: entered promiscuous mode [ 1324.007901][T22197] bridge3: left promiscuous mode [ 1324.093819][T22216] RDS: rds_bind could not find a transport for 400:0:1200:0:1021:0:ffff:ffff, load rds_tcp or rds_rdma? [ 1324.270803][T22223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13159'. [ 1324.304020][T22223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13159'. [ 1324.468942][T22239] bridge0: port 3(gretap0) entered blocking state [ 1324.476818][T22239] bridge0: port 3(gretap0) entered disabled state [ 1324.484582][T22239] gretap0: entered allmulticast mode [ 1324.492450][T22245] netlink: 'syz.4.13164': attribute type 1 has an invalid length. [ 1324.497258][T22239] gretap0: entered promiscuous mode [ 1324.513175][T22247] netlink: 'syz.4.13164': attribute type 1 has an invalid length. [ 1324.712715][T22257] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1324.796508][T22265] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1324.809982][T22265] bond1 (unregistering): Released all slaves [ 1324.860542][T22277] bridge0: entered promiscuous mode [ 1324.867136][T22277] macsec1: entered promiscuous mode [ 1324.872836][T22277] macsec1: entered allmulticast mode [ 1324.878175][T22277] bridge0: entered allmulticast mode [ 1324.886162][T22277] bridge0: port 3(macsec1) entered blocking state [ 1324.892946][T22277] bridge0: port 3(macsec1) entered disabled state [ 1324.920264][T22277] bridge0: left allmulticast mode [ 1324.932208][T22277] bridge0: left promiscuous mode [ 1325.058465][T22278] delete_channel: no stack [ 1325.724305][T22324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1325.873757][T22329] 8021q: VLANs not supported on wlan0 [ 1326.490010][T22360] lo speed is unknown, defaulting to 1000 [ 1326.504314][T22360] lo speed is unknown, defaulting to 1000 [ 1326.511137][T22360] lo speed is unknown, defaulting to 1000 [ 1326.556321][T22379] __nla_validate_parse: 9 callbacks suppressed [ 1326.556342][T22379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13205'. [ 1326.917098][T22360] infiniband lyz2: set down [ 1326.922539][T17549] lo speed is unknown, defaulting to 1000 [ 1326.928419][T22360] infiniband lyz2: added lo [ 1326.971605][T22360] RDS/IB: lyz2: added [ 1326.975884][T22360] smc: adding ib device lyz2 with port count 1 [ 1326.982234][T22360] smc: ib device lyz2 port 1 has no pnetid [ 1326.988419][T17549] lo speed is unknown, defaulting to 1000 [ 1326.997971][T22360] lo speed is unknown, defaulting to 1000 [ 1327.047623][T22400] nbd: must specify a size in bytes for the device [ 1327.064163][T22400] Unsupported ieee802154 address type: 0 [ 1327.200046][T22407] openvswitch: netlink: IP tunnel dst address not specified [ 1327.222104][T22407] openvswitch: netlink: IP tunnel dst address not specified [ 1327.428416][T22424] netlink: 'syz.1.13217': attribute type 11 has an invalid length. [ 1327.433776][T22423] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1327.442022][T22424] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13217'. [ 1327.555548][T22360] lo speed is unknown, defaulting to 1000 [ 1327.928020][T22429] h: left promiscuous mode [ 1327.936004][T22429] vlan2: left promiscuous mode [ 1327.941012][T22429] vlan2: left allmulticast mode [ 1327.948567][T22429] hsr_slave_1: left allmulticast mode [ 1327.969417][T22360] lo speed is unknown, defaulting to 1000 [ 1327.971677][T16903] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.023982][T22436] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.090553][T16903] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.107714][T16903] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.439016][T22459] bond6: option min_links: invalid value (18446744073709551614) [ 1328.461745][T22459] bond6: option min_links: allowed values 0 - 2147483647 [ 1328.476449][T22459] bond6 (unregistering): Released all slaves [ 1328.527263][T22360] lo speed is unknown, defaulting to 1000 [ 1329.033569][T22489] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13236'. [ 1329.113720][T22360] lo speed is unknown, defaulting to 1000 [ 1329.386890][T22497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13240'. [ 1329.417202][T22497] team1: entered promiscuous mode [ 1329.455771][T22497] team1: entered allmulticast mode [ 1329.638557][T22510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13242'. [ 1329.649925][T22510] netlink: 13 bytes leftover after parsing attributes in process `syz.1.13242'. [ 1329.688136][T22510] veth5: entered promiscuous mode [ 1329.887831][T22360] lo speed is unknown, defaulting to 1000 [ 1330.096649][T22532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13247'. [ 1330.165348][T22537] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13246'. [ 1330.306828][T22360] lo speed is unknown, defaulting to 1000 [ 1330.758720][T22567] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13257'. [ 1330.797952][T22360] lo speed is unknown, defaulting to 1000 [ 1330.899883][T22573] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13259'. [ 1331.331384][T22596] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 1331.366399][T22360] lo speed is unknown, defaulting to 1000 [ 1331.898661][T22360] lo speed is unknown, defaulting to 1000 [ 1332.088316][T22632] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1332.104385][T22632] bond3 (unregistering): Released all slaves [ 1332.120807][T22636] __nla_validate_parse: 3 callbacks suppressed [ 1332.120826][T22636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13280'. [ 1332.175633][T18233] IPVS: starting estimator thread 0... [ 1332.272443][T22643] IPVS: using max 27 ests per chain, 64800 per kthread [ 1332.369826][T22648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13283'. [ 1332.388787][T22360] lo speed is unknown, defaulting to 1000 [ 1332.401651][T22647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13283'. [ 1332.597897][T22659] ±ÿ: renamed from team_slave_1 (while UP) [ 1332.650358][T22659] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 1332.888449][T22672] netlink: 220 bytes leftover after parsing attributes in process `syz.0.13292'. [ 1332.909657][T22672] netlink: 'syz.0.13292': attribute type 2 has an invalid length. [ 1333.282750][T22695] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13299'. [ 1333.334844][T22700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1333.367702][T22702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13299'. [ 1333.546918][T22712] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13304'. [ 1333.566102][T22712] netlink: 'syz.0.13304': attribute type 7 has an invalid length. [ 1333.574533][T22712] netlink: 'syz.0.13304': attribute type 8 has an invalid length. [ 1333.585878][T22712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13304'. [ 1333.607552][T22716] netlink: 'syz.1.13305': attribute type 58 has an invalid length. [ 1333.616939][T22716] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13305'. [ 1333.680634][T22719] netlink: 256 bytes leftover after parsing attributes in process `syz.0.13306'. [ 1333.756310][T22722] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1334.467833][T22760] bond6: Removing last arp target with arp_interval on [ 1334.591668][T22767] bond7: Removing last arp target with arp_interval on [ 1334.918339][T22788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1335.374428][T22816] macvtap1: entered allmulticast mode [ 1335.391638][T22816] veth0_macvtap: entered allmulticast mode [ 1335.527917][T22822] bond5: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1335.574752][T22822] bond5 (unregistering): Released all slaves [ 1335.606251][T22826] netlink: 'syz.0.13335': attribute type 2 has an invalid length. [ 1335.644790][T22826] mac80211_hwsim hwsim136 syzkaller0: entered promiscuous mode [ 1335.653586][T22826] mac80211_hwsim hwsim136 syzkaller0: entered allmulticast mode [ 1335.984720][T22841] syzkaller0: entered promiscuous mode [ 1336.019243][T22841] syzkaller0: entered allmulticast mode [ 1337.824545][T22848] __nla_validate_parse: 12 callbacks suppressed [ 1337.824561][T22848] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13344'. [ 1337.840600][T22848] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13344'. [ 1338.049060][T22865] syzkaller1: entered promiscuous mode [ 1338.060842][T22865] syzkaller1: entered allmulticast mode [ 1338.135502][T22870] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13349'. [ 1338.149214][T22870] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 1338.162058][T22872] openvswitch: netlink: Missing valid actions attribute. [ 1338.169447][T22872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1338.179818][T22874] nbd: must specify a size in bytes for the device [ 1338.254868][T22877] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.13355'. [ 1338.348276][T22886] netlink: 'syz.1.13357': attribute type 9 has an invalid length. [ 1338.358315][T22886] netlink: 'syz.1.13357': attribute type 11 has an invalid length. [ 1338.367312][T22886] netlink: 'syz.1.13357': attribute type 12 has an invalid length. [ 1338.380947][T22886] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.13357'. [ 1338.399938][T22886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13357'. [ 1338.506027][T22892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13359'. [ 1338.550210][T22894] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 1338.583296][T22894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1339.152217][T22930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13369'. [ 1339.163195][T22929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13369'. [ 1339.163208][T22927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13368'. [ 1339.185938][T22927] sctp: [Deprecated]: syz.0.13368 (pid 22927) Use of int in maxseg socket option. [ 1339.185938][T22927] Use struct sctp_assoc_value instead [ 1339.319302][T22933] veth6: entered allmulticast mode [ 1339.645095][T22949] openvswitch: netlink: Missing valid actions attribute. [ 1339.653975][T22946] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.658487][T22949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1339.776738][T22946] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.896937][T22946] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.971214][T22963] 8021q: VLANs not supported on lo [ 1339.986429][T22965] 8021q: VLANs not supported on lo [ 1340.078726][T22946] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.140172][T22967] bond8 (unregistering): Released all slaves [ 1340.281361][T16899] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.360896][T16887] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.380409][T16887] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.445246][T16904] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.454062][T22984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1340.628967][T22993] sctp: [Deprecated]: syz.0.13388 (pid 22993) Use of int in maxseg socket option. [ 1340.628967][T22993] Use struct sctp_assoc_value instead [ 1340.969157][T23016] xfrm1: entered promiscuous mode [ 1340.975229][T23016] xfrm1: entered allmulticast mode [ 1340.986432][T23017] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1341.708193][T23070] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1344.175264][T23029] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1344.187486][T23057] netlink: 'syz.2.13407': attribute type 1 has an invalid length. [ 1344.204989][T23057] __nla_validate_parse: 9 callbacks suppressed [ 1344.205011][T23057] netlink: 96 bytes leftover after parsing attributes in process `syz.2.13407'. [ 1344.223621][T23057] netlink: 1 bytes leftover after parsing attributes in process `syz.2.13407'. [ 1344.235475][T23057] netlink: 658 bytes leftover after parsing attributes in process `syz.2.13407'. [ 1344.390018][T23089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13417'. [ 1344.407930][T23092] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.13418'. [ 1344.418525][T23089] netlink: 'syz.1.13417': attribute type 10 has an invalid length. [ 1344.428152][T23093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13420'. [ 1344.449979][T23089] team0: Port device dummy0 added [ 1344.502853][T23096] netlink: 256 bytes leftover after parsing attributes in process `syz.2.13421'. [ 1344.526021][T17549] IPVS: starting estimator thread 0... [ 1344.599976][T23103] tipc: Failed to remove unknown binding: 66,0,0/0:4225955923/4225955924 [ 1344.609609][T23103] tipc: Failed to remove unknown binding: 66,0,0/0:4225955923/4225955924 [ 1344.626498][T23105] netlink: 260 bytes leftover after parsing attributes in process `syz.4.13422'. [ 1344.636436][T23101] IPVS: using max 27 ests per chain, 64800 per kthread [ 1344.709827][T23114] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13424'. [ 1344.817910][T23122] netlink: 176 bytes leftover after parsing attributes in process `syz.0.13428'. [ 1345.228949][T23145] netlink: 'syz.3.13432': attribute type 10 has an invalid length. [ 1345.237647][T23145] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1345.351257][T23157] netlink: 'syz.4.13436': attribute type 10 has an invalid length. [ 1345.378312][T23157] team0: Device vxcan1 is of different type [ 1345.405491][T23160] netlink: 'syz.2.13437': attribute type 1 has an invalid length. [ 1345.558413][T23166] netlink: 'syz.4.13439': attribute type 1 has an invalid length. [ 1345.654588][T23172] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1514) ! [ 1345.767240][T23167] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1345.785233][T23167] bond5: (slave bond6): making interface the new active one [ 1345.802704][T23167] bond5: (slave bond6): Enslaving as an active interface with an up link [ 1345.850951][T23166] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 1345.862967][T23177] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1345.923402][T23179] syzkaller0: entered promiscuous mode [ 1345.928943][T23179] syzkaller0: entered allmulticast mode [ 1345.990992][T23183] netlink: 'syz.1.13443': attribute type 1 has an invalid length. [ 1346.066356][T23183] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1346.610140][T23229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1346.860010][T23244] bond1 (unregistering): Released all slaves [ 1347.834124][T23292] netlink: 'syz.2.13472': attribute type 1 has an invalid length. [ 1347.860569][T23292] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1348.131334][T23314] openvswitch: netlink: Missing valid actions attribute. [ 1348.156458][T23314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1349.233079][T23394] __nla_validate_parse: 16 callbacks suppressed [ 1349.233100][T23394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13501'. [ 1349.260201][T23396] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1349.277980][T23396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1349.292940][T23394] netlink: 'syz.0.13501': attribute type 1 has an invalid length. [ 1349.311036][T23394] netlink: 'syz.0.13501': attribute type 2 has an invalid length. [ 1349.432808][T23403] netlink: 'syz.1.13503': attribute type 2 has an invalid length. [ 1349.494059][T23407] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13505'. [ 1349.686212][T23418] FAULT_INJECTION: forcing a failure. [ 1349.686212][T23418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1349.724199][T23418] CPU: 0 UID: 0 PID: 23418 Comm: syz.1.13508 Not tainted syzkaller #0 PREEMPT(full) [ 1349.724230][T23418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1349.724244][T23418] Call Trace: [ 1349.724254][T23418] [ 1349.724263][T23418] dump_stack_lvl+0xe8/0x150 [ 1349.724300][T23418] should_fail_ex+0x412/0x560 [ 1349.724339][T23418] _copy_from_user+0x2d/0xb0 [ 1349.724365][T23418] __sys_sendto+0x2b0/0x710 [ 1349.724393][T23418] ? __pfx___sys_sendto+0x10/0x10 [ 1349.724414][T23418] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1349.724456][T23418] ? __fget_files+0x3a0/0x420 [ 1349.724500][T23418] ? ksys_write+0x242/0x270 [ 1349.724537][T23418] ? __pfx_ksys_write+0x10/0x10 [ 1349.724567][T23418] __x64_sys_sendto+0xde/0x100 [ 1349.724595][T23418] do_syscall_64+0x14d/0xf80 [ 1349.724621][T23418] ? trace_irq_disable+0x3b/0x150 [ 1349.724641][T23418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.724663][T23418] ? clear_bhb_loop+0x40/0x90 [ 1349.724691][T23418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.724712][T23418] RIP: 0033:0x7f9b81b9c819 [ 1349.724734][T23418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1349.724754][T23418] RSP: 002b:00007f9b82b2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1349.724778][T23418] RAX: ffffffffffffffda RBX: 00007f9b81e15fa0 RCX: 00007f9b81b9c819 [ 1349.724795][T23418] RDX: 000000000000000e RSI: 0000200000002140 RDI: 0000000000000007 [ 1349.724809][T23418] RBP: 00007f9b82b2a090 R08: 00002000000001c0 R09: 0000000000000014 [ 1349.724824][T23418] R10: 00000000000000d0 R11: 0000000000000246 R12: 0000000000000001 [ 1349.724837][T23418] R13: 00007f9b81e16038 R14: 00007f9b81e15fa0 R15: 00007fff8a61eca8 [ 1349.724870][T23418] [ 1349.911161][T23424] netlink: 'syz.2.13510': attribute type 1 has an invalid length. [ 1349.956833][T23424] bond1: entered promiscuous mode [ 1349.964693][T23424] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1350.207605][T23438] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13513'. [ 1350.357547][T23446] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13515'. [ 1350.537938][T23466] netlink: 'syz.2.13523': attribute type 1 has an invalid length. [ 1350.547917][T23466] netlink: 'syz.2.13523': attribute type 4 has an invalid length. [ 1350.557393][T23466] netlink: 9422 bytes leftover after parsing attributes in process `syz.2.13523'. [ 1350.586816][T23463] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20004 [ 1350.743046][T23474] FAULT_INJECTION: forcing a failure. [ 1350.743046][T23474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1350.798290][T23474] CPU: 0 UID: 0 PID: 23474 Comm: syz.3.13525 Not tainted syzkaller #0 PREEMPT(full) [ 1350.798321][T23474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1350.798336][T23474] Call Trace: [ 1350.798345][T23474] [ 1350.798355][T23474] dump_stack_lvl+0xe8/0x150 [ 1350.798392][T23474] should_fail_ex+0x412/0x560 [ 1350.798430][T23474] _copy_to_user+0x31/0xb0 [ 1350.798458][T23474] simple_read_from_buffer+0xe1/0x170 [ 1350.798497][T23474] proc_fail_nth_read+0x1bb/0x230 [ 1350.798534][T23474] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1350.798569][T23474] ? rw_verify_area+0x2a6/0x4d0 [ 1350.798592][T23474] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1350.798626][T23474] vfs_read+0x20c/0xa70 [ 1350.798647][T23474] ? fdget_pos+0x246/0x320 [ 1350.798679][T23474] ? __pfx___mutex_lock+0x10/0x10 [ 1350.798708][T23474] ? __pfx_vfs_read+0x10/0x10 [ 1350.798734][T23474] ? __fget_files+0x2a/0x420 [ 1350.798772][T23474] ? __fget_files+0x3a0/0x420 [ 1350.798804][T23474] ? __fget_files+0x2a/0x420 [ 1350.798846][T23474] ksys_read+0x150/0x270 [ 1350.798873][T23474] ? __pfx_ksys_read+0x10/0x10 [ 1350.798910][T23474] do_syscall_64+0x14d/0xf80 [ 1350.798935][T23474] ? trace_irq_disable+0x3b/0x150 [ 1350.798955][T23474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.798978][T23474] ? clear_bhb_loop+0x40/0x90 [ 1350.798984][T23479] Bluetooth: MGMT ver 1.23 [ 1350.799004][T23474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.799027][T23474] RIP: 0033:0x7f68aef5d04e [ 1350.799133][T23474] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1350.799198][T23474] RSP: 002b:00007f68afe9bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1350.799278][T23474] RAX: ffffffffffffffda RBX: 00007f68afe9c6c0 RCX: 00007f68aef5d04e [ 1350.799348][T23474] RDX: 000000000000000f RSI: 00007f68afe9c0a0 RDI: 0000000000000008 [ 1350.799385][T23474] RBP: 00007f68afe9c090 R08: 0000000000000000 R09: 0000000000000000 [ 1350.799419][T23474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1350.799452][T23474] R13: 00007f68af216038 R14: 00007f68af215fa0 R15: 00007fff133df378 [ 1350.799551][T23474] [ 1351.147576][T23494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13529'. [ 1351.157997][T23491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13529'. [ 1351.258813][T23499] netlink: 'syz.1.13533': attribute type 10 has an invalid length. [ 1351.289844][T23501] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13532'. [ 1351.359566][T23506] netlink: 'syz.3.13534': attribute type 1 has an invalid length. [ 1351.428211][T23506] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1351.453764][T23509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13535'. [ 1351.893421][T23538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13542'. [ 1352.247250][T23562] IPVS: Error connecting to the multicast addr [ 1352.265940][T23562] netlink: 'syz.2.13552': attribute type 1 has an invalid length. [ 1352.352804][T23562] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1358.880233][T20152] lec:lec_start_xmit: lec0:No lecd attached [ 1363.981984][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5090 ms [ 1363.990034][ C1] lec:lec_tx_timeout: lec0 [ 1363.995558][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1369.002450][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1369.010543][ C1] lec:lec_tx_timeout: lec0 [ 1391.648690][ T5832] Bluetooth: hci4: link tx timeout [ 1391.654686][ T5832] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1393.743436][ T8559] Bluetooth: hci4: command 0x0406 tx timeout [ 1408.253920][T23683] netlink: 'syz.1.13554': attribute type 1 has an invalid length. [ 1408.274141][T23688] IPVS: ip_vs_add_dest(): server weight less than zero [ 1408.298440][T23685] __nla_validate_parse: 4 callbacks suppressed [ 1408.298463][T23685] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13556'. [ 1408.393437][T23697] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1408.483776][T23702] netlink: 'syz.3.13558': attribute type 1 has an invalid length. [ 1408.494880][T23697] bond7: (slave lo): Enslaving as an active interface with an up link [ 1408.514855][T23705] netlink: 'syz.2.13560': attribute type 10 has an invalid length. [ 1408.525054][T23704] netlink: 168 bytes leftover after parsing attributes in process `syz.2.13560'. [ 1408.537880][T23697] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1408.566327][T17551] lo speed is unknown, defaulting to 1000 [ 1408.576508][T17551] lyz2: Port: 1 Link ACTIVE [ 1408.658083][T17551] lo speed is unknown, defaulting to 1000 [ 1408.733211][T23702] bond5: (slave gretap1): making interface the new active one [ 1408.766893][T23702] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 1408.810594][T23716] mac80211_hwsim hwsim143 syzkaller0: left allmulticast mode [ 1408.928972][T23718] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13563'. [ 1409.192790][T23745] netlink: 'syz.3.13570': attribute type 1 has an invalid length. [ 1409.201192][T23745] xt_socket: unknown flags 0xe4 [ 1409.454423][T23755] netlink: 'syz.3.13575': attribute type 1 has an invalid length. [ 1409.482746][T23755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13575'. [ 1409.836387][T23781] netlink: 'syz.0.13580': attribute type 10 has an invalid length. [ 1409.846368][T23781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13580'. [ 1410.000698][T23793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13585'. [ 1410.048471][T23793] bond2: entered promiscuous mode [ 1410.056949][T23793] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1410.090757][T23793] bridge2: entered promiscuous mode [ 1410.097755][T23793] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1410.125252][T23793] macvlan2: entered promiscuous mode [ 1410.130918][T23793] macvlan2: entered allmulticast mode [ 1410.139107][T23793] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 1410.194685][T23800] pim6reg: entered allmulticast mode [ 1410.205406][T23801] netlink: 'syz.1.13587': attribute type 9 has an invalid length. [ 1410.575370][T23820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13591'. [ 1410.587539][T23820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13591'. [ 1410.908348][T23827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13593'. [ 1410.997011][T23839] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13598'. [ 1411.227390][T23861] netlink: 'syz.2.13603': attribute type 1 has an invalid length. [ 1411.268206][T23859] delete_channel: no stack [ 1411.334038][T23861] bond3: (slave bridge3): Enslaving as a backup interface with an up link [ 1411.446872][T23861] bond3: (slave bridge4): Enslaving as a backup interface with a down link [ 1411.911709][T23892] netlink: 'syz.2.13612': attribute type 1 has an invalid length. [ 1411.920618][T23892] netlink: 'syz.2.13612': attribute type 1 has an invalid length. [ 1412.076893][T23905] sch_fq: defrate 0 ignored. [ 1412.263516][T23916] veth0_virt_wifi: entered promiscuous mode [ 1412.269665][T23916] veth0_virt_wifi: entered allmulticast mode [ 1412.383682][T23925] netlink: zone id is out of range [ 1412.401353][T23916] netlink: set zone limit has 4 unknown bytes [ 1412.406923][T23925] netlink: zone id is out of range [ 1412.446223][T23925] netlink: zone id is out of range [ 1412.451489][T23925] netlink: zone id is out of range [ 1413.258312][T23986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1413.456546][T23997] __nla_validate_parse: 3 callbacks suppressed [ 1413.456567][T23997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13647'. [ 1413.478349][T23997] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13647'. [ 1413.508452][T23997] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 1413.614985][T24004] xt_hashlimit: size too large, truncated to 1048576 [ 1413.630795][T23956] validate_nla: 1 callbacks suppressed [ 1413.630816][T23956] netlink: 'syz.0.13633': attribute type 1 has an invalid length. [ 1413.645676][T23956] netlink: 96 bytes leftover after parsing attributes in process `syz.0.13633'. [ 1413.658219][T23956] netlink: 'syz.0.13633': attribute type 1 has an invalid length. [ 1413.666790][T23956] netlink: 'syz.0.13633': attribute type 8 has an invalid length. [ 1413.691956][T23956] netlink: 606 bytes leftover after parsing attributes in process `syz.0.13633'. [ 1413.707111][T24006] –: renamed from vxcan1 [ 1413.719902][T23956] netlink: 1 bytes leftover after parsing attributes in process `syz.0.13633'. [ 1413.764200][T24010] mac80211_hwsim hwsim139 syzkaller0: entered promiscuous mode [ 1413.820887][T24010] mac80211_hwsim hwsim139 syzkaller0: entered allmulticast mode [ 1414.246603][T24038] openvswitch: netlink: IP tunnel dst address not specified [ 1414.266244][T24038] netlink: 76 bytes leftover after parsing attributes in process `syz.0.13658'. [ 1414.335888][T24041] openvswitch: netlink: IP tunnel dst address not specified [ 1414.504082][T24046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13659'. [ 1414.695730][T24057] syzkaller0: entered promiscuous mode [ 1414.707656][T24057] syzkaller0: entered allmulticast mode [ 1414.954926][T24084] netlink: 224 bytes leftover after parsing attributes in process `syz.4.13671'. [ 1414.968566][T24084] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13671'. [ 1415.022198][T20323] Bluetooth: hci1: command 0x0406 tx timeout [ 1416.939492][T24105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13676'. [ 1417.120451][T24111] ip6t_srh: unknown srh match flags 4000 [ 1417.163720][T24116] netlink: 'syz.3.13680': attribute type 1 has an invalid length. [ 1417.218748][T24116] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1417.246907][T24121] xt_CONNSECMARK: invalid mode: 0 [ 1417.283097][T24121] xt_CONNSECMARK: invalid mode: 0 [ 1417.459805][T24136] netlink: 'syz.4.13686': attribute type 10 has an invalid length. [ 1417.474369][T24136] mac80211_hwsim hwsim143 wlan1: left allmulticast mode [ 1417.482371][T24136] bond0: (slave wlan1): Opening slave failed [ 1417.550160][T24143] netlink: 'syz.1.13689': attribute type 5 has an invalid length. [ 1417.571195][T24138] xfrm1: entered promiscuous mode [ 1417.603987][T24138] xfrm1: entered allmulticast mode [ 1418.077658][T24178] xt_hashlimit: size too large, truncated to 1048576 [ 1418.456548][T24214] sctp: [Deprecated]: syz.1.13705 (pid 24214) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1418.456548][T24214] Use struct sctp_sack_info instead [ 1418.524801][T24213] syzkaller1: entered promiscuous mode [ 1418.531276][T24213] syzkaller1: entered allmulticast mode [ 1418.740093][T24223] netlink: 'syz.3.13710': attribute type 1 has an invalid length. [ 1418.751667][T24224] __nla_validate_parse: 8 callbacks suppressed [ 1418.751687][T24224] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13710'. [ 1418.760137][T24223] netlink: 96 bytes leftover after parsing attributes in process `syz.3.13710'. [ 1418.778296][T24223] netlink: 1 bytes leftover after parsing attributes in process `syz.3.13710'. [ 1418.792311][T24223] netlink: 'syz.3.13710': attribute type 1 has an invalid length. [ 1418.800457][T24223] netlink: 'syz.3.13710': attribute type 8 has an invalid length. [ 1418.809036][T24223] netlink: 606 bytes leftover after parsing attributes in process `syz.3.13710'. [ 1418.880005][T24227] x_tables: unsorted underflow at hook 1 [ 1418.887426][T24227] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.13711'. [ 1419.029794][T24239] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13715'. [ 1419.037579][T24237] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13713'. [ 1419.048547][T24239] mac80211_hwsim hwsim139 syzkaller0: left promiscuous mode [ 1419.276053][T24252] netlink: 48 bytes leftover after parsing attributes in process `syz.4.13721'. [ 1419.426952][T24262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13722'. [ 1419.520725][T24269] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1419.533622][T24268] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1419.730514][T24279] xt_hashlimit: size too large, truncated to 1048576 [ 1419.781058][T24284] delete_channel: no stack [ 1420.272971][T24290] macvtap2: entered allmulticast mode [ 1420.283666][T24293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13735'. [ 1420.401111][T24301] netlink: 'syz.3.13737': attribute type 6 has an invalid length. [ 1420.420748][T24301] netlink: 'syz.3.13737': attribute type 6 has an invalid length. [ 1420.575151][T24310] bond8: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1420.605785][T24310] bond8 (unregistering): Released all slaves [ 1420.675082][T24316] IPVS: Error connecting to the multicast addr [ 1420.997674][T24337] openvswitch: netlink: Multiple metadata blocks provided [ 1421.190670][T24348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1421.658268][T24383] netlink: 'syz.3.13765': attribute type 1 has an invalid length. [ 1421.708440][T24383] netlink: 'syz.3.13765': attribute type 1 has an invalid length. [ 1421.723571][T24383] netlink: 'syz.3.13765': attribute type 8 has an invalid length. [ 1421.733747][T24382] netlink: 'syz.3.13765': attribute type 1 has an invalid length. [ 1421.747605][T24382] netlink: 'syz.3.13765': attribute type 1 has an invalid length. [ 1422.044118][T24411] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1422.423617][T20152] lec:lec_start_xmit: lec0:No lecd attached [ 1422.641277][T24401] IPv6: sit2: Disabled Multicast RS [ 1422.815404][T24431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1422.834921][T24431] 8021q: adding VLAN 0 to HW filter on device team0 [ 1422.869916][T24431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1423.003325][T24437] syzkaller1: entered promiscuous mode [ 1423.008866][T24437] syzkaller1: entered allmulticast mode [ 1423.355520][T24462] SET target dimension over the limit! [ 1423.573723][T24479] --map-set only usable from mangle table [ 1423.770817][T24497] __nla_validate_parse: 29 callbacks suppressed [ 1423.770840][T24497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13795'. [ 1423.858465][T24500] validate_nla: 4 callbacks suppressed [ 1423.858486][T24500] netlink: 'syz.0.13796': attribute type 29 has an invalid length. [ 1424.051473][T24515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1424.353899][T24538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13806'. [ 1424.528604][T24545] mac80211_hwsim hwsim139 syzkaller0: entered promiscuous mode [ 1424.627725][T24552] netlink: 116 bytes leftover after parsing attributes in process `syz.0.13809'. [ 1424.673068][T24555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13812'. [ 1424.806340][T24564] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1424.812845][T24564] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1424.939417][T24569] netlink: 'syz.3.13816': attribute type 1 has an invalid length. [ 1424.955625][T24572] sctp: [Deprecated]: syz.0.13817 (pid 24572) Use of int in maxseg socket option. [ 1424.955625][T24572] Use struct sctp_assoc_value instead [ 1424.958207][T24569] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13816'. [ 1425.111350][T24578] tipc: Enabled bearer , priority 0 [ 1425.144520][T24583] netlink: 'syz.0.13820': attribute type 11 has an invalid length. [ 1425.159141][T24583] netlink: 'syz.0.13820': attribute type 11 has an invalid length. [ 1425.178797][T24583] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13820'. [ 1425.325063][T24595] netlink: 'syz.1.13822': attribute type 4 has an invalid length. [ 1425.333930][T24595] netlink: 'syz.1.13822': attribute type 3 has an invalid length. [ 1425.347067][T24596] netlink: 248 bytes leftover after parsing attributes in process `syz.4.13819'. [ 1425.356955][T24595] netlink: 224 bytes leftover after parsing attributes in process `syz.1.13822'. [ 1425.383767][T24591] netlink: 'syz.0.13820': attribute type 11 has an invalid length. [ 1425.398974][T24591] netlink: 'syz.0.13820': attribute type 11 has an invalid length. [ 1425.413548][T24591] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13820'. [ 1426.119413][T24642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13833'. [ 1426.221982][T17549] tipc: Node number set to 3758096385 [ 1426.368745][T24652] netlink: 'syz.1.13835': attribute type 3 has an invalid length. [ 1426.382803][T24652] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 1426.964833][T24690] xt_NFQUEUE: number of total queues is 0 [ 1427.297440][T24719] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1427.424748][T24724] mac80211_hwsim hwsim143 syzkaller0: entered allmulticast mode [ 1427.673525][T24733] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1427.982887][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5560 ms [ 1427.990989][ C1] lec:lec_tx_timeout: lec0 [ 1427.997448][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1428.094775][T24754] netlink: 'syz.3.13863': attribute type 10 has an invalid length. [ 1428.135517][T24754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1428.177454][T24754] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1428.571400][T24785] SET target dimension over the limit! [ 1428.919890][T24806] __nla_validate_parse: 15 callbacks suppressed [ 1428.919911][T24806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13875'. [ 1428.969680][T24806] openvswitch: netlink: Unknown nsh attribute 0 [ 1429.165070][T24814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13876'. [ 1429.429123][T24833] nbd: must specify at least one socket [ 1429.473665][T24835] netlink: 'syz.1.13881': attribute type 1 has an invalid length. [ 1429.642921][T24835] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1429.651996][T24835] netlink: 'syz.1.13881': attribute type 1 has an invalid length. [ 1429.660493][T24835] netlink: 'syz.1.13881': attribute type 1 has an invalid length. [ 1429.672887][T24835] netlink: 'syz.1.13881': attribute type 1 has an invalid length. [ 1429.682293][T24835] netlink: 'syz.1.13881': attribute type 1 has an invalid length. [ 1429.750479][T24837] bond8: (slave geneve4): making interface the new active one [ 1429.806271][T24837] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 1429.846009][ T296] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1429.855292][T24835] netlink: 'syz.1.13881': attribute type 1 has an invalid length. [ 1429.897095][ T296] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1429.908054][T24850] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13884'. [ 1429.915718][ T296] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1429.932809][T24850] nbd: must specify at least one socket [ 1429.939277][T24835] netlink: 'syz.1.13881': attribute type 1 has an invalid length. [ 1429.952747][ T296] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1429.975876][T24835] netlink: 'syz.1.13881': attribute type 1 has an invalid length. [ 1430.059423][T24835] netlink: 'syz.1.13881': attribute type 1 has an invalid length. [ 1430.165192][T24835] netlink: 'syz.1.13881': attribute type 1 has an invalid length. [ 1430.180609][T24850] IPVS: persistence engine module ip_vs_pe_À not found [ 1430.346107][T24867] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1430.594636][T17549] IPVS: starting estimator thread 0... [ 1430.691193][T24897] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.13895'. [ 1430.704030][T24891] IPVS: using max 27 ests per chain, 64800 per kthread [ 1430.731007][T24902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13897'. [ 1430.789686][T24895] syzkaller0: entered promiscuous mode [ 1430.809152][T24895] syzkaller0: entered allmulticast mode [ 1430.842353][T24901] ¾x9ÿ: renamed from bridge_slave_0 [ 1430.908827][T24899] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13896'. [ 1430.931118][T24899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13896'. [ 1430.967618][T24899] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1431.054818][T24907] syzkaller1: entered promiscuous mode [ 1431.060434][T24907] syzkaller1: entered allmulticast mode [ 1431.296037][T24929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13905'. [ 1431.333455][T24929] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13905'. [ 1433.021846][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1433.029934][ C1] lec:lec_tx_timeout: lec0 [ 1433.464736][T24943] netdevsim netdevsim3 : renamed from netdevsim0 [ 1433.474733][T24952] veth1_to_bond: mtu less than device minimum [ 1433.481283][T24956] vlan1: entered allmulticast mode [ 1433.488323][T24956] veth0_vlan: entered allmulticast mode [ 1433.688337][T24974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13918'. [ 1433.851375][T24972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1434.031943][T25004] __nla_validate_parse: 1 callbacks suppressed [ 1434.031965][T25004] netlink: 160 bytes leftover after parsing attributes in process `syz.2.13923'. [ 1434.136945][T25012] IPVS: set_ctl: invalid protocol: 43 172.20.20.24:20003 [ 1434.266725][T25004] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13923'. [ 1434.284387][T25012] bond9 (unregistering): Released all slaves [ 1434.346887][T25023] IPv6: addrconf: prefix option has invalid lifetime [ 1434.619630][T25035] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1434.973389][T25052] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.13938'. [ 1434.986842][T25057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13940'. [ 1435.015001][T25056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13940'. [ 1435.068186][T25063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13942'. [ 1435.078167][T25063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13942'. [ 1435.091728][T25061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13941'. [ 1435.115389][T25056] bond9: entered promiscuous mode [ 1435.121482][T25056] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1435.131224][T25063] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1435.166003][T25065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13942'. [ 1435.179490][T25065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13942'. [ 1435.419704][T25083] nbd: must specify a device to reconfigure [ 1435.761462][ T5832] block nbd1: Receive control failed (result -107) [ 1435.813630][T25101] nbd1: detected capacity change from 0 to 127 [ 1435.823416][T25005] block nbd1: Dead connection, failed to find a fallback [ 1435.833980][T25005] block nbd1: shutting down sockets [ 1435.840030][T25005] blk_print_req_error: 138 callbacks suppressed [ 1435.840048][T25005] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1435.858263][T25005] buffer_io_error: 138 callbacks suppressed [ 1435.858282][T25005] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1435.875060][T25005] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1435.885129][T25005] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1435.886936][T25110] validate_nla: 59 callbacks suppressed [ 1435.886989][T25110] netlink: 'syz.4.13955': attribute type 2 has an invalid length. [ 1435.898058][T25005] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1435.994586][T25005] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1436.022085][T25005] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1436.042947][T25124] netlink: 'syz.1.13959': attribute type 5 has an invalid length. [ 1436.050876][T25005] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1436.095651][T25005] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1436.121944][T25005] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1436.129921][T25005] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1436.143882][T25005] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1436.151909][T25005] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1436.161550][T25005] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1436.169941][T25005] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1436.179734][T25005] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1436.187868][T25005] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1436.197940][T25005] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1436.216900][T25129] netlink: 'syz.3.13962': attribute type 1 has an invalid length. [ 1436.267007][T25005] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1436.294878][T25005] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1436.306182][T25132] netlink: 'syz.3.13962': attribute type 1 has an invalid length. [ 1436.314558][T25005] ldm_validate_partition_table(): Disk read failed. [ 1436.315094][T25005] Dev nbd1: unable to read RDB block 0 [ 1436.316445][T25005] nbd1: unable to read partition table [ 1436.389684][T25005] ldm_validate_partition_table(): Disk read failed. [ 1436.412549][T25005] Dev nbd1: unable to read RDB block 0 [ 1436.425421][T25005] nbd1: unable to read partition table [ 1436.497393][T25142] netlink: 'syz.4.13966': attribute type 13 has an invalid length. [ 1436.563910][T25142] gretap0: refused to change device tx_queue_len [ 1436.570966][T25142] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1436.811539][T25161] netlink: 'syz.4.13973': attribute type 1 has an invalid length. [ 1436.850019][T25159] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1437.166199][T25189] netlink: 'syz.4.13980': attribute type 2 has an invalid length. [ 1437.650542][T25215] openvswitch: netlink: IP tunnel dst address not specified [ 1437.809582][T25221] netlink: 'syz.3.13989': attribute type 1 has an invalid length. [ 1438.158897][T25245] netlink: 'syz.1.13999': attribute type 1 has an invalid length. [ 1438.410238][T25268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1438.482202][T25272] netlink: 'syz.0.14006': attribute type 13 has an invalid length. [ 1438.501525][T25271] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20002 [ 1438.694075][T25279] IPVS: length: 116 != 24 [ 1438.700104][T25279] x_tables: duplicate underflow at hook 1 [ 1438.936885][T25289] No such timeout policy "syz0" [ 1439.128328][T25296] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1439.315488][T25308] __nla_validate_parse: 22 callbacks suppressed [ 1439.315511][T25308] netlink: 766 bytes leftover after parsing attributes in process `syz.3.14017'. [ 1439.346895][T25308] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14017'. [ 1439.381501][T25308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1439.394575][T25308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1439.406485][T25308] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1439.425623][T25308] bond0 (unregistering): Released all slaves [ 1439.446212][T25311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1439.847438][T25336] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1440.029203][T25344] netlink: zone id is out of range [ 1440.042837][T25344] netlink: zone id is out of range [ 1440.048021][T25344] netlink: zone id is out of range [ 1440.072364][T25344] netlink: zone id is out of range [ 1440.082604][T25344] netlink: zone id is out of range [ 1440.206323][T25348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14031'. [ 1440.344092][T25360] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14037'. [ 1440.353588][T25360] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14037'. [ 1440.612619][T25368] netlink: 76 bytes leftover after parsing attributes in process `syz.1.14040'. [ 1440.649624][T25374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14041'. [ 1440.669950][T25374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14041'. [ 1440.743058][T25374] netlink: 328 bytes leftover after parsing attributes in process `syz.3.14041'. [ 1441.255776][T25417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14055'. [ 1441.729681][T25440] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1441.777183][T25455] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 1441.943952][T25469] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1442.083631][T25478] validate_nla: 2 callbacks suppressed [ 1442.083652][T25478] netlink: 'syz.2.14074': attribute type 10 has an invalid length. [ 1442.119643][T25478] dummy0: entered promiscuous mode [ 1442.127516][T25478] bridge0: port 1(dummy0) entered blocking state [ 1442.135414][T25478] bridge0: port 1(dummy0) entered disabled state [ 1442.145097][T25478] dummy0: entered allmulticast mode [ 1442.486336][T25498] netlink: 'syz.4.14079': attribute type 4 has an invalid length. [ 1442.543246][T25503] netlink: 'syz.1.14081': attribute type 1 has an invalid length. [ 1442.573694][T25499] netlink: 'syz.4.14079': attribute type 4 has an invalid length. [ 1442.855601][T17554] [ 1442.858006][T17554] ====================================================== [ 1442.865056][T17554] WARNING: possible circular locking dependency detected [ 1442.872212][T17554] syzkaller #0 Not tainted [ 1442.876652][T17554] ------------------------------------------------------ [ 1442.883698][T17554] kworker/1:6/17554 is trying to acquire lock: [ 1442.889887][T17554] ffffffff8e883780 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1442.899776][T17554] [ 1442.899776][T17554] but task is already holding lock: [ 1442.907174][T17554] ffffffff8ff84748 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 1442.917770][T17554] [ 1442.917770][T17554] which lock already depends on the new lock. [ 1442.917770][T17554] [ 1442.928202][T17554] [ 1442.928202][T17554] the existing dependency chain (in reverse order) is: [ 1442.937233][T17554] [ 1442.937233][T17554] -> #9 (uevent_sock_mutex){+.+.}-{4:4}: [ 1442.945078][T17554] __mutex_lock+0x19f/0x1300 [ 1442.950213][T17554] kobject_uevent_net_broadcast+0x27e/0x560 [ 1442.956656][T17554] kobject_uevent_env+0x55c/0x9e0 [ 1442.962231][T17554] device_add+0x557/0xb70 [ 1442.967104][T17554] device_create+0x269/0x300 [ 1442.972243][T17554] msr_device_create+0x33/0x50 [ 1442.977553][T17554] cpuhp_invoke_callback+0x445/0x860 [ 1442.983386][T17554] cpuhp_thread_fun+0x36b/0x780 [ 1442.988789][T17554] smpboot_thread_fn+0x541/0xa50 [ 1442.994277][T17554] kthread+0x388/0x470 [ 1442.998886][T17554] ret_from_fork+0x51e/0xb90 [ 1443.004025][T17554] ret_from_fork_asm+0x1a/0x30 [ 1443.009336][T17554] [ 1443.009336][T17554] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 1443.017092][T17554] cpuhp_thread_fun+0x127/0x780 [ 1443.022486][T17554] smpboot_thread_fn+0x541/0xa50 [ 1443.028056][T17554] kthread+0x388/0x470 [ 1443.032668][T17554] ret_from_fork+0x51e/0xb90 [ 1443.037828][T17554] ret_from_fork_asm+0x1a/0x30 [ 1443.043158][T17554] [ 1443.043158][T17554] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1443.050909][T17554] cpus_read_lock+0x42/0x160 [ 1443.056048][T17554] static_key_disable+0x12/0x20 [ 1443.061443][T17554] __inet_hash_connect+0x2430/0x2440 [ 1443.067277][T17554] tcp_v4_connect+0xd5f/0x19b0 [ 1443.072596][T17554] __inet_stream_connect+0x25a/0xdd0 [ 1443.078454][T17554] inet_stream_connect+0x66/0xa0 [ 1443.083939][T17554] __sys_connect+0x312/0x450 [ 1443.089106][T17554] __x64_sys_connect+0x7a/0x90 [ 1443.094407][T17554] do_syscall_64+0x14d/0xf80 [ 1443.099545][T17554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.106071][T17554] [ 1443.106071][T17554] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1443.113742][T17554] lock_sock_nested+0x48/0x100 [ 1443.119056][T17554] inet_shutdown+0x6a/0x390 [ 1443.124277][T17554] nbd_mark_nsock_dead+0x2e9/0x560 [ 1443.129934][T17554] recv_work+0x1c7f/0x1d90 [ 1443.134898][T17554] process_scheduled_works+0xb6e/0x18c0 [ 1443.140988][T17554] worker_thread+0xa53/0xfc0 [ 1443.146118][T17554] kthread+0x388/0x470 [ 1443.150724][T17554] ret_from_fork+0x51e/0xb90 [ 1443.155854][T17554] ret_from_fork_asm+0x1a/0x30 [ 1443.161163][T17554] [ 1443.161163][T17554] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1443.168828][T17554] __mutex_lock+0x19f/0x1300 [ 1443.173965][T17554] nbd_queue_rq+0x37b/0x1100 [ 1443.179096][T17554] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1443.185183][T17554] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1443.192059][T17554] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1443.198595][T17554] blk_mq_run_hw_queue+0x348/0x4f0 [ 1443.204336][T17554] blk_mq_dispatch_list+0xd16/0xe10 [ 1443.210091][T17554] blk_mq_flush_plug_list+0x48d/0x570 [ 1443.216012][T17554] __blk_flush_plug+0x3ed/0x4d0 [ 1443.221582][T17554] __submit_bio+0x28d/0x580 [ 1443.226635][T17554] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1443.232821][T17554] block_read_full_folio+0x599/0x830 [ 1443.238649][T17554] filemap_read_folio+0x137/0x3b0 [ 1443.244220][T17554] do_read_cache_folio+0x358/0x590 [ 1443.249886][T17554] read_part_sector+0xb6/0x2b0 [ 1443.255196][T17554] adfspart_check_ICS+0xa5/0xa40 [ 1443.260763][T17554] bdev_disk_changed+0x7ba/0x1550 [ 1443.266331][T17554] blkdev_get_whole+0x380/0x510 [ 1443.271727][T17554] bdev_open+0x31e/0xd30 [ 1443.276522][T17554] blkdev_open+0x470/0x610 [ 1443.281484][T17554] do_dentry_open+0x785/0x14e0 [ 1443.286800][T17554] vfs_open+0x3b/0x340 [ 1443.291432][T17554] path_openat+0x2e08/0x3860 [ 1443.296563][T17554] do_file_open+0x23e/0x4a0 [ 1443.301618][T17554] do_sys_openat2+0x113/0x200 [ 1443.306854][T17554] __x64_sys_openat+0x138/0x170 [ 1443.312253][T17554] do_syscall_64+0x14d/0xf80 [ 1443.317392][T17554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.323831][T17554] [ 1443.323831][T17554] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1443.331065][T17554] __mutex_lock+0x19f/0x1300 [ 1443.336200][T17554] nbd_queue_rq+0xc6/0x1100 [ 1443.341264][T17554] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1443.347353][T17554] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1443.354223][T17554] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1443.360743][T17554] blk_mq_run_hw_queue+0x348/0x4f0 [ 1443.366391][T17554] blk_mq_dispatch_list+0xd16/0xe10 [ 1443.372137][T17554] blk_mq_flush_plug_list+0x48d/0x570 [ 1443.378145][T17554] __blk_flush_plug+0x3ed/0x4d0 [ 1443.383537][T17554] __submit_bio+0x28d/0x580 [ 1443.388584][T17554] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1443.394761][T17554] block_read_full_folio+0x599/0x830 [ 1443.400592][T17554] filemap_read_folio+0x137/0x3b0 [ 1443.406157][T17554] do_read_cache_folio+0x358/0x590 [ 1443.411815][T17554] read_part_sector+0xb6/0x2b0 [ 1443.417122][T17554] adfspart_check_ICS+0xa5/0xa40 [ 1443.422695][T17554] bdev_disk_changed+0x7ba/0x1550 [ 1443.428264][T17554] blkdev_get_whole+0x380/0x510 [ 1443.433687][T17554] bdev_open+0x31e/0xd30 [ 1443.438477][T17554] blkdev_open+0x470/0x610 [ 1443.443441][T17554] do_dentry_open+0x785/0x14e0 [ 1443.448771][T17554] vfs_open+0x3b/0x340 [ 1443.453394][T17554] path_openat+0x2e08/0x3860 [ 1443.458534][T17554] do_file_open+0x23e/0x4a0 [ 1443.463613][T17554] do_sys_openat2+0x113/0x200 [ 1443.468850][T17554] __x64_sys_openat+0x138/0x170 [ 1443.474253][T17554] do_syscall_64+0x14d/0xf80 [ 1443.479386][T17554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.485872][T17554] [ 1443.485872][T17554] -> #3 (set->srcu){.+.+}-{0:0}: [ 1443.493019][T17554] __synchronize_srcu+0xca/0x300 [ 1443.498499][T17554] elevator_switch+0x1e8/0x7a0 [ 1443.503895][T17554] elevator_change+0x2cc/0x450 [ 1443.509211][T17554] elevator_set_default+0x36c/0x430 [ 1443.515054][T17554] blk_register_queue+0x366/0x430 [ 1443.520625][T17554] __add_disk+0x677/0xd50 [ 1443.525534][T17554] add_disk_fwnode+0xfb/0x480 [ 1443.530761][T17554] nbd_dev_add+0x72c/0xb50 [ 1443.535728][T17554] nbd_init+0x168/0x1f0 [ 1443.540430][T17554] do_one_initcall+0x250/0x8d0 [ 1443.545739][T17554] do_initcall_level+0x104/0x190 [ 1443.551229][T17554] do_initcalls+0x59/0xa0 [ 1443.556102][T17554] kernel_init_freeable+0x2a6/0x3e0 [ 1443.561849][T17554] kernel_init+0x1d/0x1d0 [ 1443.566739][T17554] ret_from_fork+0x51e/0xb90 [ 1443.571878][T17554] ret_from_fork_asm+0x1a/0x30 [ 1443.577195][T17554] [ 1443.577195][T17554] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1443.585056][T17554] __mutex_lock+0x19f/0x1300 [ 1443.590200][T17554] elevator_change+0x1b3/0x450 [ 1443.595511][T17554] elevator_set_none+0xb5/0x140 [ 1443.600904][T17554] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1443.607259][T17554] nbd_start_device+0x17f/0xb10 [ 1443.612659][T17554] nbd_genl_connect+0x165b/0x1cf0 [ 1443.618260][T17554] genl_family_rcv_msg_doit+0x22a/0x330 [ 1443.624375][T17554] genl_rcv_msg+0x61c/0x7a0 [ 1443.629419][T17554] netlink_rcv_skb+0x232/0x4b0 [ 1443.634734][T17554] genl_rcv+0x28/0x40 [ 1443.639265][T17554] netlink_unicast+0x80f/0x9b0 [ 1443.644590][T17554] netlink_sendmsg+0x813/0xb40 [ 1443.649898][T17554] ____sys_sendmsg+0x972/0x9f0 [ 1443.655220][T17554] ___sys_sendmsg+0x2a5/0x360 [ 1443.660451][T17554] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1443.665931][T17554] do_syscall_64+0x14d/0xf80 [ 1443.671068][T17554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.677511][T17554] [ 1443.677511][T17554] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1443.686146][T17554] blk_alloc_queue+0x546/0x680 [ 1443.691461][T17554] __blk_mq_alloc_disk+0x197/0x390 [ 1443.697132][T17554] nbd_dev_add+0x499/0xb50 [ 1443.702094][T17554] nbd_init+0x168/0x1f0 [ 1443.706804][T17554] do_one_initcall+0x250/0x8d0 [ 1443.712126][T17554] do_initcall_level+0x104/0x190 [ 1443.717610][T17554] do_initcalls+0x59/0xa0 [ 1443.722492][T17554] kernel_init_freeable+0x2a6/0x3e0 [ 1443.728271][T17554] kernel_init+0x1d/0x1d0 [ 1443.733154][T17554] ret_from_fork+0x51e/0xb90 [ 1443.738299][T17554] ret_from_fork_asm+0x1a/0x30 [ 1443.743610][T17554] [ 1443.743610][T17554] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1443.750915][T17554] __lock_acquire+0x15a5/0x2cf0 [ 1443.756321][T17554] lock_acquire+0xf0/0x2e0 [ 1443.761301][T17554] fs_reclaim_acquire+0x71/0x100 [ 1443.766793][T17554] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1443.773156][T17554] __alloc_skb+0x27d/0x7d0 [ 1443.778113][T17554] alloc_uevent_skb+0x7d/0x230 [ 1443.783434][T17554] kobject_uevent_net_broadcast+0x2fa/0x560 [ 1443.789972][T17554] kobject_uevent_env+0x55c/0x9e0 [ 1443.795548][T17554] rfkill_uevent_work+0x63/0xa0 [ 1443.800940][T17554] process_scheduled_works+0xb6e/0x18c0 [ 1443.807039][T17554] worker_thread+0xa53/0xfc0 [ 1443.812179][T17554] kthread+0x388/0x470 [ 1443.816796][T17554] ret_from_fork+0x51e/0xb90 [ 1443.821932][T17554] ret_from_fork_asm+0x1a/0x30 [ 1443.827248][T17554] [ 1443.827248][T17554] other info that might help us debug this: [ 1443.827248][T17554] [ 1443.837575][T17554] Chain exists of: [ 1443.837575][T17554] fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex [ 1443.837575][T17554] [ 1443.850295][T17554] Possible unsafe locking scenario: [ 1443.850295][T17554] [ 1443.857759][T17554] CPU0 CPU1 [ 1443.863150][T17554] ---- ---- [ 1443.868619][T17554] lock(uevent_sock_mutex); [ 1443.873248][T17554] lock(cpuhp_state-up); [ 1443.880127][T17554] lock(uevent_sock_mutex); [ 1443.887264][T17554] lock(fs_reclaim); [ 1443.891268][T17554] [ 1443.891268][T17554] *** DEADLOCK *** [ 1443.891268][T17554] [ 1443.899428][T17554] 4 locks held by kworker/1:6/17554: [ 1443.904730][T17554] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1443.915732][T17554] #1: ffffc90004b47c40 ((work_completion)(&rfkill->uevent_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1443.928290][T17554] #2: ffffffff8fee8c08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_uevent_work+0x1d/0xa0 [ 1443.938418][T17554] #3: ffffffff8ff84748 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 1443.949418][T17554] [ 1443.949418][T17554] stack backtrace: [ 1443.955329][T17554] CPU: 1 UID: 0 PID: 17554 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 1443.955350][T17554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1443.955363][T17554] Workqueue: events rfkill_uevent_work [ 1443.955384][T17554] Call Trace: [ 1443.955392][T17554] [ 1443.955401][T17554] dump_stack_lvl+0xe8/0x150 [ 1443.955427][T17554] print_circular_bug+0x2e1/0x300 [ 1443.955456][T17554] check_noncircular+0x12e/0x150 [ 1443.955486][T17554] __lock_acquire+0x15a5/0x2cf0 [ 1443.955520][T17554] lock_acquire+0xf0/0x2e0 [ 1443.955541][T17554] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1443.955564][T17554] fs_reclaim_acquire+0x71/0x100 [ 1443.955585][T17554] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1443.955603][T17554] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1443.955623][T17554] ? __alloc_skb+0x27d/0x7d0 [ 1443.955647][T17554] ? __alloc_skb+0x186/0x7d0 [ 1443.955665][T17554] __alloc_skb+0x27d/0x7d0 [ 1443.955684][T17554] alloc_uevent_skb+0x7d/0x230 [ 1443.955713][T17554] kobject_uevent_net_broadcast+0x2fa/0x560 [ 1443.955742][T17554] kobject_uevent_env+0x55c/0x9e0 [ 1443.955772][T17554] rfkill_uevent_work+0x63/0xa0 [ 1443.955789][T17554] ? process_scheduled_works+0xa8d/0x18c0 [ 1443.955811][T17554] process_scheduled_works+0xb6e/0x18c0 [ 1443.955846][T17554] ? __pfx_process_scheduled_works+0x10/0x10 [ 1443.955872][T17554] ? assign_work+0x3d5/0x5e0 [ 1443.955896][T17554] worker_thread+0xa53/0xfc0 [ 1443.955932][T17554] kthread+0x388/0x470 [ 1443.955948][T17554] ? __pfx_worker_thread+0x10/0x10 [ 1443.955971][T17554] ? __pfx_kthread+0x10/0x10 [ 1443.955987][T17554] ret_from_fork+0x51e/0xb90 [ 1443.956011][T17554] ? __pfx_ret_from_fork+0x10/0x10 [ 1443.956034][T17554] ? __switch_to+0xc7d/0x1450 [ 1443.956054][T17554] ? __pfx_kthread+0x10/0x10 [ 1443.956070][T17554] ret_from_fork_asm+0x1a/0x30 [ 1443.956103][T17554] [ 1444.179810][T25523] bridge0: port 1(veth0_to_bridge) entered blocking state [ 1444.187707][T25523] bridge0: port 1(veth0_to_bridge) entered disabled state [ 1444.195079][T25523] veth0_to_bridge: entered allmulticast mode [ 1444.202918][T25523] veth0_to_bridge: entered promiscuous mode [ 1444.209551][T25523] bridge0: port 1(veth0_to_bridge) entered blocking state [ 1444.216769][T25523] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 1444.246978][T25523] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1444.260788][T25522] ip6t_REJECT: TCP_RESET illegal for non-tcp