last executing test programs: 3m53.098966394s ago: executing program 0 (id=773): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) recvmmsg(r3, &(0x7f0000004940)=[{{&(0x7f0000000300)=@hci, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000380)=""/244, 0xf4}, {&(0x7f0000000480)=""/4, 0x4}, {&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f0000000880)=""/154, 0x9a}, {&(0x7f0000000940)=""/169, 0xa9}, {&(0x7f0000000a00)=""/124, 0x7c}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/249, 0xf9}], 0x8}, 0x7f}, {{&(0x7f0000000c80)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/10, 0xa}, {&(0x7f0000001d40)=""/53, 0x35}, {&(0x7f0000001d80)=""/157, 0x9d}, {&(0x7f0000001e40)=""/8, 0x8}, {&(0x7f0000001e80)=""/32, 0x20}, {&(0x7f0000001ec0)=""/50, 0x32}, {&(0x7f0000001f00)=""/1, 0x1}], 0x8}, 0x3}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001fc0)=""/112, 0x70}], 0x1, &(0x7f0000002080)}, 0x3}, {{&(0x7f00000020c0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000004500)=[{&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/250, 0xfa}, {&(0x7f0000003240)=""/244, 0xf4}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000004340)=""/183, 0xb7}, {&(0x7f0000004400)=""/245, 0xf5}], 0x6, &(0x7f0000004580)=""/180, 0xb4}}, {{&(0x7f0000004640)=@nfc_llcp, 0x80, &(0x7f0000004800)=[{&(0x7f00000046c0)=""/43, 0x2b}, {&(0x7f0000004700)=""/196, 0xc4}], 0x2, &(0x7f0000004840)=""/252, 0xfc}, 0x3}], 0x5, 0x6100, 0x0) close(r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000240)="3c44e4a53a", 0x5}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @multicast1}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x5, 0xe, 0x0, &(0x7f0000000100)="2eb33d2ab87cded491717916deb4", 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffdc2, 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$unix(0x1, 0x2, 0x0) (async) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) socket$unix(0x1, 0x2, 0x0) (async) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) (async) recvmmsg(r3, &(0x7f0000004940)=[{{&(0x7f0000000300)=@hci, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000380)=""/244, 0xf4}, {&(0x7f0000000480)=""/4, 0x4}, {&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f0000000880)=""/154, 0x9a}, {&(0x7f0000000940)=""/169, 0xa9}, {&(0x7f0000000a00)=""/124, 0x7c}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/249, 0xf9}], 0x8}, 0x7f}, {{&(0x7f0000000c80)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/10, 0xa}, {&(0x7f0000001d40)=""/53, 0x35}, {&(0x7f0000001d80)=""/157, 0x9d}, {&(0x7f0000001e40)=""/8, 0x8}, {&(0x7f0000001e80)=""/32, 0x20}, {&(0x7f0000001ec0)=""/50, 0x32}, {&(0x7f0000001f00)=""/1, 0x1}], 0x8}, 0x3}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001fc0)=""/112, 0x70}], 0x1, &(0x7f0000002080)}, 0x3}, {{&(0x7f00000020c0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000004500)=[{&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/250, 0xfa}, {&(0x7f0000003240)=""/244, 0xf4}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000004340)=""/183, 0xb7}, {&(0x7f0000004400)=""/245, 0xf5}], 0x6, &(0x7f0000004580)=""/180, 0xb4}}, {{&(0x7f0000004640)=@nfc_llcp, 0x80, &(0x7f0000004800)=[{&(0x7f00000046c0)=""/43, 0x2b}, {&(0x7f0000004700)=""/196, 0xc4}], 0x2, &(0x7f0000004840)=""/252, 0xfc}, 0x3}], 0x5, 0x6100, 0x0) (async) close(r2) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000240)="3c44e4a53a", 0x5}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @multicast1}}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x5, 0xe, 0x0, &(0x7f0000000100)="2eb33d2ab87cded491717916deb4", 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffdc2, 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x50) (async) 3m52.727845955s ago: executing program 0 (id=782): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000f900000000000039d70000000061104000000000cb7408d587a0ce592ade2644a5c56f3d00000000002d1f9e8e84ba0d67c4a18eb405d5ade48e8a8723e57dde1468bbe2cdf13fb412471ef6b0a7bc4a718cef785c46690cd06c131745d0c841017ea99486de324b756605ceb27858577a0fa665f5f87a6284bcc94a3eafa03ce595274ff9ee14bf13c9422b72755b7b8c7d37c8d713b6207a0600"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) splice(r0, &(0x7f00000003c0)=0x100000001, r5, &(0x7f0000000400)=0x8dd, 0x5, 0xa) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x3c}}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x33}}]}, 0x44}}, 0x40004) 3m52.504839996s ago: executing program 0 (id=787): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$inet(0xa, 0x801, 0x84) (rerun: 64) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x7d, &(0x7f00000010c0)=""/4100, &(0x7f0000000200)=0x1004) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x9}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x28e5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x3}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x3e41baf18da81af7) 3m52.012251518s ago: executing program 0 (id=795): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="1c000050c948e70000c6bbff0f0000020080000008000c00", @ANYRES32=r0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 3m51.807318751s ago: executing program 0 (id=799): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x3, 0x6}, 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x80000008, 0x10003}) write$cgroup_devices(r2, &(0x7f0000000100)={'b', ' *:* ', 'rm\x00'}, 0x9) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x620, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote], 0x9}}, @common=@unspec=@connlimit={{0x22}, {[0x0, 0xffffffff, 0xffffffff, 0xff000000], 0xffffff7f, 0x1, {0x4}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) bpf$TOKEN_CREATE(0x24, &(0x7f0000000780)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x13, 0x4, &(0x7f0000002e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000740)='GPL\x00', 0xfffff000, 0xbc, &(0x7f000000cf3d)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0xf, 0xa, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) writev(r5, &(0x7f0000003880)=[{&(0x7f00000006c0)="a71be31872eaa716750b9c8b10f21b87290ea432541b8f594aa966920a86b44fc57164d0cb278e1999eeee8f99b6c0eb29ed828ba18babfd891823e532ca1322c7ff480e15f18555444bdc5ec681d6cecefb06835f1bda9e74d0f1f65cd759dbb0ee27fd9bcaee845a7f069218d549448643a3", 0x73}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f00000037c0)="1b1dd032fe55f170951ea03a177c39e8b8544f3bb83dce2d7600006724ccbe4e7fc8e2967da72977b7e8cb3c7c874e1112b9ae54dade4f8549ce24406892ce1f37834d11b4f0019159da7742f284d54438c3854d2a406a053ebc7fbbb05d99793ea4e662b04aeb37d1c8f71b6d63f7f168b8de43bc7c7a6a4786819c52c9ab70884eaca892a653bc4318601ef686d538ed1626", 0x93}], 0x3) sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="2e0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'vlan1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0x18}, 0x1, 0x0, 0x0, 0x4809}, 0x20040054) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r6) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x9}]}}]}, 0x3c}}, 0x0) recvmsg(r6, &(0x7f0000000080)={0x0, 0xffffffffffffffb1, &(0x7f0000000340)=[{&(0x7f0000000540)=""/118, 0x76}, {&(0x7f00000027c0)=""/4093, 0xffd}, {&(0x7f0000000380)=""/145, 0x91}], 0x3}, 0x40000070) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="00000e00"}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd28, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 3m51.615334366s ago: executing program 0 (id=803): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000100008401000000000000000200000005000020000000000000000604"], 0x0, 0x3e, 0x0, 0x1}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/3, 0x3}, {&(0x7f0000000100)}], 0x2}, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404000d}, 0x20048000) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x4850) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1200, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, 0x7, 0xa, 0x303, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 3m36.591644557s ago: executing program 32 (id=803): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000100008401000000000000000200000005000020000000000000000604"], 0x0, 0x3e, 0x0, 0x1}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/3, 0x3}, {&(0x7f0000000100)}], 0x2}, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404000d}, 0x20048000) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x4850) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1200, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, 0x7, 0xa, 0x303, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 2m28.031517077s ago: executing program 4 (id=1947): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) (async) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r4, 0x504c3}}, 0x20}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x30, r2, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001540)=""/4110, 0x100e}], 0x29}, 0x406) 2m27.97352274s ago: executing program 4 (id=1948): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan1\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x80}]}, 0x6c}}, 0x20004080) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_FAMILY={0x5, 0xd, 0x1a}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x7}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_TID={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4040004) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@RTM_NEWNSID={0x1c, 0x58, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NETNSA_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$XFS_IOC_SCRUB_METADATA(r3, 0xc040583c, &(0x7f0000000440)={0xf, 0x20, 0x3, 0x1, 0x1ff}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r5, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x48800}, 0xa8d23d05d2155c9b) poll(&(0x7f00000005c0)=[{r2, 0x48}, {r3, 0xe0a8}, {r3, 0x4a}, {r2, 0x2a}, {r0}, {r0, 0x80}], 0x6, 0x7) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000006c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000700)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000a80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000740)={0x2c8, r7, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xbc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x68, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555e}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xd3a}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffd}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "fe62c016397da1b52e00ecc0b6bf80ed79a2f8b6a03951182508af53f7e708bc"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_SEC_KEY={0x14c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xa}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "aae1e42196dc82fd7ebb050d806ad9f6"}, @NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4f1a4ff98672faf6684cf9f432635d99ac88d82074ee7fb78dc1e52fef5cc7b2"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_ID={0xa8, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8001}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x65}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0x7c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e4ee3ca3aa93ef33ce3090d2aa668f41"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xb9}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xd8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x37}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e033dc7c8770a443a06478c87420b75a"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "7dfad61b2453c1af93c92d1eb39f81f1"}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x20048000}, 0xb6508548bd4e1421) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, r7, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xb}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xa}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x40}}, 0x4000004) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c40)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={0xffffffffffffffff, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000cc0)=[0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd3, &(0x7f0000000d40)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000d80), &(0x7f0000000dc0), 0x8, 0x67, 0x8, 0x8, &(0x7f0000000e00)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001040)={'tunl0\x00', &(0x7f0000000f80)={'ip_vti0\x00', 0x0, 0x8000, 0x20, 0xea, 0x1, {{0x20, 0x4, 0x0, 0x7, 0x80, 0x65, 0x0, 0x7, 0x2f, 0x0, @loopback, @private=0xa010102, {[@timestamp={0x44, 0x1c, 0xeb, 0x0, 0x4, [0x8, 0x6, 0x0, 0x7, 0x0, 0x7]}, @rr={0x7, 0x17, 0x3c, [@private=0xa010102, @rand_addr=0x64010101, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xed, [@empty]}, @ssrr={0x89, 0x17, 0x13, [@remote, @multicast1, @empty, @empty, @local]}, @ssrr={0x89, 0x17, 0x27, [@loopback, @rand_addr=0x64010100, @multicast2, @loopback, @broadcast]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000001180)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0xb0, r10, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}, @ETHTOOL_A_LINKINFO_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xe}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xc4}, @ETHTOOL_A_LINKINFO_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7e}]}, 0xb0}}, 0x40) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x48, r7, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x34, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x30, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xc2000000}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$NL802154_CMD_SET_CCA_MODE(r6, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x1c}}, 0x24040010) r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r14, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x10, 0x1405, 0x100, 0x70bd29, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2m27.385918348s ago: executing program 4 (id=1956): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000017010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff0000000008000700263a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000007000010000000000fddbdf2507000000", @ANYRES32=r8, @ANYBLOB="0c000180080001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x440040c4) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}}, 0x0) 2m27.127577083s ago: executing program 4 (id=1960): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000400)='{(@.\x00', 0x0, &(0x7f0000000200)={@align=0x2, {0x205, 0x9, 0x2, 0xf}}, 0x2, &(0x7f0000000240)={@_ha_fsid}, &(0x7f00000001c0)=0x10000}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000040)) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="279ada8271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x21, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) ppoll(&(0x7f0000000300)=[{r3, 0x81}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c200000000080045030020000000000037907800000000ffffffff0000883e000c9078010700000000000000"], 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='veth1\x00'}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @dev}, &(0x7f0000000040)=0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x27}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2d09}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x20000084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYBLOB="91ff11f5b2d838936fa9febc95dfd3839735daf89b575304083812614dfa70449f9f7758efc89de85bd2b18785cc1add0282a6dce73b5c87e7c93d1f0eabcb00b9a7bd215921844cae715ccb8f30d201c1e1694bca51b61b9fdc64fbebd83b236d5fbe5b5e34853264c5af1ab36907481d1923a42ce21e0877ae0ba09cc3561cf1cb55e3cb5e3b786d137577a233981b2cc9ba8c54e6f7f73418b0d6ce00289a3527dfcea5433dad30684693a5a0712a940f3f6db7e7dff437403eca6da9aadfdcbee49fde6aa14764a85dc30797d03203eaf134", @ANYBLOB="000000e7ff05000014003500626f6e643000000000000000000004000a0001"], 0x40}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r6 = accept4(r1, 0x0, 0x0, 0x800) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000780)={0x0, 0x226, 0xffffffff, 0x1323, 0xe, 0xdf0, 0x4, 0x10000, {0x0, @in6={{0xa, 0x4e21, 0x7, @loopback, 0x9}}, 0x80000001, 0x4b, 0x7fffffff, 0x2, 0x3}}, &(0x7f0000000840)=0xb0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000180)={0x0, 0x8000}, 0x8) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000380)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x24, {0x2, 0x4e21, @broadcast}, 'wg2\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) 2m26.162385121s ago: executing program 4 (id=1977): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000007540), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000007580)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40080) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_IFALIAS={0x14, 0x14, 'vlan1\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x3c}}, 0x0) 2m25.977380305s ago: executing program 4 (id=1980): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000007c0)='t', 0x1}], 0x1) 2m10.566110229s ago: executing program 33 (id=1980): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000007c0)='t', 0x1}], 0x1) 1m48.551502567s ago: executing program 3 (id=2444): syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x1c, 0x2}]}}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x2, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @empty}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3d}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x40) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000004, 0x1010, r2, 0x12504000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0xa3280000) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r3, 0x0, 0x12, 0x0, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000078000100005332d8f200000007000000"], 0x28}, 0x1, 0x0, 0x0, 0x44090}, 0x8040) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x2}], @IFLA_VTI_LOCAL={0x8, 0x4, @remote}]}}}]}, 0x40}, 0x1, 0x2000000000000000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x2c}}, 0x20044814) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000002c0)=0x8000000000000000, 0x4) 1m47.818469037s ago: executing program 3 (id=2455): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x5}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x3001029}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=@delqdisc={0x14c, 0x25, 0x20, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff3, 0xfff3}, {0x3, 0xffff}, {0x7, 0x5}}, [@q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x16}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x11}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd51}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfff8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x980}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2c}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfffb}]}}, @q_dsmark={{0xb}, {0x44, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd35}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x28}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7707}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x2}, 0x4000841) (async, rerun: 32) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) (rerun: 32) 1m47.636749514s ago: executing program 3 (id=2460): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) connect$rxrpc(r1, &(0x7f00000003c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) socketpair(0x5, 0x80000, 0x10001, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, &(0x7f0000000740)={0x67446698, 0x3, 0x1, 0x0, 0x1, "00660d5ea889a138a0802649e1bfb8f8179cf17aa0cfa6b54586331559d761eb"}, 0x30) recvmmsg(r3, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000008c0)=""/36, 0x24}, {&(0x7f0000000900)=""/203, 0xcb}], 0x2}, 0x8}], 0x1, 0x10000, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r6, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r6, 0xaa0f4000) mmap(&(0x7f0000362000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0xfffff000) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000100)={0x7, &(0x7f00000000c0)=[{0x5, 0x1, 0xd, 0x3}, {0x1, 0x9, 0x7}, {0x400, 0xf, 0x8, 0xcd}, {0x8, 0xf, 0x40, 0xfff}, {0x0, 0x5, 0x10}, {0x3, 0xc2, 0xac}, {0x2, 0xa, 0x3, 0xffff}]}) 1m46.671140111s ago: executing program 3 (id=2478): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4a61, 0x2, @loopback, 0xaa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "8aee8aad3300", "000000dfffffff00", '\x00\t\x00', "2300ff0400"}, 0x28) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r3, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendto$packet(r1, &(0x7f0000000640)="05", 0x1, 0xc855, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x8, 0x6, @random="842c4c45bc33"}, 0x14) r5 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x97}], 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) 1m46.495562652s ago: executing program 3 (id=2481): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000600)=@get={0x1, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xff, 0xffffff00], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0xbe75}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x162a0916, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'dvmrp0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3, 0x80}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 1m46.247191883s ago: executing program 3 (id=2483): syz_emit_ethernet(0x62, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000011aaab7107675d6801d810c29d003ddb09ee450875150a5f42144203f7a18527225c171e72eb8a3a38b64545273464e1a7f93b6eb318049036429a9790dc5bbbb65a5856cfc396057784768130d700000000000000"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086"], 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=0x1, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@delchain={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0xfff2, 0xffff}, {0x9, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x4000080) shutdown(0xffffffffffffffff, 0x1) syz_emit_ethernet(0x62, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000011aaab7107675d6801d810c29d003ddb09ee450875150a5f42144203f7a18527225c171e72eb8a3a38b64545273464e1a7f93b6eb318049036429a9790dc5bbbb65a5856cfc396057784768130d700000000000000"], 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c) (async) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086"], 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x20000328) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=0x1, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@delchain={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0xfff2, 0xffff}, {0x9, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x4000080) (async) shutdown(0xffffffffffffffff, 0x1) (async) 1m31.222617137s ago: executing program 34 (id=2483): syz_emit_ethernet(0x62, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000011aaab7107675d6801d810c29d003ddb09ee450875150a5f42144203f7a18527225c171e72eb8a3a38b64545273464e1a7f93b6eb318049036429a9790dc5bbbb65a5856cfc396057784768130d700000000000000"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086"], 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=0x1, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@delchain={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0xfff2, 0xffff}, {0x9, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x4000080) shutdown(0xffffffffffffffff, 0x1) syz_emit_ethernet(0x62, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000011aaab7107675d6801d810c29d003ddb09ee450875150a5f42144203f7a18527225c171e72eb8a3a38b64545273464e1a7f93b6eb318049036429a9790dc5bbbb65a5856cfc396057784768130d700000000000000"], 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c) (async) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086"], 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x20000328) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=0x1, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@delchain={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0xfff2, 0xffff}, {0x9, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x4000080) (async) shutdown(0xffffffffffffffff, 0x1) (async) 2.383540453s ago: executing program 6 (id=3527): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001480)=ANY=[@ANYBLOB="580000000206010200000000000000000005000100070000000900020073797a300000000005000500020000000c0007800500150001000000050004000000000011000300686173683a6e65742c6e657400000000168ec5df60d883fc5fca69b6f252885b82592094ecb4ebb174276567d5733f553d808bcb2acd40b509fb29d4ff1e299639a0046970e71116808d3e50"], 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) syz_emit_ethernet(0x56, &(0x7f0000001400)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60170100003f773943e9b44afc46059fc96e202b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa890000000000000000000000001890780400"/99], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f0000001780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0xfffffe66, 0x10, &(0x7f0000000000)={0x0, 0xfffffffd, 0x0, 0x4}, 0xec}, 0x48) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000040)="78db96989a54ea55bf519dd565f9e90718ec72a4bcf0ba1bf98b604809a740d51141652ed7372273cc466d4411", 0x2d, 0x8, &(0x7f0000000d40)={0x11, 0x1c, r3, 0x1, 0x4, 0x6, @broadcast}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r4, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000003c0)=""/234, 0xea}, {&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000840)=""/165, 0xa5}, {&(0x7f0000000740)=""/232, 0xe8}, {&(0x7f00000072c0)=""/4108, 0x100c}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000b80)=""/209, 0xd1}, {&(0x7f0000000c80)=""/154, 0x9a}, {&(0x7f0000000e80)=""/103, 0x67}], 0x9}, 0x70004}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x100, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000c80)={{0x0, 0x1, 0x5, 0xffffffff, 0x84, 0x7fffffff, 0x69, 0xf54, 0xffffdf43, 0x14f17c73, 0x9, 0xfffffffffffffff9, 0x3, 0x7, 0xfffffffffffffbff}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x1010, r4, 0x8eb0e000) 2.379089242s ago: executing program 6 (id=3535): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xff}}, [@tmpl={0x104, 0x5, [{{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in6=@empty, 0x3501, 0x1, 0x0, 0x3b, 0x83, 0x5, 0x7}, {{@in6=@local, 0x4d6, 0x3c}, 0xa, @in6=@private1, 0x3502, 0x2, 0x0, 0x7, 0x7f, 0x0, 0x4}, {{@in=@multicast1, 0x4d5, 0x6c}, 0x2, @in6=@empty, 0x3507, 0x4, 0x3, 0x3, 0x4, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010100, 0x3502, 0x5, 0x0, 0xd1, 0xe, 0x47b, 0x3}]}]}, 0x1bc}}, 0x4000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x2, 0x4}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e) (async) connect$pppl2tp(r3, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e) ioctl$PPPIOCSFLAGS(r3, 0x40047459, 0x0) (async) ioctl$PPPIOCSFLAGS(r3, 0x40047459, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 2.179574746s ago: executing program 6 (id=3537): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 2.167974182s ago: executing program 1 (id=3538): syz_emit_ethernet(0x4a, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000140000000000339078ac1414bbac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac00000090618112e60b7686cfd58954605c802acf9f965fe3990000"], 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff02000100000e1208000f0100810401a80016ea1f000b40032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 2.045249372s ago: executing program 6 (id=3541): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvtap0\x00'}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1405c891) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x20004040}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="34010000", @ANYRES16=r3, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 1.91562599s ago: executing program 2 (id=3543): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4007b4f6e9b00e004770b000000000000000000000500000000000000950000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 1.915297779s ago: executing program 1 (id=3544): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x4008804) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000031000000760000000000000027000000000004009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.914610139s ago: executing program 7 (id=3545): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3, 0x1000000}, 0x10) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x30) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) unshare(0x400) r5 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0xd, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000001c0)={0xf0}, 0x8) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r6) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000226bd7000fedbdf250500000005001400aaa85bdbf3daa1b9e61c2242fe080007000000010005d89259cc10cbeb8269c8b78fd96a7600001008000c"], 0x34}}, 0x0) 1.775714435s ago: executing program 2 (id=3547): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0xffff, 0x10}, {0x2, 0x35428abdcd796c32}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x1, 0x5, 0x2418}, 0x15}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x6) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90) sendmmsg$inet(r4, &(0x7f0000001c40)=[{{&(0x7f0000000280)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000480)="d1", 0x1}], 0x1}}], 0x1, 0x20048040) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[], 0x14bc}, 0x1, 0x0, 0x0, 0x4a0c4}, 0x10) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000040c0)={&(0x7f00000004c0)=@ethernet={0x300, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000002d00)="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", 0x1000}], 0x1, &(0x7f0000003d40)=[{0x90, 0x112, 0x800, "10691d2fbfd889fc6a5ca42b5b6d415489c6ca97a5dc213220cc20fe060dc6b6e851b407aa43c5d5f48b038719c2e0f74878d2d1d46c8e1b12d79dc8a701a961dcae5d16ba55ff16788931d97cc092deeca298c424b4ce40a9c53a26a68235877e998be877efc5de7d065fdf193053f465fd801aa8ef3f809f9e"}, {0xf0, 0x0, 0x4, "e6e9e1e822ba203713b4fd2214ca4133117a7691e03dd4c55deb9d1a9129034ca1c49aa6a23f8ddd5c225510a272ba81dcc5f58b19a3f0492a93577af98780667ebb89d3ea38e71b802d7ed706c68b2a5202e6e082c3d20796933418169d0419f7fe8424eadc3d7af692b99e1de512c5d469cd7d717293121dc5ccfe81fec0e51a6a904ab9f55482add6ef174dfeb667c0018d5793588a742ed8e6fc45157052aba43cd19dbc62e861523d525f6a8c8eb7794c6ef660de1e439f1ac7788f1a58d24e75a614b907ec6c5d639dc8a3c4863ee42c67974abfd33757dc982fd1875f"}, {0xe0, 0x29, 0x8, "e6a5ccdc47abf6d1e279f7b5653742d971ddd988de666c008424e6747f021eea1c435624ab1be1414c30bc9c6af8a4f658403a00020f0f617afb5958941e71aef78d4c201fe0a0e36bc358bc2a61b70450c6e89f9c9833f2b089d69611ae6a445bcd2eb7470cb1c25ff0008fc5ff2de75f55547dfc6af904ce9401dc663c5898703835109e38f493e04c6f59398842cfc624fd029e6b476e0293a6b51d5e00334a3f4bbe8fc1050341ce0efb9a8972e55942397e099da0763aaed1b8697b9150b94b2a23bc0a31c17b70e27a52f5"}, {0xe8, 0x107, 0x8, "8e31b0a90fb15c2554e2da34f76dd81e0dffb39db558b360d77307e5d3845ec7e096c33c751b4178ac665efa692d3bad64134a2c9ea8dd4885cff781e3f1efbca6d705fa3c7ef923d0b955ac59b2d2fb1c96fc843c2703c84bf8f1b43b6670e157c4baed76e7b937d444e2d3c427c4dea124c1937f3ba0a6357526d80896d066c2e8c9b79c44920bf8b6c368ba458873725027991264b1e935d959f5972ef593ab81aa20c6d9b32a09741f96b00de57096aed1d5a1c427f6b30261385c40fc8f39838cfd3796aa98e06897b7837b313cf91b3796ff47f158"}], 0x348}, 0x24004000) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r2, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00203c001c00244000ff1100000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x10, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$int_in(r6, 0x5421, &(0x7f0000000400)=0x6) 1.651519724s ago: executing program 1 (id=3548): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x3, @private1, 0x5}, 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x30, r4, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r1) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x80, r7, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x5243b1da2ba56927}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x80}, 0x1, 0x0, 0x0, 0x810}, 0x2400c014) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x3, @private1, 0x5}, 0x1c) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x30, r4, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r1) (async) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x80, r7, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x5243b1da2ba56927}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x80}, 0x1, 0x0, 0x0, 0x810}, 0x2400c014) (async) 1.645748023s ago: executing program 7 (id=3549): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000e5000000007910480000000000c30000000000001e9500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0x1, &(0x7f0000000080)="1480e237198cfd42233da1ae3678f460d03b5bbd0774c6cc98f971444f5e2af84b85e8b1e4e65690a8a27457243a9ac4e82e5acfc2a0", &(0x7f00000000c0)=""/111}, 0x20) 1.454200114s ago: executing program 7 (id=3551): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) 1.355482358s ago: executing program 1 (id=3552): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x3, 0xce, "1b25a96355c1e7a3b70a2db804f86e84ec9ac3bf11e4cc194179cfa086528f31f22fde71657e40bfe3ca25609f4da19d45bec14f91bdbc1cfb37ce89f47c344a3050e36e3dda0645d5e6af59a676c4274c88c590cb8cc1a17d55323f8f6357cb9f932a1bc7efeb50575994e9133b582ef5c4b3618ae4b85853825c9c0c41af74a08f129ecc540925772bab82b583ba120cab44e74fd54abc5bb95a1cc914a4d4d4d56b34a583be6826e8f468e11ce0989ff5f868fa5b3ce1ab9ba18c4d814cc6fe5dbb3fcf0ceddfcf7d41d322c2"}}) write(r0, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) 1.336523485s ago: executing program 2 (id=3553): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00010000081000001c0012800100676500000c00024f59e727800400e700000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)={0x2, 'pim6reg1\x00', {0x7}, 0xfffc}) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.150991607s ago: executing program 1 (id=3555): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000040)=0x1c, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000003c0)) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f0000000380)={&(0x7f0000000400)=[{0x100000005, 0x9, 0x1, 0x968e, 0xfff}, {0x6009, 0x4, 0x6e, 0x4, 0x2}, {0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x1, 0x9}, {0x8, 0x1, 0x7b, 0xab6, 0x10}], 0x4, 0x28, 0x42d7, 0x40}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000100)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x10004}}, 0x20}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) ioctl$int_out(r1, 0x5460, &(0x7f00000000c0)) 1.108147266s ago: executing program 5 (id=3556): r0 = socket(0x40000000015, 0x5, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000d00)="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", 0x33f}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) poll(0x0, 0x0, 0x9) 1.043235091s ago: executing program 7 (id=3557): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = socket(0x10, 0x803, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}], 0x1}, 0x3f}], 0x1, 0x60, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x24, 0x8, 0x4, 0x1ff, 0x0, 0x1, 0x0, 0x6, 0x7, 0x0, 0xa, 0x0, 0x0, 0x8, 0x0, 0x0, [0x0, 0x2]}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x16, &(0x7f0000000040)=ANY=[@ANYRES64], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) 960.152518ms ago: executing program 2 (id=3558): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16, @ANYBLOB="00000000000000000000000000000000000000000000000000000000f7", @ANYRESOCT], 0x50) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000008000000000000000000000300000000010000000300000002000000020000000000001008"], 0x0, 0x74, 0x0, 0x1, 0x8}, 0x28) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x20) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011809ed61b77d9f16a96c594a1961ed189d63c3391c4854d66a1452ed6b21920c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b7120f9b5cb852eaa3c6ad1b9be"], 0xb4}, 0x1, 0x0, 0x0, 0x20000021}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendmsg$inet(r4, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000026c0)=[@ip_pktinfo={{0x1c, 0x11a, 0x8, {0x0, @remote, @broadcast}}}], 0x20}, 0x80) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000eec9e7283a69b15a225ad53da8949e9a672f66e22eb3edb891363ded3548f2786bb8007d493f1b3d98852695082e50ea5aa78945a9cc2e39b93921af82a81d616a5cdb6825fdbf67ed7be47807af47ff079e8f9660aff97f68b888d6ec4fd23954fe2dbb6f0bb0f929fc3e1877699c94e79249460006a11a6420648e2da0b3b762d3197c1c9c2a10711aeff59aa82628a3aa1eb70996de9ed5430c396da5123c77e56f482cc29b45fe6301e860d06d1c41557773ec1088f367a0aa24328bc162a9a63d34cba036171bb44e6055ea7dd991ea7a3557087e82dfd756406729bccfd4616971b3a912e0ee189caf", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000004c0)={r1, &(0x7f0000000180)='\x00', 0x20001, &(0x7f0000000200)={@align=0x2, {0xb, 0x4, 0x6, 0x5}}, 0x7, &(0x7f0000000440), &(0x7f0000000480)=0x7}) r6 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000180)=0x7db7, 0x4) sendto$inet(r6, &(0x7f0000000340)="0f83b07ef75b4ff0f2d163c7c8a0d8fb8ab88f5b134df9055ab57dcbb68052fc319ac66954faccf67679a82789438adf3664351d952cd72c0dd8e9e7", 0x3c, 0x0, &(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x8000, 0x20, 0x9, 0x7, {{0x31, 0x4, 0x0, 0x1, 0xc4, 0x64, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100, {[@lsrr={0x83, 0x7, 0xce, [@local]}, @rr={0x7, 0xb, 0x33, [@multicast2, @empty]}, @noop, @lsrr={0x83, 0x7, 0xce, [@private=0xa010102]}, @noop, @cipso={0x86, 0x31, 0x1, [{0x2, 0xd, "ed6ba6b167cb809c399c96"}, {0x7, 0xe, "3b6711e8b93a63ed1ef8c34b"}, {0x7, 0x8, "19d851f96c8a"}, {0x5, 0x8, "0381e81bf42d"}]}, @timestamp_prespec={0x44, 0xc, 0x8e, 0x3, 0x1, [{@multicast1, 0x8}]}, @lsrr={0x83, 0xf, 0x19, [@loopback, @multicast1, @loopback]}, @cipso={0x86, 0x48, 0x3, [{0x1, 0xf, "d0d2f78f33e938390d273441de"}, {0x0, 0xb, "f0b3097f7786c6906d"}, {0x0, 0x11, "ce878ddf9ca4e29774758c12344357"}, {0x5, 0x7, "1e6d725da9"}, {0x2, 0x10, "e1ab844d9ce27ed08e35a94d0ca0"}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r0, 0x58, &(0x7f00000006c0)}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x10, 0x21, 0x7fff, 0x6, {{0x24, 0x4, 0x3, 0x10, 0x90, 0x64, 0x0, 0x6, 0x2f, 0x0, @rand_addr=0x64010101, @multicast1, {[@noop, @cipso={0x86, 0x5f, 0xffffffffffffffff, [{0x1, 0xc, "76068eee51cf66db7899"}, {0x6, 0xc, "d4c3c3afc06da40817af"}, {0x7, 0xe, "9550ac8e94f37b6f14211040"}, {0x5, 0xd, "0092a142ee92c68b601219"}, {0x3, 0xf, "73146d5afe7fce11dc83b9d00a"}, {0x2, 0x12, "74f175dc691efd4d18750e6cb9452337"}, {0x7, 0x5, "9bedc3"}]}, @end, @cipso={0x86, 0x19, 0xffffffffffffffff, [{0x6, 0x7, "6640845448"}, {0x5, 0xc, "891af46430d345272bec"}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r5, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x9e, &(0x7f0000000940)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x400040, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) r7 = socket(0x40000000000c, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@getqdisc={0x28, 0x26, 0x800, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff3}, {0x10, 0x7}, {0xb, 0x4}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x22044028}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c00)={'ip6tnl0\x00', &(0x7f0000000b80)={'ip6tnl0\x00', 0x0, 0x29, 0xf7, 0xd, 0x6, 0x2d, @empty, @remote, 0x8000, 0x40, 0xfffffffe, 0x4a1e}}) socket$nl_generic(0x10, 0x3, 0x10) 958.231042ms ago: executing program 5 (id=3559): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf25180000000e0001006e657464657673696d0000000f0002004d657464657673696d300000080003000100000008000b004e44000006001600020000000500120001000000060011000700000008000b00ff7f0000"], 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0xc156, 0x0, r0, 0xa80, '\x00', r1, r5, 0x1, 0x5, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000000003800ff7f0000320f000000000000", @ANYRES32=0x1, @ANYBLOB="0000bcd68e00"/23, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000004747d7e440155eabf729af70ebb8d4000000000000000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf25180000000e0001006e657464657673696d0000000f0002004d657464657673696d300000080003000100000008000b004e44000006001600020000000500120001000000060011000700000008000b00ff7f0000"], 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0xc156, 0x0, r0, 0xa80, '\x00', r1, r5, 0x1, 0x5, 0x3}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000000003800ff7f0000320f000000000000", @ANYRES32=0x1, @ANYBLOB="0000bcd68e00"/23, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000004747d7e440155eabf729af70ebb8d4000000000000000000"], 0x48) (async) 838.154436ms ago: executing program 6 (id=3560): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x44}, @val={0x8, 0x3, r4}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0xd}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27050200420014000600002f86dd", 0xe}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYRESHEX=r6, @ANYRES64=r6, @ANYBLOB="200000000022bddc1063529e479c4349516ec700b29b1c0012800b0001006d616373656300000c00028005000f9e1fa066933b8ae4655e87bd5756579193e0d6f13eb824fb72662aec0cc0368d0600000084ff16bc945512e6a30db2405bd7d4d7cc7153"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x808d) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r6, 0x6628) 735.468686ms ago: executing program 1 (id=3561): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x4, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "a8a1f4ca7c78a954b1c552dd0c694cfb9602293ae990ec006080f3af9c8a0daf8b6b3b8d8872515970eb87b0d439267b81c9bcb68c54e503e21e9b5bd7df8755"}}, 0x80}}, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001700)=@newtfilter={0x3d8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x3ac, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x80000000}, @TCA_U32_SEL={0x384, 0x5, {0x5, 0x4, 0x37, 0x5, 0x97, 0x1, 0x1, 0x3, [{0x0, 0x3, 0x2, 0x80}, {0x2, 0x7, 0xa3, 0x9}, {0xef4, 0x401, 0x4, 0x9}, {0x7, 0x40, 0x12af, 0x101}, {0x5, 0x6, 0x4664, 0x5}, {0x800, 0x9a83, 0x1ff, 0x4e6}, {0xfad, 0x5, 0x1, 0x9}, {0x5, 0xb9, 0x2, 0xfffffff7}, {0x2, 0x2, 0x4, 0x7}, {0x4, 0x401, 0x8, 0x2}, {0x7, 0x400, 0x2, 0x2}, {0x3, 0x0, 0x3, 0x7}, {0x9, 0x58128040, 0x5, 0xa}, {0x6, 0x0, 0x2, 0x1}, {0x7000, 0x6, 0x0, 0x4}, {0x8, 0x1, 0x1000, 0x1}, {0x6, 0x5, 0x8, 0x5}, {0x8000, 0x2980000, 0x1, 0x7}, {0x4, 0x3, 0x0, 0x2}, {0x2d, 0x401, 0x3, 0xffff0fb9}, {0x0, 0x7, 0x8, 0x1}, {0x83604ef, 0x1, 0x2, 0x5}, {0xe00, 0x3, 0x2, 0x8}, {0x1, 0xffffffff, 0x7, 0x3}, {0x7, 0x7, 0x4, 0xf}, {0x80, 0xb, 0x8000, 0xb8}, {0x0, 0x1, 0x7, 0x8}, {0xfffffffb, 0x9, 0x6, 0x1}, {0xe6a7, 0xffffffdd, 0x4, 0x3}, {0x4, 0x7f, 0x3}, {0x4, 0xfffffff8, 0x8ec, 0x7}, {0xffff9d69, 0x0, 0xe}, {0x3, 0x3, 0x80000001, 0x81}, {0x2, 0x7}, {0x7ff, 0x1, 0x3, 0x8}, {0x9, 0x6, 0x7, 0x44b}, {0x1, 0xda3, 0x2, 0x6}, {0xfffffff9, 0x9, 0x7b, 0x92}, {0x7, 0xfffffff9, 0x9, 0xb581}, {0xcd08, 0xb1f, 0x8001, 0xd}, {0x5c, 0x3, 0x7, 0xa2c}, {0x2, 0x6, 0x5, 0x3}, {0xfffffffa, 0x7, 0x10001, 0x6}, {0x8, 0x80000001}, {0x0, 0x6, 0x8, 0x5}, {0x6, 0x9, 0x1, 0x2}, {0xded, 0x8, 0x1ff, 0xfffffff9}, {0x0, 0x4, 0x6d7fffa0, 0x3}, {0x1, 0x40, 0x4, 0xf}, {0x80, 0x7, 0x34, 0x9}, {0x5, 0x1ff, 0x4, 0x2}, {0x9, 0x9, 0xe, 0x5}, {0x2, 0x10000, 0xfffffffe, 0x6}, {0x3, 0xf61c, 0x2, 0x8}, {0x7, 0x1, 0x1, 0x4}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x9}}, @TCA_U32_INDEV={0x14, 0x8, 'batadv_slave_0\x00'}]}}]}, 0x3d8}}, 0x20000000) (rerun: 64) 722.310741ms ago: executing program 7 (id=3562): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040014}, 0x20000000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000008500000056000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 646.652173ms ago: executing program 5 (id=3563): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x4, 0x7fff, 0x20e, 0x0, 0xfffffff9, 0x6, 0x4, 0x2, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={r1, 0xc}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000100)={0x2, [0x9c, 0x8000]}, 0x8) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000140)) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) r4 = accept$phonet_pipe(r3, &(0x7f00000001c0), &(0x7f0000000200)=0x10) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x200}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x64}}, 0x4004800) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000940)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f0000000440)={0x4bc, 0x0, 0x5, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0x16cb}, 0x7f, 0x40, 0xfff, 0x0, 0x5, 'syz0\x00', "8ad4ffe19194233315f7ae832762f57d9a11e539bd5016372c93f4be8b75b080", "1a3f0eaca4cfaa511369b61f35588a22be936cd76cf6da7575292bf1432ae817", [{0x0, 0x11, {0x0, 0x10}}, {0x5, 0xc80, {0x3, 0x7}}, {0x8000, 0xfff7, {0x1, 0x2}}, {0xffff, 0xa668, {0x0, 0x2}}, {0x2, 0xff, {0x2, 0x4}}, {0x200, 0xa9fa, {0x0, 0xffff}}, {0xcde, 0x0, {0x2, 0x8}}, {0x5, 0x2, {0x2, 0x5}}, {0x2, 0x101, {0x1, 0x4}}, {0x6, 0x401, {0x3, 0xbaf}}, {0x0, 0x9, {0x3}}, {0xa, 0x4000, {0x2, 0x8}}, {0x1, 0x654, {0x3, 0x4}}, {0x8, 0xfff7, {0x0, 0xd2}}, {0x0, 0x1, {0x2, 0x7}}, {0x0, 0x9, {0x3, 0xe7}}, {0x0, 0x8, {0x3, 0x4}}, {0x0, 0xb, {0x1, 0x60000000}}, {0x1, 0x5, {0x0, 0x8}}, {0x9, 0x8000, {0x0, 0x2}}, {0x7ff, 0x5, {0x1, 0xa}}, {0x7, 0x4, {0x2, 0x1000}}, {0x40, 0x40, {0x0, 0x2b94}}, {0x8001, 0x2, {0x0, 0xffffffff}}, {0x2, 0xd, {0x3}}, {0x9, 0x401, {0x0, 0x5a8b}}, {0x6, 0x1, {0x0, 0x5}}, {0x8, 0x72, {0x1, 0xdff7}}, {0x8, 0x6, {0x0, 0x10001}}, {0x3, 0x6, {0x1, 0x6}}, {0x6, 0xc44, {0x0, 0x10001}}, {0x2, 0xf1f6, {0x1, 0x9}}, {0xfffe, 0x0, {0x1, 0x7}}, {0x6, 0x9, {0x0, 0x9}}, {0x834c, 0x6, {0x1, 0x8}}, {0x5, 0x5, {0x1, 0xfffffffb}}, {0x3ff8, 0x800, {0x3, 0x7fffffff}}, {0xab4, 0x4, {0x2, 0x3ff}}, {0xb2d3, 0x1, {0x1, 0x60d}}, {0x7, 0x1, {0x1, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0x6}, 0xfc, 0x7f, 0x6, 0x4d3d, 0x22, 'syz0\x00', "5dced42c47e352aacd46584c5effeb2a4196fc5154e48a8afb8fb8897a4f550c", "ce36d32b26c74737483b16726250c8fb9f10a5cb064337fd7559135d8e2f69ef", [{0x9, 0x1, {0x0, 0x5}}, {0xfef, 0x7, {0x2, 0xffffffff}}, {0x3, 0x10c, {0x2, 0x7f}}, {0x8, 0xfff7, {0x2, 0x6}}, {0x6, 0x984, {0x1, 0x10}}, {0x401, 0x5, {0x1, 0x1}}, {0x0, 0x800, {0x3, 0x4}}, {0x98, 0x79, {0x0, 0x8001}}, {0x7, 0x7, {0x1, 0x8001}}, {0x30, 0x800, {0x2, 0x9}}, {0x7, 0x7}, {0x9, 0x9, {0x1, 0x101}}, {0x1, 0x2, {0x1, 0x1}}, {0xa, 0x3, {0x1, 0x81}}, {0x3, 0x3ff, {0x3, 0x1}}, {0xffff, 0x58, {0x1, 0x6}}, {0x0, 0xf001, {0x2}}, {0x401, 0x7, {0x2, 0x2}}, {0x0, 0x1000, {0x1, 0x3}}, {0x2, 0x7f, {0x1, 0x269}}, {0x3c, 0x76, {0x2, 0x1ff}}, {0xb3f3, 0xe, {0x2, 0x9}}, {0x0, 0x400, {0x3, 0x5}}, {0x6, 0x8001, {0x1, 0x38ae}}, {0xfffc, 0x0, {0x1, 0xfeb2}}, {0x13, 0x1, {0x0, 0x7fff}}, {0x7, 0x9, {0x2, 0x7ad0}}, {0xfffd, 0x4, {0x3, 0x1}}, {0x9, 0xea, {0x2, 0xc}}, {0x5, 0x5, {0x3, 0x5}}, {0x8, 0x2, {0x3, 0xffffffff}}, {0x4, 0x6, {0x3, 0x7}}, {0x1ff, 0xf80, {0x3, 0x7ff}}, {0x8000, 0x9, {0x1, 0x4}}, {0x3, 0x4, {0x0, 0x8}}, {0x8, 0x7, {0x0, 0x1757}}, {0x400, 0x3ff, {0x0, 0xfffffe00}}, {0x80, 0x9, {0x0, 0x1}}, {0x8, 0xc, {0x1, 0x9}}, {0x6, 0x9, {0x2, 0x8}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x488c0}, 0x4004) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x80, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004}, 0x48050) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000ac0)) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000bc0)={0x8, [0x7, 0x9, 0x7, 0x6, 0x3, 0x800, 0x101, 0x0]}, &(0x7f0000000c00)=0x14) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000c40)={r4}) sendmsg$nl_route(r7, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80809204}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)=@ipv4_delrule={0x40, 0x21, 0x0, 0x70bd26, 0x25dfdbfb, {0x2, 0x14, 0x14, 0x6, 0x71, 0x0, 0x0, 0x2, 0x10018}, [@FRA_DST={0x8, 0x1, @loopback}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e21}}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}, @FRA_FLOW={0x8, 0xb, 0x67b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x9) ioctl$NILFS_IOCTL_GET_BDESCS(r7, 0xc0186e87, &(0x7f0000000e00)={&(0x7f0000000d80)=[{0x2, 0x6, 0x0, 0x8, 0x84f}, {0x1, 0x400, 0x7, 0x3}], 0x2, 0x28, 0x3, 0xffffffffffffff7f}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000e40)={r2, 0x6, 0x8, 0x100, 0xe, 0x5}, &(0x7f0000000e80)=0x14) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000ec0)={r8, 0x6, 0x8001, 0xffffffff, 0x7fff}, 0x14) socket$igmp(0x2, 0x3, 0x2) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000001340)={&(0x7f0000000f00), 0xc, &(0x7f0000001300)={&(0x7f0000000f40)={0x3ac, 0x14, 0x200, 0x70bd28, 0x0, {0x23, 0x8d}, [@INET_DIAG_REQ_BYTECODE={0xc9, 0x1, "98a3ad65d12b34f6f554a73e747ff9b9eefd295465386eda59e496edeac6a7dcc2b6829518831cc16d5086aff4c4802b0fa8b7eb73fe15b9c5c5b5989c2345ff52c225b019c92eacb222a02d937c33ba801f740d310a9da9ec1e7a5ba742add2c6d5d69a7cfafe771059907748f827bf96bf20c3832a56eb644d33d2b391a48923a4d3798ea6c88f814d09b1f83f079ca54b2a28514476d26f463a92370a5083f7f048f3213f264e065969d2753984d3d4dc1e21464f486257b492857f1c9523bd09354d0d"}, @INET_DIAG_REQ_BYTECODE={0x2e, 0x1, "033d2f70f49d74e1b72bcfc55ae3a0dffee6520b05539b18486a365a2c5eccba70a7753cbb6f5a03f13f"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "b9e359604d0a030a60201c612927840e46d15af57b0244cf17c89756ab9d2cdaba8494bde91ed862a012f7e0cd8e2cd413325b0b1625e0a5fd8dc1a471a31cc1943411e37f"}, @INET_DIAG_REQ_BYTECODE={0xbb, 0x1, "8354ea1097d11306fed13eaca7ae659520648c356c758a0406626b2d9394cf9e8d8873d9cc74216bda0f305413890f6c3ff5e1c605b80825a86ab5bef4499731f3cfcf18df0a1c4b1ed8457195a1313fbe5c3595a2ce27b03b7763f6d4f75e5f3bf3eb3ac76bd980cff0a4d9cb231132fb95c60597ed5f2085c2f157d4d890a4f6415acfc11b5f7a782476e4954eb4e33e3a7ac75d7753939566a77610568442cb65457ecd26d78e19fce642669b53a0af7e8268f43b4d"}, @INET_DIAG_REQ_BYTECODE={0xee, 0x1, "d5a813df9e225c1f4e3c1edaa4c43565604d8b12c8a2b6f28209f90699ff5087efd9bdf7eedb0363d4b5a1cdb541023ab4db9d91e1d1c8b700c36c1c04ce83a6241c8bb70fed5621401c0adebc3fabd7e0666189843133a2187e5dcc9774eb1279da998c16b83374e0f584bef5609582f8cd3d78e76d09c6b73bc9489cc6b3e92c0d2c2dad466775fa7c8850b7136daa6848acebb89585b07c2e624b709b6a21af6b5fec717fd6c2354b5b6abc97d7030502fb08281165956eae865295c67b74471e10a90cef567ce0e686e01c81121b5802e68f5b8f8ea275ac03039cc8495d23f57d72bf87837956b7"}, @INET_DIAG_REQ_BYTECODE={0xa3, 0x1, "629bfb143bac80110531281110ed2f3588da7aeeb6d8eb3b6975d15680b195ad3124f0763653b4e29e6bd24297adfa83738557946e3fccb92fb179eda30de007b3bf9f17da8eba024a27c0a62151594ba5ea36caefad8b385f7600278b5fd175e5c0bd0f617c320f049a7d58e8c04a0bf8fcc88ab0083f79737374d9cfdb4303db1031452a4392eef975b26dddcdc33595f0ad0a0613421df91247e06d7d6b"}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000001) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000001380), &(0x7f00000013c0)=0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r7) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x68, r9, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001580)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000001600)={&(0x7f00000015c0)="d81f6232dd98081f202ea667a4", 0xd}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000040) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x30, r9, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_BSS_SELECT={0x10, 0xe3, 0x0, 0x1, {0xc, 0x0, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x5, 0x2}}]}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40841}, 0x4) syz_emit_ethernet(0x4c, &(0x7f0000001780)={@broadcast, @local, @void, {@generic={0x3, "b4c8831991aff2fb68f1829366b980d2870ac6b1dd6a601303ea50aabc993fcf1934518d38930b3c5739a28732c47bcb0e6fd6afe5a13aed1e650cd017a1"}}}, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000001800)={0x4, [0x101, 0xf42, 0xdbce, 0x7]}, &(0x7f0000001840)=0xc) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000001880)) 451.404413ms ago: executing program 5 (id=3564): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@multicast1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x35075b, 0xfffffffa}}]}, 0x104}}, 0x40000) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) 451.060376ms ago: executing program 7 (id=3565): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) recvfrom(r1, &(0x7f0000000000)=""/221, 0xdd, 0x20002, &(0x7f0000000180)=@nfc={0x27, r2, 0xffffffffffffffff, 0x3}, 0x80) ioctl$PPPIOCGCHAN(r1, 0x80047437, 0x0) 450.35834ms ago: executing program 2 (id=3566): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000080)=0x3, 0x4) socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b03feff4f11021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) (async) sendto$packet(r4, &(0x7f0000000180)="0b03feff4f11021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) r6 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) getsockopt$inet6_int(r6, 0x29, 0x10, 0x0, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000340)="4da7bf021c5c221db052cc69f4c34690c19c5d666c80ae0a88c30172aec43677383e0adf379a78e505399a8bf678c395754f63d68a4f60360149bcb7b9710d6e2998afeccaccfa46834576fdafdee1c80515f32431d73a26b1a17857db440bad449ecaa0eeae55957940704e3ed153b45ab2ce5e1d560dbbb72c8933622052c38c1dd73d648a5f48da36c3975793ca", 0x8f) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r7) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="310300000000fbdbdf250b"], 0x1c}}, 0x4000000) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22}, 0x1c) socket$netlink(0x10, 0x3, 0x4) (async) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000180)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa800135c9734f8f36d524bc987f6bac30f41007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffff07000000ff", 0x58}], 0x1) (async) writev(r9, &(0x7f0000000180)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa800135c9734f8f36d524bc987f6bac30f41007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffff07000000ff", 0x58}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}, @IFLA_EVENT={0x8, 0x2c, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 322.508284ms ago: executing program 5 (id=3567): bpf$MAP_CREATE(0x0, &(0x7f0000002d00)=@bloom_filter={0x21, 0x0, 0x0, 0x0, 0x24, 0x1, 0x8}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'pimreg\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000305000000000000000000000000bdfc94a3c52a6f494bddc4306d8b0b8dbac8cd3ac8ca42c88853d12c85cf6b5729f15e7efdccff3713c8cb82bede2f2fa75af201557b6c1691df63ac64319d33a331fc9656226a92afc7c0a0f23df28a084d38be8461a3eea42dd89989d79340fd9dad1e82ad73ca", @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170002d17028008000500", @ANYRES32=r1, @ANYBLOB="08001f00", @ANYRES32=r1, @ANYBLOB], 0x44}}, 0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x1170, 0x1398, 0x0, 0x1170, 0x2c8, 0x1398, 0x1398, 0x2c8, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@socket1={{0x28}, 0x17470f201d1ec251}, @inet=@rpfilter={{0x28}, {0xf}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x2, 0x6, 0x800}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x1, 0x0, 0x0, 0x0, 0x0, @loopback, @private0={0xfc, 0x0, '\x00', 0xfe}, @loopback, [0x0, 0x0, 0x0, 0xff], [], [0xffffff, 0x0, 0xff000000], 0x0, 0x803}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'dummy0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) socket$netlink(0x10, 0x3, 0x2) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000740)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r8, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd3, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x0, 0x0, 0x808e, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 250.215563ms ago: executing program 2 (id=3568): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller1\x00'}) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a94000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000006800048064000180090001007866726d000000005400028008000140000000040500030001000000080002"], 0xbc}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080)='-%\x00', 0x220442, &(0x7f00000000c0)={@_ha_fsid={[0x3, 0x200]}, {0x5, 0x8, 0x3, 0xffffffff}}, 0x9, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x101}) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ppoll(&(0x7f00000001c0)=[{r0}, {r7, 0x80}, {r4, 0x84}], 0x3, &(0x7f0000000240)={r5, r6+10000000}, &(0x7f0000000280)={[0x2]}, 0x8) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000f8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x240408c0) 163.685024ms ago: executing program 6 (id=3569): r0 = socket(0x40000000015, 0x5, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000d00)="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", 0x33f}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) poll(0x0, 0x0, 0x9) 0s ago: executing program 5 (id=3570): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680), 0x728a, r2}, 0x38) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x10, 0x8, 0x62cf, 0x3, {{0x5, 0x4, 0x3, 0x6, 0x14, 0x0, 0x0, 0x5, 0x4, 0x0, @private=0xa010100, @local}}}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): 0.627459][T13479] syzkaller0: entered promiscuous mode [ 250.632848][T13477] netlink: 'syz.5.2077': attribute type 26 has an invalid length. [ 250.639039][T13479] syzkaller0: entered allmulticast mode [ 250.648635][T13477] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2077'. [ 250.722518][T13480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2077'. [ 250.755171][T13469] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 250.766743][T13469] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 250.777156][T13469] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.814313][T13479] bond0: entered promiscuous mode [ 250.819705][T13479] bond_slave_0: entered promiscuous mode [ 250.841588][T13479] bond_slave_1: entered promiscuous mode [ 250.859452][T13479] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 250.929440][T13469] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 250.942282][T13469] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 250.959846][T13469] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.144791][T13469] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 251.165760][T13469] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 251.181652][T13469] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.213504][T13499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2083'. [ 251.247984][T13499] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 251.313151][T13499] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2083'. [ 251.391359][T13508] tipc: New replicast peer: 172.20.20.187 [ 251.407856][T13508] tipc: Enabled bearer , priority 10 [ 251.494154][T13512] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2086'. [ 251.504199][ T3336] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.513983][ T3336] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 251.523507][ T3336] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.532341][ T3336] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.542407][ T3336] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 251.553199][ T3336] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.586912][T13513] netlink: 336 bytes leftover after parsing attributes in process `syz.2.2087'. [ 251.589551][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.607664][ T13] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 251.625936][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.679550][T13513] bond6: entered promiscuous mode [ 251.684741][T13513] bond6: entered allmulticast mode [ 251.691630][T13513] 8021q: adding VLAN 0 to HW filter on device bond6 [ 251.719365][ T89] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.732906][ T89] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 251.742428][ T89] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.761815][T13470] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.772520][T13470] netdevsim netdevsim1 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 251.784620][T13470] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.865470][T13470] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.878064][T13470] netdevsim netdevsim1 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 251.891388][T13470] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.989769][T13470] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.004431][T13470] netdevsim netdevsim1 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 252.033772][T13470] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.085265][T13470] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.101319][T13470] netdevsim netdevsim1 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 252.114716][T13470] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.267791][T13540] syz.2.2096 (13540) used obsolete PPPIOCDETACH ioctl [ 252.541626][T13556] vti1: entered allmulticast mode [ 252.827566][ T1030] net_ratelimit: 61 callbacks suppressed [ 252.827591][ T1030] bond9: (slave bridge5): failed to get link speed/duplex [ 252.877952][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 252.916952][T13578] Unsupported ieee802154 address type: 0 [ 252.979016][ T13] bond9: (slave bridge5): failed to get link speed/duplex [ 253.016372][ T1012] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 253.112997][ T3336] bond9: (slave bridge5): failed to get link speed/duplex [ 253.147525][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 253.236354][ T1012] bond9: (slave bridge5): failed to get link speed/duplex [ 253.286554][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 253.378233][ T35] bond9: (slave bridge5): failed to get link speed/duplex [ 253.407816][ T1012] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 253.440970][T13616] syzkaller0: entered promiscuous mode [ 253.446775][T13616] syzkaller0: entered allmulticast mode [ 253.454876][T13616] netlink: 'syz.5.2114': attribute type 1 has an invalid length. [ 253.629935][T13623] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 253.637293][T13623] IPv6: NLM_F_CREATE should be set when creating new route [ 253.644541][T13623] IPv6: NLM_F_CREATE should be set when creating new route [ 253.656375][T13623] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 253.729645][T13623] syzkaller0: entered promiscuous mode [ 253.739213][T13623] syzkaller0: entered allmulticast mode [ 253.758203][T13623] netem: change failed [ 254.469845][T13665] netlink: 'syz.2.2123': attribute type 6 has an invalid length. [ 254.495590][ T1012] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.504822][ T1012] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 254.515130][ T1012] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.651642][ T3336] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.662657][ T3336] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 254.693920][ T3336] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.777231][ T1030] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.797097][ T1030] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 254.822576][ T1030] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.966724][ T1012] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.980084][ T1012] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 255.001551][ T1012] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.252042][T13702] syzkaller0: entered promiscuous mode [ 255.259395][T13702] syzkaller0: entered allmulticast mode [ 255.526602][T13718] __nla_validate_parse: 12 callbacks suppressed [ 255.526619][T13718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2137'. [ 255.567801][T13678] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 255.578966][T13678] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 255.670043][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.679613][T13678] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 255.699032][T13678] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 255.750138][T13678] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 255.764978][T13678] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 255.822917][T13678] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 255.852624][T13678] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 256.308248][T13750] bond2: entered promiscuous mode [ 256.313500][T13750] bond2: entered allmulticast mode [ 256.319344][T13750] 8021q: adding VLAN 0 to HW filter on device bond2 [ 256.370282][T13678] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 256.381978][T13678] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 256.519649][T13769] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2149'. [ 256.617382][T13772] lo speed is unknown, defaulting to 1000 [ 256.679173][T13772] lo speed is unknown, defaulting to 1000 [ 256.693115][T13777] »»»»»»: renamed from lo (while UP) [ 256.812470][T13772] »»»»»» speed is unknown, defaulting to 1000 [ 256.893347][T13772] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 256.965394][T13772] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 257.021744][T13772] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 257.153054][T13772] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 257.229466][T13772] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 259.459440][ T3336] net_ratelimit: 43 callbacks suppressed [ 259.459458][ T3336] bond9: (slave bridge5): failed to get link speed/duplex [ 259.484319][T13772] »»»»»» speed is unknown, defaulting to 1000 [ 259.516884][ T3336] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 259.543606][T13772] »»»»»» speed is unknown, defaulting to 1000 [ 259.584065][T13772] »»»»»» speed is unknown, defaulting to 1000 [ 259.616276][ T3336] bond9: (slave bridge5): failed to get link speed/duplex [ 259.677395][T13772] »»»»»» speed is unknown, defaulting to 1000 [ 259.696570][ T3336] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 259.722639][T13772] »»»»»» speed is unknown, defaulting to 1000 [ 259.755316][T13772] »»»»»» speed is unknown, defaulting to 1000 [ 259.756195][ T35] bond9: (slave bridge5): failed to get link speed/duplex [ 259.859086][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 259.896189][ T35] bond9: (slave bridge5): failed to get link speed/duplex [ 259.912644][ T5633] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 259.925147][ T5633] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 259.934473][T13848] openvswitch: netlink: IP tunnel dst address not specified [ 259.949649][ T5633] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 259.972258][ T5633] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 259.981785][ T5633] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 259.986704][ T1012] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 260.029293][ T5637] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 260.038502][ T1012] bond9: (slave bridge5): failed to get link speed/duplex [ 260.062466][ T5637] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 260.071944][ T5637] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 260.085511][ T5637] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 260.098732][ T5637] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 260.111691][T13856] netlink: 'syz.3.2158': attribute type 1 has an invalid length. [ 260.219564][T13855] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2159'. [ 260.260617][T13863] netlink: 'syz.3.2158': attribute type 27 has an invalid length. [ 260.285804][T13863] netlink: 'syz.3.2158': attribute type 4 has an invalid length. [ 260.314216][T13863] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2158'. [ 260.811818][T13893] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2163'. [ 260.841966][T13893] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2163'. [ 260.993722][T13896] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 261.365331][T13929] netlink: 'syz.1.2166': attribute type 1 has an invalid length. [ 261.467795][T13929] 8021q: adding VLAN 0 to HW filter on device bond5 [ 261.582845][T13843] »»»»»» speed is unknown, defaulting to 1000 [ 261.734646][T13949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.146454][ T5633] Bluetooth: hci6: command tx timeout [ 262.275729][T13979] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2179'. [ 262.508012][T13997] netlink: 216 bytes leftover after parsing attributes in process `syz.5.2183'. [ 262.520328][T13997] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2183'. [ 262.556972][T13998] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2184'. [ 262.602781][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2184'. [ 262.639056][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2184'. [ 262.968216][T14024] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2188'. [ 262.995179][T14028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2190'. [ 263.011563][T13843] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.037874][T13843] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.057567][T13843] bridge_slave_0: entered allmulticast mode [ 263.078957][T13843] bridge_slave_0: entered promiscuous mode [ 263.159705][T13843] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.203408][T13843] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.245706][T13843] bridge_slave_1: entered allmulticast mode [ 263.291619][T13843] bridge_slave_1: entered promiscuous mode [ 263.395614][T13843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.432321][T13843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.545827][T13843] team0: Port device team_slave_0 added [ 263.582674][T13843] team0: Port device team_slave_1 added [ 263.785329][T13843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.813745][T13843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.868204][T13843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.908706][T13843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.937820][T13843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.009470][T13843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.114912][T14088] bond7 (unregistering): Released all slaves [ 264.227795][ T5633] Bluetooth: hci6: command tx timeout [ 264.363951][T13843] hsr_slave_0: entered promiscuous mode [ 264.392625][T13843] hsr_slave_1: entered promiscuous mode [ 264.419876][T13843] debugfs: 'hsr0' already exists in 'hsr' [ 264.425659][T13843] Cannot create hsr debugfs directory [ 264.966272][ T157] net_ratelimit: 38 callbacks suppressed [ 264.966289][ T157] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 265.017034][ T1030] bond9: (slave bridge5): failed to get link speed/duplex [ 265.176245][ T157] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 265.648568][ T157] bond9: (slave bridge5): failed to get link speed/duplex [ 265.678668][ T157] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 265.749755][T14183] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 265.823552][ T1126] bond9: (slave bridge5): failed to get link speed/duplex [ 265.843303][T14193] __nla_validate_parse: 7 callbacks suppressed [ 265.843320][T14193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2220'. [ 265.858340][ T1126] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 265.890134][T13843] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 265.922105][T14196] x_tables: duplicate underflow at hook 1 [ 265.938297][T13843] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 265.971735][T13843] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 266.019824][T13843] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 266.121351][T14193] bond7: Invalid ad_actor_system MAC address. [ 266.156843][T14193] bond7: option ad_actor_system: invalid value (1) [ 266.193921][T14193] bond7 (unregistering): Released all slaves [ 266.271741][T14200] kthread_run failed with err -4 [ 266.298156][T13843] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 266.306507][ T5633] Bluetooth: hci6: command tx timeout [ 266.333630][T13843] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 266.379682][T13843] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 266.432712][T13843] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 266.582729][T14233] syzkaller0: entered promiscuous mode [ 266.599922][T14233] syzkaller0: entered allmulticast mode [ 266.732848][T14239] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 266.747681][T14239] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 266.856575][ T13] bond9: (slave bridge5): failed to get link speed/duplex [ 266.874843][T14245] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.935053][T14245] macvtap1: entered promiscuous mode [ 266.944600][T14245] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 266.960866][T14245] team0: Device macvtap1 is already an upper device of the team interface [ 267.137997][T14261] netlink: 512 bytes leftover after parsing attributes in process `syz.3.2234'. [ 267.191081][T14257] bond6: (slave bond_slave_1): Device is not our slave [ 267.219375][T14257] bond6: option active_slave: invalid value (bond_slave_1) [ 267.254732][T14257] bond6 (unregistering): Released all slaves [ 267.407301][ T1030] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 267.463085][T13843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.523486][T14282] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2239'. [ 267.578079][T14284] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2239'. [ 267.602847][T13843] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.631853][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.639084][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.713094][ T3353] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.720298][ T3353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.764336][T14297] netlink: 64973 bytes leftover after parsing attributes in process `syz.1.2243'. [ 267.915883][T14305] macvlan3: entered promiscuous mode [ 267.931501][T14305] macvlan3: entered allmulticast mode [ 268.248915][T14322] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2245'. [ 268.289817][T14322] netlink: 13 bytes leftover after parsing attributes in process `syz.5.2245'. [ 268.385450][T14332] bond0: option miimon: invalid value (18446744071829782528) [ 268.394039][ T5633] Bluetooth: hci6: command tx timeout [ 268.406431][T14332] bond0: option miimon: allowed values 0 - 2147483647 [ 268.430818][T14322] veth3: entered promiscuous mode [ 268.583218][T14343] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2250'. [ 269.237140][T14391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2259'. [ 269.258550][T13843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.588830][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2265'. [ 269.959119][T14443] netlink: 'syz.2.2270': attribute type 1 has an invalid length. [ 269.985422][T14443] netlink: 'syz.2.2270': attribute type 1 has an invalid length. [ 270.020688][T14443] netlink: 'syz.2.2270': attribute type 8 has an invalid length. [ 270.051523][T14454] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 270.074957][T14448] bond3: (slave bond_slave_1): Device is not bonding slave [ 270.082378][T14448] bond3: option active_slave: invalid value (bond_slave_1) [ 270.093446][T14448] bond3 (unregistering): Released all slaves [ 270.183998][T13843] veth0_vlan: entered promiscuous mode [ 270.223465][T14464] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 270.244063][T13843] veth1_vlan: entered promiscuous mode [ 270.266525][ T58] net_ratelimit: 34 callbacks suppressed [ 270.266540][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 270.417683][ T1126] bond9: (slave bridge5): failed to get link speed/duplex [ 270.437133][ T1126] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 270.452327][T13843] veth0_macvtap: entered promiscuous mode [ 270.491931][T13843] veth1_macvtap: entered promiscuous mode [ 270.575180][T13843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.639283][T13843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.705777][ T1030] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.736103][ T3353] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 270.761988][ T1030] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.814750][ T1030] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.846392][ T1030] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.870982][ T1030] bond9: (slave bridge5): failed to get link speed/duplex [ 270.991246][T14509] openvswitch: netlink: IP tunnel attribute has 40 unknown bytes. [ 271.007005][ T1126] bond9: (slave bridge5): failed to get link speed/duplex [ 271.015655][T14509] __nla_validate_parse: 9 callbacks suppressed [ 271.015683][T14509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2287'. [ 271.138681][T14509] 8021q: adding VLAN 0 to HW filter on device bond9 [ 271.191221][T14513] ipvlan2: entered allmulticast mode [ 271.196762][T14513] bond9: entered allmulticast mode [ 271.204159][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.217928][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.243245][T14517] bond9: (slave ipip1): refused to change device type [ 271.290040][ T1030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.298579][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 271.310182][T14522] netlink: 240 bytes leftover after parsing attributes in process `syz.5.2289'. [ 271.327956][ T1030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.347094][ T58] bond9: (slave bridge5): failed to get link speed/duplex [ 271.381632][ T29] audit: type=1804 audit(1779043767.635:4): pid=14520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2289" name="/newroot/252/cgroup.controllers" dev="tmpfs" ino=1300 res=1 errno=0 [ 271.419935][ T29] audit: type=1800 audit(1779043767.645:5): pid=14520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2289" name="cgroup.controllers" dev="tmpfs" ino=1300 res=0 errno=0 [ 271.447315][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 271.644857][T14539] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2153'. [ 272.145234][T14535] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2293'. [ 272.171142][T14535] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2293'. [ 272.484812][T14583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2303'. [ 272.514684][T14588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2303'. [ 272.753156][T14598] netlink: 'syz.6.2307': attribute type 1 has an invalid length. [ 272.858213][T14598] vlan2: entered allmulticast mode [ 272.894156][T14598] dummy0: entered allmulticast mode [ 272.982555][T14613] netlink: 'syz.2.2312': attribute type 1 has an invalid length. [ 273.011142][T14613] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 273.144394][T14622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2313'. [ 273.283000][T14622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2313'. [ 273.444586][T14622] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2313'. [ 273.846667][T14667] lo speed is unknown, defaulting to 1000 [ 273.875192][T14667] lo speed is unknown, defaulting to 1000 [ 273.939966][T14667] lo speed is unknown, defaulting to 1000 [ 273.963055][T14667] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 273.987118][T14667] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 274.030245][T14667] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 274.104273][T14677] netlink: 'syz.6.2332': attribute type 4 has an invalid length. [ 274.112034][T14667] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 274.159997][T14680] netlink: 'syz.6.2332': attribute type 4 has an invalid length. [ 274.248783][T14667] lo speed is unknown, defaulting to 1000 [ 274.281513][T14667] lo speed is unknown, defaulting to 1000 [ 274.331448][T14667] lo speed is unknown, defaulting to 1000 [ 274.391616][T14667] lo speed is unknown, defaulting to 1000 [ 274.427017][T14667] lo speed is unknown, defaulting to 1000 [ 274.464350][T14667] lo speed is unknown, defaulting to 1000 [ 274.527972][T14667] lo speed is unknown, defaulting to 1000 [ 274.772332][T14707] bond7: (slave bridge9): Enslaving as an active interface with an up link [ 274.790681][T14707] macvlan2: entered promiscuous mode [ 274.796990][T14707] macvlan2: entered allmulticast mode [ 274.803170][T14707] bond7: entered promiscuous mode [ 274.812614][T14707] bridge9: entered promiscuous mode [ 274.819022][T14707] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 274.828949][T14707] bond7: left promiscuous mode [ 274.833858][T14707] bridge9: left promiscuous mode [ 275.317344][ T58] net_ratelimit: 117 callbacks suppressed [ 275.317362][ T58] bond9: (slave bridge5): failed to get link speed/duplex [ 275.386957][ T1012] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 275.425686][T14741] netlink: 'syz.5.2351': attribute type 29 has an invalid length. [ 275.472521][ T58] bond9: (slave bridge5): failed to get link speed/duplex [ 275.494957][T14736] netlink: 'syz.3.2349': attribute type 10 has an invalid length. [ 275.513773][ T1030] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 275.574007][T14736] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.583873][T14744] netlink: 'syz.5.2352': attribute type 2 has an invalid length. [ 275.604795][T14736] team0: entered promiscuous mode [ 275.637456][T14736] team_slave_0: entered promiscuous mode [ 275.661411][T14736] team_slave_1: entered promiscuous mode [ 275.726493][ T1030] bond9: (slave bridge5): failed to get link speed/duplex [ 275.766386][ T1012] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 275.880409][ T58] bond9: (slave bridge5): failed to get link speed/duplex [ 275.917518][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 276.016121][ T1030] bond9: (slave bridge5): failed to get link speed/duplex [ 276.046285][ T157] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 276.205429][T14766] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 276.302074][T14770] gre2: entered promiscuous mode [ 276.303911][T14773] __nla_validate_parse: 41 callbacks suppressed [ 276.303926][T14773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2360'. [ 276.345454][T14763] syzkaller0: entered promiscuous mode [ 276.356851][T14763] syzkaller0: entered allmulticast mode [ 276.545282][T14780] netlink: 'syz.1.2363': attribute type 1 has an invalid length. [ 276.559365][T14783] netlink: 'syz.2.2364': attribute type 21 has an invalid length. [ 276.632884][T14783] IPv6: NLM_F_CREATE should be specified when creating new route [ 276.680572][T14783] netlink: 'syz.2.2364': attribute type 1 has an invalid length. [ 276.706418][T14780] 8021q: adding VLAN 0 to HW filter on device bond6 [ 276.739300][T14785] veth0_to_bond: left allmulticast mode [ 276.754870][T14785] bond3: (slave veth0_to_bond): Releasing active interface [ 276.768740][T14785] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 276.798267][T14783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2364'. [ 276.819373][T14780] macvlan3: entered promiscuous mode [ 276.847778][T14780] macvlan3: entered allmulticast mode [ 276.863147][T14780] bond6: entered promiscuous mode [ 276.877055][T14780] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 276.893050][T14780] bond6: left promiscuous mode [ 276.908057][T14795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2366'. [ 276.919320][T14801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2368'. [ 277.051138][T14806] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2371'. [ 277.084453][T14807] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2369'. [ 277.091998][T14809] »»»»»» speed is unknown, defaulting to 1000 [ 277.103355][T14809] lo speed is unknown, defaulting to 1000 [ 277.396938][T14819] ±ÿª¨úrBº“: renamed from lo [ 277.651597][T14831] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2377'. [ 278.210326][T14873] netlink: 'syz.3.2383': attribute type 2 has an invalid length. [ 278.260089][T14873] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2383'. [ 278.412648][T14881] sctp: [Deprecated]: syz.6.2388 (pid 14881) Use of int in maxseg socket option. [ 278.412648][T14881] Use struct sctp_assoc_value instead [ 279.402827][T14950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2404'. [ 279.435484][T14950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2404'. [ 279.837709][ T5756] IPVS: starting estimator thread 0... [ 279.946120][T14983] IPVS: using max 30 ests per chain, 72000 per kthread [ 279.997687][ T5633] Bluetooth: hci6: command tx timeout [ 280.357915][ T58] net_ratelimit: 54 callbacks suppressed [ 280.357931][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 280.386168][ T58] bond9: (slave bridge5): failed to get link speed/duplex [ 280.476551][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 280.506137][ T13] bond9: (slave bridge5): failed to get link speed/duplex [ 280.598843][ T3353] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 280.616282][ T3353] bond9: (slave bridge5): failed to get link speed/duplex [ 280.717245][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 280.736729][ T3353] bond9: (slave bridge5): failed to get link speed/duplex [ 280.836373][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 280.866882][ T35] bond9: (slave bridge5): failed to get link speed/duplex [ 280.927111][T15033] netlink: 'syz.6.2432': attribute type 1 has an invalid length. [ 280.979940][T15033] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.002058][T15039] team0: Port device team_slave_0 removed [ 281.011623][T15039] bond1: (slave team_slave_0): Enslaving as a backup interface with an up link [ 281.168964][T15044] netlink: 'syz.6.2436': attribute type 9 has an invalid length. [ 281.561787][T15068] netlink: 'syz.5.2441': attribute type 1 has an invalid length. [ 281.656977][T15068] bond3: (slave gretap1): making interface the new active one [ 281.683532][T15068] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 281.846810][T15092] xt_hashlimit: size too large, truncated to 1048576 [ 282.242640][T15114] __nla_validate_parse: 6 callbacks suppressed [ 282.242657][T15114] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2453'. [ 282.285655][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2454'. [ 282.286708][T15115] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2453'. [ 282.489286][T15129] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 282.522519][T15129] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 282.724246][T15144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2462'. [ 282.774684][T15147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2462'. [ 283.021376][T15164] netlink: 'syz.6.2467': attribute type 11 has an invalid length. [ 283.030027][T15166] netlink: 'syz.1.2468': attribute type 1 has an invalid length. [ 283.043520][T15164] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2467'. [ 283.071469][T15168] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2469'. [ 283.142460][T15174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2470'. [ 283.164677][T15174] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2470'. [ 283.405731][T15193] »»»»»» speed is unknown, defaulting to 1000 [ 283.433794][T15193] lo speed is unknown, defaulting to 1000 [ 283.533028][T15199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2479'. [ 283.715029][T15208] xt_hashlimit: max too large, truncated to 1048576 [ 284.377834][T15248] netlink: 'syz.5.2491': attribute type 11 has an invalid length. [ 284.398972][T15247] netlink: 'syz.5.2491': attribute type 1 has an invalid length. [ 284.525143][T15257] netlink: 'syz.6.2494': attribute type 1 has an invalid length. [ 284.794523][T15273] netlink: 'syz.6.2500': attribute type 2 has an invalid length. [ 284.817343][T15273] netlink: 'syz.6.2500': attribute type 11 has an invalid length. [ 285.097878][T15300] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 285.105581][T15297] veth0_macvtap: entered allmulticast mode [ 285.378323][T15309] sctp: [Deprecated]: syz.6.2508 (pid 15309) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.378323][T15309] Use struct sctp_sack_info instead [ 285.448049][ T58] net_ratelimit: 77 callbacks suppressed [ 285.448069][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 285.466517][ T58] bond9: (slave bridge5): failed to get link speed/duplex [ 285.566390][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 285.576777][ T58] bond9: (slave bridge5): failed to get link speed/duplex [ 285.676489][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 285.696121][ T1030] bond9: (slave bridge5): failed to get link speed/duplex [ 285.786166][ T1030] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 285.807288][ T1030] bond9: (slave bridge5): failed to get link speed/duplex [ 285.896203][ T1030] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 285.916273][ T58] bond9: (slave bridge5): failed to get link speed/duplex [ 287.886977][T15281] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 288.048347][T15317] validate_nla: 1 callbacks suppressed [ 288.048363][T15317] netlink: 'syz.5.2510': attribute type 29 has an invalid length. [ 288.083011][T15317] netlink: 'syz.5.2510': attribute type 29 has an invalid length. [ 288.155512][T15333] __nla_validate_parse: 11 callbacks suppressed [ 288.155529][T15333] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2510'. [ 288.186413][T15333] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2510'. [ 288.476142][T15353] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2520'. [ 288.957826][T15392] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2530'. [ 289.016327][T15392] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2530'. [ 289.057975][T15398] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2532'. [ 289.069055][T15398] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2532'. [ 290.030771][T15450] netlink: 'syz.5.2538': attribute type 1 has an invalid length. [ 290.115467][T15451] bond4 (unregistering): Released all slaves [ 290.242168][T15456] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 290.267823][T15456] bond4 (unregistering): Released all slaves [ 290.371013][T15450] 8021q: adding VLAN 0 to HW filter on device bond4 [ 290.399482][T15451] 8021q: adding VLAN 0 to HW filter on device bond5 [ 290.410484][T15451] bond4: (slave bond5): Enslaving as an active interface with a down link [ 290.453592][T15451] 8021q: adding VLAN 0 to HW filter on device bond6 [ 290.462827][T15451] bond4: (slave bond6): Enslaving as an active interface with a down link [ 290.479881][T15472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2541'. [ 290.519623][T15451] 8021q: adding VLAN 0 to HW filter on device bond7 [ 290.529697][T15451] bond4: (slave bond7): Enslaving as an active interface with a down link [ 290.555300][T15451] 8021q: adding VLAN 0 to HW filter on device bond8 [ 290.565383][T15451] bond4: (slave bond8): Enslaving as an active interface with a down link [ 290.599982][T15469] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 290.610228][T15472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2541'. [ 290.627054][T15469] syzkaller1: Refused to change device type [ 290.643923][T15466] syzkaller1: tun_chr_ioctl cmd 2147767517 [ 290.682113][T15451] 8021q: adding VLAN 0 to HW filter on device bond9 [ 290.712520][T15451] bond4: (slave bond9): Enslaving as an active interface with a down link [ 290.760879][T15451] 8021q: adding VLAN 0 to HW filter on device bond10 [ 290.790473][T15451] bond4: (slave bond10): Enslaving as an active interface with a down link [ 290.832776][T15451] 8021q: adding VLAN 0 to HW filter on device bond11 [ 290.844862][T15451] bond4: (slave bond11): Enslaving as an active interface with a down link [ 290.966829][ T35] net_ratelimit: 70 callbacks suppressed [ 290.966847][ T35] bond9: (slave bridge5): failed to get link speed/duplex [ 291.001146][ T3353] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 291.068409][T15492] netlink: 'syz.1.2545': attribute type 3 has an invalid length. [ 291.136651][ T58] bond9: (slave bridge5): failed to get link speed/duplex [ 291.249382][T15510] bridge2: entered promiscuous mode [ 291.267010][T15510] bridge2: entered allmulticast mode [ 291.290136][T15510] team0: Port device bridge2 added [ 291.305447][T15513] netlink: 'syz.5.2550': attribute type 1 has an invalid length. [ 291.318739][ T157] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 291.347340][T15516] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2552'. [ 291.356474][ T157] bond9: (slave bridge5): failed to get link speed/duplex [ 291.419210][T15521] block nbd5: not configured, cannot reconfigure [ 291.486565][T15518] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 291.541909][T15518] bond7 (unregistering): Released all slaves [ 291.657941][ T3353] bond9: (slave bridge5): failed to get link speed/duplex [ 291.665134][ T3353] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 291.861984][T15547] xt_hashlimit: size too large, truncated to 1048576 [ 291.877378][ T3353] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 291.892517][T15549] netlink: zone id is out of range [ 291.935701][T15549] netlink: del zone limit has 4 unknown bytes [ 292.210948][T15572] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 292.300507][T15571] bond12: (slave bond_slave_1): Device is not bonding slave [ 292.309024][T15571] bond12: option active_slave: invalid value (bond_slave_1) [ 292.322049][T15571] bond12 (unregistering): Released all slaves [ 292.366772][T15578] netlink: 'syz.2.2566': attribute type 3 has an invalid length. [ 292.741133][T15603] x_tables: unsorted entry at hook 2 [ 292.936533][T15605] syzkaller0: entered promiscuous mode [ 292.943006][T15605] syzkaller0: entered allmulticast mode [ 293.287140][T15632] IPVS: set_ctl: invalid protocol: 4 10.1.1.0:20003 [ 294.885398][T15640] netlink: 'syz.1.2578': attribute type 83 has an invalid length. [ 294.950407][T15631] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.957645][T15631] bridge0: port 2(bridge_slave_1) entered listening state [ 294.965038][T15631] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.972239][T15631] bridge0: port 1(bridge_slave_0) entered listening state [ 295.032023][T15631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.063741][ T13] bridge7: port 2(veth0_to_bond) entered blocking state [ 295.070885][ T13] bridge7: port 2(veth0_to_bond) entered forwarding state [ 295.178138][T15654] netlink: 'syz.2.2583': attribute type 1 has an invalid length. [ 295.272814][T15659] bond9: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 295.284794][T15662] netlink: 'syz.1.2586': attribute type 1 has an invalid length. [ 295.293593][T15659] bond9: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 295.312703][T15662] __nla_validate_parse: 6 callbacks suppressed [ 295.312719][T15662] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2586'. [ 295.335024][T15659] bond9: (slave ip6gre3): making interface the new active one [ 295.355636][T15667] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2586'. [ 295.369708][T15659] bond9: (slave ip6gre3): Enslaving as an active interface with an up link [ 295.495668][T15673] macvtap1: entered allmulticast mode [ 295.738754][T15692] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 295.975084][T15701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2599'. [ 296.046873][ T157] net_ratelimit: 26 callbacks suppressed [ 296.046891][ T157] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 296.097812][ T157] bond9: (slave bridge5): failed to get link speed/duplex [ 296.181462][T15709] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 296.190233][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 296.217402][ T3353] bond9: (slave bridge5): failed to get link speed/duplex [ 296.309993][T15711] netlink: 'syz.5.2602': attribute type 39 has an invalid length. [ 296.318916][ T3353] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 296.356642][ T3353] bond9: (slave bridge5): failed to get link speed/duplex [ 296.456594][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 296.460423][T15720] xt_hashlimit: size too large, truncated to 1048576 [ 296.479109][ T58] bond9: (slave bridge5): failed to get link speed/duplex [ 296.577857][T15724] bond10: entered promiscuous mode [ 296.596121][ T1030] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 296.616824][ T1126] bond9: (slave bridge5): failed to get link speed/duplex [ 296.659376][T15732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2606'. [ 296.712225][T15732] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2606'. [ 296.742331][T15724] netlink: 'syz.2.2606': attribute type 49 has an invalid length. [ 296.791011][T15732] gretap2: entered promiscuous mode [ 296.807733][T15732] gretap2: entered allmulticast mode [ 296.819869][T15737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2607'. [ 296.885518][T15742] tipc: Enabling of bearer rejected, already enabled [ 297.021457][T15748] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2613'. [ 297.052259][T15745] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2611'. [ 297.081716][T15753] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 297.144130][T15755] netlink: 'syz.6.2617': attribute type 21 has an invalid length. [ 297.166751][T15755] IPv6: NLM_F_CREATE should be specified when creating new route [ 297.191099][T15755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 297.198419][T15755] IPv6: NLM_F_CREATE should be set when creating new route [ 297.205892][T15755] IPv6: NLM_F_CREATE should be set when creating new route [ 297.208852][T15757] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2616'. [ 297.213169][T15755] IPv6: NLM_F_CREATE should be set when creating new route [ 297.243687][ T810] IPVS: starting estimator thread 0... [ 297.272999][T15761] x_tables: duplicate underflow at hook 3 [ 297.284337][T15761] netlink: 'syz.5.2618': attribute type 1 has an invalid length. [ 297.330677][T15766] netlink: 'syz.6.2621': attribute type 322 has an invalid length. [ 297.338848][T15760] IPVS: using max 32 ests per chain, 76800 per kthread [ 297.354998][T15766] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2621'. [ 297.388852][T15769] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 297.399483][T15761] 8021q: adding VLAN 0 to HW filter on device bond12 [ 297.416254][T15771] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 297.465450][T15772] bond12: (slave gretap2): making interface the new active one [ 297.479104][T15772] bond12: (slave gretap2): Enslaving as an active interface with an up link [ 297.557053][T15777] xt_CT: You must specify a L4 protocol and not use inversions on it [ 297.895418][T15802] syzkaller0: entered promiscuous mode [ 297.914830][T15802] syzkaller0: entered allmulticast mode [ 298.325849][T15817] »»»»»» speed is unknown, defaulting to 1000 [ 298.339346][T15817] lo speed is unknown, defaulting to 1000 [ 298.827615][T15840] syzkaller0: entered promiscuous mode [ 298.839394][T15840] syzkaller0: entered allmulticast mode [ 298.995951][T15834] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 299.039495][T15840] nbd: illegal input index 2958377 [ 299.070931][ T5637] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 299.085478][ T5637] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 299.096428][ T5637] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 299.105243][ T5637] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 299.113579][ T5637] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 299.489662][T15882] bond0: entered promiscuous mode [ 299.502716][T15882] bond0: left promiscuous mode [ 299.650090][T15883] : entered promiscuous mode [ 299.710305][T15856] »»»»»» speed is unknown, defaulting to 1000 [ 299.729957][T15856] lo speed is unknown, defaulting to 1000 [ 300.323835][T15916] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 300.349328][T15916] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 300.488689][T15856] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.496969][T15856] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.504228][T15856] bridge_slave_0: entered allmulticast mode [ 300.504278][T15930] __nla_validate_parse: 6 callbacks suppressed [ 300.504290][T15930] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2663'. [ 300.512800][T15856] bridge_slave_0: entered promiscuous mode [ 300.536391][T15856] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.544137][T15856] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.553392][T15856] bridge_slave_1: entered allmulticast mode [ 300.565343][T15856] bridge_slave_1: entered promiscuous mode [ 300.605688][T15937] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2663'. [ 300.695644][T15856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.751139][T15856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.820986][T15856] team0: Port device team_slave_0 added [ 300.833509][T15856] team0: Port device team_slave_1 added [ 300.904206][T15856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.924692][T15856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.956960][T15856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.973934][T15955] lo: entered promiscuous mode [ 300.979767][T15955] tunl0: entered promiscuous mode [ 300.985133][T15955] gre0: entered promiscuous mode [ 300.991145][T15955] gretap0: entered promiscuous mode [ 300.998005][T15955] erspan0: entered promiscuous mode [ 301.003720][T15955] ip_vti0: entered promiscuous mode [ 301.010516][T15950] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2667'. [ 301.022650][T15856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.038698][T15856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.073908][T15856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.151584][T15856] hsr_slave_0: entered promiscuous mode [ 301.160249][T15856] hsr_slave_1: entered promiscuous mode [ 301.167203][T15856] debugfs: 'hsr0' already exists in 'hsr' [ 301.173115][T15856] Cannot create hsr debugfs directory [ 301.197508][ T5633] Bluetooth: hci7: command tx timeout [ 301.251962][T15964] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2671'. [ 301.320622][T15964] bond13: option xmit_hash_policy: invalid value (64) [ 301.330279][T15964] bond13 (unregistering): Released all slaves [ 301.556706][ T1030] net_ratelimit: 47 callbacks suppressed [ 301.556723][ T1030] bond9: (slave bridge5): failed to get link speed/duplex [ 301.647143][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 301.681125][T15982] netlink: 'syz.2.2676': attribute type 1 has an invalid length. [ 301.746586][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 301.771659][T15982] bond11: entered promiscuous mode [ 301.774736][T15988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2676'. [ 301.777421][T15982] 8021q: adding VLAN 0 to HW filter on device bond11 [ 301.795327][ T3353] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 301.832568][T15988] bond11: entered allmulticast mode [ 301.940645][T15982] bond11: (slave bridge11): making interface the new active one [ 301.968308][T15982] bridge11: entered promiscuous mode [ 301.976397][T15982] bridge11: entered allmulticast mode [ 301.985840][T15982] bond11: (slave bridge11): Enslaving as an active interface with an up link [ 302.011580][T15856] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 302.055192][T15997] netlink: 'syz.6.2682': attribute type 1 has an invalid length. [ 302.072936][T15998] netlink: 'syz.5.2680': attribute type 3 has an invalid length. [ 302.074003][T15856] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 302.093074][T15998] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2680'. [ 302.106402][T15856] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 302.129813][T15856] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 302.157932][T16005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2681'. [ 302.178111][T16005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2681'. [ 302.208612][T15997] bond2: entered promiscuous mode [ 302.213755][T15997] bond2: entered allmulticast mode [ 302.219757][T15997] 8021q: adding VLAN 0 to HW filter on device bond2 [ 302.229292][T15856] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 302.241608][T15856] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 302.258496][T16009] netlink: 'syz.2.2683': attribute type 1 has an invalid length. [ 302.287515][T16009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2683'. [ 302.306466][ T13] bond9: (slave bridge5): failed to get link speed/duplex [ 302.338282][T15856] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 302.342545][T16004] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2683'. [ 302.366165][T15856] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 302.599548][T16030] team0: Device gtp0 is up. Set it down before adding it as a team port [ 302.746948][ T58] bond9: (slave bridge5): failed to get link speed/duplex [ 302.771136][T15856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.834079][T15856] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.849335][ T3353] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.856650][ T3353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.874486][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.881713][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.887751][T16047] netlink: 'syz.6.2694': attribute type 11 has an invalid length. [ 302.896418][ T58] bond9: (slave bridge5): failed to get link speed/duplex [ 302.976709][ T1126] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 303.023081][ T157] bond9: (slave bridge5): failed to get link speed/duplex [ 303.096484][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 303.167343][ T3353] bond9: (slave bridge5): failed to get link speed/duplex [ 303.267146][ T5633] Bluetooth: hci7: command tx timeout [ 303.710802][T16076] sctp: [Deprecated]: syz.5.2702 (pid 16076) Use of struct sctp_assoc_value in delayed_ack socket option. [ 303.710802][T16076] Use struct sctp_sack_info instead [ 303.770291][T16076] sctp: [Deprecated]: syz.5.2702 (pid 16076) Use of struct sctp_assoc_value in delayed_ack socket option. [ 303.770291][T16076] Use struct sctp_sack_info instead [ 303.805392][T16083] netlink: 'syz.2.2703': attribute type 1 has an invalid length. [ 303.940245][T16083] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 303.961807][T15856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.543639][T15856] veth0_vlan: entered promiscuous mode [ 304.561296][T16118] nbd0: detected capacity change from 0 to 63 [ 304.585383][ T5633] block nbd0: Receive control failed (result -32) [ 304.594006][T15856] veth1_vlan: entered promiscuous mode [ 304.597721][ T6222] block nbd0: Send control failed (result -32) [ 304.626419][ T6222] block nbd0: Request send failed, requeueing [ 304.649481][ T4962] block nbd0: Dead connection, failed to find a fallback [ 304.659692][ T4962] block nbd0: shutting down sockets [ 304.665358][ T4962] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 304.679188][ T4962] Buffer I/O error on dev nbd0, logical block 0, async page read [ 304.687828][ T6222] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 304.697301][ T6222] Buffer I/O error on dev nbd0, logical block 1, async page read [ 304.707565][ T6222] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 304.717249][ T6222] Buffer I/O error on dev nbd0, logical block 2, async page read [ 304.725187][ T6222] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 304.734688][ T6222] Buffer I/O error on dev nbd0, logical block 3, async page read [ 304.742713][ T6222] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 304.752344][ T6222] Buffer I/O error on dev nbd0, logical block 0, async page read [ 304.760602][ T6222] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 304.769750][ T6222] Buffer I/O error on dev nbd0, logical block 1, async page read [ 304.778434][ T6222] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 304.788090][ T6222] Buffer I/O error on dev nbd0, logical block 2, async page read [ 304.797796][ T6222] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 304.807459][ T6222] Buffer I/O error on dev nbd0, logical block 3, async page read [ 304.825859][ T6222] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 304.830548][T15856] veth0_macvtap: entered promiscuous mode [ 304.836658][ T6222] Buffer I/O error on dev nbd0, logical block 0, async page read [ 304.883237][ T6222] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 304.896984][ T6222] Buffer I/O error on dev nbd0, logical block 1, async page read [ 304.909017][ T6222] ldm_validate_partition_table(): Disk read failed. [ 304.922927][ T6222] Dev nbd0: unable to read RDB block 0 [ 304.954624][T15856] veth1_macvtap: entered promiscuous mode [ 304.963780][ T6222] nbd0: unable to read partition table [ 304.985046][ T6222] ldm_validate_partition_table(): Disk read failed. [ 305.002653][ T6222] Dev nbd0: unable to read RDB block 0 [ 305.020984][ T6222] nbd0: unable to read partition table [ 305.028522][T16139] netlink: 'syz.2.2711': attribute type 30 has an invalid length. [ 305.133994][T15856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.167247][T15856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.230494][ T1012] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.263229][ T1012] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.289758][ T1012] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.308873][ T1012] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.346430][ T5633] Bluetooth: hci7: command tx timeout [ 305.462975][T16162] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 305.617858][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.629186][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.733616][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.741875][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.984605][T16182] __nla_validate_parse: 2 callbacks suppressed [ 305.984624][T16182] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2726'. [ 306.083125][T16182] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 306.097381][T16182] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 306.293356][T16197] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2729'. [ 306.576113][ T1012] net_ratelimit: 43 callbacks suppressed [ 306.576131][ T1012] bond9: (slave bridge5): failed to get link speed/duplex [ 306.657986][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 306.658643][T16209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2734'. [ 306.699807][ T5637] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 306.714456][ T5637] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 306.731973][ T5637] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 306.742002][ T5637] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 306.744069][T16209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2734'. [ 306.767239][T16211] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2735'. [ 306.767507][ T5637] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 306.816992][ T1126] bond9: (slave bridge5): failed to get link speed/duplex [ 306.856700][ T1126] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 306.947463][ T58] bond9: (slave bridge5): failed to get link speed/duplex [ 306.977739][ T157] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 307.146181][ T157] bond9: (slave bridge5): failed to get link speed/duplex [ 307.167413][ T157] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 307.272737][ T157] bond9: (slave bridge5): failed to get link speed/duplex [ 307.296805][ T157] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 307.437426][ T5637] Bluetooth: hci7: command tx timeout [ 307.528350][T16253] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2742'. [ 307.561437][T16253] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2742'. [ 307.695608][T16207] »»»»»» speed is unknown, defaulting to 1000 [ 307.722754][T16259] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2743'. [ 307.724933][T16207] lo speed is unknown, defaulting to 1000 [ 307.810997][T16260] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2743'. [ 307.821431][T16269] netlink: 'syz.7.2746': attribute type 13 has an invalid length. [ 307.853767][T16269] netlink: 'syz.7.2746': attribute type 58 has an invalid length. [ 307.862331][T16269] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2746'. [ 308.178689][T16279] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 308.186315][T16279] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 308.392410][T16297] netlink: 'syz.1.2753': attribute type 10 has an invalid length. [ 308.445843][T16297] veth1_vlan: left promiscuous mode [ 308.459189][T16297] macvlan1: entered promiscuous mode [ 308.468770][T16297] macvlan1: entered allmulticast mode [ 308.493511][T16297] veth1_vlan: entered promiscuous mode [ 308.518978][T16297] veth1_vlan: entered allmulticast mode [ 308.544434][T16297] team0: Port device macvlan1 added [ 308.740196][T16207] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.751432][T16207] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.759457][T16207] bridge_slave_0: entered allmulticast mode [ 308.767880][T16207] bridge_slave_0: entered promiscuous mode [ 308.780394][T16207] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.788139][T16207] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.795870][T16207] bridge_slave_1: entered allmulticast mode [ 308.805608][T16207] bridge_slave_1: entered promiscuous mode [ 308.867027][ T5637] Bluetooth: hci8: command tx timeout [ 308.882436][T16321] netlink: 'syz.1.2760': attribute type 1 has an invalid length. [ 308.912020][T16207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.985627][T16207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.048085][T16207] team0: Port device team_slave_0 added [ 309.070171][T16207] team0: Port device team_slave_1 added [ 309.142582][T16334] netlink: 'syz.7.2765': attribute type 21 has an invalid length. [ 309.151186][T16332] sit1: entered promiscuous mode [ 309.156357][T16332] sit1: entered allmulticast mode [ 309.180951][T16334] netlink: 'syz.7.2765': attribute type 4 has an invalid length. [ 309.190117][T16334] netlink: 'syz.7.2765': attribute type 5 has an invalid length. [ 309.200934][T16335] netlink: 'syz.7.2765': attribute type 21 has an invalid length. [ 309.201485][T16207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.243894][T16207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.272179][T16207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.283897][T16335] netlink: 'syz.7.2765': attribute type 4 has an invalid length. [ 309.293565][T16335] netlink: 'syz.7.2765': attribute type 5 has an invalid length. [ 309.331243][T16334] erspan0: entered promiscuous mode [ 309.341317][T16334] gretap0: entered promiscuous mode [ 309.353640][T16207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.367703][T16207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.398802][T16207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.480210][T16343] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.583724][T16207] hsr_slave_0: entered promiscuous mode [ 309.605902][T16207] hsr_slave_1: entered promiscuous mode [ 309.619903][T16207] debugfs: 'hsr0' already exists in 'hsr' [ 309.636463][T16207] Cannot create hsr debugfs directory [ 309.650349][T16343] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.871031][T16343] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.962479][T16343] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.067091][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 310.077035][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 310.112295][T16376] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 310.140116][ T13] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.165379][ T3353] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.232199][T16207] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.243882][T16207] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.283294][ T3353] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.335465][ T3353] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.462021][T16207] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.495171][T16207] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.620491][T16207] bond0: (slave netdevsim1): Releasing backup interface [ 310.654702][T16207] netdevsim netdevsim2 netdevsim1 (unregistering): left promiscuous mode [ 310.678593][T16207] netdevsim netdevsim2 netdevsim1 (unregistering): left allmulticast mode [ 310.710840][T16207] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.736423][T16207] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.899664][T16207] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.920363][T16207] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.946931][ T5637] Bluetooth: hci8: command tx timeout [ 311.084384][T16417] __nla_validate_parse: 18 callbacks suppressed [ 311.084401][T16417] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2791'. [ 311.114680][T16417] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 311.153128][T16417] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 311.183817][T16417] gretap1: entered promiscuous mode [ 311.197361][T16417] gretap1: entered allmulticast mode [ 311.627234][T16446] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2798'. [ 311.655806][T16207] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 311.671532][T16207] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 311.689909][T16207] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 311.702269][T16207] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 311.711635][T16207] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 311.722265][T16207] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 311.736799][ T13] net_ratelimit: 31 callbacks suppressed [ 311.736815][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 311.750842][T16207] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 311.772359][T16207] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 311.867829][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 311.891217][T16459] ip_vti0: entered promiscuous mode [ 311.902432][T16459] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2799'. [ 312.026963][ T157] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 312.049941][T16462] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2800'. [ 312.061579][T16207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.101865][T16207] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.131199][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.138421][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.162849][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.170074][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.249131][T16466] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2802'. [ 312.276184][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 312.285940][T16466] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2802'. [ 312.296547][ T58] bond9: (slave bridge5): failed to get link speed/duplex [ 312.387083][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 312.426533][ T157] bond9: (slave bridge5): failed to get link speed/duplex [ 312.636675][ T1012] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 312.686675][ T58] bond9: (slave bridge5): failed to get link speed/duplex [ 312.779296][ T1126] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 312.852617][T16507] netlink: 212 bytes leftover after parsing attributes in process `syz.5.2811'. [ 312.889756][T16507] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2811'. [ 312.910246][T16507] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2811'. [ 312.925449][T16509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2809'. [ 313.027315][ T5633] Bluetooth: hci8: command tx timeout [ 313.193380][T16207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.344805][T16207] veth0_vlan: entered promiscuous mode [ 313.390226][T16207] veth1_vlan: entered promiscuous mode [ 313.491917][T16207] veth0_macvtap: entered promiscuous mode [ 313.520494][T16207] veth1_macvtap: entered promiscuous mode [ 313.585296][T16207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.625090][T16207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.663024][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.694436][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.740007][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.769142][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.993213][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.032726][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.106467][T16552] IPVS: set_ctl: invalid protocol: 92 10.1.1.2:20004 [ 314.130485][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.140582][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.410987][T16561] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input7 [ 314.513002][T16566] batadv1: entered allmulticast mode [ 314.920630][T16590] IPv6: NLM_F_CREATE should be specified when creating new route [ 315.070600][T16596] validate_nla: 3 callbacks suppressed [ 315.070615][T16596] netlink: 'syz.1.2840': attribute type 39 has an invalid length. [ 315.107055][ T5633] Bluetooth: hci8: command 0x0419 tx timeout [ 315.194784][T16611] netlink: 'syz.2.2843': attribute type 26 has an invalid length. [ 315.654207][T16628] netlink: 'syz.5.2848': attribute type 16 has an invalid length. [ 315.692043][T16628] netlink: 'syz.5.2848': attribute type 17 has an invalid length. [ 315.724145][T16628] lo: left promiscuous mode [ 315.764735][T16628] tunl0: left promiscuous mode [ 315.791527][T16628] gre0: left promiscuous mode [ 315.857404][T16628] gretap0: left promiscuous mode [ 315.897410][T16628] erspan0: left promiscuous mode [ 315.919219][T16628] ip_vti0: left promiscuous mode [ 315.933072][T16628] sit0: left promiscuous mode [ 316.011554][T16628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.018707][T16653] sctp: [Deprecated]: syz.1.2856 (pid 16653) Use of int in max_burst socket option. [ 316.018707][T16653] Use struct sctp_assoc_value instead [ 316.038317][T16628] team0: left promiscuous mode [ 316.045709][T16628] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.211120][T16662] __nla_validate_parse: 19 callbacks suppressed [ 316.211137][T16662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2860'. [ 316.244731][T16628] macvlan0: left promiscuous mode [ 316.302602][T16628] : left promiscuous mode [ 316.326455][T16628] : left allmulticast mode [ 316.333218][T16628] gretap0: entered promiscuous mode [ 316.350746][T16628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 316.363868][T16628] bond2: left promiscuous mode [ 316.369178][T16628] bond2: left allmulticast mode [ 316.380295][T16628] veth3: left promiscuous mode [ 316.390103][T16628] syzkaller0: left promiscuous mode [ 316.395423][T16628] syzkaller0: left allmulticast mode [ 316.409846][T16628] 8021q: adding VLAN 0 to HW filter on device bond3 [ 316.442489][T16628] bridge2: left promiscuous mode [ 316.456212][T16628] bridge2: left allmulticast mode [ 316.471531][T16628] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 316.501913][T16628] sit1: left promiscuous mode [ 316.516096][T16628] sit1: left allmulticast mode [ 316.523050][T16628] 8021q: adding VLAN 0 to HW filter on device eth0 [ 316.539336][T16628] 8021q: adding VLAN 0 to HW filter on device eth1 [ 316.551622][T16628] 8021q: adding VLAN 0 to HW filter on device eth2 [ 316.564661][T16628] 8021q: adding VLAN 0 to HW filter on device eth3 [ 316.655231][ T1030] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.699771][ T1030] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.731619][ T1030] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.736676][T16668] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2862'. [ 316.755899][ T1030] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.806347][ T13] net_ratelimit: 43 callbacks suppressed [ 316.806363][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 316.832870][ T1012] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 316.862000][ T4992] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 316.876277][ T1012] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 316.928546][ T4992] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 316.947968][ T3353] bond9: (slave bridge5): failed to get link speed/duplex [ 316.977533][ T1012] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 317.049366][T16681] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2867'. [ 317.076287][ T13] bond9: (slave bridge5): failed to get link speed/duplex [ 317.124796][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.131997][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 317.140950][ T3353] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 317.192285][ T5637] Bluetooth: hci8: command 0x0419 tx timeout [ 317.236581][ T157] bond9: (slave bridge5): failed to get link speed/duplex [ 317.273520][ T1126] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 317.367743][ T1012] bond9: (slave bridge5): failed to get link speed/duplex [ 317.441151][T16699] syzkaller0: entered promiscuous mode [ 317.463067][T16699] syzkaller0: entered allmulticast mode [ 317.557551][ T1126] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 317.577131][ T1126] bond9: (slave bridge5): failed to get link speed/duplex [ 317.749589][T16722] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2880'. [ 317.910587][T16731] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2882'. [ 318.028382][T16738] netlink: 'syz.6.2884': attribute type 1 has an invalid length. [ 318.053134][T16737] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2882'. [ 318.057066][T16738] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2884'. [ 318.093881][T16738] netlink: 'syz.6.2884': attribute type 1 has an invalid length. [ 318.126243][T16738] netlink: 'syz.6.2884': attribute type 8 has an invalid length. [ 318.138583][T16738] netlink: 606 bytes leftover after parsing attributes in process `syz.6.2884'. [ 318.178322][T16735] netlink: 'syz.6.2884': attribute type 1 has an invalid length. [ 318.205596][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 318.219060][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 318.219736][T16735] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2884'. [ 318.237315][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 318.254403][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 318.263582][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 318.264078][T16735] netlink: 'syz.6.2884': attribute type 1 has an invalid length. [ 318.340534][T16735] netlink: 'syz.6.2884': attribute type 8 has an invalid length. [ 318.407679][T16735] netlink: 606 bytes leftover after parsing attributes in process `syz.6.2884'. [ 318.898158][T16773] lo: entered promiscuous mode [ 319.090407][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.098263][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.113844][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.127801][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.160918][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.184189][T16785] macvtap2: entered promiscuous mode [ 319.216915][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.227671][T16785] team0: entered promiscuous mode [ 319.232806][T16785] team_slave_1: entered promiscuous mode [ 319.240942][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.252442][T16785] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 319.261783][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.270594][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.277813][T16785] team0: Device macvtap2 is already an upper device of the team interface [ 319.280266][T16798] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20001 [ 319.287117][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.287309][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.287474][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.315767][T16785] team0: left promiscuous mode [ 319.316955][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.332633][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.339867][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.347905][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.354242][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.362104][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.369478][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.375831][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.387304][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.417145][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.436795][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.446154][ T24] team_slave_1: left promiscuous mode [ 319.456674][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.463478][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.487651][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.530527][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.559557][T16740] »»»»»» speed is unknown, defaulting to 1000 [ 319.566553][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.583253][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.602889][T16740] lo speed is unknown, defaulting to 1000 [ 319.618335][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.646313][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.682442][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.706927][T16787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 319.824503][T16812] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.872003][T16812] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.985927][T16816] ip_vti0: left promiscuous mode [ 320.023598][T16816] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.030804][T16816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.044623][T16816] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.051819][T16816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.120908][T16816] gretap1: left promiscuous mode [ 320.127850][T16816] gretap1: left allmulticast mode [ 320.151126][T16836] syzkaller0: entered promiscuous mode [ 320.161150][T16836] syzkaller0: entered allmulticast mode [ 320.307659][ T5637] Bluetooth: hci2: command tx timeout [ 320.626188][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 320.751019][T16871] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 320.780734][T16873] validate_nla: 1 callbacks suppressed [ 320.780750][T16873] netlink: 'syz.2.2918': attribute type 2 has an invalid length. [ 320.833568][T16873] netlink: 'syz.2.2918': attribute type 2 has an invalid length. [ 321.220137][T16740] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.227646][T16740] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.234931][T16740] bridge_slave_0: entered allmulticast mode [ 321.243337][T16740] bridge_slave_0: entered promiscuous mode [ 321.254707][T16740] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.262066][T16740] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.269859][T16740] bridge_slave_1: entered allmulticast mode [ 321.278298][T16740] bridge_slave_1: entered promiscuous mode [ 321.343067][T16891] sctp: [Deprecated]: syz.7.2921 (pid 16891) Use of struct sctp_assoc_value in delayed_ack socket option. [ 321.343067][T16891] Use struct sctp_sack_info instead [ 321.372456][T16740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.423009][T16740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.554156][T16740] team0: Port device team_slave_0 added [ 321.574904][T16740] team0: Port device team_slave_1 added [ 321.608496][T16899] netlink: 'syz.2.2924': attribute type 1 has an invalid length. [ 321.614304][T16895] __nla_validate_parse: 5 callbacks suppressed [ 321.614319][T16895] netlink: 192 bytes leftover after parsing attributes in process `syz.7.2923'. [ 321.643039][T16899] netlink: 'syz.2.2924': attribute type 1 has an invalid length. [ 321.662104][T16899] netlink: 1316 bytes leftover after parsing attributes in process `syz.2.2924'. [ 321.686510][T16895] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2923'. [ 321.865828][T16740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.891562][T16740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.921727][T16740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.935271][T16740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.945353][T16740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.974045][T16740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.991996][T16897] »»»»»» speed is unknown, defaulting to 1000 [ 322.030107][T16897] lo speed is unknown, defaulting to 1000 [ 322.090237][T16740] hsr_slave_0: entered promiscuous mode [ 322.115415][T16740] hsr_slave_1: entered promiscuous mode [ 322.140342][T16740] debugfs: 'hsr0' already exists in 'hsr' [ 322.155486][T16740] Cannot create hsr debugfs directory [ 322.175322][T16916] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2929'. [ 322.227285][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 322.389153][ T5637] Bluetooth: hci2: command tx timeout [ 322.425275][T16922] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2930'. [ 322.456747][ T1030] net_ratelimit: 40 callbacks suppressed [ 322.456762][ T1030] bond9: (slave bridge5): failed to get link speed/duplex [ 322.475135][T16922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2930'. [ 322.492738][T16921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2930'. [ 322.564849][ T1030] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 322.640390][T16927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2933'. [ 322.676613][ T13] bond9: (slave bridge5): failed to get link speed/duplex [ 322.691511][T16929] netlink: 'syz.5.2934': attribute type 1 has an invalid length. [ 322.828785][T16740] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.839640][T16740] netdevsim netdevsim1 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 322.851317][T16740] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.907948][T16931] bond13: (slave vxcan1): The slave device specified does not support setting the MAC address [ 322.938662][T16931] bond13: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 322.962367][T16931] bond13: (slave vxcan1): making interface the new active one [ 322.993185][T16931] bond13: (slave vxcan1): Enslaving as an active interface with an up link [ 323.042694][T16740] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.060261][T16740] netdevsim netdevsim1 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 323.070730][T16740] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.129038][ T1012] bond9: (slave bridge5): failed to get link speed/duplex [ 323.157057][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 323.201312][T16740] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.254717][T16740] netdevsim netdevsim1 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 323.276421][T16740] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.328686][ T13] bond9: (slave bridge5): failed to get link speed/duplex [ 323.381722][T16740] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.413615][T16740] netdevsim netdevsim1 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 323.445536][T16740] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.484448][T16949] block nbd1: Unsupported socket: should be TCP or UNIX. [ 323.557170][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 323.576783][ T13] bond9: (slave bridge5): failed to get link speed/duplex [ 323.674984][ T1030] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 323.726105][ T1030] bond9: (slave bridge5): failed to get link speed/duplex [ 324.154380][T16740] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 324.183539][T16740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 324.209055][T16740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 324.249965][T16740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 324.278006][T16740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 324.322294][T16740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 324.340372][T16740] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 324.380385][T16740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 324.466722][ T5637] Bluetooth: hci2: command tx timeout [ 324.477100][T16987] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2948'. [ 324.595312][T16740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.667486][T16993] tipc: Can't bind to reserved service type 1 [ 324.667758][T16740] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.692816][T16993] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2951'. [ 324.737700][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.744908][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.791447][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.798708][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.933134][T17002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.152304][T17011] netlink: 'syz.7.2955': attribute type 1 has an invalid length. [ 325.190825][T17015] netlink: 'syz.5.2956': attribute type 1 has an invalid length. [ 325.209298][T17015] netlink: 'syz.5.2956': attribute type 11 has an invalid length. [ 325.231141][T17011] 8021q: adding VLAN 0 to HW filter on device bond1 [ 325.426440][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.433693][ C1] bridge0: topology change detected, propagating [ 325.441886][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.449156][ C1] bridge0: topology change detected, propagating [ 325.874555][T16740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.069119][T16740] veth0_vlan: entered promiscuous mode [ 326.134656][T16740] veth1_vlan: entered promiscuous mode [ 326.212982][T16740] veth0_macvtap: entered promiscuous mode [ 326.271254][T16740] veth1_macvtap: entered promiscuous mode [ 326.313737][T16740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.369930][T16740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.414798][ T3353] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.434982][ T3353] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.445905][ T3353] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.459905][ T3353] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.547031][ T5637] Bluetooth: hci2: command tx timeout [ 326.749235][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.785076][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.844680][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.853630][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.921668][T17089] __nla_validate_parse: 8 callbacks suppressed [ 326.921684][T17089] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2973'. [ 327.050277][T17093] netlink: 'syz.7.2975': attribute type 10 has an invalid length. [ 327.068966][T17093] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2975'. [ 327.473115][T17107] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 327.557524][ T13] net_ratelimit: 53 callbacks suppressed [ 327.557543][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 327.564513][T17109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2979'. [ 327.716579][ T157] bond9: (slave bridge5): failed to get link speed/duplex [ 327.836249][ T157] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 327.888246][ T1012] bond9: (slave bridge5): failed to get link speed/duplex [ 327.993170][ T1030] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 328.047895][ T1030] bond9: (slave bridge5): failed to get link speed/duplex [ 328.137047][ T3353] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 328.186957][ T58] bond9: (slave bridge5): failed to get link speed/duplex [ 328.190268][T17143] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2988'. [ 328.286175][ T157] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 328.337792][ T58] bond9: (slave bridge5): failed to get link speed/duplex [ 328.383979][T17158] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2993'. [ 328.626354][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 328.654387][T17170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2997'. [ 328.663030][T17169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2997'. [ 328.667194][T17171] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2996'. [ 328.780563][T17178] netlink: 'syz.6.2998': attribute type 1 has an invalid length. [ 328.818068][T17164] syzkaller0: entered promiscuous mode [ 328.823885][T17164] syzkaller0: entered allmulticast mode [ 328.846116][T17181] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2998'. [ 328.885471][T17178] 8021q: adding VLAN 0 to HW filter on device bond3 [ 329.472258][T17213] IPv6: sit2: Disabled Multicast RS [ 329.479326][T17213] sit2: entered allmulticast mode [ 329.704496][T17226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3011'. [ 329.974273][T17236] tun0: tun_chr_ioctl cmd 1074025675 [ 330.012842][T17236] tun0: persist disabled [ 330.057449][T17236] netlink: 'syz.7.3015': attribute type 4 has an invalid length. [ 330.118219][T17247] netlink: 'syz.6.3019': attribute type 75 has an invalid length. [ 330.150887][T17253] netlink: 'syz.1.3017': attribute type 21 has an invalid length. [ 330.324206][T17259] netlink: 'syz.5.3018': attribute type 28 has an invalid length. [ 330.395911][T17259] netlink: 'syz.5.3018': attribute type 3 has an invalid length. [ 330.724488][T17285] netlink: 'syz.6.3025': attribute type 1 has an invalid length. [ 331.158874][T17308] netem: change failed [ 331.378565][T17314] netlink: 'syz.6.3033': attribute type 3 has an invalid length. [ 332.184049][T17359] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 332.224745][T17372] __nla_validate_parse: 11 callbacks suppressed [ 332.224762][T17372] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3046'. [ 332.242538][T17359] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 332.274171][T17359] gretap1: entered promiscuous mode [ 332.293033][T17359] gretap1: entered allmulticast mode [ 332.351863][T17364] netlink: 'syz.5.3046': attribute type 25 has an invalid length. [ 332.438550][T17372] ip6erspan1: entered allmulticast mode [ 332.501106][T17383] syz_tun: entered allmulticast mode [ 332.597270][ T1030] net_ratelimit: 54 callbacks suppressed [ 332.597289][ T1030] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 332.640449][T17386] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3049'. [ 332.649576][ T3353] bond9: (slave bridge5): failed to get link speed/duplex [ 332.906374][ T1126] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 332.939684][ T1126] bond9: (slave bridge5): failed to get link speed/duplex [ 333.161582][T17414] x_tables: duplicate underflow at hook 1 [ 333.161623][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 333.161658][ T58] bond9: (slave bridge5): failed to get link speed/duplex [ 333.273955][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 333.349477][ T3353] bond9: (slave bridge5): failed to get link speed/duplex [ 333.397123][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 333.453723][T17422] netlink: 'syz.7.3054': attribute type 13 has an invalid length. [ 333.467961][T17422] gretap0: refused to change device tx_queue_len [ 333.478654][T17426] xt_hashlimit: size too large, truncated to 1048576 [ 333.490548][T17422] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 333.528169][T17427] netlink: 'syz.6.3056': attribute type 4 has an invalid length. [ 333.544017][T17430] netlink: 208 bytes leftover after parsing attributes in process `syz.2.3058'. [ 333.564834][T17427] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3056'. [ 333.614892][T17427] .`: renamed from bond0 (while UP) [ 333.670917][T17432] netlink: 'syz.2.3058': attribute type 1 has an invalid length. [ 333.690004][T17430] netlink: 'syz.2.3058': attribute type 1 has an invalid length. [ 333.705637][T17438] netlink: 312 bytes leftover after parsing attributes in process `syz.7.3059'. [ 333.740133][T17436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3058'. [ 333.784959][T17441] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3062'. [ 333.814446][T17444] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3060'. [ 333.823730][T17444] IPv6: NLM_F_CREATE should be specified when creating new route [ 333.860095][T17432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.868006][T17436] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 333.894346][T17436] bond1: entered allmulticast mode [ 334.104775][T17452] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3065'. [ 334.126508][T17452] netlink: 'syz.6.3065': attribute type 1 has an invalid length. [ 334.134260][T17452] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3065'. [ 334.400411][T17476] No such timeout policy "syz1" [ 334.654865][T17469] team0 (unregistering): Port device bridge2 removed [ 334.700214][T17493] veth1_macvtap: entered allmulticast mode [ 334.842233][T17495] veth1_macvtap (unregistering): left allmulticast mode [ 335.238472][T17519] netlink: 'syz.2.3085': attribute type 1 has an invalid length. [ 336.174864][T17581] IPVS: set_ctl: invalid protocol: 51 100.1.1.3:19999 [ 336.234568][T17579] IPVS: set_ctl: invalid protocol: 51 100.1.1.3:19999 [ 336.465221][T17597] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 337.078271][T17637] 8021q: VLANs not supported on ip6gre0 [ 337.274293][T17650] netlink: 'syz.1.3122': attribute type 1 has an invalid length. [ 337.303054][T17651] __nla_validate_parse: 12 callbacks suppressed [ 337.303072][T17651] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3123'. [ 337.359511][T17651] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3123'. [ 337.617894][T17663] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3128'. [ 337.647896][ T1030] net_ratelimit: 52 callbacks suppressed [ 337.647913][ T1030] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 337.780419][T17672] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.3131'. [ 337.806356][ T1126] bond9: (slave bridge5): failed to get link speed/duplex [ 337.820395][ T1126] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 337.916670][ T58] bond9: (slave bridge5): failed to get link speed/duplex [ 337.964663][ T157] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 338.067431][ T58] bond9: (slave bridge5): failed to get link speed/duplex [ 338.098639][ T1012] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 338.336141][ T1126] bond9: (slave bridge5): failed to get link speed/duplex [ 338.354553][T17707] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20003 [ 338.371170][T17706] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 338.407832][ T1012] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 338.467828][ T1126] bond9: (slave bridge5): failed to get link speed/duplex [ 338.872727][ T1012] wlan1: Trigger new scan to find an IBSS to join [ 339.204513][T17741] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3153'. [ 339.343246][T17749] netlink: 'syz.5.3155': attribute type 23 has an invalid length. [ 339.430507][T17759] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3158'. [ 339.632198][T17765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3159'. [ 339.643650][T17774] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3163'. [ 339.671123][T17765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3159'. [ 339.689867][T17774] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3163'. [ 340.215888][T17814] netlink: 'syz.1.3172': attribute type 1 has an invalid length. [ 340.582231][T17833] Cannot find add_set index 0 as target [ 340.791819][ T1012] wlan1: Trigger new scan to find an IBSS to join [ 341.061264][T17870] syzkaller0: entered promiscuous mode [ 341.103293][T17870] syzkaller0: entered allmulticast mode [ 341.230785][T17887] netlink: 'syz.7.3189': attribute type 1 has an invalid length. [ 341.720133][T17895] sctp: [Deprecated]: syz.2.3191 (pid 17895) Use of struct sctp_assoc_value in delayed_ack socket option. [ 341.720133][T17895] Use struct sctp_sack_info instead [ 342.100541][T17922] pim6reg: entered allmulticast mode [ 342.364079][T17945] __nla_validate_parse: 16 callbacks suppressed [ 342.364096][T17945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3208'. [ 342.445889][T17954] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3210'. [ 342.459537][T17956] netlink: 'syz.1.3211': attribute type 1 has an invalid length. [ 342.469489][T17954] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3210'. [ 342.533190][T17957] veth3: entered promiscuous mode [ 342.666834][T13916] net_ratelimit: 68 callbacks suppressed [ 342.666852][T13916] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 342.727244][T17967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.742342][T17967] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3215'. [ 342.796229][ T1030] bond9: (slave bridge5): failed to get link speed/duplex [ 342.803528][T17979] openvswitch: netlink: VLAN attribute unexpected. [ 343.031859][T17992] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3220'. [ 343.288795][ T47] bond9: (slave bridge5): failed to get link speed/duplex [ 343.316178][ T47] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 343.417491][T13916] bond9: (slave bridge5): failed to get link speed/duplex [ 343.447385][ T1030] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 343.501191][T18021] openvswitch: netlink: IP tunnel dst address not specified [ 343.579363][T18022] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 343.634721][T18022] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 343.644205][T18022] team0: Failed to send options change via netlink (err -105) [ 343.657562][T18022] team0: Port device batadv1 added [ 343.687508][ T47] bond9: (slave bridge5): failed to get link speed/duplex [ 343.711690][T18034] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3230'. [ 343.830110][ T1030] wlan1: Trigger new scan to find an IBSS to join [ 343.924049][T18049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3235'. [ 343.986337][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 344.011607][T18049] bridge4: entered promiscuous mode [ 344.028671][T18049] bridge4: entered allmulticast mode [ 344.063723][T18054] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3236'. [ 344.106640][T18054] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3236'. [ 344.544723][T18082] netlink: 'syz.1.3245': attribute type 5 has an invalid length. [ 344.819721][ T12] wlan1: Creating new IBSS network, BSSID 16:b7:d3:1a:ef:00 [ 344.884446][T18091] SET target dimension over the limit! [ 344.902566][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.943533][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.136832][T18106] x_tables: duplicate underflow at hook 2 [ 345.223203][T18116] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3251'. [ 345.610298][T18131] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 345.830996][ T1126] wlan1: Trigger new scan to find an IBSS to join [ 345.905583][T18155] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 346.168745][T18173] bridge: RTM_NEWNEIGH with invalid ether address [ 346.200881][T18173] bridge: RTM_NEWNEIGH with invalid ether address [ 346.394912][T18180] syzkaller0: entered promiscuous mode [ 346.411426][T18180] syzkaller0: entered allmulticast mode [ 346.451716][T18180] netlink: 'syz.7.3267': attribute type 9 has an invalid length. [ 346.470524][T18183] geneve2: entered promiscuous mode [ 346.479029][T18183] geneve2: entered allmulticast mode [ 346.530846][T18189] sctp: [Deprecated]: syz.1.3270 (pid 18189) Use of int in max_burst socket option. [ 346.530846][T18189] Use struct sctp_assoc_value instead [ 346.824033][ T1126] wlan1: Creating new IBSS network, BSSID 7a:c0:c5:e0:f8:ad [ 346.845859][T18202] h: entered promiscuous mode [ 347.498618][T18211] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.571548][T18246] netlink: 'syz.5.3285': attribute type 8 has an invalid length. [ 347.768785][T18211] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.822274][T18268] __nla_validate_parse: 13 callbacks suppressed [ 347.822290][T18268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3291'. [ 347.873754][T18274] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3290'. [ 347.959299][T18278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3291'. [ 347.972900][T18268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3291'. [ 348.021059][T13916] net_ratelimit: 51 callbacks suppressed [ 348.021077][T13916] bond9: (slave bridge5): failed to get link speed/duplex [ 348.083886][T18211] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.277135][T18211] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.366847][ T1126] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 348.447181][ T12] bond9: (slave bridge5): failed to get link speed/duplex [ 348.496246][ T1126] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 348.623959][T18296] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.664996][T18306] tipc: Enabled bearer , priority 10 [ 348.679611][T18307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3299'. [ 348.731347][ T12] bond9: (slave bridge5): failed to get link speed/duplex [ 348.811626][ T1126] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.831937][T18312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3301'. [ 348.876530][T18296] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.928267][ T3336] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.952728][T18312] team0: entered promiscuous mode [ 348.967707][T18312] team_slave_0: entered promiscuous mode [ 348.989898][T18312] team_slave_1: entered promiscuous mode [ 348.995881][T18312] batadv1: entered promiscuous mode [ 349.040985][ T12] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.117338][T18296] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.180174][ T1030] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.291393][T18296] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.353427][T18320] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3303'. [ 349.362743][T18328] netlink: 'syz.1.3306': attribute type 11 has an invalid length. [ 349.386776][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 349.407031][ T12] bond9: (slave bridge5): failed to get link speed/duplex [ 349.423754][T18332] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3305'. [ 349.507513][T13916] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 349.536874][T13916] bond9: (slave bridge5): failed to get link speed/duplex [ 349.677407][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 349.709449][ T3336] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.824784][ T1030] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.915608][T13917] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.026869][T13917] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.444442][T18384] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 350.502431][T18387] netlink: 'syz.6.3321': attribute type 12 has an invalid length. [ 350.742765][T18397] batadv0: entered promiscuous mode [ 350.750875][T18397] macsec1: entered promiscuous mode [ 350.758525][T18397] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 350.769463][T18397] batadv0: left promiscuous mode [ 350.854576][T18399] netlink: 'syz.5.3324': attribute type 1 has an invalid length. [ 351.003296][T18399] bond14: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 351.035934][T18374] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 351.058086][T18374] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 351.178220][T18412] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3327'. [ 351.224851][T18374] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 351.235380][T18374] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 351.254805][T18412] bond0: entered promiscuous mode [ 351.273704][T18412] bond0: left promiscuous mode [ 351.414495][T18374] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 351.450128][T18374] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 351.481432][T18417] netlink: 868 bytes leftover after parsing attributes in process `syz.2.3329'. [ 351.624718][T18374] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 351.633629][T18428] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 351.654559][T18374] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 353.061116][ T1126] net_ratelimit: 49 callbacks suppressed [ 353.061137][ T1126] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 353.137693][ T1126] bond9: (slave bridge5): failed to get link speed/duplex [ 353.306092][ T47] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 353.337028][ T47] bond9: (slave bridge5): failed to get link speed/duplex [ 353.441086][ T47] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 353.463535][T18517] __nla_validate_parse: 3 callbacks suppressed [ 353.463552][T18517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3353'. [ 353.487396][ T47] bond9: (slave bridge5): failed to get link speed/duplex [ 353.501143][T18517] netlink: 'syz.2.3353': attribute type 3 has an invalid length. [ 353.561678][T18529] netlink: 'syz.5.3354': attribute type 1 has an invalid length. [ 353.582753][T13917] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 353.780902][T18529] 8021q: adding VLAN 0 to HW filter on device bond15 [ 353.862711][T18531] vlan1: entered allmulticast mode [ 353.890116][T18531] bond15: entered allmulticast mode [ 353.931061][ T5633] block nbd1: Receive control failed (result -32) [ 353.954783][T18521] bond15: (slave geneve3): making interface the new active one [ 353.962612][T18521] geneve3: entered allmulticast mode [ 353.972969][T18521] bond15: (slave geneve3): Enslaving as an active interface with an up link [ 354.071650][ T1126] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 354.118126][ T1030] bond9: (slave bridge5): failed to get link speed/duplex [ 354.216109][ T1126] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 354.251004][T18560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3364'. [ 354.678553][T18583] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 355.143638][T18595] bond2: entered promiscuous mode [ 355.175927][T18595] bond2: entered allmulticast mode [ 355.182347][T18595] 8021q: adding VLAN 0 to HW filter on device bond2 [ 355.420390][T18620] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3378'. [ 355.448047][T18616] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3378'. [ 355.575172][T18624] netlink: 'syz.6.3381': attribute type 39 has an invalid length. [ 355.597075][T18623] netlink: 'syz.6.3381': attribute type 39 has an invalid length. [ 355.677027][T18635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3384'. [ 356.063331][T18650] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3389'. [ 356.210560][T18658] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3392'. [ 356.475159][T18667] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3396'. [ 356.566440][T18672] nbd2: detected capacity change from 0 to 63 [ 356.644836][ T5633] block nbd2: Receive control failed (result -104) [ 356.779010][T18683] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3401'. [ 357.032501][T18699] netlink: 'syz.7.3406': attribute type 1 has an invalid length. [ 357.064619][T18695] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3405'. [ 357.125553][T18699] 8021q: adding VLAN 0 to HW filter on device bond3 [ 357.142205][T18703] ip_vti0: entered promiscuous mode [ 357.953420][T18756] syz_tun: entered allmulticast mode [ 358.126673][ T1126] net_ratelimit: 54 callbacks suppressed [ 358.126691][ T1126] bond9: (slave bridge5): failed to get link speed/duplex [ 358.256179][ T47] bond9: (slave bridge5): failed to get link speed/duplex [ 358.300636][T18754] syz_tun: left allmulticast mode [ 358.327036][ T1030] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 358.396537][ T47] bond9: (slave bridge5): failed to get link speed/duplex [ 358.447086][ T1126] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 358.516911][ T1126] bond9: (slave bridge5): failed to get link speed/duplex [ 358.567639][ T1030] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 358.592491][T18777] __nla_validate_parse: 4 callbacks suppressed [ 358.592505][T18777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3432'. [ 358.641984][T18777] netlink: 'syz.1.3432': attribute type 1 has an invalid length. [ 358.664846][T18777] netlink: 'syz.1.3432': attribute type 2 has an invalid length. [ 358.682948][T18784] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3435'. [ 358.705504][T18784] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3435'. [ 358.736298][ T58] bond9: (slave bridge5): failed to get link speed/duplex [ 358.765570][T18788] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3434'. [ 358.768659][ T58] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 358.868660][ T1030] bond9: (slave bridge5): failed to get link speed/duplex [ 359.002757][T18795] pim6reg: entered allmulticast mode [ 359.147755][T18807] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3442'. [ 360.261797][T18857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3457'. [ 360.275881][T18857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3457'. [ 360.485764][T18871] syzkaller0: entered promiscuous mode [ 360.504959][T18871] syzkaller0: entered allmulticast mode [ 360.537900][T18871] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3460'. [ 361.028697][T18903] netlink: 7064 bytes leftover after parsing attributes in process `syz.6.3469'. [ 361.287705][T18916] netlink: 'syz.1.3473': attribute type 1 has an invalid length. [ 361.304939][T18916] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3473'. [ 361.322111][T18916] netlink: 'syz.1.3473': attribute type 1 has an invalid length. [ 361.531522][T18928] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 361.538828][T18928] IPv6: NLM_F_CREATE should be set when creating new route [ 361.546114][T18928] IPv6: NLM_F_CREATE should be set when creating new route [ 361.601399][T18926] netem: change failed [ 362.706984][T19001] bond0: Unable to set up delay as MII monitoring is disabled [ 362.749065][T19003] netlink: 'syz.7.3498': attribute type 1 has an invalid length. [ 362.848354][T19010] netlink: 'syz.2.3500': attribute type 10 has an invalid length. [ 363.196784][T13917] net_ratelimit: 73 callbacks suppressed [ 363.196802][T13917] bond9: (slave bridge5): failed to get link speed/duplex [ 363.321673][T19030] nbd: must specify at least one socket [ 363.327751][T13917] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 363.449460][ T1126] bond9: (slave bridge5): failed to get link speed/duplex [ 363.809883][T19057] netlink: 'syz.6.3511': attribute type 2 has an invalid length. [ 363.900132][T19063] bridge0: port 3(batadv1) entered blocking state [ 363.914790][T19070] __nla_validate_parse: 12 callbacks suppressed [ 363.914805][T19070] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3514'. [ 363.934506][T19063] bridge0: port 3(batadv1) entered disabled state [ 363.958132][T19063] batadv1: entered allmulticast mode [ 363.980197][T19070] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3514'. [ 363.982698][T19063] batadv1: entered promiscuous mode [ 364.021402][T19074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3515'. [ 364.065740][T19070] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3514'. [ 364.066610][ T3336] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 364.103228][T19070] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3514'. [ 364.103849][ T1126] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.137169][ T1126] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.242444][ T1126] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.272905][ T1126] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.313900][T19087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3518'. [ 364.332995][T19087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3518'. [ 364.373090][T19087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3518'. [ 364.382526][ T47] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 364.392417][ T47] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 364.416570][T19087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3518'. [ 364.427378][ T29] audit: type=1107 audit(1779043860.695:6): pid=19096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='E*%9' [ 364.476320][ T47] bond9: (slave bridge5): failed to get link speed/duplex [ 364.515508][ T3336] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 364.606719][ T3336] bond9: (slave bridge5): failed to get link speed/duplex [ 364.656851][ T1126] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 364.713382][T19112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.750207][ T3336] bond9: (slave bridge5): failed to get link speed/duplex [ 364.815650][T19118] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3527'. [ 364.826990][T19119] sctp: [Deprecated]: syz.2.3529 (pid 19119) Use of int in max_burst socket option. [ 364.826990][T19119] Use struct sctp_assoc_value instead [ 368.206397][ T1030] net_ratelimit: 61 callbacks suppressed [ 368.206415][ T1030] bond9: (slave bridge5): failed to get link speed/duplex [ 368.236973][ T1030] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 368.336894][ T1030] bond9: (slave bridge5): failed to get link speed/duplex [ 368.346788][T13917] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 368.447025][ T1030] bond9: (slave bridge5): failed to get link speed/duplex [ 368.457067][ T1030] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 368.556265][T13916] bond9: (slave bridge5): failed to get link speed/duplex [ 368.567089][T13916] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 368.666205][T13917] bond9: (slave bridge5): failed to get link speed/duplex [ 368.676891][T13917] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 373.216743][ T1030] net_ratelimit: 80 callbacks suppressed [ 373.216765][ T1030] bond9: (slave bridge5): failed to get link speed/duplex [ 373.246777][ T1030] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 373.336941][ T3336] bond9: (slave bridge5): failed to get link speed/duplex [ 373.356367][ T3336] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 373.428336][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 373.446788][ T1030] bond9: (slave bridge5): failed to get link speed/duplex [ 373.466312][ T3336] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 373.556275][ T3336] bond9: (slave bridge5): failed to get link speed/duplex [ 373.576737][ T1030] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 373.666865][T13917] bond9: (slave bridge5): failed to get link speed/duplex [ 373.686245][ T3336] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 378.227261][T13917] net_ratelimit: 81 callbacks suppressed [ 378.227282][T13917] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 378.296491][ T12] bond9: (slave bridge5): failed to get link speed/duplex [ 378.346488][T13917] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 378.406848][ T12] bond9: (slave bridge5): failed to get link speed/duplex [ 378.456130][T13917] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 378.526335][ T47] bond9: (slave bridge5): failed to get link speed/duplex [ 378.566802][ T47] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 378.636254][ T47] bond9: (slave bridge5): failed to get link speed/duplex [ 378.686542][ T47] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 378.746621][T13916] bond9: (slave bridge5): failed to get link speed/duplex [ 383.276510][T13917] net_ratelimit: 81 callbacks suppressed [ 383.276530][T13917] bond9: (slave bridge5): failed to get link speed/duplex [ 383.337306][T13916] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 383.396464][T13917] bond9: (slave bridge5): failed to get link speed/duplex [ 383.446377][T13917] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 383.506448][T13916] bond9: (slave bridge5): failed to get link speed/duplex [ 383.556729][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 383.616425][T13916] bond9: (slave bridge5): failed to get link speed/duplex [ 383.672790][T13917] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 383.726581][T13917] bond9: (slave bridge5): failed to get link speed/duplex [ 383.786384][T13916] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 386.871737][ T2368] block nbd2: Possible stuck request ffff8880277c5080: control (read@0,1024B). Runtime 30 seconds [ 386.883870][ T2368] block nbd2: Possible stuck request ffff8880277c5240: control (read@1024,1024B). Runtime 30 seconds [ 386.894842][ T2368] block nbd2: Possible stuck request ffff8880277c5400: control (read@2048,1024B). Runtime 30 seconds [ 386.906603][ T2368] block nbd2: Possible stuck request ffff8880277c55c0: control (read@3072,1024B). Runtime 30 seconds [ 387.761468][T19140] IPv6: sit1: Disabled Multicast RS [ 387.768739][T19140] sit1: entered allmulticast mode [ 387.795884][T19147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3532'. [ 387.912947][T19158] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3536'. [ 388.037882][T19164] netlink: 'syz.1.3538': attribute type 11 has an invalid length. [ 388.054500][T19158] netlink: 190972 bytes leftover after parsing attributes in process `syz.7.3536'. [ 388.055540][T19164] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3538'. [ 388.129704][T19173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3542'. [ 388.346209][T13917] net_ratelimit: 82 callbacks suppressed [ 388.346226][T13917] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 388.459968][ T1030] bond9: (slave bridge5): failed to get link speed/duplex [ 388.507156][ T1030] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 388.597352][T13916] bond9: (slave bridge5): failed to get link speed/duplex [ 388.637407][ T3336] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 388.729898][ T1126] bond9: (slave bridge5): failed to get link speed/duplex [ 388.766242][ T1126] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 388.842219][T19209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3552'. [ 388.856702][T13917] bond9: (slave bridge5): failed to get link speed/duplex [ 388.892693][T19211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3553'. [ 388.911330][ T1030] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 388.933372][T19211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3553'. [ 388.964269][T19211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3553'. [ 388.999085][T13916] bond9: (slave bridge5): failed to get link speed/duplex [ 389.024924][T19211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3553'. [ 389.255378][T19228] netlink: 'syz.5.3559': attribute type 21 has an invalid length. [ 389.315507][T19228] netlink: 'syz.5.3559': attribute type 21 has an invalid length. [ 389.393896][T19237] xt_hashlimit: size too large, truncated to 1048576 [ 389.919594][T19262] xt_socket: unknown flags 0x50 [ 390.022165][T19269] bond0: entered promiscuous mode [ 390.027855][ T46] IPVS: starting estimator thread 0... [ 390.056464][T19269] bond_slave_0: entered promiscuous mode [ 390.071254][ T30] INFO: task syz.4.1980:13143 blocked for more than 143 seconds. [ 390.083965][T19269] bond_slave_1: entered promiscuous mode [ 390.096771][ T30] Not tainted syzkaller #0 [ 390.101762][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 390.110956][ T30] task:syz.4.1980 state:D stack:27000 pid:13143 tgid:13141 ppid:5630 task_flags:0x400040 flags:0x00080002 [ 390.124398][ T30] Call Trace: [ 390.127834][ T30] [ 390.130802][ T30] __schedule+0x1821/0x5740 [ 390.135489][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 390.140543][ T30] ? __pfx_clockevents_program_event+0x10/0x10 [ 390.146987][T19270] IPVS: using max 34 ests per chain, 81600 per kthread [ 390.154948][ T30] ? preempt_schedule_notrace+0x57/0x90 [ 390.160933][ T30] ? __pfx___schedule+0x10/0x10 [ 390.165842][ T30] ? schedule+0x90/0x360 [ 390.170160][ T30] schedule+0x164/0x360 [ 390.174328][ T30] schedule_preempt_disabled+0x13/0x30 [ 390.180266][ T30] __mutex_lock+0x7f7/0x1550 [ 390.204705][ T30] ? __mutex_lock+0x608/0x1550 [ 390.216248][ T30] ? nfsd_nl_version_get_doit+0x17c/0xc40 [ 390.229879][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 390.239999][ T30] ? __nlmsg_put+0xef/0x1b0 [ 390.244806][ T30] ? genlmsg_put+0x137/0x2e0 [ 390.254738][ T30] nfsd_nl_version_get_doit+0x17c/0xc40 [ 390.266801][ T30] ? __nla_parse+0x40/0x60 [ 390.275891][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 390.283011][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 390.290321][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 390.299841][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 390.305446][ T30] ? __asan_memcpy+0x40/0x70 [ 390.318422][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 390.324542][ T30] genl_rcv_msg+0x61c/0x7a0 [ 390.329261][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.334338][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 390.341086][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 390.346724][ T30] netlink_rcv_skb+0x232/0x4b0 [ 390.351688][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.356843][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 390.362168][ T30] ? down_read+0x270/0x2e0 [ 390.367401][ T30] ? genl_rcv+0xd/0x40 [ 390.371500][ T30] genl_rcv+0x28/0x40 [ 390.375480][ T30] netlink_unicast+0x75c/0x8e0 [ 390.380500][ T30] netlink_sendmsg+0x813/0xb40 [ 390.385301][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.390763][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 390.395831][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 390.401597][ T30] ____sys_sendmsg+0x972/0x9f0 [ 390.406939][ T30] ? __might_fault+0xaf/0x130 [ 390.411663][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.416988][ T30] ? import_iovec+0x73/0xa0 [ 390.421600][ T30] ___sys_sendmsg+0x2a5/0x360 [ 390.427119][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 390.432096][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.437413][ T30] ? futex_wake+0x4ac/0x580 [ 390.441958][ T30] ? __fget_files+0x2a/0x420 [ 390.446685][ T30] ? __fget_files+0x3a0/0x420 [ 390.451399][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 390.456703][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.462170][ T30] ? rcu_is_watching+0x15/0xb0 [ 390.467343][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.473468][ T30] do_syscall_64+0x15f/0xf80 [ 390.478160][ T30] ? trace_irq_disable+0x3b/0x140 [ 390.483203][ T30] ? clear_bhb_loop+0x40/0x90 [ 390.488348][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.494251][ T30] RIP: 0033:0x7fcfee79ce59 [ 390.498747][ T30] RSP: 002b:00007fcfef631028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.507275][ T30] RAX: ffffffffffffffda RBX: 00007fcfeea15fa0 RCX: 00007fcfee79ce59 [ 390.515249][ T30] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 390.523657][ T30] RBP: 00007fcfee832d6f R08: 0000000000000000 R09: 0000000000000000 [ 390.531732][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.539839][ T30] R13: 00007fcfeea16038 R14: 00007fcfeea15fa0 R15: 00007fff1d94fe48 [ 390.548995][ T30] [ 390.563122][ T30] [ 390.563122][ T30] Showing all locks held in the system: [ 390.594361][ T30] 5 locks held by kworker/u8:0/12: [ 390.610220][ T30] #0: ffff8880b873aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 390.620374][ T30] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 390.634203][ T30] #2: ffff8880b873aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 390.644571][ T30] #3: ffffffff9a754690 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 390.655178][ T30] #4: ffff88807c154808 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x66/0x1380 [ 390.664495][ T30] 1 lock held by khungtaskd/30: [ 390.669822][ T30] #0: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 390.679795][ T30] 2 locks held by getty/5383: [ 390.684468][ T30] #0: ffff8880364d70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 390.694348][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 390.704749][ T30] 1 lock held by udevd/6222: [ 390.710405][ T30] #0: ffff8880276b6350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 390.719887][ T30] 2 locks held by syz.0.803/8817: [ 390.725084][ T30] #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 390.733847][ T30] #1: ffffffff8ec8aca0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 390.744380][ T30] 2 locks held by syz.4.1980/13143: [ 390.749620][ T30] #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 390.758297][ T30] #1: ffffffff8ec8aca0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 390.768363][ T30] 2 locks held by syz.3.2483/15217: [ 390.773555][ T30] #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 390.781804][ T30] #1: ffffffff8ec8aca0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 390.792653][ T30] [ 390.795064][ T30] ============================================= [ 390.795064][ T30] [ 390.804155][ T30] NMI backtrace for cpu 0 [ 390.804176][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 390.804189][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 390.804197][ T30] Call Trace: [ 390.804202][ T30] [ 390.804208][ T30] dump_stack_lvl+0xe8/0x150 [ 390.804252][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 390.804331][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 390.804360][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 390.804376][ T30] sys_info+0x135/0x170 [ 390.804412][ T30] watchdog+0xfd3/0x1030 [ 390.804439][ T30] ? watchdog+0x1c9/0x1030 [ 390.804459][ T30] kthread+0x389/0x470 [ 390.804478][ T30] ? __pfx_watchdog+0x10/0x10 [ 390.804492][ T30] ? __pfx_kthread+0x10/0x10 [ 390.804507][ T30] ret_from_fork+0x514/0xb70 [ 390.804530][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 390.804543][ T30] ? __switch_to+0xc79/0x1410 [ 390.804561][ T30] ? __pfx_kthread+0x10/0x10 [ 390.804576][ T30] ret_from_fork_asm+0x1a/0x30 [ 390.804601][ T30] [ 390.804606][ T30] Sending NMI from CPU 0 to CPUs 1: [ 390.916187][ C1] NMI backtrace for cpu 1 [ 390.916202][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 390.916219][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 390.916230][ C1] RIP: 0010:unwind_get_return_address+0x56/0x90 [ 390.916256][ C1] Code: 83 c3 48 49 89 df 49 c1 ef 03 43 80 3c 37 00 74 08 48 89 df e8 5b 11 ba 00 48 8b 3b e8 43 dc 18 00 85 c0 74 14 43 80 3c 37 00 <74> 08 48 89 df e8 40 11 ba 00 48 8b 03 eb 02 31 c0 5b 41 5e 41 5f [ 390.916269][ C1] RSP: 0018:ffffc90000a087e8 EFLAGS: 00000046 [ 390.916282][ C1] RAX: 0000000000000001 RBX: ffffc90000a08850 RCX: 0000000000000100 [ 390.916293][ C1] RDX: 0000000000000001 RSI: ffffffff8e21a1b7 RDI: ffffffff819a9863 [ 390.916303][ C1] RBP: ffffc90000a08890 R08: ffffc90000197f10 R09: 0000000000000000 [ 390.916313][ C1] R10: ffffc90000a08858 R11: fffff5200014110d R12: ffff88801dad8000 [ 390.916325][ C1] R13: ffff888069e6781c R14: dffffc0000000000 R15: 1ffff9200014110a [ 390.916336][ C1] FS: 0000000000000000(0000) GS:ffff88812538a000(0000) knlGS:0000000000000000 [ 390.916348][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 390.916359][ C1] CR2: 00007f01753ea2f8 CR3: 0000000074b58000 CR4: 00000000003526f0 [ 390.916372][ C1] Call Trace: [ 390.916378][ C1] [ 390.916385][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 390.916410][ C1] arch_stack_walk+0xfb/0x150 [ 390.916432][ C1] ? cpu_startup_entry+0x43/0x60 [ 390.916451][ C1] stack_trace_save+0xa9/0x100 [ 390.916473][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 390.916499][ C1] kasan_save_stack+0x3e/0x60 [ 390.916519][ C1] ? kasan_save_stack+0x3e/0x60 [ 390.916537][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 390.916553][ C1] ? insert_work+0x3d/0x330 [ 390.916565][ C1] ? __queue_work+0xcef/0x1040 [ 390.916583][ C1] ? call_timer_fn+0x192/0x5e0 [ 390.916599][ C1] ? __run_timer_base+0x67e/0x8b0 [ 390.916612][ C1] ? run_timer_softirq+0xb7/0x170 [ 390.916626][ C1] ? handle_softirqs+0x22a/0x840 [ 390.916661][ C1] ? __irq_exit_rcu+0xca/0x220 [ 390.916675][ C1] ? irq_exit_rcu+0x9/0x30 [ 390.916688][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 390.916709][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 390.916732][ C1] ? pv_native_safe_halt+0xf/0x20 [ 390.916750][ C1] ? default_idle+0x9/0x20 [ 390.916763][ C1] ? default_idle_call+0x72/0xb0 [ 390.916777][ C1] ? do_idle+0x36a/0x5f0 [ 390.916814][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 390.916831][ C1] insert_work+0x3d/0x330 [ 390.916845][ C1] __queue_work+0xcef/0x1040 [ 390.916864][ C1] ? __queue_work+0x1ae/0x1040 [ 390.916882][ C1] call_timer_fn+0x192/0x5e0 [ 390.916898][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 390.916915][ C1] ? call_timer_fn+0xd4/0x5e0 [ 390.916931][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 390.916953][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 390.916974][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 390.916991][ C1] __run_timer_base+0x67e/0x8b0 [ 390.917006][ C1] ? ktime_get+0x45/0x220 [ 390.917033][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 390.917056][ C1] run_timer_softirq+0xb7/0x170 [ 390.917071][ C1] handle_softirqs+0x22a/0x840 [ 390.917087][ C1] ? __irq_exit_rcu+0xca/0x220 [ 390.917106][ C1] __irq_exit_rcu+0xca/0x220 [ 390.917121][ C1] irq_exit_rcu+0x9/0x30 [ 390.917134][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 390.917154][ C1] [ 390.917159][ C1] [ 390.917165][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 390.917180][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 390.917200][ C1] Code: 9b 7d 02 e9 93 f7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 91 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 390.917212][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 390.917224][ C1] RAX: 00000000000e6c35 RBX: ffffffff819a958a RCX: 0000000080000001 [ 390.917235][ C1] RDX: 0000000000000001 RSI: ffffffff8dfa6c27 RDI: ffffffff8c28af60 [ 390.917245][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 390.917256][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 390.917266][ C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 1ffff11003b5b000 [ 390.917279][ C1] ? do_idle+0x36a/0x5f0 [ 390.917300][ C1] default_idle+0x9/0x20 [ 390.917313][ C1] default_idle_call+0x72/0xb0 [ 390.917327][ C1] do_idle+0x36a/0x5f0 [ 390.917351][ C1] ? __pfx_do_idle+0x10/0x10 [ 390.917373][ C1] cpu_startup_entry+0x43/0x60 [ 390.917390][ C1] start_secondary+0x101/0x110 [ 390.917403][ C1] common_startup_64+0x13e/0x147 [ 390.917431][ C1] [ 391.384878][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 391.391770][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 391.400878][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 391.410916][ T30] Call Trace: [ 391.414193][ T30] [ 391.417105][ T30] vpanic+0x56c/0xa60 [ 391.421070][ T30] ? __pfx___schedule+0x10/0x10 [ 391.425920][ T30] ? __pfx_vpanic+0x10/0x10 [ 391.430404][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 391.436546][ T30] panic+0xc5/0xd0 [ 391.440253][ T30] ? __pfx_panic+0x10/0x10 [ 391.444646][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 391.449997][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 391.456128][ T30] watchdog+0x102c/0x1030 [ 391.460439][ T30] ? watchdog+0x1c9/0x1030 [ 391.464841][ T30] kthread+0x389/0x470 [ 391.468888][ T30] ? __pfx_watchdog+0x10/0x10 [ 391.473557][ T30] ? __pfx_kthread+0x10/0x10 [ 391.478129][ T30] ret_from_fork+0x514/0xb70 [ 391.482703][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 391.487788][ T30] ? __switch_to+0xc79/0x1410 [ 391.492445][ T30] ? __pfx_kthread+0x10/0x10 [ 391.497020][ T30] ret_from_fork_asm+0x1a/0x30 [ 391.501771][ T30] [ 391.505153][ T30] Kernel Offset: disabled [ 391.509467][ T30] Rebooting in 86400 seconds..