last executing test programs: 7m53.623735364s ago: executing program 1 (id=4327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a320000000014000780050014000300000008000840000000000500050002000000050001"], 0x60}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000480)="b7028d7a89a1a9e34b7acba3d9bff1ab77e1013b52513a5cb7", 0x19}], 0x1) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 7m53.46709904s ago: executing program 1 (id=4330): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xfffffd6d, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7m53.316741552s ago: executing program 1 (id=4332): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa000000000000711037000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000580)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r2, 0x0, 0x30, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000100)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r6], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 7m53.142874997s ago: executing program 1 (id=4336): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a31000000000800054000000002"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) (async) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x1, 0x1, 0x5, @vifc_lcl_addr=@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 7m52.976930818s ago: executing program 1 (id=4339): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x54}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x54}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r5, &(0x7f0000000340)='^'}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r5, &(0x7f0000000340)='^'}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) sendmsg$nl_route(r5, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4000000) recvfrom(r2, &(0x7f0000000000)=""/54, 0x36, 0x40000002, 0x0, 0x0) (async) recvfrom(r2, &(0x7f0000000000)=""/54, 0x36, 0x40000002, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000009"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000009"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01010000000000000000010000000900010073797a30000000000900020073797a300000000014000380080002400000000008000140000000072c000000180a05000000000000000000010000000900010073797a30000000000c0005"], 0xc8}}, 0x0) r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket(0x1d, 0x2, 0x6) (async) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000040)={0x1d, r9, 0x8000000000000003}, 0x18) sendmmsg$inet(r8, &(0x7f0000002bc0)=[{{&(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="cf2b", 0x206c}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x2, 0x6ef8eb021116b2d8) readv(r7, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/1, 0x1}], 0x1000000000000123) socket(0x10, 0x803, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={0x1, @null, @bpq0, 0x244e1dff, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfff, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r3}}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 7m52.583601137s ago: executing program 1 (id=4348): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7ff, '\x00', 0x0, r0, 0xfffffffc, 0x0, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1, 0xffffffffffffffff}, 0x4) r3 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1030000080003400000000114000000110007"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000040)="c021", 0x2}], 0x1, 0x7, 0x1) socket$key(0xf, 0x3, 0x2) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) socket$netlink(0x10, 0x3, 0x7) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000001540)={r3, &(0x7f0000000280)='-\')&@^%^\x00', 0x2100, &(0x7f00000002c0)={@align, {0x6, 0xcb8, 0x1, 0x5}}, 0x5, &(0x7f00000003c0), &(0x7f0000001500)=0x5}) getsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f00000010c0)=@assoc_value={r9, 0x2}, &(0x7f0000001100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000240)={r9, 0xff}, 0x8) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r11 = socket$igmp6(0xa, 0x3, 0x2) r12 = socket(0x2a, 0x2, 0x0) getsockname$packet(r12, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r11, 0x8918, &(0x7f0000000040)={@empty, 0x3c, r13}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x4, 0x0, r2, 0x40, '\x00', r13, r0, 0x0, 0x4, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x4, 0x1006, &(0x7f00000004c0)=""/4102, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) 7m37.542289676s ago: executing program 32 (id=4348): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7ff, '\x00', 0x0, r0, 0xfffffffc, 0x0, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1, 0xffffffffffffffff}, 0x4) r3 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1030000080003400000000114000000110007"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000040)="c021", 0x2}], 0x1, 0x7, 0x1) socket$key(0xf, 0x3, 0x2) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) socket$netlink(0x10, 0x3, 0x7) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000001540)={r3, &(0x7f0000000280)='-\')&@^%^\x00', 0x2100, &(0x7f00000002c0)={@align, {0x6, 0xcb8, 0x1, 0x5}}, 0x5, &(0x7f00000003c0), &(0x7f0000001500)=0x5}) getsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f00000010c0)=@assoc_value={r9, 0x2}, &(0x7f0000001100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000240)={r9, 0xff}, 0x8) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r11 = socket$igmp6(0xa, 0x3, 0x2) r12 = socket(0x2a, 0x2, 0x0) getsockname$packet(r12, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r11, 0x8918, &(0x7f0000000040)={@empty, 0x3c, r13}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x4, 0x0, r2, 0x40, '\x00', r13, r0, 0x0, 0x4, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x4, 0x1006, &(0x7f00000004c0)=""/4102, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) 3m59.380559079s ago: executing program 4 (id=7130): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x75, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x67, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}, {"c8fd75a55cea55431a0df064535453f7c0b9376f3fa20800d19af9e68bd0c75e46b1c0d4c5a14e8ce3e28fd739913a5d1064c377167a00e7dc89bd8f93290b"}}}}}}, 0x0) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000000240)=""/110, &(0x7f00000000c0)=0x6e) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x15b}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000600)={r2, 0xb55, 0x6f, "69ea09152fb455042994eb6e8d964aa8ee27e22bd1babf805fa137d3acaa68bcbb21ecec3cd5ef92f836c9f1dac2a9426f12b1d46cc2243e4f2ef0d0bac6db64d78015d68706d77d54645ef718ff12e8721f1eef8073c3d3731ce86c02cc9f7b524bb63046319b9cea96c48d1236ff"}, 0x77) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x41, 0x3, 0x1f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x160, 0x1f0, 0x1f0, 0x160, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x90, 0x0, {0x0, 0xffffffffa0028000}}, @unspec=@TRACE={0x20}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x80, 0x101, 0xe, 0xc40, 0x3, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0xfffe}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x9}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x845}, 0x24008804) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001e000100fdffffff00000000020000000100000700000000080006000200000008000100"], 0x2c}, 0x1, 0x0, 0x0, 0x42816}, 0x0) 3m59.216162926s ago: executing program 4 (id=7134): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x208, 0x130, 0x208, 0x2a0, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@remote, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010100, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {}, 0x1d}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0xff]}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x1d}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x0, 0x0, 0x8}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a0001000000000000000000022000000000b8"], 0x2c}}, 0x0) 3m59.076719856s ago: executing program 4 (id=7136): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000040)={0x0, 'syz0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 3m57.232726312s ago: executing program 4 (id=7143): syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 3m57.184337054s ago: executing program 4 (id=7144): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x8a, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$inet(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x8a, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) (async) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) (async) 3m56.906557s ago: executing program 4 (id=7148): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x18c, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0xd0, 0x1, [@m_bpf={0xcc, 0xe, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0xa6, 0x2, 0x8, 0x3ad}, {0x43f, 0x5, 0x33, 0x200}, {0x8, 0xe5, 0xc0, 0x2}, {0xe, 0xe0, 0xa, 0x1ff}]}]}, {0x7d, 0x6, "5ebee8cb5ec798bed9e14471cd7fc80ada4a347f0a471b97541b3746862f593b574dd0b277a884f0ec7a65593a424488dee51eac7e3301dcd335734b379d1f821b27f9ace9c0ec57aa91fb75ea79531b85b941055b331912532963810dd2e455d7e1fce8f33fb311b8891e5737cded0da82817fe816da70d22"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0xa8, 0x1, [@m_mirred={0xa4, 0x9, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x401, 0x6, 0x101, 0x7}, 0x8}}]}, {0x55, 0x6, "c77e63c2ffad15aa9246aebf64cecf47dc781451d470dd0e4b0bebc618f05ef08ec0ec4c91ef65f0abb91c0ced382385ee38b58edcf45f876c46a8472a25411bcf621688e6523b8cdeee9a93529456a527"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) (async) openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) (async) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3m46.061589958s ago: executing program 5 (id=7260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x3}, 0x14}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xb, 0x3}, {}, {0x4, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x8010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500040a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c0004400000000000000007140000001100010000000000000000000100000a"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f000701ddffffff00000000037c00001800378013000300717472283414d6bb"], 0x2c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000880)={&(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000080)="c502186de39e8ab30f8789cf0a48ade50bd6fa05f61fb94a3367e735292a2aea280e50d4e0f0a2391aa852670aaed693a48ffd69b50049eef91266fc6f66dbcbb0acdf80c5d56c34c083d9216e5fefdba81ad92ea09246573ee3d1f12c217e4e37ac9504c702e61b1c815f4d96818a7f89d81caa2a390dda9df6189a19ef7bd30ab409a29613ed00580c617797e6a5c853d9b18ffe9f7b93a2153dd3caa80d5fc0ba5a6a765f171fed16574ba1ea9a2c9499c8a2b47babb7547f9a7607d1af72fc4974608c175186e938c85b93", 0xcd}, {&(0x7f0000000180)="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", 0xfc}, {&(0x7f0000000280)="d86bf7605965fa152855f0275d70e2f53a7551f6ccd5635d25c8fe01b97efe5e201ce9fdcbee5a3cb4ceb849d9f47fe053052a3b80c9372f33ccc0393d177987dbfefe969c7470b99ed901a798a76735cfe743df71b986cac2bdb1e5275be168627f74687fa586b5d9448c9f4f23aa493fac38891010d888c4d76dc5883841383e7f1ad6c38ec594dd3bc0b964a4501c01cd37125e365362130af2bbbd", 0x9d}, {&(0x7f0000000340)="1a2072a0", 0x4}, {&(0x7f0000000400)="01d80bff0885b20c899304ad7f3a85c025645710813d287845d1dd5e73e1c15e3538f6a2366a94ea1419269c15474bb45e250318518188fe642ed55f319ec57f7b7dbbc915f6b20910e13c41263be81719ce4040dd3ac653d3478d", 0x5b}, {&(0x7f0000000480)="111822a5f5a839f6ceccc6a88d749af76d53fb6d35b767bf4415aa481427e0f46b51f6ff3b05d2cb618b5e1fda7654742b06792acb2603ebc38eac", 0x3b}, {&(0x7f00000005c0)="ccf0fb74ef83b36637400fc6ec8425735e23b4c6f6a3d6a25c3b06106473dd8fb904bc5c77478bc19eff92ffad35df8e714c747854bf982b657762a35472f6f04f84e034735b988770629e805e722bf0f96d4bff22c4f09c8b9e10cafbdd519df3e7b080e52a85237e579ad01fc60f8094b57f9e8c8ef6979e98535a167f0567ffefaf6d1d0e833c1cbf035af29a5e0e851234c943d1722d98c5b9d0b632bda133def64f37c711b6a148a09748dcc97720d255692393501851f7941eff6d8d96d5432633c6d7e973b97fecf4a134", 0xce}, {&(0x7f00000006c0)="1e8250fb5fdef0d7483f3846823c0feae220d1d4399e48e07648cacf2f4b125a1818aa29ee2405965c8d0b1c0a404e5d8572dec55aba6f6bcc3e804486d3fda6d63803747f228f468732ac9f577c85cdc41ec9ef4c93feffcc1dfc4bd9c4d35b8e671a823f458d7a1dfef11fc91fdd5a60a7b02c2377e2045af743f65a9c327119bc10683f1bd2c487dc265b5c71c18d6ede059dfcc598343205459ae321310fad6d7b43a2dc6b4bd93902329e3a77ff3a3b3477d01a95e6c1", 0xb9}], 0x8, &(0x7f0000000800)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0x90, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@empty, 0x5}, {@loopback, 0x3}, {@rand_addr=0x64010102, 0x81}]}, @timestamp_addr={0x44, 0x14, 0xa2, 0x1, 0x3, [{@local, 0x10001}, {@empty, 0xfffff486}]}, @noop]}}}], 0x80}, 0x40000) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c000104000000000000000002000000", @ANYRES32=r11, @ANYBLOB="200008000a000100aaaaaaaaaabb000005000c000400000008000f0001"], 0x38}}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) r14 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) ioctl$SIOCAX25GETUID(r14, 0x891e, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000980)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x7c, r12, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_CSA_IES={0x30, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0x0, 0x4, 0x3, 0x401, 0x5, 0x9, 0x7, 0x3, 0x2]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x400, 0x6, 0x2]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x6, 0x7]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa0}]}, 0x7c}}, 0x800) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=0x0, @ANYBLOB="200001"], 0x38}}, 0x0) 3m45.78176872s ago: executing program 5 (id=7266): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000a, 0x12, r1, 0x0) ioctl$FIBMAP(r1, 0x1, 0x0) sendto$l2tp(r0, &(0x7f0000001040)="c3", 0x1, 0x4881, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000000740)={&(0x7f00000006c0)=[{&(0x7f00000001c0)="aab616dee88fc238fb1c60ef9a34c039af579145dab5048ca19d3b01883598ca526685563af67b1d1e50ca0de9e8ef24cf416bee7ed4b5fac39e8fac1a145fe9a42d649b61fe719bca5510acec1e05b9c1ba166fe2f7085422accfc77a95d8cb64b04d53f0a404951370aca5100d408de4ac95eb9a84f5201cbc9578b457fe5eae5dd236a9771e6729b6cf3951559437b761d91650a423d3c5971a6b2e82cd3e5abf6f5709723ce9a2ada9d8ed3a96f3b707cac1df1bcd1eacccd24f88", 0xbd}, {&(0x7f0000000280)="c9c38337f3a7a8046a2d8b70422e0f28bb48218bc5f374d147c3b26e017f90e67ca6f29d38684dba1b66e139c07dec1b40179cf4da014126f0c19682b5e44d102f5cd9007562d492b5c1cf937f594937d80204b4d7978825bea0fb4aec2ae1591cb87e36dc2d2d4b06ac270bbdc2870372c716f1586635dd75a64dc27678a265baba0e7d2e0d", 0x86}, {&(0x7f0000000340)="45b55e128210a343da240a3fcdd856c5e91a358fb2b40760f4a436e28a11b9290184b6eb6db90aa3081b26a333a4bd80960175a16d69e082491b50b7323c21bcb0d553dd5032b4e381d7db417b8c89bc784d9eb68afcb86a97d9448cccd54bff13c735dad42247089f664dde24cf6c98aa029d8532eb243177a0ea40e02c2a76d17db154c47f326f39d898e0ddf6c8f16e8cbfa6541484a190eea579f51f487eeb7d071602883d21b612b28e1ecad8c2f762b532c82e8526bd63cc74c0d63e53fab453180d0e5fa77246f6a9a4f7874546b4888e5041431bf8cea374784b2589e4f857df64f1e3e425bfe20b7ab338c2ed", 0xf1}, {&(0x7f0000000440)="93cf3e13c616d7441dffaf64efd1cb1c9065234d91e9edc9a628ecd065c29d5eaf40bb5a59b80d9a0205d37325d8b56950ec645ff23a7eece616b25765020ceb83380b70285f561c1e50c20d4aa4eb5d90923822ed3799246c2c00bf4b5def683c39d6e2481d38d9b21756decc2439bdbb43be738007bc3b9420f7f7ceda41cbb2a0", 0x82}, {&(0x7f0000000500)="f356f2e2b9e2dd445012abc6c0cfd0c6623a6f350048e70b4a320852232d8f4270810fff441f7ec0a7dd153a8ccbe67aa63e499dc8e5e09956ac89e440e3fc900e1c25cb086d856bcf4ff0c8bce68df17f43e741df", 0x55}, {&(0x7f0000000580)="4a3c0f4a93d8222aaa399d51a862b4d0b6f6b79e79fd8c3c849496e84993e93c53fad6704b6e", 0x26}, {&(0x7f00000005c0)="f74b5934cf9ea426cf6b6faf0f56b0bbf1d88643f071fb7186b069a0948026915e4f9d39deae9ff842f7a8e719bd5f0d90a42227c3746e70c5df4aa9081cdd2817ab19311d5e7e71c0cf7387aad3871ab8bd51fcc6695a0d1a6300f64cf3306b66a7d63c1e4575aa6f7178e07cb106535d05b209dc3ff901b4eb72c3a4b317b7e9464c4e4af97b85c6af84bd438f147b968a96a03a79dfbaf18014a64219eb17196cac57bdf9bc5e27823a0706af671eb1fd9b880098cb5f5d6711f3f663bfbf330b", 0xc2}], 0x7, 0x4, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x5, 0x3ff}) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x9c35}}, 0x20}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 3m45.591213917s ago: executing program 5 (id=7270): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001e00010000000000000000000710"], 0x1c}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2b, 0x1, 0x1) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x10000, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x14, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000280), &(0x7f0000000000)=r3}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x11, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaabb001a00e100d40000000000"], 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0x803, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r3, r8}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r7, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 3m45.504421269s ago: executing program 5 (id=7272): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x40, 0x40, 0x9, 0x4, @private0, @private2, 0x8000, 0x80, 0x5, 0xb}}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@delchain={0x2c, 0x65, 0x4, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x1, 0x7}, {0x9, 0xd}, {0x10, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x7b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x880) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRESOCT], 0x38}}, 0x0) 3m45.383314828s ago: executing program 5 (id=7273): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x80, 0x20, 0x0, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}}) unshare(0x20000400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES64=r2], 0x5c}}, 0x840) 3m45.346059479s ago: executing program 5 (id=7275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) 3m41.858154948s ago: executing program 33 (id=7148): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x18c, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0xd0, 0x1, [@m_bpf={0xcc, 0xe, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0xa6, 0x2, 0x8, 0x3ad}, {0x43f, 0x5, 0x33, 0x200}, {0x8, 0xe5, 0xc0, 0x2}, {0xe, 0xe0, 0xa, 0x1ff}]}]}, {0x7d, 0x6, "5ebee8cb5ec798bed9e14471cd7fc80ada4a347f0a471b97541b3746862f593b574dd0b277a884f0ec7a65593a424488dee51eac7e3301dcd335734b379d1f821b27f9ace9c0ec57aa91fb75ea79531b85b941055b331912532963810dd2e455d7e1fce8f33fb311b8891e5737cded0da82817fe816da70d22"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0xa8, 0x1, [@m_mirred={0xa4, 0x9, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x401, 0x6, 0x101, 0x7}, 0x8}}]}, {0x55, 0x6, "c77e63c2ffad15aa9246aebf64cecf47dc781451d470dd0e4b0bebc618f05ef08ec0ec4c91ef65f0abb91c0ced382385ee38b58edcf45f876c46a8472a25411bcf621688e6523b8cdeee9a93529456a527"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) (async) openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) (async) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3m30.102101176s ago: executing program 34 (id=7275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) 2m1.590431732s ago: executing program 7 (id=8526): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@broadcast, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x33, 0x0, 0xffffffffffffffff}, {0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, [@tmpl={0xc4, 0x5, [{{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in6=@remote, 0x3501, 0x1, 0x0, 0x3b, 0x83, 0x5, 0x7}, {{@in6=@local, 0x4d6, 0x3c}, 0xa, @in6=@private1, 0x3502, 0x2, 0x0, 0x7, 0x7f, 0x0, 0x4}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d3, 0x6c}, 0xa, @in=@private=0xa010100, 0x3502, 0x5, 0x0, 0xce, 0xe, 0x47b, 0x3}]}]}, 0x17c}}, 0x4000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) (async) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, 0x0, 0x0) close(r3) (async) close(r3) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r6, &(0x7f0000000280)={@val={0x0, 0x6005}, @val={0x7, 0x0, 0xe000, 0x9, 0xff1a, 0xc4d2}, @eth={@local, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@arp={0x806, @generic={0x17, 0x809b, 0x6, 0x5, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, "db21409c77", @random="1a5cb3f7a58b", "249141b006f19e12643dea7464"}}}}}, 0x4a) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'veth0_to_bond\x00'}) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) 2m0.451325745s ago: executing program 7 (id=8536): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x2d}]}}]}, 0x3c}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010071dfe240", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) 2m0.294994392s ago: executing program 7 (id=8539): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) 2m0.205897631s ago: executing program 7 (id=8540): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000085}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3b}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000030500000000fcffff5d4c890200", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r3, @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m59.855004189s ago: executing program 7 (id=8544): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1000000, 0x13, r2, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}], 0x1}}], 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0xd0, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d807a6bf63ae130a0da8fb4ce593d16ca4e6a52cb3552581"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "002b7cca57da4605f8ce5b12136859916c0c9a135efda52f"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "11bce7bd7fb350a398989aafb242ba7299c7077b005fe070"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "76176a07701e4797d10241890076de8f1045109ecec40a9d"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0xd0}}, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r4, &(0x7f0000000540)={{0x3, @null, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r5 = syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r6 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x61f0, 0x0) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x5, 0x0, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000000440)={r0, &(0x7f0000000180)='[[\x00', 0x101140, &(0x7f0000000240)={@_ha_fsid={[0x101, 0x1]}, {0x800, 0x1, 0x3, 0xe1d}}, 0x7f, &(0x7f0000000280)={@_ha_fsid}, &(0x7f0000000400)=0xe108}) setsockopt$inet6_udp_int(r9, 0x11, 0x67, &(0x7f0000000480)=0x91, 0x4) sendmmsg$inet6(r8, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)="d3f04bb4604aed32226e529c8812223fc4797c733f8176720c3ad91b943b1ad6f8027b3cc582e5502433b313659a57fa991300b16a4529482443b67e8a41483837b5f9f422cb9d69b64f69b4bb9d3fdc2907e8201322498ed0448ce67f43a68a92938a420012241f6712e9dc52e38a6aed925779287435d8441c3f33760552e488dc42bcadd66a5e1643c45095a0aaae13af", 0x4880}], 0x1}, 0x7101}], 0x1, 0x4001c00) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 1m58.798097562s ago: executing program 7 (id=8558): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000005500000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="24005a8020000180140003000000000000000000000000000100000004000200040001"], 0x40}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)=@newtaction={0x48, 0x5a, 0x1, 0x0, 0x0, {0x2}, [{0x34, 0x1, [@m_pedit={0x30, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="22c6865513e654fe8deee44fd7d0db07270560267d6f8c6a3bca1d408424cfeac964f298401e9ac880269c8f", 0x2c}, {&(0x7f00000002c0)="82df26ecce34060f9b3899eae7b99b97bb2d1fa7256abe75629985f05761fc46ede2e8bb677e1392f6f3ed5f639df408114777209fdd777905d6af6ae9b1bc0de3b95df8f83d6c6d813c66dfb1c6618f25bde33e1f37cea91fbebb94f4d1cf6b65fc36cbf86af9bcd645567e3bbe1952b13d296ae4b11288dab3597558b11b310b704bd470706c401ea13860ad9aac8d01a27ca3e39f989223e6449164707620f280379bad21d11e643355e1610eea405709d8bcd184de749d3965676f3c6d8ef1124be6d59e2dcc", 0xc8}, {&(0x7f00000003c0)="29488ca9d0c598e63e2230572b705515cc30b9c2e450c0fc8515027e25616b6a27d02769a9b3333d95105c602d2e47e1d9c667afa4c893436fedb5", 0x3b}, {&(0x7f0000000400)="7e4bf8f3fdf8b31a294d33d22527ef8f0a9d4bcf161425505f4dc2aa76fb4d36296320e158168611f5a21c027221e742b94426eeddf51e2cca4364107b9eb182d97ca93ad571ac09c9de090b", 0x4c}, {&(0x7f0000000480)="d0ed37ad795326e29a12e977b3dccb7247ee03088157622c2ad56ba274171a6ced6ac20064ac0835282f946cdc1dbd514f395f8eb516a4c1022b3b5b76bd088aa785366054737f54f2dc3ba88dfcad3f0778c9c54498c648fcd855af4fe3fb38c19293851d168e5f26dfd16b50a9b02f56e84a1fe2d2918a16a197a533c0afadc32dc1db33e6b1cdc25630681031096f156fb5b1d21541e0bc282127c20bc592c53a8d102d75230e5fe4a0744e82435f", 0xb0}], 0x5}, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) sendto$inet6(r0, &(0x7f0000000840)="a6e0775c40424ae2fa17e3edddc8537453d7cfd2", 0x14, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc}, @exit, @alu={0x7, 0x1, 0xb, 0x0, 0x0, 0xffffffffffffffff, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x48}, 0x94) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) shutdown(r0, 0x1) 1m43.679864854s ago: executing program 35 (id=8558): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000005500000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="24005a8020000180140003000000000000000000000000000100000004000200040001"], 0x40}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)=@newtaction={0x48, 0x5a, 0x1, 0x0, 0x0, {0x2}, [{0x34, 0x1, [@m_pedit={0x30, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="22c6865513e654fe8deee44fd7d0db07270560267d6f8c6a3bca1d408424cfeac964f298401e9ac880269c8f", 0x2c}, {&(0x7f00000002c0)="82df26ecce34060f9b3899eae7b99b97bb2d1fa7256abe75629985f05761fc46ede2e8bb677e1392f6f3ed5f639df408114777209fdd777905d6af6ae9b1bc0de3b95df8f83d6c6d813c66dfb1c6618f25bde33e1f37cea91fbebb94f4d1cf6b65fc36cbf86af9bcd645567e3bbe1952b13d296ae4b11288dab3597558b11b310b704bd470706c401ea13860ad9aac8d01a27ca3e39f989223e6449164707620f280379bad21d11e643355e1610eea405709d8bcd184de749d3965676f3c6d8ef1124be6d59e2dcc", 0xc8}, {&(0x7f00000003c0)="29488ca9d0c598e63e2230572b705515cc30b9c2e450c0fc8515027e25616b6a27d02769a9b3333d95105c602d2e47e1d9c667afa4c893436fedb5", 0x3b}, {&(0x7f0000000400)="7e4bf8f3fdf8b31a294d33d22527ef8f0a9d4bcf161425505f4dc2aa76fb4d36296320e158168611f5a21c027221e742b94426eeddf51e2cca4364107b9eb182d97ca93ad571ac09c9de090b", 0x4c}, {&(0x7f0000000480)="d0ed37ad795326e29a12e977b3dccb7247ee03088157622c2ad56ba274171a6ced6ac20064ac0835282f946cdc1dbd514f395f8eb516a4c1022b3b5b76bd088aa785366054737f54f2dc3ba88dfcad3f0778c9c54498c648fcd855af4fe3fb38c19293851d168e5f26dfd16b50a9b02f56e84a1fe2d2918a16a197a533c0afadc32dc1db33e6b1cdc25630681031096f156fb5b1d21541e0bc282127c20bc592c53a8d102d75230e5fe4a0744e82435f", 0xb0}], 0x5}, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) sendto$inet6(r0, &(0x7f0000000840)="a6e0775c40424ae2fa17e3edddc8537453d7cfd2", 0x14, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc}, @exit, @alu={0x7, 0x1, 0xb, 0x0, 0x0, 0xffffffffffffffff, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x48}, 0x94) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) shutdown(r0, 0x1) 6.022991667s ago: executing program 6 (id=9666): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r4) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[], 0x2c}}, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x61d0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000280)={'mangle\x00', 0x0, [0x6, 0x4a3, 0xdb4, 0x40000004, 0x3ff]}, &(0x7f0000000240)=0x54) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70ad25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x81}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r6 = socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000600)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_bpf={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x0, 0xc1}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x87030000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'wg1\x00', &(0x7f0000000080)=@ethtool_cmd={0x4a, 0x1, 0x5f3e, 0x81, 0xee, 0xaf, 0x80, 0x5, 0xc, 0x7f, 0x200, 0x6, 0x3, 0x9, 0xa3, 0x3ad3, [0x1ff, 0xcbc]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 2.655536728s ago: executing program 3 (id=9697): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x0, 'perf_event'}, {0x2d, 'perf_event'}, {0x6, 'devices'}, {0x2d, 'perf_event'}]}, 0x2d) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="0008c200000050a245d5cde008004500002800000000000290d2ddd3f700ffffffff12009078e00000020000000000000000000000004b3fb70fb4a7dc2fe47b50d01b20507fc65c24ab61bf6fdff074f6e51338af"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.534869602s ago: executing program 0 (id=9698): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0xf}, @typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 2.47376882s ago: executing program 3 (id=9699): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x14, 0x0, 0x1, [@generic="b0"]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0000000130001"], 0xe0}}, 0x0) 2.354555201s ago: executing program 0 (id=9701): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x61d0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x78, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES16=r2], 0xa4}, 0x1, 0x0, 0x0, 0x805}, 0x801) 2.333857843s ago: executing program 3 (id=9702): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xb}, {0xe, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c060}, 0x90) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/77, 0x4d}, {&(0x7f0000001880)=""/4112, 0x1010}, {&(0x7f0000001680)=""/100, 0x64}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f00000005c0)=""/48, 0x30}], 0x5}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0xd9f}], 0x4, 0x2030, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x1, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x6c}, 0x0, @in=@loopback, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56551, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0x1, 0xffff}, {0xa, 0x1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x1, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_int(r7, 0x0, 0x0, &(0x7f0000000000)=0x4, 0x4) 1.323794611s ago: executing program 8 (id=9712): r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'team_slave_1\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb2504000000080004"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000a000400aaaaaaaaaa00000008000300030000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r7], 0x80}}, 0x0) write$tun(r5, &(0x7f0000000000)=ANY=[], 0x38) (async) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x933a, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8b15, &(0x7f0000000000)={'wlan0\x00'}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r12, 0x401c5820, &(0x7f0000000080)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x16, 0x200000000000000f, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100082020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300850000008c0000009500"/88], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="000000009d2f0d53fc0f69c8db000000001c0012805190010069706970000000000c001c800500090004000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x2c, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [{0x8, 0xb, 0x6}]}, 0x2c}}, 0x20000000) 1.280797153s ago: executing program 6 (id=9713): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$OCFS2_IOC_REFLINK(r1, 0x40186f04, &(0x7f0000000100)={&(0x7f0000000000)='IPVS\x00', &(0x7f0000000040)='\x00', 0x3}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="170a3baf9e36000000"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_BLACKHOLE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x8, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x444c}}}}}}, @IFLA_GROUP={0x8, 0x1b, 0x55690764}]}, 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$OCFS2_IOC_REFLINK(r1, 0x40186f04, &(0x7f0000000100)={&(0x7f0000000000)='IPVS\x00', &(0x7f0000000040)='\x00', 0x3}) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="170a3baf9e36000000"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_BLACKHOLE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x8, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x444c}}}}}}, @IFLA_GROUP={0x8, 0x1b, 0x55690764}]}, 0x50}}, 0x0) (async) 1.278636849s ago: executing program 0 (id=9714): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x2, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)={0x100, 0x2c, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0xf0, 0xf2, 0x0, 0x1, [@nested={0x4, 0x9}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640d", @typed={0x4, 0x145}]}]}, 0x100}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.278363171s ago: executing program 2 (id=9715): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000200), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000003c0)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) listen(r1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) (async) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0x2f2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000850}, 0x20084084) listen(r0, 0x0) (async) close(0x3) 1.12325557s ago: executing program 3 (id=9716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e000100fdffffff00000000ff00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n\x00'], 0x28}}, 0x0) 1.123055133s ago: executing program 8 (id=9717): syz_emit_ethernet(0xb2, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x7c, 0x2b, 0x0, @private2, @local, {[@srh={0x3b, 0x2, 0x7, 0x1, 0x0, 0x0, 0x0, [@dev]}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) 1.122715377s ago: executing program 6 (id=9718): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$netlink(0x10, 0x3, 0xa) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000080)=ANY=[@ANYBLOB="130000001900010000000000ffdbdf251d010900"], 0x24}, 0x1, 0x0, 0x0, 0x20048c04}, 0x0) (async) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) (async) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYBLOB="01000000000000000000540500000e0002006e657464657673696d0000000f0002"], 0x34}}, 0x140080d0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0x0, 0x2, 0x20, @loopback, @private0, 0x1, 0x8, 0x423c, 0x7}}) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000700048d12bbd00"/20, @ANYRES32=r6, @ANYBLOB="0c00018005000600560000000c0001800600020003000000"], 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x808) (async) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfcbfb, {0x0, 0x0, 0x0, r8, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0xf}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 1.10350757s ago: executing program 2 (id=9719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x15, 0x0, &(0x7f0000000280)) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2e, &(0x7f0000000000)=0x80000001, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a300000001b0a01080000000000000000020000000900010073797a30000000000c0002400000000000000001040004801400000011000100000000000000000004000000"], 0x58}}, 0x0) 968.537968ms ago: executing program 8 (id=9720): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, 0x0, &(0x7f0000000080)=0xc00) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x5e, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="5afb7e6e3739bc29ed705a81917a25e88d86b99aa6cb208a77342bf407df74e30e65766c51215606313e0850f8828383b370b40e1b844068f7d8990a8cedf47a2c31484b6f3bc83720bc613856564bf864d8a15daedeb098b43d03c1d70bb1aa3d115f9096538b7a3c734a2d2ad2df6f91e37b3299817c34363934cd71310b5fd967efbe9a744166f5017578024c5e8d00e96abf038f77258dfc59eb756ee11183aef9bdc19455ea781e90", @ANYRES64=r1, @ANYRESOCT=r1, @ANYRES64=r1, @ANYRESHEX=r1, @ANYRESHEX=0x0, @ANYRES16=r1], 0x10b8}, 0xff00) 907.325937ms ago: executing program 2 (id=9721): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet(0x2, 0x80000, 0x9) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000c7057b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000bab704000000000000850000001600000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) 906.967868ms ago: executing program 3 (id=9722): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x401, 0xfffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81a07e, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP_WIFI={0x5, 0xc, 0x1}, @IFLA_BRPORT_BACKUP_PORT={0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4840) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@ipv4_delrule={0x28, 0x21, 0x1, 0x0, 0x0, {0x2, 0x14}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}]}, 0x28}}, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x10004810}, 0x20008884) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x1, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x2e, 0xe]}}, 0x0, 0x28}, 0x20) ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f0000000080)={0x29, "4288fa5a25e3873d71ec38b44f47d1e68ed9a629a26e57e649b95d7c078e8cedd6dd481f3a033f81573ea9ba85748d856c53cf3fbe9c37d35b493cedf2a6baaf53fc8b9efe693812c46dcd9b747174d9572bdf4f7dfcfb1b0027d651bf31d3fc37e0454dd4d784041795b8bfc2da80a2a695703c64d8c3eb0c3478f4c3a87773"}) 841.573735ms ago: executing program 6 (id=9723): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x800) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d40)=""/4096, 0x1000}, {0x0, 0x12}], 0x2}, 0x5}], 0x1, 0x102, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000006000000000000000000008500000041000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x456e}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r5, 0x8929, &(0x7f0000000440)="8d557fd094c38f748ec33512ef3a") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x8, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f280d", 0x0, 0xffc5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket(0x11, 0x3, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0xffbffffe, @mcast1, 0x9}, 0x1c) setsockopt$sock_int(r7, 0x1, 0x14, &(0x7f0000000040), 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0xc090}, 0xc000) 752.074047ms ago: executing program 3 (id=9724): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x61d0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x78, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES16=r2], 0xa4}, 0x1, 0x0, 0x0, 0x805}, 0x801) 751.663197ms ago: executing program 8 (id=9725): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000002c0)={0x30, r2, 0x1, 0x70bd2c, 0xffeffffe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x52}]}, {0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x42}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x4004000) (async) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x2, @private1, 0x28}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="dc", 0x1}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x280}}], 0x1, 0x880) shutdown(r0, 0x1) (async) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x2, 0x0, @mcast1, 0x9}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000b00)={0x0, 0x2}, &(0x7f0000000b40)=0x8) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xfff3}}}, 0x24}}, 0x0) (async) recvmmsg(r6, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2, &(0x7f0000000200)=""/48, 0x30}, 0x4}], 0x2, 0x40002320, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$AUDIT_USER_AVC(r8, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x48, 0x453, 0x300, 0x70bd2b, 0x25dfdbfb, "a5a9f243367bc08d2fe1377f48017cb99c7ee10416658fb0c845ee4ab885ace636049ac11400d0c9ac1c841b99d590fa7cb922007a", [""]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r7) (async) connect$unix(r5, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x702, 0xe, 0x0, &(0x7f0000000100)="e4604f89ecdb33440008d4800800", 0x0, 0x8009, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x24, r9, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008880) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r9, @ANYBLOB="200027bd7000fddbdf25180004003c0004801300010062726f6164636107742d6cdc6e6b00002400078008000100190000000800010012000000080001001100000008000400790300009800058008000100657468000c0002800800040003000000340002800800030001000000080003000e000000080001001b00000008000400030000000800010009000000080003000600000008000100756470004400028008000400060000000800040009000000080002000d0000000800010005000000080003000d5bb03a0800020002000000080002000f000000080004000100000014000380080001000001000008000100ec6d9b5d"], 0xfc}, 0x1, 0x0, 0x0, 0x44804}, 0x20008000) (async) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r5, &(0x7f0000001980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x14, r2, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071118200000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (rerun: 64) 614.718816ms ago: executing program 0 (id=9726): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r1, 0xd7735000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad", 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000061107e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 614.136378ms ago: executing program 2 (id=9727): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x8, 0x3}, {0xfff1, 0xffff}, {0xffff, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f00000001c0), &(0x7f0000000080)=""/52}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f00000001c0), &(0x7f0000000080)=""/52}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x108) 518.786579ms ago: executing program 8 (id=9728): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r2, 0xc252d000) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)="5d46542b3090ce5ceca970bf8abf170549531f3309044e8b5176033b03b6ffb6877fc1bf93944e8918f7671993d5b56494717c96f1a910bc20b312c4ac1319c04da6b26ab882b4086cb2ac1545cef2003c2f29885496d182cc00eb08067822dfbfa896a37248b990eeeec77445d6f8da52deda337f8af0366be93702298a20b912b44091a10ec9d76ab09f3b44ee95c1de86a9fee94df8dc49001ce17774fea95cd2cbd5e662f1ea9d73351feabf5ef6f6bba0853c240188f92c5f4ae3c27038150a5c6ac31cb4545d6baabd07f705a1ea0e", &(0x7f0000000100), 0x1003, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r4, &(0x7f0000000180)="f85115", 0x0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x16, &(0x7f0000000140)=@raw=[@map_idx={0x18, 0x3, 0x5, 0x0, 0xb}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0x2b}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x2}, @ldst={0x0, 0x0, 0x0, 0x5, 0x9, 0x0, 0x1}], &(0x7f0000000200)='GPL\x00', 0x7fff, 0x3c, &(0x7f0000000240)=""/60, 0x41000, 0x41, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000280)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x1, 0x7fffffff, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000340)=[r3, r4], &(0x7f0000000380)=[{0x3, 0x5, 0xc, 0x1}], 0x10, 0x9}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}]}}}]}, 0x3c}}, 0x0) 450.692182ms ago: executing program 0 (id=9729): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) bind$packet(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000002c0)={@void, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x56}, @val={@val={0x88a8, 0x0, 0x1, 0x2}, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x8}}}}}}}, 0x46) socket(0x1000000010, 0x80002, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) r7 = socket(0x29, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) connect$pppl2tp(r7, &(0x7f0000000ec0)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @remote}, 0x3, 0x1, 0x1, 0x2}}, 0x26) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x0, 0x70b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x40000a0) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000dc0), r8) sendmsg$GTP_CMD_GETPDP(r8, &(0x7f0000000e80)={&(0x7f00000002c0), 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x28, r10, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_FAMILY={0x5, 0xd, 0x1d}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xbd, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x21, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) 343.194654ms ago: executing program 6 (id=9730): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x50, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x50, 0xffffffffffffffff, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f0000000100)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000007c0)='g', 0x1}], 0x1) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01800000000000000000030202000900010053"], 0x20}, 0x1, 0x40030000000000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="ad43000000f45400000001"], 0x14}}, 0x20000850) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$cgroup(r0, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x0, 0x0, 0xfffffffffffffce5, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x0, 0x0, 0xfffffffffffffce5, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_procs(r8, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r7) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r7) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) socket$xdp(0x2c, 0x3, 0x0) (async) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000140)=""/126, 0x109000, 0x1800, 0x8, 0x2}, 0x20) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r7) (async) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r7) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000429bd7000fcdbdf251e0000004c002f800c0002000202aaaaaaaaaaaa3000038008000400b00000000c0005007f000000000000000500020003000000080004000900000005000200010000000c0002000202aaaaaaaaaaaa0c0006000200000000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000429bd7000fcdbdf251e0000004c002f800c0002000202aaaaaaaaaaaa3000038008000400b00000000c0005007f000000000000000500020003000000080004000900000005000200010000000c0002000202aaaaaaaaaaaa0c0006000200000000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$vsock_stream(r12, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) 328.933169ms ago: executing program 2 (id=9731): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000007b030000000000008500000083000000790900000000000055090100000000009500000000000000bf91000000000000b70200000200000b8500000069000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) 324.121261ms ago: executing program 8 (id=9732): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x8000000000000000, 0x401, 0xd, 0x800}) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x61d0, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYBLOB='1'], 0x1c}, 0x1, 0x0, 0x0, 0x20040034}, 0x88081) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r0], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b701984b3911f6bb744dc48f57", 0x39}], 0x1) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x1406, 0x4, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080c4}, 0x4000) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000140)={0x2}, 0x4) 158.640613ms ago: executing program 2 (id=9733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c000) (async, rerun: 32) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async, rerun: 64) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r0, @ANYRESDEC=r1, @ANYRES32=r1, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES64=r1, @ANYBLOB="6ce87754468cedb84e8c780f5f5694e8968cde5713a5ce18b8140df3aec7fd5467b6cffa19be93a893615e105b8535d1122fb03b5e4eb6cf00afc894e212ebf32c63c771dd4cc506f3fa71e7fd294bbeaffce2564e511e8a05d9a07cef0133392fa0d7a8fe50475631e316255aecafd7f4d344f882516eecec9705fcc5b886b56a6a6a522aeb4478248d9104cb83016b4636ad99c596b9305276b80c8aaed97b91eaa87ef81eb3ddd0c0baff6385ab63efcbe5", @ANYRESOCT=r1], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) socketpair(0x18, 0x6, 0x3, &(0x7f0000000300)) r3 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4a82014}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x160, 0x15, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0xfc, 0x8, "fe606dca307d912eae165444f5a2ab631fd2d760c979336bffccfeed000311b97eb56e5f29d821bd2bb5d2ef64fa923bd88335a744cc60a3080ac2fb91686259f2ed1e0efadd3b70190b85e35a59ab1191112c96e8c03d18ec554997e8ec0f25c6fb4992bf71347c75e7820d87b7e21a80e57aa2733875a49069b6f07adda71e4b16ea86dec63ee7c497eb5b1cb2577695f4febc5e57bef660d2c504d68f8c13d76308e2cae77ef7aa4d9190971c13cf55f6669e52225656e3ff20ffa8f509e9836e40a96c16f1cccfd2ed9e201a1f52bc607eefcc6fa2edccab52c9428eeb96d908b54a829dbe1ca8da6c6cc3f97e46acaa9636efe1e204"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0x2b, 0x8, "eae64a2a2a71d32d811f3079e2a60e166dd5ad9280289ea24f4a9655b5106a06afd91019819b77"}]}, 0x160}, 0x1, 0x0, 0x0, 0x884}, 0x8080) 102.168797ms ago: executing program 0 (id=9734): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 0s ago: executing program 6 (id=9735): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_PROTOCOL={0x6, 0x8, 0x8100}]}}}]}, 0x48}}, 0x88890) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10) socket$unix(0x1, 0x2, 0x0) sendmsg$sock(r3, &(0x7f00000005c0)={&(0x7f00000002c0)=@generic={0xb, "54fd4b4baa7b80a101202ca7eaa223d511a1d450702e9875243dac34e19cdb9352f9fa8c22615e77b95bb078faac89cc98adea995496a072906cc64312d87062d5646942bb8a4c4d0c03df0aa97f72a633c9aee52d1c58520b3bc5110dabcb711790d92536ca615dcd23a7753fa233092f936fd7b702d6a958d3692111ea"}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="7f895dfa23f81e2b2bb15d9e0b5e4e04a54487c6249a8ad188454c83068c37e8be286e8b9d8a67c43dfbc0dfa90e9b26f302fe5fdce48f4dd9e54a89460c0d29b71d10a09e7dcbdfff1dff3133e002e605481686c66205aa958133eb060fb6c2e5bcd0f8780a0b52aa0ed2", 0x6b}], 0x1, &(0x7f0000000540)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18}}], 0x78}, 0x4000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x8, 0x3a, 0xff, @private1, @mcast2, {[], @ndisc_rs}}}}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x7, 0x28, 0x68, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @broadcast}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x6}}}}, 0x36) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000600)={0x0, 0xb, '\x00', [@ra={0x5, 0x2, 0xc7d0}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}, @pad1, @calipso={0x7, 0x30, {0x6, 0xa, 0x9, 0x40, [0x6, 0x300000000000, 0x3, 0xb7, 0x9]}}, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x60) write$tun(r4, &(0x7f0000001240)={@void, @void, @mpls={[{0xb, 0x0, 0x1}], @ipv6=@generic={0xa, 0x6, 'rZR', 0x12d0, 0x3b, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x11}, {[@fragment={0x8c, 0x0, 0x8, 0x1, 0x0, 0x4, 0x65}, @hopopts={0x0, 0x3b, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0x76, 0x8, [0x4, 0x4, 0x2]}}, @generic={0xfd, 0xe5, "85a9dacc2a3cc96b5b3ede18aa6e9fb409ffd96ef08619d0be61b7f30fb8a42b44279e6827deda64c14aa8a52e0663fc34e58d70f2f69bdaf2f6e9808187cfe78952842cb24823b2f3b7984238fddec2e53ecf077f12b9d80373caa76e6b3f87114fdef72ea9df4c3752d37be3d6a55a88870aeb323d449ce40c137912f35b2760d66c283bdad931494e9004cdcc1eccc0945f06dc63b0c8c1518c4016fcf36602a3f3d63254c1ce92368afd01da628b911f2fa85ba371c6f1affdfcbca4fd0a57f59c60dcf8d8459c9af83b0e8e099af32c174f61c063b73cef22c4c4d9ae8dd5d5918ab1"}, @calipso={0x7, 0x50, {0x1, 0x12, 0x5, 0x2, [0x1, 0x6, 0xffffffffffffff17, 0x9, 0x80, 0x8, 0x3d2b, 0x8, 0x92]}}, @generic={0x9, 0x57, "503719df0df645ee47382cb75932f78534a10780cfa799d3361a6445c7767f8db64dc7c617311aa3e1b6fc66197a6b754a3dda0f8096f471c36b1dfc0d888985c8078bf047685ac8ddcdbd6f10481e7b013accc869bebb"}, @jumbo={0xc2, 0x4, 0x7}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x5}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @fragment={0x1d, 0x0, 0xf8, 0x0, 0x0, 0x2, 0x68}, @routing={0x33, 0xe, 0x1, 0x0, 0x0, [@loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @empty, @dev={0xfe, 0x80, '\x00', 0x12}, @empty, @dev={0xfe, 0x80, '\x00', 0x1f}, @dev={0xfe, 0x80, '\x00', 0x3a}]}, @hopopts={0xff, 0x5, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2e}}, @enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0x6}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x10}}]}, @srh={0x2b, 0x4, 0x4, 0x2, 0xd, 0x0, 0x8, [@empty, @private1={0xfc, 0x1, '\x00', 0x1}]}], "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"}}}}, 0x12fc) kernel console output (not intermixed with test programs): 82] bridge0: port 3(gretap0) entered disabled state [ 1070.365744][ T2382] gretap0: entered allmulticast mode [ 1070.633414][ T2394] syz_tun: entered allmulticast mode [ 1070.857692][ T2389] nbd4: detected capacity change from 0 to 63 [ 1070.875263][ T5835] block nbd4: Receive control failed (result -104) [ 1070.884410][ T5836] block nbd4: Receive control failed (result -32) [ 1070.899817][ T1324] block nbd4: Dead connection, failed to find a fallback [ 1070.917466][ T1324] block nbd4: shutting down sockets [ 1070.934336][ T1324] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1070.969365][ T1324] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1070.979392][ T1324] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1070.991939][ T1324] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1071.000507][ T1324] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1071.010554][ T1324] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1071.051709][ T2408] netlink: 'syz.6.7608': attribute type 26 has an invalid length. [ 1071.063258][ T2408] netlink: 'syz.6.7608': attribute type 26 has an invalid length. [ 1071.191138][ T2419] syz_tun: entered allmulticast mode [ 1071.364824][ T2436] IPv6: NLM_F_CREATE should be specified when creating new route [ 1071.386863][ T2391] syz_tun: left allmulticast mode [ 1071.487654][ T2440] netlink: 'syz.3.7614': attribute type 1 has an invalid length. [ 1071.527824][ T2442] openvswitch: netlink: Flow key attr not present in new flow. [ 1071.693987][ T2453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1071.713975][ T2459] netlink: 'syz.0.7623': attribute type 29 has an invalid length. [ 1071.863074][ T2471] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 1072.037676][ T2477] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 1072.643865][ T2507] syzkaller0: entered promiscuous mode [ 1072.670122][ T2507] syzkaller0: entered allmulticast mode [ 1072.853732][ T2523] tipc: Started in network mode [ 1072.868831][ T2523] tipc: Node identity ac14140f, cluster identity 4711 [ 1072.878506][ T2523] tipc: New replicast peer: 255.255.255.255 [ 1072.904032][ T2523] tipc: Enabled bearer , priority 10 [ 1072.918315][ T2526] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 1072.998253][ T2525] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1073.010051][ T2525] bond1 (unregistering): Released all slaves [ 1073.103322][ T2538] bridge2: entered promiscuous mode [ 1073.108825][ T2538] bridge2: entered allmulticast mode [ 1073.117628][ T2538] team0: Port device bridge2 added [ 1073.126449][ T2538] netlink: 'syz.6.7647': attribute type 25 has an invalid length. [ 1073.263825][ T2548] __nla_validate_parse: 13 callbacks suppressed [ 1073.263847][ T2548] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7650'. [ 1073.586515][ T2558] xt_CT: No such helper "snmp_trap" [ 1073.653377][ T2578] netlink: 'syz.2.7655': attribute type 1 has an invalid length. [ 1073.691361][ T2578] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1074.109512][ T8189] tipc: Node number set to 2886997007 [ 1074.147915][ T2597] netlink: 'syz.6.7660': attribute type 3 has an invalid length. [ 1074.166363][ T2597] netlink: 'syz.6.7660': attribute type 1 has an invalid length. [ 1074.201192][ T2599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7661'. [ 1074.212659][ T2597] netlink: 204 bytes leftover after parsing attributes in process `syz.6.7660'. [ 1074.250939][ T2602] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1074.313245][ T2604] netlink: 'syz.0.7663': attribute type 2 has an invalid length. [ 1074.323287][ T2604] netlink: 'syz.0.7663': attribute type 11 has an invalid length. [ 1074.334825][ T2604] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7663'. [ 1074.468459][ T2611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1074.479074][ T2614] IPv6: Can't replace route, no match found [ 1074.479796][ T2612] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7664'. [ 1074.486174][ T2614] IPv6: Can't replace route, no match found [ 1074.519113][ T2611] netlink: 'syz.7.7665': attribute type 21 has an invalid length. [ 1074.526957][ T2611] netlink: 128 bytes leftover after parsing attributes in process `syz.7.7665'. [ 1074.538774][ T2614] x_tables: duplicate underflow at hook 1 [ 1074.547020][ T2616] netlink: 'syz.6.7664': attribute type 4 has an invalid length. [ 1074.555706][ T2616] netlink: 17 bytes leftover after parsing attributes in process `syz.6.7664'. [ 1074.565260][ T2615] netlink: 'syz.7.7665': attribute type 21 has an invalid length. [ 1074.579867][ T2617] netlink: 128 bytes leftover after parsing attributes in process `syz.7.7665'. [ 1074.585340][ T2615] netlink: 128 bytes leftover after parsing attributes in process `syz.7.7665'. [ 1074.601693][ T2611] netlink: 3 bytes leftover after parsing attributes in process `syz.7.7665'. [ 1075.742517][ T2701] syzkaller0: entered promiscuous mode [ 1075.748478][ T2701] syzkaller0: entered allmulticast mode [ 1076.463948][ T2732] tipc: Failed to remove unknown binding: 66,1,1/0:3871800290/3871800292 [ 1076.479869][ T2732] tipc: Failed to remove unknown binding: 66,1,1/0:3871800290/3871800292 [ 1076.744873][ T2754] bond0: entered promiscuous mode [ 1076.750424][ T2754] bond_slave_0: entered promiscuous mode [ 1076.756347][ T2754] bond_slave_1: entered promiscuous mode [ 1076.783695][ T2754] batadv0: entered promiscuous mode [ 1076.803693][ T2754] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1076.882332][ T2754] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1076.929196][ T2754] hsr1: entered promiscuous mode [ 1076.947846][ T2754] hsr1: entered allmulticast mode [ 1076.957442][ T2754] bond0: entered allmulticast mode [ 1076.962648][ T2754] bond_slave_0: entered allmulticast mode [ 1076.978966][ T2762] validate_nla: 8 callbacks suppressed [ 1076.978982][ T2762] netlink: 'syz.7.7699': attribute type 21 has an invalid length. [ 1077.007564][ T2754] bond_slave_1: entered allmulticast mode [ 1077.013436][ T2754] batadv0: entered allmulticast mode [ 1077.030567][ T2764] netlink: 'syz.7.7699': attribute type 21 has an invalid length. [ 1077.048196][ T2754] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1077.077308][ T2754] bond0: left promiscuous mode [ 1077.083238][ T2754] bond_slave_0: left promiscuous mode [ 1077.089865][ T2754] bond_slave_1: left promiscuous mode [ 1077.096730][ T2754] batadv0: left promiscuous mode [ 1077.148596][ T2762] netlink: 'syz.7.7699': attribute type 4 has an invalid length. [ 1077.166758][ T2762] netlink: 'syz.7.7699': attribute type 5 has an invalid length. [ 1077.187948][ T2764] netlink: 'syz.7.7699': attribute type 4 has an invalid length. [ 1077.195748][ T2764] netlink: 'syz.7.7699': attribute type 5 has an invalid length. [ 1077.358217][ T2772] netlink: 'syz.3.7700': attribute type 1 has an invalid length. [ 1077.483036][ T2772] bond4: entered promiscuous mode [ 1077.491281][ T2772] bond4: entered allmulticast mode [ 1077.512539][ T2772] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1077.560527][ T2780] macvlan2: entered promiscuous mode [ 1077.586588][ T2780] macvlan2: entered allmulticast mode [ 1077.605114][ T2780] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1077.864468][ T2797] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1077.893935][ T2796] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1078.080006][ T2803] xt_ecn: cannot match TCP bits for non-tcp packets [ 1078.374429][ T2823] __nla_validate_parse: 19 callbacks suppressed [ 1078.374452][ T2823] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7714'. [ 1078.435527][ T2827] veth0_to_bridge: entered promiscuous mode [ 1078.551014][ T2831] ip6t_REJECT: ECHOREPLY is not supported [ 1078.582305][ T2831] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7720'. [ 1078.770191][ T2848] netlink: 'syz.6.7721': attribute type 29 has an invalid length. [ 1078.778772][ T2826] veth0_to_bridge: left promiscuous mode [ 1078.791289][ T2848] netlink: 'syz.6.7721': attribute type 20 has an invalid length. [ 1078.809607][ T2853] xt_l2tp: invalid flags combination: 8 [ 1079.351159][ T2893] x_tables: duplicate entry at hook 3 [ 1079.674575][ T2909] netlink: 'syz.6.7735': attribute type 1 has an invalid length. [ 1079.695655][ T2909] netlink: 476 bytes leftover after parsing attributes in process `syz.6.7735'. [ 1079.713055][ T2909] netlink: 1041 bytes leftover after parsing attributes in process `syz.6.7735'. [ 1079.733741][ T2912] netlink: 220 bytes leftover after parsing attributes in process `syz.6.7735'. [ 1080.065892][ T2929] vcan0: entered allmulticast mode [ 1080.181201][ T2933] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1080.189520][ T2933] team0: Device macvlan3 is already an upper device of the team interface [ 1080.264656][ T2943] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 1080.273733][ T2943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1080.660074][ T2959] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1081.128534][ T2983] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7754'. [ 1081.149981][ T2983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7754'. [ 1081.159763][ T2984] netlink: 88 bytes leftover after parsing attributes in process `syz.7.7755'. [ 1081.735306][ T3011] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7764'. [ 1082.075023][ T3019] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1082.094817][ T3027] bond11: (slave geneve3): making interface the new active one [ 1082.105020][ T3027] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 1082.414447][ T3046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7774'. [ 1083.108471][ T3066] validate_nla: 2 callbacks suppressed [ 1083.108491][ T3066] netlink: 'syz.7.7780': attribute type 4 has an invalid length. [ 1083.171969][ T3069] netlink: 'syz.3.7781': attribute type 9 has an invalid length. [ 1083.684471][ T3089] netlink: 'syz.2.7785': attribute type 20 has an invalid length. [ 1083.713037][ T3089] IPv6: NLM_F_CREATE should be specified when creating new route [ 1083.988093][ T3106] netlink: 'syz.2.7789': attribute type 1 has an invalid length. [ 1084.057955][ T3106] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1084.276208][ T3116] tipc: Started in network mode [ 1084.287515][ T3116] tipc: Node identity 4, cluster identity 4711 [ 1084.308078][ T3116] tipc: Node number set to 4 [ 1084.436559][ T3126] __nla_validate_parse: 4 callbacks suppressed [ 1084.436580][ T3126] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7795'. [ 1084.631710][ T3132] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 1084.936105][ T3143] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1085.249963][ T3177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1085.282448][ T3178] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7808'. [ 1085.399378][ T3181] tipc: Enabling of bearer rejected, failed to enable media [ 1085.435782][ T3181] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7810'. [ 1085.468335][ T3181] tipc: Invalid UDP bearer configuration [ 1085.468406][ T3181] tipc: Enabling of bearer rejected, failed to enable media [ 1085.699195][ T3202] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7815'. [ 1085.920212][ T3217] IPv6: sit3: Disabled Multicast RS [ 1085.933441][ T3217] sit3: entered allmulticast mode [ 1085.946152][ T3219] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7820'. [ 1085.969353][ T3219] netlink: 'syz.7.7820': attribute type 7 has an invalid length. [ 1085.977681][ T3219] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7820'. [ 1086.164997][ T3231] netlink: 112 bytes leftover after parsing attributes in process `syz.6.7822'. [ 1086.196769][ T3230] netlink: 'syz.2.7821': attribute type 3 has an invalid length. [ 1086.298714][ T3239] veth0: entered promiscuous mode [ 1086.302052][ T3240] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1086.312168][ T3240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1086.445057][ T3236] veth0: left promiscuous mode [ 1086.976134][ T3275] syzkaller1: entered promiscuous mode [ 1086.982443][ T3275] syzkaller1: entered allmulticast mode [ 1087.028905][ T3274] netlink: 'syz.2.7837': attribute type 10 has an invalid length. [ 1087.040260][ T3274] netlink: 396 bytes leftover after parsing attributes in process `syz.2.7837'. [ 1087.193668][ T3285] netlink: 'syz.3.7840': attribute type 12 has an invalid length. [ 1087.223734][ T3285] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7840'. [ 1087.758221][ T5960] IPVS: starting estimator thread 0... [ 1087.827849][ T3320] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7852'. [ 1087.867561][ T3318] IPVS: using max 28 ests per chain, 67200 per kthread [ 1088.175911][ T3341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1088.268122][ T3343] netlink: 'syz.3.7859': attribute type 4 has an invalid length. [ 1088.289059][ T3343] netlink: 'syz.3.7859': attribute type 83 has an invalid length. [ 1088.402531][ T3347] gretap0: left allmulticast mode [ 1088.408129][ T3347] bridge0: port 3(gretap0) entered disabled state [ 1088.842369][ T3347] bridge_slave_1: left allmulticast mode [ 1088.849213][ T3347] bridge_slave_1: left promiscuous mode [ 1088.865602][ T3347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.998721][ T3347] bridge_slave_0: left allmulticast mode [ 1089.038780][ T3347] bridge_slave_0: left promiscuous mode [ 1089.052916][ T3347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.328915][ T3372] team1: entered promiscuous mode [ 1089.337480][ T3372] team1: entered allmulticast mode [ 1089.636340][ T3390] syzkaller0: entered promiscuous mode [ 1089.642035][ T3390] syzkaller0: entered allmulticast mode [ 1091.851518][ T3437] __nla_validate_parse: 23 callbacks suppressed [ 1091.851542][ T3437] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7878'. [ 1092.066611][ T3452] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1092.327876][ T3463] netlink: 'syz.6.7886': attribute type 13 has an invalid length. [ 1092.372567][ T3463] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7886'. [ 1092.393306][ T3465] netlink: 'syz.2.7888': attribute type 10 has an invalid length. [ 1092.421616][ T9183] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1092.436171][ T3463] netlink: 'syz.6.7886': attribute type 13 has an invalid length. [ 1092.447068][ T3465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.455863][ T3465] bridge_slave_1: left allmulticast mode [ 1092.473875][ T3465] bridge_slave_1: left promiscuous mode [ 1092.479799][ T3463] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7886'. [ 1092.489564][ T3465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.506615][ T3465] bridge_slave_1: entered promiscuous mode [ 1092.513698][ T3465] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1092.545001][ T9183] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1092.559636][ T3466] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7884'. [ 1092.576658][ T3466] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7884'. [ 1092.687630][ T9183] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1092.807889][ T3476] netlink: 'syz.2.7892': attribute type 1 has an invalid length. [ 1092.875558][ T3478] bridge0: port 3(syz_tun) entered blocking state [ 1092.884557][ T3478] bridge0: port 3(syz_tun) entered disabled state [ 1092.901587][ T3478] syz_tun: entered promiscuous mode [ 1093.004201][ T3482] tipc: Enabled bearer , priority 0 [ 1093.026859][ T3490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1093.054748][ T3494] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7898'. [ 1093.114547][ T3482] syzkaller0: entered promiscuous mode [ 1093.121506][ T3482] syzkaller0: entered allmulticast mode [ 1093.140808][ T3482] tipc: Resetting bearer [ 1093.222771][ T3480] tipc: Resetting bearer [ 1093.248382][ T3507] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7901'. [ 1093.291416][ T3507] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7901'. [ 1093.383932][ T3517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7904'. [ 1095.024040][ T3480] tipc: Disabling bearer [ 1095.173728][ T3529] netlink: 'syz.6.7907': attribute type 6 has an invalid length. [ 1095.236732][ T3532] xt_policy: output policy not valid in PREROUTING and INPUT [ 1095.455607][ T3546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7914'. [ 1095.986165][ T3586] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20003 [ 1096.033427][ T3586] x_tables: duplicate underflow at hook 3 [ 1096.165131][ T3594] openvswitch: netlink: Message has 8 unknown bytes. [ 1096.197475][ T3594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1096.394946][ T5960] IPVS: starting estimator thread 0... [ 1096.417101][ T3619] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 1096.515578][ T3629] netlink: 'syz.2.7939': attribute type 1 has an invalid length. [ 1096.539406][ T3618] IPVS: using max 28 ests per chain, 67200 per kthread [ 1096.766860][ T3645] syzkaller0: entered promiscuous mode [ 1096.775405][ T3645] syzkaller0: entered allmulticast mode [ 1096.989138][ T3658] __nla_validate_parse: 8 callbacks suppressed [ 1096.989161][ T3658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7948'. [ 1097.293898][T30250] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1097.319079][ T5880] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1097.327066][T30250] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1097.341089][ T3666] syzkaller0: entered promiscuous mode [ 1097.351695][ T3670] wlan1 speed is unknown, defaulting to 1000 [ 1097.358172][ T3670] wlan1 speed is unknown, defaulting to 1000 [ 1097.365148][ T3670] wlan1 speed is unknown, defaulting to 1000 [ 1097.412409][ T3670] infiniband óyz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1097.460531][ T3678] xt_cgroup: invalid path, errno=-2 [ 1097.494232][ T3670] wlan1 speed is unknown, defaulting to 1000 [ 1097.502779][ T3670] wlan1 speed is unknown, defaulting to 1000 [ 1097.512113][ T3680] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 1097.523193][ T3670] wlan1 speed is unknown, defaulting to 1000 [ 1097.532459][ T3670] wlan1 speed is unknown, defaulting to 1000 [ 1097.542922][ T3670] wlan1 speed is unknown, defaulting to 1000 [ 1097.581968][ T3670] wlan1 speed is unknown, defaulting to 1000 [ 1097.612350][ T3670] wlan1 speed is unknown, defaulting to 1000 [ 1097.640437][ T3670] wlan1 speed is unknown, defaulting to 1000 [ 1097.668790][T21433] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1097.685557][ T3684] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7961'. [ 1097.727348][ T3670] wlan1 speed is unknown, defaulting to 1000 [ 1098.001516][ T3670] wlan1 speed is unknown, defaulting to 1000 [ 1098.258186][ T5880] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1098.455024][ T3731] wlan1 speed is unknown, defaulting to 1000 [ 1098.633096][ T3734] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7971'. [ 1098.680724][ T3734] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7971'. [ 1098.698433][ T3734] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7971'. [ 1098.926977][ T3754] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7975'. [ 1099.044062][ T3757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7976'. [ 1099.067348][ T3757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7976'. [ 1099.077079][ T3757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7976'. [ 1099.094111][ T3757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7976'. [ 1099.223025][ T3759] hsr_slave_0 (unregistering): left promiscuous mode [ 1099.801529][ T3796] netlink: 'syz.0.7987': attribute type 3 has an invalid length. [ 1100.200284][ T3812] netlink: 'syz.3.7992': attribute type 6 has an invalid length. [ 1100.319122][ T3818] netlink: 'syz.6.7994': attribute type 11 has an invalid length. [ 1100.330531][ T30] audit: type=1107 audit(1775467985.001:7): pid=3816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÓÞ¾QÁ·06¼ïÙ¿©GGÛh]IØ—²±×>f÷%†G¬MN ꯖ¤Lµ½K‹2`' [ 1100.343701][ T3819] batadv_slave_0: entered promiscuous mode [ 1100.506455][ T3830] netlink: 'syz.6.7998': attribute type 64 has an invalid length. [ 1100.527772][ T3830] syzkaller0: entered promiscuous mode [ 1100.533303][ T3830] syzkaller0: entered allmulticast mode [ 1100.553412][ T3817] batadv_slave_0: left promiscuous mode [ 1100.579813][ T3830] xt_hashlimit: size too large, truncated to 1048576 [ 1100.825801][ T3843] netlink: 'syz.2.8002': attribute type 33 has an invalid length. [ 1100.979864][ T3843] bond13: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1101.000241][ T3843] bond13 (unregistering): Released all slaves [ 1101.084422][ T3851] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1101.143170][ T1748] block nbd4: Connection timed out, retrying (0/2 alive) [ 1101.153957][ T1748] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1101.166366][ T1748] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1101.189609][ T1324] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1101.199634][ T1324] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1101.218211][ T1324] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1101.227773][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1101.236275][ T1324] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1101.245620][ T1324] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1101.256024][ T1324] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1101.264209][ T1324] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1101.274191][ T1324] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1101.297999][ T1324] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1101.329485][ T1324] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1101.363149][ T1324] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1101.397612][ T1324] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1101.405472][ T1324] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1101.459695][ T1324] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1101.477541][ T1324] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1101.493624][ T3857] bridge0: port 3(dummy0) entered disabled state [ 1101.502386][ T1324] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1101.523655][ T3857] dummy0: left allmulticast mode [ 1101.529190][ T3857] dummy0: left promiscuous mode [ 1101.539357][ T1324] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1101.560384][ T3857] bridge0: port 3(dummy0) entered disabled state [ 1101.574282][ T1324] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1101.604249][ T1324] ldm_validate_partition_table(): Disk read failed. [ 1101.634933][ T1324] Dev nbd4: unable to read RDB block 0 [ 1101.654507][ T1324] nbd4: unable to read partition table [ 1101.719789][ T1324] ldm_validate_partition_table(): Disk read failed. [ 1101.727079][ T1324] Dev nbd4: unable to read RDB block 0 [ 1101.782193][ T1324] nbd4: unable to read partition table [ 1101.884577][ T3886] J: renamed from wg2 (while UP) [ 1101.960240][ T3888] openvswitch: netlink: Message has 8 unknown bytes. [ 1101.967460][ T3888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1101.979013][ T3888] syz_tun: entered allmulticast mode [ 1101.993869][ T3887] syz_tun: left allmulticast mode [ 1102.021734][ T3890] __nla_validate_parse: 6 callbacks suppressed [ 1102.021758][ T3890] netlink: 1968 bytes leftover after parsing attributes in process `syz.7.8016'. [ 1102.074005][ T3890] openvswitch: netlink: Flow key attr not present in new flow. [ 1103.460565][ T3932] openvswitch: netlink: Tunnel attr 16 has unexpected len 20 expected 0 [ 1103.701420][ T3945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8035'. [ 1103.749136][ T3945] openvswitch: netlink: Flow actions attr not present in new flow. [ 1103.947086][ T3952] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8038'. [ 1103.962642][ T3952] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8038'. [ 1104.169550][ T3959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8039'. [ 1104.227634][ T3963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8039'. [ 1104.245374][ T3963] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1104.285677][ T3968] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8042'. [ 1104.422406][ T3973] syzkaller0: entered allmulticast mode [ 1104.763143][ T3988] gretap1: entered promiscuous mode [ 1104.781334][ T3988] batman_adv: batadv0: Adding interface: gretap1 [ 1104.790623][ T3985] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8048'. [ 1104.799228][ T3988] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1104.831092][ T3988] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1104.860752][ T3989] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8048'. [ 1104.946159][ T3985] netlink: 144 bytes leftover after parsing attributes in process `syz.6.8048'. [ 1105.967850][ T4047] netlink: Conntrack attr has 4 unknown bytes [ 1105.986621][ T4047] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1106.125065][ T4051] netlink: 'syz.3.8065': attribute type 3 has an invalid length. [ 1106.293840][ T4060] netlink: 'syz.3.8068': attribute type 19 has an invalid length. [ 1106.500366][ T4070] netlink: 'syz.2.8071': attribute type 3 has an invalid length. [ 1106.545335][ T8189] IPVS: starting estimator thread 0... [ 1106.576658][ T4071] wlan1 speed is unknown, defaulting to 1000 [ 1106.657531][ T4080] IPVS: using max 28 ests per chain, 67200 per kthread [ 1106.725123][ T4090] xt_hashlimit: size too large, truncated to 1048576 [ 1107.199756][ T4109] __nla_validate_parse: 4 callbacks suppressed [ 1107.199776][ T4109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8082'. [ 1107.256998][ T4112] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8083'. [ 1107.334371][ T4106] syzkaller0: entered promiscuous mode [ 1107.367808][ T4106] syzkaller0: entered allmulticast mode [ 1108.095875][ T4155] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8094'. [ 1108.804728][ T4154] delete_channel: no stack [ 1109.459606][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1109.781397][ T4169] sctp: [Deprecated]: syz.7.8095 (pid 4169) Use of int in max_burst socket option. [ 1109.781397][ T4169] Use struct sctp_assoc_value instead [ 1109.863514][ T4172] netlink: 'syz.2.8099': attribute type 24 has an invalid length. [ 1110.093650][ T4191] sctp: [Deprecated]: syz.3.8104 (pid 4191) Use of int in maxseg socket option. [ 1110.093650][ T4191] Use struct sctp_assoc_value instead [ 1110.156633][ T4193] netlink: 88 bytes leftover after parsing attributes in process `syz.7.8105'. [ 1110.232164][ T4201] netlink: 'syz.7.8105': attribute type 51 has an invalid length. [ 1110.260122][ T4201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1110.281381][ T4203] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8108'. [ 1110.306223][ T4201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1110.332663][ T4201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1110.343827][ T4201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1110.566035][ T4192] delete_channel: no stack [ 1110.642388][ T4228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8116'. [ 1110.905497][ T4235] netlink: 232 bytes leftover after parsing attributes in process `syz.2.8119'. [ 1110.941401][ T4246] netlink: 'syz.3.8122': attribute type 10 has an invalid length. [ 1110.986487][ T4246] team0 (unregistering): Port device team_slave_0 removed [ 1111.001314][ T4246] team0 (unregistering): Port device team_slave_1 removed [ 1111.035719][ T4250] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8121'. [ 1111.048177][ T4250] netlink: 'syz.0.8121': attribute type 7 has an invalid length. [ 1111.058490][ T4250] netlink: 'syz.0.8121': attribute type 8 has an invalid length. [ 1111.066522][ T4250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8121'. [ 1111.090936][ T4250] syz_tun: entered promiscuous mode [ 1111.102677][ T4250] erspan0: entered promiscuous mode [ 1111.266691][ T4263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8125'. [ 1111.321404][ T4266] netlink: 'syz.3.8127': attribute type 1 has an invalid length. [ 1111.340325][ T4266] netlink: 'syz.3.8127': attribute type 12 has an invalid length. [ 1111.611088][ T4277] delete_channel: no stack [ 1112.252305][ T4292] tipc: Enabling of bearer rejected, failed to enable media [ 1112.262188][ T4265] ip_vti0: entered allmulticast mode [ 1112.398038][ T4297] __nla_validate_parse: 2 callbacks suppressed [ 1112.398058][ T4297] netlink: 14 bytes leftover after parsing attributes in process `syz.6.8134'. [ 1112.549476][ T4301] netlink: 'syz.3.8135': attribute type 19 has an invalid length. [ 1112.559403][ T4301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8135'. [ 1112.579458][ T4301] netlink: 'syz.3.8135': attribute type 19 has an invalid length. [ 1112.606083][ T4301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8135'. [ 1112.891620][ T4315] netlink: 'syz.3.8139': attribute type 11 has an invalid length. [ 1112.908156][ T4315] netlink: 134296 bytes leftover after parsing attributes in process `syz.3.8139'. [ 1113.180411][ T4329] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8144'. [ 1113.272476][ T4325] bond1: entered promiscuous mode [ 1113.282293][ T4325] bond1: entered allmulticast mode [ 1113.325506][ T4325] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1113.604867][ T4352] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8149'. [ 1113.668431][ T4354] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8150'. [ 1113.710413][ T4354] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8150'. [ 1113.720491][ T4358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8152'. [ 1113.748338][ T4357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8151'. [ 1113.788973][ T4358] vcan0 (unregistering): left allmulticast mode [ 1114.551858][ T4388] IPVS: Error connecting to the multicast addr [ 1115.188424][ T4417] openvswitch: netlink: Multiple metadata blocks provided [ 1115.275560][ T4420] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1115.506469][ T4431] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 1115.781654][ T4441] netlink: 'syz.7.8177': attribute type 30 has an invalid length. [ 1115.866479][ T4448] netlink: 'syz.0.8180': attribute type 28 has an invalid length. [ 1115.875884][ T4449] netlink: 'syz.2.8178': attribute type 14 has an invalid length. [ 1115.897061][ T4448] netlink: 'syz.0.8180': attribute type 3 has an invalid length. [ 1117.355468][ T4514] ksmbd: Unknown IPC event: 11, ignore. [ 1117.725239][ T4542] __nla_validate_parse: 9 callbacks suppressed [ 1117.725260][ T4542] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8203'. [ 1117.873734][ T4551] netlink: 9 bytes leftover after parsing attributes in process `syz.7.8207'. [ 1117.885645][ T4555] netlink: 'syz.6.8206': attribute type 16 has an invalid length. [ 1117.894867][ T4554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8208'. [ 1117.906536][ T4555] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8206'. [ 1117.979246][ T4551] netlink: 'syz.7.8207': attribute type 9 has an invalid length. [ 1117.987514][ T4551] netlink: 'syz.7.8207': attribute type 11 has an invalid length. [ 1117.996913][ T4551] netlink: 'syz.7.8207': attribute type 12 has an invalid length. [ 1118.009602][ T4551] netlink: 210020 bytes leftover after parsing attributes in process `syz.7.8207'. [ 1118.031688][ T4551] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8207'. [ 1118.139450][ T4569] netlink: 196 bytes leftover after parsing attributes in process `syz.0.8211'. [ 1118.148959][ T4569] openvswitch: netlink: Flow key attr not present in new flow. [ 1118.284687][ T4575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8214'. [ 1118.343081][ T4578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8214'. [ 1118.355085][ T4575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8214'. [ 1118.483825][ T4588] netlink: 'syz.0.8217': attribute type 39 has an invalid length. [ 1118.561312][ T4593] netlink: 'syz.0.8218': attribute type 1 has an invalid length. [ 1118.681831][ T4599] xt_hashlimit: size too large, truncated to 1048576 [ 1119.567165][ T4654] sctp: [Deprecated]: syz.0.8235 (pid 4654) Use of int in max_burst socket option deprecated. [ 1119.567165][ T4654] Use struct sctp_assoc_value instead [ 1119.593889][ T4655] sctp: [Deprecated]: syz.0.8235 (pid 4655) Use of int in max_burst socket option deprecated. [ 1119.593889][ T4655] Use struct sctp_assoc_value instead [ 1119.626470][ T4658] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1119.633742][ T4661] netlink: 'syz.3.8236': attribute type 1 has an invalid length. [ 1119.662796][ T4666] netlink: 'syz.2.8238': attribute type 61 has an invalid length. [ 1119.692277][ T4661] bond5: entered promiscuous mode [ 1119.698618][ T4661] bond5: entered allmulticast mode [ 1119.704282][ T4661] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1119.851169][ T4675] wireguard0: entered promiscuous mode [ 1119.856824][ T4675] wireguard0: entered allmulticast mode [ 1119.869638][ T4675] team0: Device wireguard0 is of different type [ 1119.876703][ T4677] xt_l2tp: unknown flags: 10 [ 1119.944422][ T4683] netlink: 'syz.6.8242': attribute type 21 has an invalid length. [ 1120.250366][ T4699] tc_dump_action: action bad kind [ 1120.559456][ T4715] tipc: Enabled bearer , priority 1 [ 1121.194481][ T4748] netlink: 'syz.3.8265': attribute type 1 has an invalid length. [ 1122.185505][ T4810] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1122.231455][ T4810] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1122.496159][ T4827] ipvlan0: entered allmulticast mode [ 1122.517785][ T4827] veth0_vlan: entered allmulticast mode [ 1122.537735][ T4830] sch_fq: defrate 0 ignored. [ 1122.884747][ T4859] __nla_validate_parse: 28 callbacks suppressed [ 1122.884770][ T4859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8299'. [ 1122.911722][ T4859] validate_nla: 4 callbacks suppressed [ 1122.911740][ T4859] netlink: 'syz.2.8299': attribute type 18 has an invalid length. [ 1122.927954][ T4859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8299'. [ 1122.971941][ T4859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8299'. [ 1122.981353][ T4859] netlink: 'syz.2.8299': attribute type 18 has an invalid length. [ 1122.996078][ T4865] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8300'. [ 1123.048214][ T4859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8299'. [ 1123.400026][ T4889] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8308'. [ 1123.456426][ T4895] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.8311'. [ 1123.640441][ T4905] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8313'. [ 1123.658345][ T4906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8312'. [ 1123.680966][ T4905] netlink: 'syz.6.8313': attribute type 11 has an invalid length. [ 1123.690194][ T4906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8312'. [ 1123.971133][ T4925] syzkaller0: entered promiscuous mode [ 1123.976682][ T4925] syzkaller0: entered allmulticast mode [ 1124.568791][ T4954] erspan0: left allmulticast mode [ 1124.574096][ T4954] bridge1: port 1(erspan0) entered disabled state [ 1124.619028][ T4954] bridge6: port 1(erspan0) entered blocking state [ 1124.628525][ T4954] bridge6: port 1(erspan0) entered disabled state [ 1124.635762][ T4954] erspan0: entered allmulticast mode [ 1124.733872][ T4968] syzkaller0: entered promiscuous mode [ 1124.817410][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1124.862750][ T4971] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1124.870096][ T4971] IPv6: NLM_F_CREATE should be set when creating new route [ 1124.878890][ T4973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1126.416448][ T5033] wireguard0: entered promiscuous mode [ 1126.527748][ T5033] wireguard0: entered allmulticast mode [ 1126.581087][ T5026] tc_dump_action: action bad kind [ 1127.026232][ T5058] SET target dimension over the limit! [ 1127.620044][ T5085] veth0_to_team: entered promiscuous mode [ 1127.672476][ T5085] veth0_to_team: left promiscuous mode [ 1127.769471][ T5097] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1127.808311][ T5099] netlink: 'syz.0.8371': attribute type 1 has an invalid length. [ 1127.899944][ T5099] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1128.054805][ T5107] bond6: option fail_over_mac: invalid value (16) [ 1128.080985][ T5107] bond6 (unregistering): Released all slaves [ 1128.124639][ T5119] x_tables: duplicate underflow at hook 2 [ 1128.538140][ T5146] __nla_validate_parse: 16 callbacks suppressed [ 1128.538163][ T5146] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8384'. [ 1128.757688][ T5139] nbd5: detected capacity change from 0 to 63 [ 1128.765367][ T5836] block nbd5: Receive control failed (result -32) [ 1128.765367][ T5835] block nbd5: Receive control failed (result -32) [ 1128.780383][ T1324] block nbd5: Dead connection, failed to find a fallback [ 1128.791152][ T1324] block nbd5: shutting down sockets [ 1128.796403][ T1324] blk_print_req_error: 135 callbacks suppressed [ 1128.796421][ T1324] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1128.816333][ T1324] buffer_io_error: 135 callbacks suppressed [ 1128.816350][ T1324] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1128.833447][ T1324] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1128.843675][ T1324] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1128.884039][ T1324] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1128.949371][ T1324] Buffer I/O error on dev nbd5, logical block 2, async page read [ 1128.967094][ T1324] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1129.015827][ T5173] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8389'. [ 1129.026316][ T1324] Buffer I/O error on dev nbd5, logical block 3, async page read [ 1129.044945][ T1324] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1129.055701][ T1324] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1129.071571][ T5173] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8389'. [ 1129.084675][ T1324] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1129.103919][ T1324] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1129.112817][ T1324] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1129.123300][ T1324] Buffer I/O error on dev nbd5, logical block 2, async page read [ 1129.131989][ T1324] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1129.143015][ T1324] Buffer I/O error on dev nbd5, logical block 3, async page read [ 1129.179088][ T1324] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1129.212897][ T1324] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1129.233895][ T1324] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1129.257725][ T1324] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1129.276769][ T1324] ldm_validate_partition_table(): Disk read failed. [ 1129.305042][ T1324] Dev nbd5: unable to read RDB block 0 [ 1129.325422][ T1324] nbd5: unable to read partition table [ 1129.359564][ T1324] ldm_validate_partition_table(): Disk read failed. [ 1129.381105][ T1324] Dev nbd5: unable to read RDB block 0 [ 1129.403806][ T1324] nbd5: unable to read partition table [ 1129.447073][ T5203] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8397'. [ 1129.459892][ T5203] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8397'. [ 1129.503205][ T5206] netlink: 'syz.0.8398': attribute type 1 has an invalid length. [ 1129.540265][ T5206] netlink: 'syz.0.8398': attribute type 1 has an invalid length. [ 1129.551588][ T5203] syzkaller0: entered promiscuous mode [ 1129.557722][ T5203] syzkaller0: entered allmulticast mode [ 1129.584242][ T5206] h: entered promiscuous mode [ 1129.910967][ T30] audit: type=1800 audit(1775468014.591:8): pid=5221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8400" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1975 res=0 errno=0 [ 1131.865920][ T5242] netlink: 43 bytes leftover after parsing attributes in process `syz.0.8405'. [ 1131.938199][ T5246] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8406'. [ 1132.032543][ T5252] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8406'. [ 1132.123720][ T5262] netlink: 'syz.0.8410': attribute type 1 has an invalid length. [ 1132.167452][ T5262] netlink: 'syz.0.8410': attribute type 2 has an invalid length. [ 1132.239063][ T5262] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1132.410771][ T5273] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8412'. [ 1132.639523][ T5302] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8418'. [ 1133.109173][ T5330] Cannot find add_set index 3 as target [ 1133.280285][ T5349] netlink: 'syz.2.8430': attribute type 12 has an invalid length. [ 1133.760928][ T5378] __nla_validate_parse: 7 callbacks suppressed [ 1133.760950][ T5378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8438'. [ 1134.011329][ T5386] openvswitch: netlink: Actions may not be safe on all matching packets [ 1134.245068][ T5393] netlink: 'syz.2.8441': attribute type 4 has an invalid length. [ 1134.443668][ T5397] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1134.560560][ T5397] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1134.679660][ T5397] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1134.945313][ T36] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1134.992549][ T5422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8450'. [ 1135.024656][ T36] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1135.072037][ T36] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1135.151432][ T36] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1135.196895][ T5426] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1135.274065][ T5431] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8454'. [ 1135.409209][ T5437] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8456'. [ 1135.454995][ T5437] vlan2: entered promiscuous mode [ 1135.460684][ T5437] erspan0: entered promiscuous mode [ 1135.491418][ T5441] delete_channel: no stack [ 1135.658327][ T5443] tipc: Enabled bearer , priority 0 [ 1135.675367][ T5445] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8458'. [ 1135.698909][ T5445] netlink: 'syz.6.8458': attribute type 5 has an invalid length. [ 1135.761008][ T5443] syzkaller0: entered promiscuous mode [ 1135.766659][ T5443] syzkaller0: entered allmulticast mode [ 1135.773412][ T5443] tipc: Resetting bearer [ 1135.834266][ T5442] tipc: Resetting bearer [ 1135.857165][ T5450] netlink: 'syz.7.8461': attribute type 1 has an invalid length. [ 1137.148719][ T5469] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8466'. [ 1138.490698][ T5442] tipc: Disabling bearer [ 1138.501023][ T5450] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1138.531516][ T5466] netlink: 'syz.6.8465': attribute type 12 has an invalid length. [ 1138.578742][ T5467] netlink: 'syz.6.8465': attribute type 12 has an invalid length. [ 1138.650318][ T5480] xt_hashlimit: size too large, truncated to 1048576 [ 1138.749560][ T5482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8469'. [ 1138.950016][ T5502] xt_hashlimit: size too large, truncated to 1048576 [ 1139.053921][ T5509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8475'. [ 1139.081115][ T5509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8475'. [ 1139.386187][ T5517] netlink: 124 bytes leftover after parsing attributes in process `syz.7.8478'. [ 1139.443363][ T5526] netlink: 'syz.3.8481': attribute type 1 has an invalid length. [ 1139.477866][ T5526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8481'. [ 1139.539293][ T5529] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8482'. [ 1139.651770][ T5533] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8483'. [ 1139.742878][ T5533] syzkaller0: entered promiscuous mode [ 1139.779495][ T5533] syzkaller0: entered allmulticast mode [ 1139.917874][ T5545] netlink: 'syz.6.8487': attribute type 1 has an invalid length. [ 1139.949502][ T5545] netlink: 96 bytes leftover after parsing attributes in process `syz.6.8487'. [ 1139.977539][ T5545] netlink: 1 bytes leftover after parsing attributes in process `syz.6.8487'. [ 1139.986466][ T5545] netlink: 658 bytes leftover after parsing attributes in process `syz.6.8487'. [ 1140.741673][ T5594] netlink: 'syz.6.8497': attribute type 2 has an invalid length. [ 1140.832499][ T5576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8496'. [ 1141.083457][ T5594] !: entered promiscuous mode [ 1144.488857][ T5634] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1144.702112][ T5703] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 1144.733018][ T5703] __nla_validate_parse: 2 callbacks suppressed [ 1144.733038][ T5703] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8516'. [ 1144.762544][ T5705] Bluetooth: MGMT ver 1.23 [ 1144.788059][ T5703] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 1144.834482][ T5712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8520'. [ 1144.878923][ T5712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8520'. [ 1145.124850][ T5717] syzkaller1: entered promiscuous mode [ 1145.137777][ T5717] syzkaller1: entered allmulticast mode [ 1145.187623][ T5719] wlan1 speed is unknown, defaulting to 1000 [ 1145.209115][ T5717] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8521'. [ 1145.437677][ T5734] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8526'. [ 1145.539609][ T5743] netlink: 'syz.3.8529': attribute type 1 has an invalid length. [ 1145.975877][ T5759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8533'. [ 1146.215472][ T5765] syzkaller0: entered promiscuous mode [ 1146.227771][ T5765] syzkaller0: entered allmulticast mode [ 1146.325707][ T5769] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8536'. [ 1146.629803][ T5786] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8540'. [ 1146.648668][ T5787] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8540'. [ 1146.675317][ T5786] vxcan0: entered allmulticast mode [ 1146.753451][ T5787] vxcan0: entered allmulticast mode [ 1147.137955][ T5804] netlink: 'syz.3.8547': attribute type 4 has an invalid length. [ 1147.543730][ T5830] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1147.555096][ T5830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1147.594903][ T5834] netlink: 'syz.2.8553': attribute type 1 has an invalid length. [ 1147.633823][ T5834] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 1147.971651][ T5853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8557'. [ 1148.025065][ T5855] netlink: 'syz.7.8558': attribute type 1 has an invalid length. [ 1148.934404][ T5898] netlink: 'syz.0.8569': attribute type 1 has an invalid length. [ 1148.956316][ T5898] netlink: 'syz.0.8569': attribute type 2 has an invalid length. [ 1148.979046][ T5898] netlink: 'syz.0.8569': attribute type 1 has an invalid length. [ 1149.495290][ T5930] netlink: ct family unspecified [ 1149.551960][ T5938] netlink: 'syz.3.8577': attribute type 1 has an invalid length. [ 1149.756342][ T5948] netlink: 'syz.3.8580': attribute type 5 has an invalid length. [ 1149.947913][ T5959] __nla_validate_parse: 4 callbacks suppressed [ 1149.947934][ T5959] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8583'. [ 1149.998356][ T5958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1150.434623][ T5989] netlink: 212328 bytes leftover after parsing attributes in process `syz.6.8590'. [ 1150.444971][ T5989] netlink: Unknown conntrack attr (type=2304, max=9) [ 1150.678238][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8594'. [ 1150.697698][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8594'. [ 1150.750862][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8595'. [ 1150.936283][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8598'. [ 1151.159461][ T6029] netlink: 'syz.0.8604': attribute type 1 has an invalid length. [ 1151.187660][ T6029] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8604'. [ 1151.328192][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8606'. [ 1151.395662][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8608'. [ 1151.402034][ T6045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8610'. [ 1151.436105][ T6037] syzkaller0: entered promiscuous mode [ 1151.441871][ T6037] syzkaller0: entered allmulticast mode [ 1152.372369][ T6100] netlink: 'syz.0.8627': attribute type 9 has an invalid length. [ 1152.847944][ T6120] netlink: 'syz.0.8635': attribute type 10 has an invalid length. [ 1153.257094][ T6138] netlink: ct family unspecified [ 1153.331494][ T6141] wlan1 speed is unknown, defaulting to 1000 [ 1153.521412][ T6156] F: renamed from erspan0 [ 1153.575017][ T6156] F: entered allmulticast mode [ 1153.891711][ T6168] tipc: Enabling of bearer rejected, failed to enable media [ 1154.017029][ T6181] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1154.257661][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1154.311338][ T6183] syzkaller1: entered promiscuous mode [ 1154.316917][ T6183] syzkaller1: entered allmulticast mode [ 1155.316798][ T6226] __nla_validate_parse: 11 callbacks suppressed [ 1155.316822][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8668'. [ 1155.365970][ T6226] macvlan2: entered allmulticast mode [ 1155.379824][ T6226] hsr0: entered allmulticast mode [ 1155.395574][ T6226] hsr_slave_0: entered allmulticast mode [ 1155.427677][ T6226] hsr_slave_1: entered allmulticast mode [ 1155.679187][ T6234] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1155.690500][ T6234] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1155.741793][ T6234] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1155.772807][ T6234] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1155.830734][ T6234] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1155.840901][ T6234] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1155.851025][ T6234] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1155.863264][ T6234] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1155.873413][ T6234] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1155.883587][ T6234] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1157.061517][ T6255] x_tables: unsorted entry at hook 3 [ 1157.739405][ T6264] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8678'. [ 1157.921011][ T6266] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8679'. [ 1158.744192][ T6284] netlink: 92 bytes leftover after parsing attributes in process `syz.2.8685'. [ 1159.285768][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8691'. [ 1159.472738][ T6305] netlink: 120 bytes leftover after parsing attributes in process `syz.0.8693'. [ 1159.483773][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8693'. [ 1160.216720][ T5835] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1160.229941][ T5835] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1160.238728][ T5835] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1160.266133][ T5835] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1160.274165][ T5835] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1160.367114][ T6342] netlink: 'syz.0.8706': attribute type 4 has an invalid length. [ 1160.414738][ T5836] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1160.422672][ T5836] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1160.431480][ T5836] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1160.444929][ T5836] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1160.455309][ T5836] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1160.731821][ T6337] wlan1 speed is unknown, defaulting to 1000 [ 1161.375172][ T6337] chnl_net:caif_netlink_parms(): no params data found [ 1161.439259][ T6371] netlink: 'syz.3.8713': attribute type 1 has an invalid length. [ 1161.715154][ T6337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.722739][ T6337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.730512][ T6337] bridge_slave_0: entered allmulticast mode [ 1161.740604][ T6337] bridge_slave_0: entered promiscuous mode [ 1161.749779][ T6337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.758008][ T6337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.765480][ T6337] bridge_slave_1: entered allmulticast mode [ 1161.770169][ T6386] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8717'. [ 1161.780021][ T6337] bridge_slave_1: entered promiscuous mode [ 1161.784247][ T6388] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8716'. [ 1161.813946][ T6386] netlink: 240 bytes leftover after parsing attributes in process `syz.0.8717'. [ 1161.837692][ T6337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1161.851611][ T6337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1161.925069][ T6337] team0: Port device team_slave_0 added [ 1161.933950][ T6337] team0: Port device team_slave_1 added [ 1162.024991][ T6391] netlink: 'syz.0.8719': attribute type 1 has an invalid length. [ 1162.040363][ T6337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1162.048069][ T6337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1162.074924][ T6337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1162.120108][ T6391] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1162.129152][ T6337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1162.136132][ T6337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1162.162771][ T6337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.172896][ T6391] netlink: 'syz.0.8719': attribute type 1 has an invalid length. [ 1162.218219][ T6391] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1162.283645][ T6337] hsr_slave_0: entered promiscuous mode [ 1162.302062][ T6337] hsr_slave_1: entered promiscuous mode [ 1162.309621][ T6337] debugfs: 'hsr0' already exists in 'hsr' [ 1162.315496][ T6337] Cannot create hsr debugfs directory [ 1162.444305][ T6404] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8722'. [ 1162.507656][ T5835] Bluetooth: hci8: command tx timeout [ 1162.588831][ T6337] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1162.601410][ T6337] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.718113][ T6337] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1162.729445][ T6337] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.794573][ T6408] bond6 (unregistering): Released all slaves [ 1162.912919][ T6337] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1162.934293][ T6337] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.011581][ T6337] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1163.036433][ T6337] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.136768][ T6415] netlink: 'syz.0.8726': attribute type 1 has an invalid length. [ 1163.228933][ T6415] bond6: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 1163.241583][ T6415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8726'. [ 1163.408212][ T6422] netlink: 'syz.0.8730': attribute type 1 has an invalid length. [ 1163.416005][ T6422] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8730'. [ 1163.426849][ T6423] netlink: 'syz.0.8730': attribute type 1 has an invalid length. [ 1163.435384][ T6423] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8730'. [ 1163.522671][ T5836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1163.535078][ T5836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1163.546062][ T6337] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1163.554585][ T5836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1163.564385][ T5836] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1163.572727][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1163.604954][ T6337] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1163.627025][ T6337] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1163.662199][ T6337] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1163.724123][ T6430] wlan1 speed is unknown, defaulting to 1000 [ 1163.774214][ T6443] netlink: 'syz.6.8733': attribute type 1 has an invalid length. [ 1163.808240][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8733'. [ 1163.961063][ T6337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1163.995852][ T6337] 8021q: adding VLAN 0 to HW filter on device team0 [ 1164.014927][T30263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.022152][T30263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1164.107149][T30243] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.114465][T30243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1164.324088][ T6430] chnl_net:caif_netlink_parms(): no params data found [ 1164.468716][ T6430] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.476129][ T6430] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.484024][ T6430] bridge_slave_0: entered allmulticast mode [ 1164.492878][ T6430] bridge_slave_0: entered promiscuous mode [ 1164.503833][ T6430] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.511602][ T6430] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.524459][ T6430] bridge_slave_1: entered allmulticast mode [ 1164.532694][ T6430] bridge_slave_1: entered promiscuous mode [ 1164.577573][ T5835] Bluetooth: hci8: command tx timeout [ 1164.672799][ T6430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1164.757090][ T6430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1164.809602][ T6491] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8744'. [ 1164.838108][ T6482] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8743'. [ 1164.862392][ T6430] team0: Port device team_slave_0 added [ 1164.879871][ T6430] team0: Port device team_slave_1 added [ 1164.911309][ T6482] syzkaller0: entered promiscuous mode [ 1164.928201][ T6482] syzkaller0: entered allmulticast mode [ 1164.989971][ T6430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1164.997055][ T6430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.027462][ T6430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1165.076132][ T6430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1165.085073][ T6430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.123975][ T6430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1165.195377][ T6498] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1165.234880][ T6501] sctp: [Deprecated]: syz.6.8748 (pid 6501) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1165.234880][ T6501] Use struct sctp_sack_info instead [ 1165.277832][ T6337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1165.360912][ T6430] hsr_slave_0: entered promiscuous mode [ 1165.368381][ T6430] hsr_slave_1: entered promiscuous mode [ 1165.375010][ T6430] debugfs: 'hsr0' already exists in 'hsr' [ 1165.381525][ T6430] Cannot create hsr debugfs directory [ 1165.390928][ T6507] sch_fq: defrate 0 ignored. [ 1165.531664][ T6513] netlink: 'syz.3.8753': attribute type 1 has an invalid length. [ 1165.619081][ T5835] Bluetooth: hci6: command tx timeout [ 1165.681566][ T6519] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1165.709865][ T6511] bond2: entered promiscuous mode [ 1165.714964][ T6511] bond2: entered allmulticast mode [ 1165.731519][ T6511] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1165.744839][ T6511] team0: Port device bond2 added [ 1165.785104][ T6337] veth0_vlan: entered promiscuous mode [ 1165.811513][ T6337] veth1_vlan: entered promiscuous mode [ 1165.890155][ T6337] veth0_macvtap: entered promiscuous mode [ 1165.915673][ T6337] veth1_macvtap: entered promiscuous mode [ 1165.961332][ T6430] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1165.982902][ T6430] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1166.003757][ T6337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1166.022277][ T6430] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1166.042897][ T6430] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1166.065321][ T6337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1166.090632][ T6531] net_ratelimit: 4767 callbacks suppressed [ 1166.090652][ T6531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1166.109191][ T9183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.118401][ T9183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.147764][ T9183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.156717][ T9183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.354805][T30265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.373819][T30265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.395036][ T6541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1166.403331][ T6541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1166.444290][T30272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.452706][T30272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.483863][ T6430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1166.526074][ T6430] 8021q: adding VLAN 0 to HW filter on device team0 [ 1166.542485][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.549729][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1166.569240][T30265] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.576543][T30265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1166.658384][ T5835] Bluetooth: hci8: command tx timeout [ 1166.815654][ T6547] pim6reg: entered allmulticast mode [ 1167.065578][ T6430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1167.430788][ T6571] netlink: 'syz.6.8765': attribute type 1 has an invalid length. [ 1167.605895][ T6577] __nla_validate_parse: 6 callbacks suppressed [ 1167.605918][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8765'. [ 1167.698910][ T5835] Bluetooth: hci6: command tx timeout [ 1167.786695][ T6577] bond3 (unregistering): Released all slaves [ 1168.110356][ T6586] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8769'. [ 1168.169349][ T6588] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8770'. [ 1168.284324][ T6592] netlink: 'syz.3.8771': attribute type 4 has an invalid length. [ 1168.393733][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8772'. [ 1168.686967][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8775'. [ 1168.739603][ T5835] Bluetooth: hci8: command tx timeout [ 1168.839918][ T6617] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1169.006597][ T6430] veth0_vlan: entered promiscuous mode [ 1169.015506][ T6629] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8779'. [ 1169.055143][ T6430] veth1_vlan: entered promiscuous mode [ 1169.173243][T30263] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1169.195068][T30263] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.286317][T30263] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1169.311785][T30263] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.396914][T30272] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1169.423353][T30272] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.521722][T30272] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1169.567354][T30272] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.597482][ T6658] netlink: 'syz.6.8788': attribute type 4 has an invalid length. [ 1169.625993][ T6656] netlink: 'syz.2.8787': attribute type 4 has an invalid length. [ 1169.637936][ T6430] veth0_macvtap: entered promiscuous mode [ 1169.643803][ T6656] netlink: 17 bytes leftover after parsing attributes in process `syz.2.8787'. [ 1169.650149][ T6659] netlink: 14601 bytes leftover after parsing attributes in process `syz.6.8788'. [ 1169.715371][T30243] bridge_slave_0: left allmulticast mode [ 1169.721860][T30243] bridge_slave_0: left promiscuous mode [ 1169.737316][ T6658] netlink: 17 bytes leftover after parsing attributes in process `syz.6.8788'. [ 1169.745566][T30243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.777698][ T5835] Bluetooth: hci6: command tx timeout [ 1169.844903][ T6670] netlink: 'syz.0.8791': attribute type 1 has an invalid length. [ 1170.074339][ T6675] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1170.185425][T30243] dvmrp0 (unregistering): left allmulticast mode [ 1170.586161][ T6694] netlink: 'syz.2.8793': attribute type 1 has an invalid length. [ 1170.626154][T30243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1170.642765][T30243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1170.656948][T30243] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1170.672319][T30243] bond0 (unregistering): Released all slaves [ 1170.683850][T30243] bond1 (unregistering): Released all slaves [ 1170.702701][T30243] bond2 (unregistering): (slave veth5): Releasing active interface [ 1170.713779][T30243] bond2 (unregistering): Released all slaves [ 1170.734268][ T6430] veth1_macvtap: entered promiscuous mode [ 1170.751386][ T6671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1170.847060][ T6430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1170.918620][T30243] !: left promiscuous mode [ 1170.973833][ T6430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1171.000358][ T6694] wlan1 speed is unknown, defaulting to 1000 [ 1171.014394][ T9187] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.052914][ T9187] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.081785][T30243] tipc: Disabling bearer [ 1171.102772][T30243] tipc: Left network mode [ 1171.105181][ T9187] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.122893][ T6710] xt_nat: multiple ranges no longer supported [ 1171.186075][ T9187] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.366728][ T6723] xt_NFQUEUE: number of total queues is 0 [ 1171.430214][ T6725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8800'. [ 1171.502519][ T6727] pimreg: entered allmulticast mode [ 1171.858394][ T5835] Bluetooth: hci6: command tx timeout [ 1171.873093][T30269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.903352][T30269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1172.074198][ T6753] netlink: 'syz.3.8804': attribute type 3 has an invalid length. [ 1172.182291][T30243] hsr_slave_0: left promiscuous mode [ 1172.207163][T30243] hsr_slave_1: left promiscuous mode [ 1172.224086][T30243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1172.269882][T30243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1172.566413][T30243] team0 (unregistering): Port device team_slave_1 removed [ 1172.584451][T30243] team0 (unregistering): Port device team_slave_0 removed [ 1172.831810][T30274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1172.857679][T30274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.223682][ T6789] IPv6: sit1: Disabled Multicast RS [ 1173.262963][ T6789] sit1: entered allmulticast mode [ 1173.518930][ T6809] syzkaller1: entered promiscuous mode [ 1173.578286][ T6809] syzkaller1: entered allmulticast mode [ 1173.639690][ T6804] syzkaller0: entered promiscuous mode [ 1173.645312][ T6804] syzkaller0: entered allmulticast mode [ 1173.675276][ T6818] __nla_validate_parse: 3 callbacks suppressed [ 1173.675299][ T6818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8820'. [ 1175.935456][ T6855] netlink: 'syz.8.8825': attribute type 1 has an invalid length. [ 1176.064902][T30243] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.250113][ T6871] nbd: must specify a device to reconfigure [ 1176.364018][T30243] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.488810][ T6881] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8834'. [ 1176.631750][T30243] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.691441][ T6901] netlink: 232 bytes leftover after parsing attributes in process `syz.3.8836'. [ 1176.991613][T30243] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.021502][ T6917] netlink: 'syz.3.8839': attribute type 3 has an invalid length. [ 1177.038392][ T6916] netlink: 'syz.3.8839': attribute type 3 has an invalid length. [ 1177.050691][ T6916] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8839'. [ 1177.073608][ T6917] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8839'. [ 1177.332576][ T6930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1177.361678][ T6938] netlink: 60 bytes leftover after parsing attributes in process `syz.8.8846'. [ 1177.372369][ T6940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1177.396316][ T6930] netlink: 'syz.0.8844': attribute type 1 has an invalid length. [ 1177.482835][ T9187] netdevsim netdevsim7 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 1177.508361][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8844'. [ 1177.521185][ T6941] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8845'. [ 1177.539004][ T9187] netdevsim netdevsim7 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.540240][ T6941] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8845'. [ 1177.636776][T30275] netdevsim netdevsim7 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 1177.690218][T30275] netdevsim netdevsim7 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.748304][ T6948] netlink: 184 bytes leftover after parsing attributes in process `syz.2.8843'. [ 1177.825539][ T36] netdevsim netdevsim7 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 1177.870890][ T36] netdevsim netdevsim7 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.002864][T30277] netdevsim netdevsim7 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 1178.023811][T30277] netdevsim netdevsim7 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.150661][T30243] bridge_slave_1: left allmulticast mode [ 1178.173876][T30243] bridge_slave_1: left promiscuous mode [ 1178.181868][T30243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.216499][T30243] bridge_slave_0: left allmulticast mode [ 1178.223755][T30243] bridge_slave_0: left promiscuous mode [ 1178.231129][T30243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.283644][ T6972] netlink: 'syz.3.8853': attribute type 2 has an invalid length. [ 1178.311594][ T6972] netlink: 'syz.3.8853': attribute type 2 has an invalid length. [ 1178.863190][T30243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1178.876767][T30243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1178.888694][T30243] bond0 (unregistering): Released all slaves [ 1178.903295][T30243] bond1 (unregistering): Released all slaves [ 1178.921425][T30243] bond2 (unregistering): Released all slaves [ 1179.073947][T30243] tipc: Left network mode [ 1179.509957][ T7028] netlink: 'syz.0.8866': attribute type 21 has an invalid length. [ 1179.920699][ T7042] __nla_validate_parse: 1 callbacks suppressed [ 1179.920722][ T7042] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8870'. [ 1179.953001][T30243] hsr_slave_0: left promiscuous mode [ 1179.981868][T30243] hsr_slave_1: left promiscuous mode [ 1180.031341][T30243] veth1_macvtap: left promiscuous mode [ 1180.047154][T30243] veth0_macvtap: left promiscuous mode [ 1180.057564][T30243] veth1_vlan: left promiscuous mode [ 1180.131172][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8872'. [ 1180.722689][T30243] team0 (unregistering): Port device team_slave_1 removed [ 1180.739765][T30243] team0 (unregistering): Port device team_slave_0 removed [ 1180.873204][ T7046] kthread_run failed with err -4 [ 1180.897987][ T5489] veth1_macvtap: left promiscuous mode [ 1181.102883][ T7089] x_tables: duplicate underflow at hook 1 [ 1181.220172][ T7092] tipc: Enabled bearer , priority 0 [ 1181.356239][ T7100] netlink: 'syz.0.8878': attribute type 16 has an invalid length. [ 1181.382080][ T7100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8878'. [ 1181.398186][ T7092] syzkaller0: entered promiscuous mode [ 1181.423548][ T7092] syzkaller0: entered allmulticast mode [ 1181.473268][ T7092] tipc: Resetting bearer [ 1181.502509][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8878'. [ 1181.649301][ T7090] tipc: Resetting bearer [ 1181.871431][ T7127] netlink: 'syz.2.8889': attribute type 1 has an invalid length. [ 1182.041288][ T7137] netlink: 56 bytes leftover after parsing attributes in process `syz.8.8890'. [ 1182.125584][ T7141] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8893'. [ 1182.136405][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8893'. [ 1182.286858][ T7150] netlink: 'syz.8.8896': attribute type 2 has an invalid length. [ 1182.294771][ T7150] netlink: 188 bytes leftover after parsing attributes in process `syz.8.8896'. [ 1182.306101][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8896'. [ 1182.319024][ T7151] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8896'. [ 1183.206340][ T7158] netlink: 'syz.3.8898': attribute type 1 has an invalid length. [ 1183.345094][ T7161] netlink: 'syz.3.8899': attribute type 1 has an invalid length. [ 1183.920761][ T7090] tipc: Disabling bearer [ 1183.931373][ T7128] mac80211_hwsim hwsim105 wlan0: entered promiscuous mode [ 1183.939119][ T7128] mac80211_hwsim hwsim105 wlan0: entered allmulticast mode [ 1184.702931][ T7198] netlink: 'syz.0.8908': attribute type 11 has an invalid length. [ 1184.743677][ T7198] netlink: 'syz.0.8908': attribute type 4 has an invalid length. [ 1185.014268][ T7215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1185.307898][ T7232] netlink: 'syz.6.8916': attribute type 1 has an invalid length. [ 1185.322797][ T7230] __nla_validate_parse: 1 callbacks suppressed [ 1185.322818][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8917'. [ 1185.339714][ T7232] netlink: 224 bytes leftover after parsing attributes in process `syz.6.8916'. [ 1185.352492][ T7230] bridge_slave_1: left allmulticast mode [ 1185.359801][ T7230] bridge_slave_1: left promiscuous mode [ 1185.366115][ T7230] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.479380][ T7239] netlink: 112 bytes leftover after parsing attributes in process `syz.2.8918'. [ 1185.494181][ T7230] bridge_slave_0: left allmulticast mode [ 1185.526490][ T7230] bridge_slave_0: left promiscuous mode [ 1185.538985][ T7230] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.575780][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8919'. [ 1185.693427][ T7249] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8920'. [ 1185.703262][ T7249] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8920'. [ 1185.961923][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8925'. [ 1186.062829][ T7270] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8925'. [ 1186.101454][ T7275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8926'. [ 1186.151818][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8928'. [ 1186.534699][ T7305] netlink: 'syz.8.8932': attribute type 10 has an invalid length. [ 1186.655404][ T7305] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1187.205984][ T7345] netlink: 'syz.6.8943': attribute type 9 has an invalid length. [ 1187.231710][ T7345] netlink: 'syz.6.8943': attribute type 11 has an invalid length. [ 1187.274267][ T7345] netlink: 'syz.6.8943': attribute type 12 has an invalid length. [ 1187.626534][ T7320] netlink: 'syz.3.8934': attribute type 1 has an invalid length. [ 1188.209521][ T7403] netlink: 'syz.8.8958': attribute type 4 has an invalid length. [ 1189.359765][ T7477] netlink: 'syz.0.8978': attribute type 27 has an invalid length. [ 1189.664548][ T7498] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1190.355961][ T7551] netlink: 'syz.8.8992': attribute type 4 has an invalid length. [ 1190.413604][ T1324] udevd[1324]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1190.446027][ T7551] __nla_validate_parse: 20 callbacks suppressed [ 1190.446050][ T7551] netlink: 232 bytes leftover after parsing attributes in process `syz.8.8992'. [ 1190.469744][ T7558] syzkaller0: entered promiscuous mode [ 1190.541495][ T7558] syzkaller0: entered allmulticast mode [ 1190.647106][ T7573] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8995'. [ 1190.910804][ T7588] netlink: 'syz.0.8998': attribute type 1 has an invalid length. [ 1190.948055][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8998'. [ 1190.960229][ T7590] netlink: 68 bytes leftover after parsing attributes in process `syz.8.8999'. [ 1190.985409][ T7591] netlink: 68 bytes leftover after parsing attributes in process `syz.8.8999'. [ 1191.027691][ T7588] netlink: 'syz.0.8998': attribute type 1 has an invalid length. [ 1191.071121][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8998'. [ 1191.115730][ T7597] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1191.123073][ T7597] IPv6: NLM_F_CREATE should be set when creating new route [ 1191.132797][ T7588] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1191.185321][ T7597] tipc: Started in network mode [ 1191.192063][ T7597] tipc: Node identity ac141441, cluster identity 4711 [ 1191.200400][ T7597] tipc: Enabled bearer , priority 10 [ 1191.730172][ T7621] ip6gre1: entered allmulticast mode [ 1192.086436][ T7624] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9010'. [ 1192.109311][ T7629] pim6reg: entered allmulticast mode [ 1192.321457][T25219] tipc: Node number set to 2886997057 [ 1192.576926][ T7654] : entered promiscuous mode [ 1192.609244][ T7658] erspan0: entered promiscuous mode [ 1192.656398][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9018'. [ 1192.747471][ T7657] erspan0: left promiscuous mode [ 1192.947846][ T7668] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9022'. [ 1193.118089][ T7671] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9023'. [ 1193.293605][ T7680] syzkaller0: entered promiscuous mode [ 1193.323061][ T7680] syzkaller0: entered allmulticast mode [ 1193.613029][ T7685] netlink: 'syz.0.9027': attribute type 22 has an invalid length. [ 1193.659101][ T7685] netlink: 'syz.0.9027': attribute type 22 has an invalid length. [ 1193.800407][ T7696] netlink: 'syz.8.9029': attribute type 1 has an invalid length. [ 1193.899061][ T7696] bond1: entered promiscuous mode [ 1193.932418][ T7696] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1194.120750][ T7696] bond1: (slave bridge0): making interface the new active one [ 1194.161150][ T7696] bridge0: entered promiscuous mode [ 1194.190553][ T7696] bridge0: left promiscuous mode [ 1194.744176][ T7746] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1197.466323][ T7729] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1197.637971][ T7798] __nla_validate_parse: 3 callbacks suppressed [ 1197.637991][ T7798] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9045'. [ 1197.776498][ T7807] netlink: 1196 bytes leftover after parsing attributes in process `syz.6.9048'. [ 1198.024705][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9051'. [ 1198.332401][ T7834] syzkaller0: entered promiscuous mode [ 1198.340406][ T7838] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1198.348391][ T7834] syzkaller0: entered allmulticast mode [ 1198.479015][ T7843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9060'. [ 1198.685281][ T7850] netlink: 'syz.0.9064': attribute type 2 has an invalid length. [ 1198.713607][ T7854] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9065'. [ 1198.732999][ T7851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1198.775739][ T7854] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9065'. [ 1198.801043][ T7856] : renamed from hsr0 (while UP) [ 1198.942769][ T7870] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 1198.968173][ T7872] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1199.168089][ T7883] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9072'. [ 1199.193940][ T7886] netlink: 320 bytes leftover after parsing attributes in process `syz.2.9074'. [ 1199.536932][ T7910] netlink: 'syz.0.9081': attribute type 23 has an invalid length. [ 1199.573693][ T7906] bridge10: the hash_elasticity option has been deprecated and is always 16 [ 1199.631644][ T7916] netlink: 'syz.0.9081': attribute type 23 has an invalid length. [ 1199.786636][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9084'. [ 1200.232579][ T7938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9089'. [ 1200.304660][ T7940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1200.371669][ T7942] netlink: 'syz.3.9090': attribute type 1 has an invalid length. [ 1200.439705][ T7947] mac80211_hwsim hwsim106 syzkaller0: entered promiscuous mode [ 1200.447577][ T7947] mac80211_hwsim hwsim106 syzkaller0: entered allmulticast mode [ 1200.483546][ T7944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1201.195256][ T7991] x_tables: duplicate underflow at hook 2 [ 1201.517959][ T8014] bridge1: entered promiscuous mode [ 1201.523235][ T8014] bridge1: entered allmulticast mode [ 1201.534090][ T8014] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1202.045158][ T8047] bridge0: port 1(gretap0) entered disabled state [ 1202.051964][ T8047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.324133][ T8066] delete_channel: no stack [ 1202.420428][ T8067] bond1: option mode: invalid value (133) [ 1202.491000][ T8067] bond1 (unregistering): Released all slaves [ 1202.626394][ T8079] batadv2: entered allmulticast mode [ 1203.197459][ T8100] __nla_validate_parse: 11 callbacks suppressed [ 1203.197483][ T8100] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9131'. [ 1203.213536][ T8100] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9131'. [ 1203.224921][ T8100] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9131'. [ 1203.235340][ T8100] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9131'. [ 1203.475826][ T8112] workqueue: Failed to create a rescuer kthread for wq "nfc7_nci_tx_wq": -EINTR [ 1203.488808][ T8113] workqueue: Failed to create a rescuer kthread for wq "nfc7_nci_cmd_wq": -EINTR [ 1205.446357][ T8072] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1205.705143][ T8152] IPv6: NLM_F_CREATE should be specified when creating new route [ 1205.733122][ T8156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9140'. [ 1205.944914][ T8171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9143'. [ 1206.080028][ T8181] netlink: 'syz.0.9145': attribute type 142 has an invalid length. [ 1206.106247][ T8181] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9145'. [ 1206.233853][ T8195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9147'. [ 1206.273904][ T8197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9147'. [ 1206.316982][ T8200] syzkaller0: entered promiscuous mode [ 1206.326628][ T8200] syzkaller0: entered allmulticast mode [ 1207.418361][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9161'. [ 1208.471958][ T8330] __nla_validate_parse: 6 callbacks suppressed [ 1208.471979][ T8330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9175'. [ 1210.653102][ T8280] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1210.951349][ T8429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9185'. [ 1211.545461][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1211.566349][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1211.577788][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1211.586513][ T8455] ipt_ECN: cannot use operation on non-tcp rule [ 1211.608317][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1211.623874][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1211.809427][T29501] syz_tun (unregistering): left promiscuous mode [ 1211.913812][ T8461] netlink: 132 bytes leftover after parsing attributes in process `syz.8.9196'. [ 1212.169133][ T8473] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1212.183438][ T8473] netlink: 'syz.6.9199': attribute type 30 has an invalid length. [ 1212.390610][ T8489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1212.488471][ T8452] chnl_net:caif_netlink_parms(): no params data found [ 1212.610463][ T8500] xt_nat: multiple ranges no longer supported [ 1212.723637][ T8452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1212.731239][ T8452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.743519][ T8452] bridge_slave_0: entered allmulticast mode [ 1212.754213][ T8452] bridge_slave_0: entered promiscuous mode [ 1212.765308][ T8452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.778495][ T8452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1212.786033][ T8452] bridge_slave_1: entered allmulticast mode [ 1212.794352][ T8452] bridge_slave_1: entered promiscuous mode [ 1212.914940][ T8452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1212.980236][ T8452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1213.075342][ T8452] team0: Port device team_slave_0 added [ 1213.147416][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1213.170084][ T8452] team0: Port device team_slave_1 added [ 1213.238143][ T8452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1213.253852][ T8452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1213.290795][ T8452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1213.304471][ T8452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1213.362397][ T8452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1213.391054][ T8452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1213.430376][ T8532] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1213.655561][ T8452] hsr_slave_0: entered promiscuous mode [ 1213.672583][ T8452] hsr_slave_1: entered promiscuous mode [ 1213.691296][ T8452] debugfs: 'hsr0' already exists in 'hsr' [ 1213.697125][ T8452] Cannot create hsr debugfs directory [ 1213.709068][ T5836] Bluetooth: hci1: command tx timeout [ 1213.794544][ T8553] syzkaller0: entered promiscuous mode [ 1213.808416][ T8553] syzkaller0: entered allmulticast mode [ 1213.973633][ T8557] bond4: option lp_interval: invalid value (0) [ 1214.012060][ T8557] bond4: option lp_interval: allowed values 1 - 2147483647 [ 1214.033005][ T8557] bond4 (unregistering): Released all slaves [ 1214.068654][ T8570] netlink: 68 bytes leftover after parsing attributes in process `syz.8.9230'. [ 1214.503438][ T8596] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9234'. [ 1214.568870][ T8452] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1214.601524][ T8452] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.784025][ T8452] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1214.818777][ T8452] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.069478][ T8452] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1215.098392][ T8452] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.205833][ T8614] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1215.251943][ T8452] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1215.262708][ T8452] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.787246][ T5836] Bluetooth: hci1: command tx timeout [ 1216.392797][ T8639] netlink: 'syz.8.9243': attribute type 1 has an invalid length. [ 1217.300201][ T8642] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9244'. [ 1217.599673][ T8452] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1217.640972][ T8452] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1217.666926][ T8452] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1217.696419][ T8452] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1217.858471][ T5835] Bluetooth: hci1: command tx timeout [ 1217.973322][ T8668] netlink: 36 bytes leftover after parsing attributes in process `syz.8.9252'. [ 1217.996118][ T8657] syzkaller0: entered promiscuous mode [ 1218.006582][ T8657] syzkaller0: entered allmulticast mode [ 1218.014397][ T8672] netlink: 'syz.2.9253': attribute type 2 has an invalid length. [ 1218.027722][ T8672] netlink: 244 bytes leftover after parsing attributes in process `syz.2.9253'. [ 1219.942667][ T5835] Bluetooth: hci1: command 0x0419 tx timeout [ 1220.186871][ T8452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1220.275517][ T8452] 8021q: adding VLAN 0 to HW filter on device team0 [ 1220.293432][ T8710] sctp: [Deprecated]: syz.2.9262 (pid 8710) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1220.293432][ T8710] Use struct sctp_sack_info instead [ 1220.355920][ T9183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.363173][ T9183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1220.394621][T30243] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.401952][T30243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1220.619158][ T8726] netlink: 'syz.3.9266': attribute type 4 has an invalid length. [ 1220.783547][ T8734] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9269'. [ 1220.826683][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9269'. [ 1220.861120][ T8741] tipc: Failed to remove unknown binding: 66,0,0/0:2066654486/2066654487 [ 1220.879414][ T8741] tipc: Failed to remove unknown binding: 66,0,0/0:2066654486/2066654487 [ 1220.922997][ T8452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1221.052644][ T8452] veth0_vlan: entered promiscuous mode [ 1221.093469][ T8452] veth1_vlan: entered promiscuous mode [ 1221.219111][ T8452] veth0_macvtap: entered promiscuous mode [ 1221.272443][ T8452] veth1_macvtap: entered promiscuous mode [ 1221.305055][ T8753] netlink: 'syz.8.9273': attribute type 14 has an invalid length. [ 1221.313292][ T8753] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9273'. [ 1221.371522][T30263] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1221.393898][T30263] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1221.428755][T30263] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1221.476398][T30263] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1221.516528][ T8452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1221.585955][ T8452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1221.632044][T30277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.668512][T30277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.721639][T30277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.735268][T30277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.861756][ T8778] bond2: (slave vlan0): Enslaving as a backup interface with an up link [ 1221.906692][ T8782] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9281'. [ 1221.946326][ T8782] veth0_to_team: entered promiscuous mode [ 1221.954840][ T8782] veth0_to_team: left promiscuous mode [ 1222.018084][ T5836] Bluetooth: hci1: command 0x0419 tx timeout [ 1222.509281][ T8802] netlink: 'syz.6.9285': attribute type 1 has an invalid length. [ 1222.547807][T30269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1222.556937][T30269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1222.636991][ T8802] bond4: entered promiscuous mode [ 1222.642899][ T8802] bond4: entered allmulticast mode [ 1222.649304][ T8802] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1222.775206][ T8807] macvlan3: entered promiscuous mode [ 1222.809783][ T8807] macvlan3: entered allmulticast mode [ 1222.830269][ T8807] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1222.882561][ T8813] netlink: 'syz.2.9287': attribute type 12 has an invalid length. [ 1222.922090][ T8823] netlink: 48 bytes leftover after parsing attributes in process `syz.8.9288'. [ 1222.953114][T30277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1222.982146][T30277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.206548][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9292'. [ 1223.427802][ T8846] netlink: 240 bytes leftover after parsing attributes in process `syz.8.9294'. [ 1223.448853][ T8846] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9294'. [ 1223.571402][ T8848] Cannot find add_set index 2 as target [ 1223.595740][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9298'. [ 1223.620310][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9298'. [ 1223.715408][ T8861] syzkaller0: entered promiscuous mode [ 1223.740248][ T8861] syzkaller0: entered allmulticast mode [ 1223.819089][ T8870] netlink: 'syz.0.9300': attribute type 1 has an invalid length. [ 1224.511219][ T8914] netlink: 'syz.0.9307': attribute type 11 has an invalid length. [ 1224.543897][ T8914] netlink: 'syz.0.9307': attribute type 11 has an invalid length. [ 1225.173926][ T8948] netlink: 'syz.0.9317': attribute type 4 has an invalid length. [ 1225.216249][ T8950] netlink: 'syz.8.9316': attribute type 16 has an invalid length. [ 1225.227714][ T8950] netlink: 'syz.8.9316': attribute type 17 has an invalid length. [ 1225.400328][ T8950] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1225.776702][ T8963] geneve1: mtu greater than device maximum [ 1225.978223][ T8981] __nla_validate_parse: 11 callbacks suppressed [ 1225.978243][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9324'. [ 1226.119808][ T8988] netlink: 104 bytes leftover after parsing attributes in process `syz.8.9326'. [ 1226.312098][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9331'. [ 1226.364573][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9329'. [ 1226.636412][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9335'. [ 1226.693893][ T9021] syzkaller0: entered promiscuous mode [ 1226.704820][ T9023] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9338'. [ 1226.705310][ T9025] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9338'. [ 1226.715752][ T9021] syzkaller0: entered allmulticast mode [ 1226.980454][ T9043] x_tables: duplicate underflow at hook 3 [ 1227.372666][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1227.385046][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1227.398840][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1227.407801][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1227.415554][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1228.009002][ T9078] netlink: 'syz.8.9349': attribute type 13 has an invalid length. [ 1229.459196][ T5835] Bluetooth: hci4: command tx timeout [ 1230.469648][ T9078] veth0_macvtap: left promiscuous mode [ 1230.475262][ T9078] macvtap0: entered allmulticast mode [ 1230.490242][ T9078] macvtap0: refused to change device tx_queue_len [ 1230.870042][ T9102] netlink: 'syz.2.9356': attribute type 1 has an invalid length. [ 1230.929052][ T9102] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1230.986960][ T9102] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.9356'. [ 1231.046900][ T9112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9359'. [ 1231.095082][ T9056] chnl_net:caif_netlink_parms(): no params data found [ 1231.248756][ T9056] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.261456][ T9056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.269037][ T9056] bridge_slave_0: entered allmulticast mode [ 1231.277804][ T9056] bridge_slave_0: entered promiscuous mode [ 1231.286556][ T9122] lo: entered promiscuous mode [ 1231.298755][ T9124] SET target dimension over the limit! [ 1231.301258][ T9122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1231.328833][ T9056] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.336912][ T9056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.345554][ T9056] bridge_slave_1: entered allmulticast mode [ 1231.355817][ T9056] bridge_slave_1: entered promiscuous mode [ 1231.405038][ T9056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.418930][ T9056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1231.475294][ T9056] team0: Port device team_slave_0 added [ 1231.484985][ T9056] team0: Port device team_slave_1 added [ 1231.533965][ T9056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1231.538489][ T5835] Bluetooth: hci4: command tx timeout [ 1231.541420][ T9056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1231.586776][ T9130] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1231.593948][ T9131] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1231.602400][T21430] IPVS: starting estimator thread 0... [ 1231.636729][ T9056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1231.664130][ T9056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1231.687959][ T9056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1231.715688][ T9056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1231.726964][ T9134] IPVS: using max 38 ests per chain, 91200 per kthread [ 1231.846468][ T9056] hsr_slave_0: entered promiscuous mode [ 1231.860758][ T9056] hsr_slave_1: entered promiscuous mode [ 1231.870687][ T9056] debugfs: 'hsr0' already exists in 'hsr' [ 1231.876585][ T9056] Cannot create hsr debugfs directory [ 1231.889058][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9366'. [ 1231.962443][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9366'. [ 1232.275455][ T9154] netlink: 'syz.0.9370': attribute type 1 has an invalid length. [ 1232.420163][ T9056] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1232.455578][ T9056] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.611453][ T9056] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1232.633630][ T9056] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.714552][ T9181] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.9373'. [ 1232.934333][ T9180] veth3: entered allmulticast mode [ 1233.026719][ T9056] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1233.037642][ T9056] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.165131][ T9056] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1233.180239][ T9056] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.622251][ T5835] Bluetooth: hci4: command tx timeout [ 1233.656437][ T9056] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1233.702716][ T9056] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1233.742345][ T9056] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1233.780790][ T9056] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1233.911639][ T9056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1233.945062][ T9056] 8021q: adding VLAN 0 to HW filter on device team0 [ 1233.972990][ T9183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.980344][ T9183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1234.022118][T30243] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.029366][T30243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1234.204446][ T9227] xt_hashlimit: size too large, truncated to 1048576 [ 1234.301648][ T9229] sctp: [Deprecated]: syz.6.9386 (pid 9229) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1234.301648][ T9229] Use struct sctp_sack_info instead [ 1234.524357][ T9056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1234.690371][ T9056] veth0_vlan: entered promiscuous mode [ 1234.724648][ T9056] veth1_vlan: entered promiscuous mode [ 1234.811177][ T9056] veth0_macvtap: entered promiscuous mode [ 1234.831297][ T9056] veth1_macvtap: entered promiscuous mode [ 1234.911717][ T9056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1234.945646][ T9056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1235.007059][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.028960][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.062040][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.083113][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.506341][T30244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.528891][T30244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.654981][T30243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.708105][ T5835] Bluetooth: hci4: command tx timeout [ 1235.734184][T30243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.855455][ T9274] netlink: 'syz.2.9403': attribute type 1 has an invalid length. [ 1235.873059][ T9275] sctp: [Deprecated]: syz.8.9404 (pid 9275) Use of int in max_burst socket option deprecated. [ 1235.873059][ T9275] Use struct sctp_assoc_value instead [ 1235.911054][ T9274] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1236.012046][ T9275] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 1236.115470][ T9275] bond3 (unregistering): Released all slaves [ 1236.123837][ T9289] netlink: 'syz.3.9344': attribute type 1 has an invalid length. [ 1236.134878][ T9290] delete_channel: no stack [ 1236.145510][ T9291] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9407'. [ 1236.158498][ T9291] netlink: 'syz.6.9407': attribute type 30 has an invalid length. [ 1236.166477][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9407'. [ 1236.595494][ T9311] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9412'. [ 1236.615968][ T9314] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9413'. [ 1236.636233][ T9314] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9413'. [ 1236.786819][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9416'. [ 1237.442478][ T9370] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9426'. [ 1237.714427][ T9391] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9434'. [ 1238.148924][ T9408] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9437'. [ 1238.158596][ T9408] openvswitch: netlink: Flow key attr not present in new flow. [ 1238.278454][ T9417] bond6: option lp_interval: invalid value (0) [ 1238.284856][ T9417] bond6: option lp_interval: allowed values 1 - 2147483647 [ 1238.329534][ T9417] bond6 (unregistering): Released all slaves [ 1238.403029][ T9424] sctp: [Deprecated]: syz.8.9441 (pid 9424) Use of int in max_burst socket option. [ 1238.403029][ T9424] Use struct sctp_assoc_value instead [ 1238.708507][ T9441] netlink: 27 bytes leftover after parsing attributes in process `syz.8.9446'. [ 1238.891297][ T9445] syz_tun: Device is already in use. [ 1240.036356][ T9502] netlink: 'syz.0.9457': attribute type 5 has an invalid length. [ 1240.558951][ T9481] lec:lec_atm_close: lec0: Shut down! [ 1240.834993][ T9512] netlink: 'syz.8.9458': attribute type 1 has an invalid length. [ 1240.862547][ T9512] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1242.312261][ T9471] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1242.808289][ T9541] netlink: 'syz.6.9467': attribute type 3 has an invalid length. [ 1243.665930][ T9583] : entered promiscuous mode [ 1243.716027][ T9590] __nla_validate_parse: 1 callbacks suppressed [ 1243.716046][ T9590] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9474'. [ 1243.978326][T25219] lec:lec_start_xmit: lec0:No lecd attached [ 1244.050012][ T9607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9479'. [ 1244.148901][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9479'. [ 1244.367047][ T9595] lec:lec_atm_close: lec0: Shut down! [ 1244.389155][ T9623] syzkaller1: entered promiscuous mode [ 1244.416655][ T9623] syzkaller1: entered allmulticast mode [ 1244.990750][ T9653] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9490'. [ 1245.013595][ T9653] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9490'. [ 1245.037714][ T9653] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9490'. [ 1245.129428][ T9662] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9492'. [ 1245.356037][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9496'. [ 1245.546618][ T9690] netlink: 216 bytes leftover after parsing attributes in process `syz.6.9502'. [ 1245.577457][ T9690] netlink: 'syz.6.9502': attribute type 2 has an invalid length. [ 1245.604931][ T9690] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1245.605067][ T9691] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1245.674171][ T9674] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9496'. [ 1245.906112][ T9709] netlink: 'syz.2.9506': attribute type 4 has an invalid length. [ 1245.999661][ T9714] netlink: 'syz.2.9506': attribute type 4 has an invalid length. [ 1246.148706][ T9726] netlink: 'syz.0.9510': attribute type 1 has an invalid length. [ 1246.421360][ T9747] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 1246.522140][ T9753] bond2: Unable to set down delay as MII monitoring is disabled [ 1246.562858][ T9757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1246.586472][ T9753] bond2 (unregistering): Released all slaves [ 1246.749075][ T9766] netlink: 'syz.3.9519': attribute type 83 has an invalid length. [ 1247.100381][ T9785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1247.189693][ T9792] netlink: 'syz.6.9527': attribute type 1 has an invalid length. [ 1247.233445][ T9792] netlink: 'syz.6.9527': attribute type 1 has an invalid length. [ 1247.483455][ T9807] netlink: 'syz.0.9529': attribute type 178 has an invalid length. [ 1247.492222][ T9804] netlink: 'syz.6.9527': attribute type 16 has an invalid length. [ 1247.494924][ T9807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1247.776954][ T9817] netlink: 'syz.8.9531': attribute type 11 has an invalid length. [ 1247.820450][ T9823] validate_nla: 2 callbacks suppressed [ 1247.820470][ T9823] netlink: 'syz.0.9533': attribute type 1 has an invalid length. [ 1247.987814][ T9829] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1247.995042][ T9823] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1248.097481][ T9828] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1248.105801][ T9837] veth1_macvtap: left promiscuous mode [ 1248.591343][ T9851] "syz.3.9542" (9851) uses obsolete ecb(arc4) skcipher [ 1248.688577][ T9857] netlink: 'syz.8.9543': attribute type 1 has an invalid length. [ 1248.904746][ T9866] __nla_validate_parse: 9 callbacks suppressed [ 1248.904772][ T9866] netlink: 48 bytes leftover after parsing attributes in process `syz.8.9546'. [ 1249.140155][ T9877] netlink: 64 bytes leftover after parsing attributes in process `syz.6.9547'. [ 1249.160312][ T9878] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9549'. [ 1249.349927][ T9884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1249.415795][ T9886] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1249.627741][T25219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.665383][ T9896] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9555'. [ 1249.712846][ T9896] netlink: 248 bytes leftover after parsing attributes in process `syz.8.9555'. [ 1249.764369][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9555'. [ 1249.857179][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5500 ms [ 1249.866732][ C0] lec:lec_tx_timeout: lec0 [ 1249.872135][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1249.880235][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.908069][ T9908] x_tables: duplicate underflow at hook 2 [ 1249.941121][ T9908] x_tables: duplicate underflow at hook 3 [ 1249.969796][ T9910] x_tables: duplicate underflow at hook 3 [ 1249.978392][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9559'. [ 1250.028407][ T9914] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9559'. [ 1250.058523][ T9914] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9559'. [ 1250.077810][ T9913] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9559'. [ 1250.309923][ T9922] bond3: (slave gre0): Device is not bonding slave [ 1250.316586][ T9922] bond3: option active_slave: invalid value (gre0) [ 1250.325768][ T9922] bond3 (unregistering): Released all slaves [ 1250.604316][ T9946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1250.899127][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1251.302801][ T9973] netlink: 'syz.8.9574': attribute type 83 has an invalid length. [ 1251.486782][ T9986] erspan0: entered allmulticast mode [ 1251.891688][T10006] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1251.937672][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.150580][T10023] netlink: 'syz.6.9587': attribute type 3 has an invalid length. [ 1252.168118][T10023] netlink: 'syz.6.9587': attribute type 2 has an invalid length. [ 1252.311272][T10023] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1252.475482][T10042] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1252.667728][ T8189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.978035][T25219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.009194][T10061] netlink: 'syz.8.9598': attribute type 2 has an invalid length. [ 1253.208617][T10071] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1253.242642][T10073] x_tables: duplicate underflow at hook 2 [ 1254.017499][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.465316][T10098] erspan0: entered promiscuous mode [ 1254.898084][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1254.906285][ C0] lec:lec_tx_timeout: lec0 [ 1254.911558][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1255.061717][T25219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.698135][ T8189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.955680][T10061] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1256.020030][T10129] __nla_validate_parse: 16 callbacks suppressed [ 1256.020053][T10129] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.9614'. [ 1256.127802][T25217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1256.450643][T10147] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9619'. [ 1256.502298][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9619'. [ 1256.546808][T10147] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1256.657746][T21433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.148686][T25219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.170984][T10175] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9624'. [ 1257.207983][T10175] nbd: illegal input index -8454144 [ 1257.275975][T10180] syzkaller0: entered promiscuous mode [ 1257.281846][T10180] syzkaller0: entered allmulticast mode [ 1257.305989][T21430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.425983][T10184] netlink: 'syz.2.9628': attribute type 1 has an invalid length. [ 1257.541444][T10191] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9628'. [ 1257.648744][T10196] netlink: 'syz.6.9631': attribute type 1 has an invalid length. [ 1257.661389][T10196] netlink: 'syz.6.9631': attribute type 1 has an invalid length. [ 1257.670138][T10196] netlink: 'syz.6.9631': attribute type 1 has an invalid length. [ 1257.679937][T10196] netlink: 'syz.6.9631': attribute type 2 has an invalid length. [ 1257.689344][T10196] netlink: 76 bytes leftover after parsing attributes in process `syz.6.9631'. [ 1258.032100][ T30] audit: type=1800 audit(1775468142.711:9): pid=10209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9635" name="memory.events" dev="tmpfs" ino=318 res=0 errno=0 [ 1258.098846][T10207] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1258.170365][T10207] bond2 (unregistering): Released all slaves [ 1258.179143][T25219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.292642][T10209] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1258.295994][T10215] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9638'. [ 1258.687850][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9641'. [ 1258.727828][T10231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1258.750299][T21430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.184558][T10252] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9645'. [ 1259.233521][T25219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.245779][T10253] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9645'. [ 1259.927464][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1259.935749][ C0] lec:lec_tx_timeout: lec0 [ 1259.940969][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1259.947952][T10288] netlink: 'syz.0.9652': attribute type 10 has an invalid length. [ 1260.257953][T25219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.453927][T10313] bond3: entered promiscuous mode [ 1260.472408][T10313] bond3: entered allmulticast mode [ 1260.490973][T10321] nbd: socks must be embedded in a SOCK_ITEM attr [ 1260.498748][T21430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.509502][T10313] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1260.844749][T10342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.855499][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1261.495593][T10343] lec:lec_atm_close: lec0: Shut down! [ 1262.028764][T10388] macvlan0: entered promiscuous mode [ 1262.337870][T25217] net_ratelimit: 4 callbacks suppressed [ 1262.337890][T25217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.425736][T21433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.455031][T10405] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 1262.676350][T10413] netlink: 'syz.0.9685': attribute type 1 has an invalid length. [ 1263.077444][T10397] lec:lec_atm_close: lec0: Shut down! [ 1263.377875][T25217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1263.504758][T10433] vxcan1: entered promiscuous mode [ 1263.528505][T10433] vxcan1: entered allmulticast mode [ 1263.697802][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1263.945956][T10446] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1264.231560][T10453] openvswitch: netlink: Multiple metadata blocks provided [ 1264.361288][T10455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1264.419602][T25217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.462507][T10460] netlink: 'syz.2.9700': attribute type 5 has an invalid length. [ 1264.490112][T10460] __nla_validate_parse: 3 callbacks suppressed [ 1264.490131][T10460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9700'. [ 1264.536363][T10460] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1264.581328][T10460] team0: Port device batadv1 added [ 1264.643807][T10463] syzkaller0: entered promiscuous mode [ 1264.667323][T10463] syzkaller0: entered allmulticast mode [ 1264.702250][T10469] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9704'. [ 1264.738165][T10469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9704'. [ 1264.777059][T10468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9704'. [ 1264.793264][T10469] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9704'. [ 1264.810097][T10469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9704'. [ 1264.828137][T21430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.051973][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9707'. [ 1265.186637][T10456] lec:lec_atm_close: lec0: Shut down! [ 1265.458208][T25217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.510338][T10501] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9712'. [ 1266.278391][T10561] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.9727'. [ 1266.760407][T10587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9734'. [ 1266.779512][T10575] ------------[ cut here ]------------ [ 1266.785977][T10575] ODEBUG: init active (active state 0) object: ffff888050fbcf38 object type: timer_list hint: lec_arp_check_expire+0x0/0xc90 [ 1266.800276][T10575] WARNING: lib/debugobjects.c:632 at __debug_object_init+0x2b1/0x4e0, CPU#1: syz.8.9732/10575 [ 1266.811042][T10575] Modules linked in: [ 1266.815924][T10575] CPU: 1 UID: 0 PID: 10575 Comm: syz.8.9732 Not tainted syzkaller #0 PREEMPT(full) [ 1266.826127][T10575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1266.837121][T10575] RIP: 0010:__debug_object_init+0x30f/0x4e0 [ 1266.843846][T10575] Code: 3c 38 00 74 08 4c 89 ef e8 2e a3 76 fd 4d 8b 4d 00 4c 89 f7 48 c7 c6 c0 d8 27 8c 4c 89 e2 8b 4c 24 08 4c 8b 04 24 ff 74 24 10 <67> 48 0f b9 3a 48 83 c4 08 ff 05 de a3 58 0b 83 fd 03 75 3f 4c 8b [ 1266.864006][T10575] RSP: 0018:ffffc90002f078f8 EFLAGS: 00010246 [ 1266.870875][T10575] RAX: 1ffffffff179e7ec RBX: ffff888050fbcf38 RCX: 0000000000000000 [ 1266.879672][T10575] RDX: ffffffff8c27dcc0 RSI: ffffffff8c27d8c0 RDI: ffffffff901c9610 [ 1266.887868][T10575] RBP: 0000000000000003 R08: ffff888050fbcf38 R09: ffffffff8bcf5280 [ 1266.895919][T10575] R10: dffffc0000000000 R11: ffffffff81b1f7f0 R12: ffffffff8c27dcc0 [ 1266.905381][T10575] R13: ffffffff8bcf3f60 R14: ffffffff901c9610 R15: dffffc0000000000 [ 1266.913495][T10575] FS: 00007fce2ac1e6c0(0000) GS:ffff888125557000(0000) knlGS:0000000000000000 [ 1266.923199][T10575] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1266.930743][T10575] CR2: 0000556881a39368 CR3: 0000000077c7a000 CR4: 00000000003526f0 [ 1266.938894][T10575] Call Trace: [ 1266.942219][T10575] [ 1266.945184][T10575] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 1266.951069][T10575] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 1266.956861][T10575] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1266.963137][T10575] timer_init_key+0x41/0x2f0 [ 1266.967898][T10575] lane_ioctl+0x1579/0x2220 [ 1266.972520][T10575] ? __pfx_clip_ioctl+0x10/0x10 [ 1266.977993][T10575] ? br2684_ioctl+0x110/0x6b0 [ 1266.982732][T10575] ? __pfx_lane_ioctl+0x10/0x10 [ 1266.988114][T10575] ? atmtcp_ioctl+0x1ce/0xdf0 [ 1266.992857][T10575] do_vcc_ioctl+0x36d/0x9d0 [ 1266.997634][T10575] svc_ioctl+0x1f6/0x7d0 [ 1267.001934][T10575] ? kasan_quarantine_put+0xbb/0x1f0 [ 1267.007357][T10575] ? __pfx_svc_ioctl+0x10/0x10 [ 1267.012191][T10575] ? tomoyo_path_number_perm+0x219/0x630 [ 1267.018399][T10575] ? tomoyo_path_number_perm+0x219/0x630 [ 1267.024856][T10575] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1267.030547][T10575] sock_do_ioctl+0x101/0x320 [ 1267.035224][T10575] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1267.040488][T10575] ? do_futex+0x395/0x420 [ 1267.044900][T10575] sock_ioctl+0x5c6/0x7f0 [ 1267.049797][T10575] ? __pfx_sock_ioctl+0x10/0x10 [ 1267.054726][T10575] ? __fget_files+0x2a/0x420 [ 1267.059618][T10575] ? __fget_files+0x3a0/0x420 [ 1267.064363][T10575] ? __fget_files+0x2a/0x420 [ 1267.069128][T10575] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1267.074132][T10575] ? __pfx_sock_ioctl+0x10/0x10 [ 1267.079550][T10575] __se_sys_ioctl+0xfc/0x170 [ 1267.084579][T10575] do_syscall_64+0x14d/0xf80 [ 1267.089441][T10575] ? trace_irq_disable+0x3b/0x150 [ 1267.094602][T10575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.100996][T10575] ? clear_bhb_loop+0x40/0x90 [ 1267.105740][T10575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.112123][T10575] RIP: 0033:0x7fce29d9c819 [ 1267.116597][T10575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1267.137008][T10575] RSP: 002b:00007fce2ac1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1267.147322][T10575] RAX: ffffffffffffffda RBX: 00007fce2a015fa0 RCX: 00007fce29d9c819 [ 1267.155898][T10575] RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 0000000000000006 [ 1267.164123][T10575] RBP: 00007fce29e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1267.172540][T10575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1267.180758][T10575] R13: 00007fce2a016038 R14: 00007fce2a015fa0 R15: 00007ffc100779b8 [ 1267.188964][T10575] [ 1267.192045][T10575] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1267.199464][T10575] CPU: 1 UID: 0 PID: 10575 Comm: syz.8.9732 Not tainted syzkaller #0 PREEMPT(full) [ 1267.208948][T10575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1267.219125][T10575] Call Trace: [ 1267.222438][T10575] [ 1267.225439][T10575] vpanic+0x56c/0xa60 [ 1267.229467][T10575] ? __pfx__printk+0x10/0x10 [ 1267.234083][T10575] ? __pfx_vpanic+0x10/0x10 [ 1267.238708][T10575] ? is_bpf_text_address+0x292/0x2b0 [ 1267.244065][T10575] ? is_bpf_text_address+0x26/0x2b0 [ 1267.249494][T10575] panic+0xc5/0xd0 [ 1267.253266][T10575] ? __pfx_panic+0x10/0x10 [ 1267.257908][T10575] __warn+0x315/0x4f0 [ 1267.261919][T10575] ? __debug_object_init+0x2b1/0x4e0 [ 1267.267244][T10575] ? __debug_object_init+0x2b1/0x4e0 [ 1267.272562][T10575] __report_bug+0x29a/0x540 [ 1267.277099][T10575] ? __debug_object_init+0x2b1/0x4e0 [ 1267.282613][T10575] ? __pfx___report_bug+0x10/0x10 [ 1267.287679][T10575] ? __lock_acquire+0x6b5/0x2cf0 [ 1267.292653][T10575] report_bug_entry+0x19a/0x290 [ 1267.297622][T10575] ? __debug_object_init+0x30f/0x4e0 [ 1267.303017][T10575] ? __debug_object_init+0x314/0x4e0 [ 1267.308336][T10575] handle_bug+0xce/0x200 [ 1267.312627][T10575] exc_invalid_op+0x1a/0x50 [ 1267.317167][T10575] asm_exc_invalid_op+0x1a/0x20 [ 1267.322046][T10575] RIP: 0010:__debug_object_init+0x30f/0x4e0 [ 1267.328007][T10575] Code: 3c 38 00 74 08 4c 89 ef e8 2e a3 76 fd 4d 8b 4d 00 4c 89 f7 48 c7 c6 c0 d8 27 8c 4c 89 e2 8b 4c 24 08 4c 8b 04 24 ff 74 24 10 <67> 48 0f b9 3a 48 83 c4 08 ff 05 de a3 58 0b 83 fd 03 75 3f 4c 8b [ 1267.347854][T10575] RSP: 0018:ffffc90002f078f8 EFLAGS: 00010246 [ 1267.353984][T10575] RAX: 1ffffffff179e7ec RBX: ffff888050fbcf38 RCX: 0000000000000000 [ 1267.362000][T10575] RDX: ffffffff8c27dcc0 RSI: ffffffff8c27d8c0 RDI: ffffffff901c9610 [ 1267.370008][T10575] RBP: 0000000000000003 R08: ffff888050fbcf38 R09: ffffffff8bcf5280 [ 1267.378009][T10575] R10: dffffc0000000000 R11: ffffffff81b1f7f0 R12: ffffffff8c27dcc0 [ 1267.386449][T10575] R13: ffffffff8bcf3f60 R14: ffffffff901c9610 R15: dffffc0000000000 [ 1267.394633][T10575] ? __pfx_timer_debug_hint+0x10/0x10 [ 1267.400149][T10575] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 1267.405922][T10575] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 1267.411677][T10575] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1267.417545][T10575] timer_init_key+0x41/0x2f0 [ 1267.422599][T10575] lane_ioctl+0x1579/0x2220 [ 1267.427135][T10575] ? __pfx_clip_ioctl+0x10/0x10 [ 1267.432302][T10575] ? br2684_ioctl+0x110/0x6b0 [ 1267.437013][T10575] ? __pfx_lane_ioctl+0x10/0x10 [ 1267.441925][T10575] ? atmtcp_ioctl+0x1ce/0xdf0 [ 1267.446725][T10575] do_vcc_ioctl+0x36d/0x9d0 [ 1267.451264][T10575] svc_ioctl+0x1f6/0x7d0 [ 1267.455534][T10575] ? kasan_quarantine_put+0xbb/0x1f0 [ 1267.460845][T10575] ? __pfx_svc_ioctl+0x10/0x10 [ 1267.465642][T10575] ? tomoyo_path_number_perm+0x219/0x630 [ 1267.471367][T10575] ? tomoyo_path_number_perm+0x219/0x630 [ 1267.477037][T10575] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1267.482187][T10575] sock_do_ioctl+0x101/0x320 [ 1267.486822][T10575] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1267.492060][T10575] ? do_futex+0x395/0x420 [ 1267.496434][T10575] sock_ioctl+0x5c6/0x7f0 [ 1267.500807][T10575] ? __pfx_sock_ioctl+0x10/0x10 [ 1267.505705][T10575] ? __fget_files+0x2a/0x420 [ 1267.510443][T10575] ? __fget_files+0x3a0/0x420 [ 1267.515139][T10575] ? __fget_files+0x2a/0x420 [ 1267.519755][T10575] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1267.524723][T10575] ? __pfx_sock_ioctl+0x10/0x10 [ 1267.529605][T10575] __se_sys_ioctl+0xfc/0x170 [ 1267.534249][T10575] do_syscall_64+0x14d/0xf80 [ 1267.538873][T10575] ? trace_irq_disable+0x3b/0x150 [ 1267.543923][T10575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.550024][T10575] ? clear_bhb_loop+0x40/0x90 [ 1267.554737][T10575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.560829][T10575] RIP: 0033:0x7fce29d9c819 [ 1267.565391][T10575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1267.585025][T10575] RSP: 002b:00007fce2ac1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1267.593466][T10575] RAX: ffffffffffffffda RBX: 00007fce2a015fa0 RCX: 00007fce29d9c819 [ 1267.601481][T10575] RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 0000000000000006 [ 1267.609482][T10575] RBP: 00007fce29e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1267.617475][T10575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1267.625466][T10575] R13: 00007fce2a016038 R14: 00007fce2a015fa0 R15: 00007ffc100779b8 [ 1267.633485][T10575] [ 1267.637210][T10575] Kernel Offset: disabled [ 1267.641629][T10575] Rebooting in 86400 seconds..