last executing test programs: 8m56.060288944s ago: executing program 3 (id=5590): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f00000017c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff}}, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x24}, 0x94) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x28, 0x18, 0x35f32a6dfa748ddd, 0x0, 0xfffffffe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_MULTIPATH={0xc, 0x9, {0x0, 0x1d}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040814}, 0x0) 8m55.944795194s ago: executing program 3 (id=5591): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x5e8e, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, r1}, 0x10, &(0x7f0000000380)={&(0x7f00000002c0)=@can={{0x3, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "f9fbffffffffffff"}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYRES8=r1, @ANYBLOB="fe3eec8c9498a21bc400bbcf868205b82cfc7addd4c7b1bb324cfa41b93d86befd1316cf85102dd8938a3ca6156c85cf2364ef7e9d72a2622c38ca03d35df82eaa11f3e4dda5b66b1b724d4fbb77e394429b0e24fc1f6fc3f831811e9ddbca370e9afd7d5a898f1c1ff3b9dc5cf73fafec3ecef3a97adfb4dd", @ANYRESHEX=r2], 0x7c}, 0x1, 0x0, 0x0, 0x44004}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r5, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x535}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x20000010) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x234}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x5e8e, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) sendmsg$can_raw(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, r1}, 0x10, &(0x7f0000000380)={&(0x7f00000002c0)=@can={{0x3, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "f9fbffffffffffff"}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x40) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYRES8=r1, @ANYBLOB="fe3eec8c9498a21bc400bbcf868205b82cfc7addd4c7b1bb324cfa41b93d86befd1316cf85102dd8938a3ca6156c85cf2364ef7e9d72a2622c38ca03d35df82eaa11f3e4dda5b66b1b724d4fbb77e394429b0e24fc1f6fc3f831811e9ddbca370e9afd7d5a898f1c1ff3b9dc5cf73fafec3ecef3a97adfb4dd", @ANYRESHEX=r2], 0x7c}, 0x1, 0x0, 0x0, 0x44004}, 0x40000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r5, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x535}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x20000010) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x234}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) (async) 8m55.540130729s ago: executing program 3 (id=5595): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000440)={0x1, 0x0, 0x10, 0x800, @vifc_lcl_ifindex=r2, @rand_addr=0x64010102}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, r1, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', r2, r4, 0x3, 0x5, 0x1}, 0x50) r5 = socket$packet(0x11, 0x3, 0x300) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote={0xac, 0x3}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x84}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r7, r8, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r9, r10, 0x4, r7}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006121e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) r12 = socket$kcm(0x10, 0x2, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000aaaaaaaaaaaa000c010026b403030000cbe40b87ce32340f"], &(0x7f0000000040)={0x1, 0x2, [0x59e, 0x969, 0x6d9, 0x178]}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xc87) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0xffffffffffffff92, &(0x7f0000000080), 0x1}, 0x8100) 8m55.379710059s ago: executing program 3 (id=5596): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r1, 0x1, 0x40000}, 0x14}, 0x1, 0x0, 0x0, 0x4c054}, 0x4000800) 8m55.321427366s ago: executing program 3 (id=5598): socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xa) 8m55.229356291s ago: executing program 3 (id=5600): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500007800000000000190780a010102ac1414aa05009078e00000024700000000000000001100000a010101ac1414aa441cfc01000000004e210000ac1414bb00000002ac1414aa000003ff442c0001e0000001000000000000000000000000ac141402000000000000000000000000ffffffff00000000"], 0x0) (async) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) (async) socket$nl_rdma(0x10, 0x3, 0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x3, 0x2, 0x8, 0x10000, 0xb}) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x40) r7 = socket$kcm(0x11, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'rose0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x19, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)={0x0, 0x2}, 0xfffffe49, 0x0, 0xffffffffffffffff, 0x6}, 0x42) (async) setsockopt$inet_tcp_int(r9, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async) bind$inet(r9, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r9, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="00000000b99b5c65df4bb846", 0xc}], 0x1}}], 0x1, 0x20008000) close(r9) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) (async) shutdown(0xffffffffffffffff, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000240)={'ipvlan0\x00', @local}) 8m40.109928119s ago: executing program 32 (id=5600): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500007800000000000190780a010102ac1414aa05009078e00000024700000000000000001100000a010101ac1414aa441cfc01000000004e210000ac1414bb00000002ac1414aa000003ff442c0001e0000001000000000000000000000000ac141402000000000000000000000000ffffffff00000000"], 0x0) (async) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) (async) socket$nl_rdma(0x10, 0x3, 0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x3, 0x2, 0x8, 0x10000, 0xb}) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x40) r7 = socket$kcm(0x11, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'rose0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x19, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)={0x0, 0x2}, 0xfffffe49, 0x0, 0xffffffffffffffff, 0x6}, 0x42) (async) setsockopt$inet_tcp_int(r9, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async) bind$inet(r9, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r9, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="00000000b99b5c65df4bb846", 0xc}], 0x1}}], 0x1, 0x20008000) close(r9) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) (async) shutdown(0xffffffffffffffff, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000240)={'ipvlan0\x00', @local}) 6m45.303399346s ago: executing program 2 (id=6400): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x16}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)={0x14, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x6, 0x7c}}, 0x14}}, 0x4008030) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 6m45.063652607s ago: executing program 2 (id=6404): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c0009"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0x33, 0x0, 0x7f2e, 0x0, 0xfffffffb, 0x2, 0x80000000, 0xfffffffe, 0xffff2ee0, 0x40, 0x8, 0x4000004, 0xfffffe00, 0x5, 0x0, 0xb, 0x0, 0x7, 0x20002, 0x0, 0x2, 0x0, 0x3ff}}) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000000000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x48, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="1c005a801800018014000300060010000c000100000000000000b6b2"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50) 6m44.118489248s ago: executing program 2 (id=6417): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, 0xa, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x9}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffd}]}, @IPSET_ATTR_PROTOCOL={0xfffffffffffffd40}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xf}}]}]}, 0x88}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, r1, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff8001, 0x77}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7f675ea6fb"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "74414fdbd4"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "82de00b479ba39dbd3f9ec5e56"}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "80bf67e435"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x8c}}, 0x40) 6m41.573600654s ago: executing program 1 (id=6431): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xffffffffffffffa6, 0x8f, 0x8}, {0xc, 0x90, 0xfffffffffffffffd}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f00000003c0)=0x80000001, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) 6m41.397673344s ago: executing program 1 (id=6435): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x47, 0x0, &(0x7f0000002100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x7c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_USERDATA={0x36, 0xc, "ce71417ebe2565789c7594fea3aeed2d46ab888ded71731fb0f7c8c17beaaced569be68c10d5f708e9be3ee9fadd36b947df"}, @NFTA_CHAIN_USERDATA={0x24, 0xc, "ed66689de5b0ff44d6fa967691b836da1aabec25e8f67830351f4aeaab139fc1"}]}, @NFT_MSG_NEWFLOWTABLE={0x200, 0x16, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0xa0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'macvlan1\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x12c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'wg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'tunl0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x2c4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a010800000000000000000200000908000240000000030900010073797a310000000040000000030a01030000000000000000020000060900010073797a31000000000900030073797a3000000000140004800800014000000003080002400000006414000069342506984f312c00000000000000000a"], 0x90}, 0x1, 0x0, 0x0, 0x24000144}, 0x2000) close(r6) socket$tipc(0x1e, 0x5, 0x0) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="1904000000000000000000009f20000000000000f14e2565c2a445c262586185e3a7307315e12e30bd9600535994f68c89226488dc5159fe821e3af691157159ad924fb5756af80d08aa4b52e08d8410b079dd8eba72c085a82364bda699cb8f944fab9bb8a00d649f569ee24d13ca0b4bcf361600", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f00008b8000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000440), 0x10) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x5, 0x3, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6e8b02d66efc80bb"}}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x8080) listen(r8, 0x0) r10 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r10, 0x6a, 0x2, 0x20000000, 0x3) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r11, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) shutdown(r11, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)) sendmmsg$inet6(r5, &(0x7f00000021c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x2, @local}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0xfffffff7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7a}, 0x1c, 0x0, 0x0, &(0x7f00000036c0)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x2e}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}], 0x30}}], 0x2, 0x80) 6m41.111174138s ago: executing program 1 (id=6437): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa6cf6566994c681001000080049b4003800000000a3069078ac1414bbac1414aa070f09e00000027f00000100000000004e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0000000000000000981e9ff2254ac55078eb03bd226112562bc923c613ed24f17edbf5229917a77d1d4b5b4ec881c2d600f62dc01e6d68b608e6bf5dba49beeaf10551d19ccdd2d139f7f0e88a00"/87], 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x24, r1, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x22040000}, 0x0) 6m41.01104262s ago: executing program 1 (id=6440): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x4e0e, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, r3}, 0x10, &(0x7f0000000380)={&(0x7f00000002c0)=@can={{0x3, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "f9fbffffffffffff"}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x40) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f00000000c0)={0x3c, 0x8, 0x2, 0xf5, 0x0, [@empty, @local, @remote, @remote]}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r6, &(0x7f0000003480)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002580)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x203}}, @prinfo={0x18}], 0x48}], 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x20000, 0x69, 0x11, 0x1c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0x7d, &(0x7f0000000700)={r7, 0xfffff801, 0x11e2000, 0x62c, 0x100, 0x2, 0x2, 0x4, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x3, 0xfffffffb, 0x3, 0x1000, 0x1}}, &(0x7f00000007c0)=0xb0) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x388f, 0x6c7a, 0x8}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000180)={r7, 0x6, 0xc58, 0x6, 0x2, 0x78, 0x8, 0xff7d, {r8, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x757, 0x3, 0x7, 0x4, 0x8}}, &(0x7f0000000240)=0xb0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060086dd0000100007007f0000017f0000013a"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000011000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100626f6e64000000000c0002800500060000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000400)={0x0, 0xaa, 0x5, [0x931, 0x2, 0x5, 0xa30e, 0x7fff]}, &(0x7f0000000540)=0x12) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000580)={r10, 0x3, "657df6"}, &(0x7f00000005c0)=0xb) 6m40.849065685s ago: executing program 1 (id=6443): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$nci(r0, &(0x7f0000000040)=""/85, 0x55) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x9) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000100)=0x8) read$nci(r0, &(0x7f0000000140)=""/4096, 0x1000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000001140)={{r0}, "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"}) r2 = socket$inet6(0xa, 0x2, 0x8) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000002140)={0x4, 0xe, 0x2, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @mcast1, @local, @remote, @local, @rand_addr=' \x01\x00']}, 0x78) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000002200), 0xffffffffffffffff) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x1c, r3, 0xbe9ef22c7cf6416b, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004004}, 0x4040000) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000002300)={0x0, @private, @private}, &(0x7f0000002340)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000002380)={@mcast2, 0x73, r4}) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, &(0x7f00000023c0)=""/12, &(0x7f0000002400)=0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002480), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x14, r6, 0xb08, 0x70bd2a, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10000}, 0x20008090) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000002580)={0x5c, 0x1b, '\x00', [@generic={0xe6, 0xc9, "14b7d6cc8728f8e16675ebbe8c23fe6e0128341d988e7afc6b3c717f69bdec8d81d693b7da6b8f1757c7a86ebe2c2db7e4e1436553a1c859ef970bc7a518e77a5320d7849af6d4f2c9607683de4440a06d26c2817df4e738943db836ef605980162b41c3159adefda37a7a3d88a34f95d3fc63de0cbbcbcd0d908ac1946a3c71e1f9e85180626c1c83d5f1029440c87c8760f8c59a450790cb81c519c1f05ee316cac35d641f8a7a9b5c48a1237a6c00073d4e42e16e375e1754b1e871069b963efad1bb0679e30ca2"}, @pad1, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x7f}]}, 0xe8) r7 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000002680), &(0x7f0000002700)=0x60) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000002740)=0x0) bind$nfc_llcp(r7, &(0x7f0000002780)={0x27, r8, 0x0, 0x1, 0x71, 0x2, "e4440fbc9f804e8e897c9a3d05229df490a184d15193818c71ca834f27600b169d7831ea3f519501218883e26009f65a12a3f98c31c253ad2489a83d31dbb4", 0xb}, 0x60) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000002800)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000002840)=0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000002880)={r9, 0x2, 0x1}, 0x8) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000028c0)={0x6, 0x3, 0x5}) sendmsg$NFC_CMD_VENDOR(r5, &(0x7f0000002b00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002940)={0x16c, r3, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x80}, @NFC_ATTR_VENDOR_SUBCMD={0x8}, @NFC_ATTR_VENDOR_DATA={0xb8, 0x1f, "befb9d74a659ae8cf70f4520ec20f0800830686c1cee1e9c05dbf160d133f9fc34f682dcc61380aa0e506ff8eddb0e8ebe1cf170ef650870f63dcb901a1b6e78d98853be544c27d593e1302edcd364f1fb417b856fcbb3fd649cbc26f9f8c954496dc7e6c1148bfc91fd9c84f6623f844c7444dcb8b062fd497ba606ef1e29ef68d77ee8dfd7e5910d1b269027c7aa420782a48826be99e631bd351f6dd05e1dbd8c6c1ac9eaf13985f2f6605e9a04d449436899"}, @NFC_ATTR_VENDOR_DATA={0x88, 0x1f, "f23a1bd91c43524d95475d449f83598271222134891485cf5ee93c8a58b7859fad658488bbf6853144403acfd8d9d263e9cb586eb0de90ae8559ffee9898cef04a406d950a51715886c071adbef09f9b3dfc03aa795e75af59808b701c0cf1179ac0bb496892a3839d68745a3d617e7413507726e4e16d3b92181bc0e43cb088337c9b66"}, @NFC_ATTR_VENDOR_ID={0x8}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4010}, 0x40801) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r11, 0x84, 0x13, &(0x7f0000002b40)={r10, 0x1000}, &(0x7f0000002b80)=0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000002bc0)={@dev={0xfe, 0x80, '\x00', 0x42}, 0xffffffff, 0x1, 0xff, 0xb, 0x200, 0x200}, &(0x7f0000002c00)=0x20) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000002c40)={@loopback, r4}, 0x14) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000002e80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002cc0)={0x180, 0x13, 0x2, 0x70bd27, 0x25dfdbfd, {0x3, 0x6, 0x3f, 0x1, {0x4e20, 0x4e23, [0xd, 0x8, 0x0, 0x40], [0x0, 0x1, 0x200], r4, [0x1, 0x6]}, 0xb, 0xa3b}, [@INET_DIAG_REQ_BYTECODE={0x4c, 0x1, "0a71dacd54eb154fc47493321fe589b21e93f40c75b6b82eca81b038e97bd7fb41c5b29004cd83d62c71dd8143f06f7338a01388c116761b81fdb9a13b1da842b50b1cde61c64854"}, @INET_DIAG_REQ_BYTECODE={0xdd, 0x1, "d0700899058951146892ad23877b5245a7a202df38df47881cff393188c8395b1fc8497e79d30a00aaa8505d9c02725b613d5fa5e73df6e2ceeaab4a6857f5c6b7c2c71143f13766c088bf7c31bd6ccb28cb8e253eb54af1496947185f2772b3d6b0ae597661fadb636414e0899f3db45e7290a118035963d102c38b4737a74067e6b39630cd73eeab470ea84666e5104c08bc789af9edc3035f2fecaa017a7be1544d587b8e2329a0d85c86dd87458c935038cc98d032dfa1477401d8b9960d9c3da0c3e0766a5eb7252e2760546d0b7cad7f8c3b7e7c62cb"}, @INET_DIAG_REQ_BYTECODE={0x8, 0x1, "9cdbcc92"}]}, 0x180}, 0x1, 0x0, 0x0, 0x20044884}, 0x200440ad) 6m39.811388199s ago: executing program 1 (id=6456): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000880), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="0800260090150000080057"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r8, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r5, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7550, 0x6e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x60}}, 0x20000804) r10 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xe}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) 6m31.441131249s ago: executing program 2 (id=6418): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0) 6m31.336177569s ago: executing program 2 (id=6505): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0xa5, 0x4, 0x30, 0x46, @private0, @private0, 0x1, 0x80, 0xfffffffc, 0x1}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) 6m30.964117002s ago: executing program 2 (id=6510): r0 = socket$inet6(0xa, 0xa, 0xff) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) r3 = accept(r2, &(0x7f0000000040)=@tipc, &(0x7f00000000c0)=0x78) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x7, &(0x7f00000001c0)={@broadcast, @local, 0x0}, &(0x7f0000000280)=0xc) sendto$packet(r3, &(0x7f0000000100)="85b14c790fb3f337807d88bad1a259a1f2a81fc2c37feea22ee969fd6ed974b4ae0f2174b00fb48b62d353ca2f12d8b4f224e0233dff20a700a89d2e595009fdbb4df30489b5b4295c55a60ec9b9979b2b6f627cd1ed7efb6e7e7f9b1836ef3d40ff9ab6f358e5bd787686f3568158250bd1edc1ca6a1d2c2512", 0x7a, 0x800, &(0x7f00000002c0)={0x11, 0x1, r4, 0x1, 0x4, 0x6, @remote}, 0x14) r5 = socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000005", 0x14, 0x6, 0x0, @private0, @mcast1={0xff, 0x10}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000003c0)) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r6, 0x5c2a7000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, r7, 0xac9d4000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, 0x0, 0xb, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x45804) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_ifreq(r9, 0x8919, &(0x7f0000000040)={'veth0_vlan\x00', @ifru_mtu=0x2}) socket(0x400000000010, 0x3, 0x0) 6m24.597865085s ago: executing program 33 (id=6456): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000880), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="0800260090150000080057"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r8, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r5, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7550, 0x6e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x60}}, 0x20000804) r10 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xe}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) 6m15.854954319s ago: executing program 34 (id=6510): r0 = socket$inet6(0xa, 0xa, 0xff) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) r3 = accept(r2, &(0x7f0000000040)=@tipc, &(0x7f00000000c0)=0x78) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x7, &(0x7f00000001c0)={@broadcast, @local, 0x0}, &(0x7f0000000280)=0xc) sendto$packet(r3, &(0x7f0000000100)="85b14c790fb3f337807d88bad1a259a1f2a81fc2c37feea22ee969fd6ed974b4ae0f2174b00fb48b62d353ca2f12d8b4f224e0233dff20a700a89d2e595009fdbb4df30489b5b4295c55a60ec9b9979b2b6f627cd1ed7efb6e7e7f9b1836ef3d40ff9ab6f358e5bd787686f3568158250bd1edc1ca6a1d2c2512", 0x7a, 0x800, &(0x7f00000002c0)={0x11, 0x1, r4, 0x1, 0x4, 0x6, @remote}, 0x14) r5 = socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000005", 0x14, 0x6, 0x0, @private0, @mcast1={0xff, 0x10}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000003c0)) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r6, 0x5c2a7000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, r7, 0xac9d4000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, 0x0, 0xb, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x45804) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_ifreq(r9, 0x8919, &(0x7f0000000040)={'veth0_vlan\x00', @ifru_mtu=0x2}) socket(0x400000000010, 0x3, 0x0) 1m34.383642619s ago: executing program 7 (id=8247): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r1, 0x8, 0xfffffffd, 0x25dfdbfe}, 0x58}, 0x1, 0x0, 0x0, 0x48811}, 0x110) 1m34.158159003s ago: executing program 7 (id=8252): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r1 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000980), 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x4) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtclass={0x48, 0x28, 0x800, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc342b21320cc58f4, 0x3}, {0x4}, {0xfff1, 0x8}}, [@tclass_kind_options=@c_ingress={0x61}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r6, 0x1) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x6}, &(0x7f0000000200)=0x8) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xf000, 0x10}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m33.115948836s ago: executing program 7 (id=8258): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x10}, &(0x7f0000000240)=0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0xa, 0x7) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r5, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x81}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004004}, 0x4004) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000040000000374000614000600697036677265300000000000000000000800070026000000080004006401012008000500ffff"], 0x40}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="0800e0", @ANYRES16=r4, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 1m32.196831921s ago: executing program 7 (id=8265): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000080)=0x6, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SYNC(r5, 0x9408, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r7, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) connect$can_bcm(r3, &(0x7f00000001c0)={0x1d, r7}, 0x10) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0xc008) close(r2) 1m31.48259105s ago: executing program 7 (id=8270): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$sock(r3, &(0x7f0000000000)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x4) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x28, 0x140d, 0x1, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000000040)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r2}, 0x70) 1m30.536854874s ago: executing program 7 (id=8280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@empty, 0x0}, &(0x7f00000000c0)=0x14) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0xfa, 0x7, 0x20, @empty, @empty, 0x20, 0x8000, 0xb, 0x5}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={'gre0\x00', r2, 0x8, 0x40, 0x65, 0x1, {{0x6, 0x4, 0x3, 0x7, 0x18, 0x6a, 0x0, 0x87, 0x4, 0x0, @rand_addr=0x64010100, @private=0xa010101, {[@timestamp_addr={0x44, 0x4, 0x91, 0x1, 0x7}]}}}}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) (async) syz_emit_ethernet(0x81, &(0x7f0000000800)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3f, 0x73, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e22, 0x5f, 0x0, @gue={{0x1, 0x0, 0x3, 0x9, 0x0, @void}, "714f89c3bd0a5db76ed2fc08f4ceae3139506c4ccb228cd154c3223295408c892c85190afad9cedd0dc809a239faab451a001ba6ac1a2cd21fd4f4f056fa8559abb5e52e4c36c0e54cb14e67511037bdbe671f"}}}}}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000180), 0x12) (async) write$cgroup_freezer_state(r6, &(0x7f0000000080)='THAWED\x00', 0x7) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x90, 0xf8, &(0x7f0000000480)="14ab4d87e567ff587f352b98170e1cc673b3f1e15fcf0935e68d0155f3ae2e237e677b16537b639b1316bff28a0abae7cc4eda019c1419633312b97e63c287b351eeb608d9d251771e331a118b5da51630f4554bcded08dca90a1a342dcaf79fc8346b5cbf6de2031e55c7e244ee0552f3d7b05d30fd783b96641e3f619b49ba626f2278fa1f8fe5afd9e7b81c58ef80", &(0x7f0000000540)=""/248, 0x0, 0x0, 0xc5, 0xbd, &(0x7f0000000640)="a4cb92957e54da1824004d3f3ecfac50e4a189f21a3566c55959719096bbb8f342c0a84bff7aee6330d740aa7a6ba880ca6414b4df7b4997454b9bc5f882562b3623446be4c8f7a08f90a8331676fc66c9ff875508daf4732180e27cab4cfe4c581a2760db4fcd65c7623772cb07feba8732604bfb021fb231d4b1d0a9e63c26d10df311f775ed4a32f6cd59f57f12c0866ae506cc8fd0f3662d46da6e8ee3baaf1edbac0063467dbab031be622e9a7f501f271bd5bc0f4fdd72f5d79e89d93edc37b8fba2", &(0x7f0000000740)="7af0ce4f0056f3342b8ffcceb72e4fc98fdd765074c24c95e30364510a470a56772565388a67784e24d5661de34581451c02c9c8260c3e1f74cc58b49f1adc3688ccf43623cc2cc33515bd14c910b37fc51c233c023ad9d4b4e3e084dd58092ed5f91e916f3588c9e7c735423d5123edb161550788119bb9083fe1e8257a5960df353f2501e0a5f22c8e8811a61e490b15077ac0c84f19ad358024a727ad5a2c3790140daaa26b7f8f4198954d7266516bc5246d5dd13ae1eaab2e1f7b", 0x1, 0x0, 0xfb2d}, 0x50) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x8c, r8, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x4c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x4, 0x5}, {0x3, 0x4}, {0x2, 0x8}, {0x5}, {0x0, 0x4}, {0x0, 0x6}, {0x3}, {0x4, 0x4}, {0x0, 0x4}, {0x2, 0x3}, {0x0, 0x9}, {0x4, 0x2}, {0x3, 0x4}, {0x3, 0x5}, {0x0, 0x1}, {0x7, 0x9}, {0x0, 0x6}, {0x6, 0x2}, {0x2, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x6, 0x6}, {0x3, 0xa}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x9}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x4, 0x3, 0x0, 0x6, 0x2, 0x37c7, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xe}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x1}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3bb09771e9b50165}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x3}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044061}, 0x4000001) 1m15.462587555s ago: executing program 35 (id=8280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@empty, 0x0}, &(0x7f00000000c0)=0x14) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0xfa, 0x7, 0x20, @empty, @empty, 0x20, 0x8000, 0xb, 0x5}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={'gre0\x00', r2, 0x8, 0x40, 0x65, 0x1, {{0x6, 0x4, 0x3, 0x7, 0x18, 0x6a, 0x0, 0x87, 0x4, 0x0, @rand_addr=0x64010100, @private=0xa010101, {[@timestamp_addr={0x44, 0x4, 0x91, 0x1, 0x7}]}}}}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) (async) syz_emit_ethernet(0x81, &(0x7f0000000800)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3f, 0x73, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e22, 0x5f, 0x0, @gue={{0x1, 0x0, 0x3, 0x9, 0x0, @void}, "714f89c3bd0a5db76ed2fc08f4ceae3139506c4ccb228cd154c3223295408c892c85190afad9cedd0dc809a239faab451a001ba6ac1a2cd21fd4f4f056fa8559abb5e52e4c36c0e54cb14e67511037bdbe671f"}}}}}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000180), 0x12) (async) write$cgroup_freezer_state(r6, &(0x7f0000000080)='THAWED\x00', 0x7) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x90, 0xf8, &(0x7f0000000480)="14ab4d87e567ff587f352b98170e1cc673b3f1e15fcf0935e68d0155f3ae2e237e677b16537b639b1316bff28a0abae7cc4eda019c1419633312b97e63c287b351eeb608d9d251771e331a118b5da51630f4554bcded08dca90a1a342dcaf79fc8346b5cbf6de2031e55c7e244ee0552f3d7b05d30fd783b96641e3f619b49ba626f2278fa1f8fe5afd9e7b81c58ef80", &(0x7f0000000540)=""/248, 0x0, 0x0, 0xc5, 0xbd, &(0x7f0000000640)="a4cb92957e54da1824004d3f3ecfac50e4a189f21a3566c55959719096bbb8f342c0a84bff7aee6330d740aa7a6ba880ca6414b4df7b4997454b9bc5f882562b3623446be4c8f7a08f90a8331676fc66c9ff875508daf4732180e27cab4cfe4c581a2760db4fcd65c7623772cb07feba8732604bfb021fb231d4b1d0a9e63c26d10df311f775ed4a32f6cd59f57f12c0866ae506cc8fd0f3662d46da6e8ee3baaf1edbac0063467dbab031be622e9a7f501f271bd5bc0f4fdd72f5d79e89d93edc37b8fba2", &(0x7f0000000740)="7af0ce4f0056f3342b8ffcceb72e4fc98fdd765074c24c95e30364510a470a56772565388a67784e24d5661de34581451c02c9c8260c3e1f74cc58b49f1adc3688ccf43623cc2cc33515bd14c910b37fc51c233c023ad9d4b4e3e084dd58092ed5f91e916f3588c9e7c735423d5123edb161550788119bb9083fe1e8257a5960df353f2501e0a5f22c8e8811a61e490b15077ac0c84f19ad358024a727ad5a2c3790140daaa26b7f8f4198954d7266516bc5246d5dd13ae1eaab2e1f7b", 0x1, 0x0, 0xfb2d}, 0x50) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x8c, r8, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x4c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x4, 0x5}, {0x3, 0x4}, {0x2, 0x8}, {0x5}, {0x0, 0x4}, {0x0, 0x6}, {0x3}, {0x4, 0x4}, {0x0, 0x4}, {0x2, 0x3}, {0x0, 0x9}, {0x4, 0x2}, {0x3, 0x4}, {0x3, 0x5}, {0x0, 0x1}, {0x7, 0x9}, {0x0, 0x6}, {0x6, 0x2}, {0x2, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x6, 0x6}, {0x3, 0xa}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x9}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x4, 0x3, 0x0, 0x6, 0x2, 0x37c7, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xe}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x1}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3bb09771e9b50165}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x3}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044061}, 0x4000001) 4.599017215s ago: executing program 8 (id=8803): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f000000000000000001"], 0xfdef) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x61, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000000) 3.402293397s ago: executing program 8 (id=8812): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0a000000010003", 0x7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r2, &(0x7f0000000140)=@qipcrtr={0x2a, 0xffffffff, 0x1}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) read(r2, &(0x7f0000000240)=""/13, 0xd) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r4) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r7, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x24, r5, 0x1, 0x70bd2d, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1f371693c3ceafd2}, 0x20000000) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x14, 0x20, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "a71e2a26c2d174b4380271c119"}]}, 0x28}}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x44000) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x18, 0x44, 0x107, 0xfffffffe, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x145}]}, 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000200)={0x3, 'ipvlan0\x00', {0xcaa}, 0x5}) 3.194513585s ago: executing program 0 (id=8814): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0x42, &(0x7f0000000040)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @local, @remote, @multicast, @mcast1}}}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@generic={0x1, 0x6, "11b712", 0x0, 0x11, 0xff, @local, @private1}}}, 0x66) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000206b000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000800000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c2900333f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) 3.115895141s ago: executing program 5 (id=8815): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000bc0)=@filter={'filter\x00', 0x42, 0x4, 0xab0, 0xffffffff, 0x0, 0x990, 0x0, 0xffffffff, 0xffffffff, 0xa60, 0xa60, 0xa60, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010100, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0x850, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x5, 0x3}, {0x6}, {0x7, 0x3}, {0x5, 0x1}, {0x1ff}, {0xb6de}, {0x8001, 0x3}, {0x40}, {0xe, 0x2}, {0xfffffffe, 0x3}], [{0xa, 0x4}, {0x8fb, 0x3ae6}, {0x2, 0x3}, {0x8001, 0x10}, {0xfffffff7, 0x1}, {0xfffffffa, 0x39}, {0x3, 0x7}, {0x400, 0x9}, {0x6b, 0x3}, {0x5, 0xf}, {0x5, 0xfffff000}], 0x1, 0x4}, {[{0x3, 0x3}, {0x4000000}, {0x4, 0x1}, {0xbab, 0x1}, {0x5}, {0x4d9c, 0x2}, {0x1, 0x3}, {0xe75d, 0x1}, {0x7fffffff, 0x2}, {0x4b8}, {0x7}], [{0x10}, {0x10000, 0x1}, {0x8}, {0x1, 0xffffff00}, {0xe, 0x1}, {0xe00, 0x8}, {0xd, 0x1}, {0xf, 0x5}, {0xee25, 0xc}, {0x4, 0x81cc}, {0x7e, 0x100}], 0x0, 0x3}, {[{0x401}, {0x1f, 0x1}, {0x9, 0x2}, {0xa, 0x3}, {0x2e07}, {0x8}, {0xec21, 0x1}, {0x0, 0x3}, {0x0, 0x1}, {0x10000}, {0x5, 0x1}], [{0x5, 0x8}, {0xfffffffa, 0x7ff}, {0xfffffffb, 0x3}, {0x1937, 0x7}, {0x0, 0x4}, {0x3, 0xa}, {0x1, 0x7}, {0x9, 0x6}, {0x0, 0x91b}, {0x3, 0x6}, {0x8, 0xb2}], 0x5, 0x16}, {[{0x40, 0x1}, {0x400, 0x3}, {0x9e, 0x2}, {0x2, 0x1}, {0x7, 0x3}, {0xff}, {0x2, 0x1}, {0x2}, {0x91, 0x1}, {0xeb1}, {0x81, 0x2}], [{0x4, 0x8}, {0x1ff, 0x6}, {0x1, 0x8001}, {0x4}, {0xd, 0xfff}, {0x2, 0x800}, {0x1, 0xe3}, {0x3, 0xb}, {0x18000000, 0x7fffffff}, {0x3}, {0x8, 0x3ff}], 0x8, 0x2}, {[{0xc85b, 0x1}, {0x1ff, 0x1}, {0xfffffff8}, {0x6, 0x6}, {0x3, 0x2}, {0x47e, 0x2}, {0x7, 0x1}, {0x1, 0x2}, {0x7}, {0x8, 0x2}, {0x8, 0x2}], [{0xc, 0x1}, {0xffff, 0x4}, {0x2, 0xd2}, {0x4, 0x8}, {0xb, 0x80}, {0x2, 0x1}, {0x4d}, {0x3, 0xffffffff}, {0x3, 0x7}, {0x32, 0x7}, {0xd, 0x5}], 0x3, 0x8}, {[{0x7fffffff}, {0x6}, {}, {0xfffeffff}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x3}, {0x3, 0x3}, {0x4, 0x1}], [{0x3, 0x6}, {0xe763, 0x9}, {0x3, 0xfffffffd}, {0x9, 0x81}, {0x5, 0x60000000}, {0x80, 0x89f}, {0x8, 0xf}, {0xfffffc00, 0xa0}, {0x5, 0x400000}, {0x78, 0x8}, {0xffffff4c, 0x9}], 0x0, 0xb}, {[{0x7, 0x2}, {0x800, 0x2}, {0x0, 0x2}, {0x2, 0x3}, {0x0, 0x3}, {0x99a, 0x2}, {0x3, 0x3}, {0x2, 0x1}, {0x6, 0x1}, {0x967, 0x2}, {0x7ff, 0x1}], [{0x1, 0x5}, {0xfffffffe, 0x9}, {0x6, 0xfffffff7}, {0x6, 0xf52c}, {0x0, 0xfffff51e}, {0x2, 0x7ade}, {0xfffffe00, 0x4}, {0x7, 0x9}, {0x8, 0x1000}, {0x102, 0xfffffffa}, {0xe, 0x3e06}], 0x0, 0x5}, {[{0x1, 0x2}, {0x100}, {0xfffffffe}, {0x8}, {0xb74, 0x3}, {0x7fff, 0x1}, {0xcc8}, {0xebb, 0x2}, {0x20e0}, {0x7, 0x1}, {0x6, 0x3}], [{0x1e5f, 0xc08f2407}, {0x502, 0x6}, {0x200, 0x10001}, {0x3, 0x8}, {0x7ff}, {0x7, 0x3}, {0xfffffffc, 0x2}, {0x9, 0x6}, {0x4, 0x1}, {0x6, 0x7}, {0x5, 0xd9}], 0x4, 0x9}, {[{0x0, 0x3}, {0x8ee, 0x3}, {0x2}, {0x3}, {0x9, 0x3}, {0x80}, {0x4, 0x2}, {0xffff92a1, 0x1}, {0xfff}, {0x4, 0x3}, {0x1, 0x3}], [{0x5, 0x80000000}, {0x8, 0x8}, {0x1000, 0xd057}, {0x0, 0xf}, {0x2, 0xd933c84}, {0x2, 0x7}, {0x81}, {0x100, 0x8}, {0x58d, 0x2}, {0x5d5f, 0x2}, {0x7174, 0x1}], 0x0, 0x8}, {[{0x3, 0x2}, {0x1, 0x2}, {0x7ff, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x1da1, 0x2}, {0x0, 0x2}, {0x5b3, 0x3}, {}, {0x1, 0x3}, {0x7fffffff}], [{0x4, 0x88b}, {0x1, 0x5}, {0xc, 0xfffffffe}, {0xe, 0x5}, {0x9, 0x9}, {0x5, 0x5}, {0x8}, {0x3}, {0x4, 0xe8}, {0x1f, 0x1}, {0xfff, 0x8}], 0x3, 0x5}, {[{0x9, 0x2}, {0x7f}, {0x80, 0x1}, {0x5, 0x3}, {0x7, 0x2}, {0x7, 0x2}, {0x4f079710, 0x1}, {0x7fffffff, 0x3}, {0xf0b, 0x3}, {0x3}, {0xcd, 0x3}], [{0x2, 0x4}, {0x8, 0xe0}, {0xffffffff, 0x7}, {0x7, 0x1}, {0x7, 0x8}, {0xffffffff, 0xb}, {0x40, 0x2}, {0x9, 0x4}, {0x9, 0x9815}, {0x4, 0x2}, {0xe0, 0x1}], 0x6, 0x6}], 0x3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x22, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x3, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xb10) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r3) sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000002e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) r7 = socket(0x2a, 0x800, 0x1) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800a1000519"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000128bd7000ffdbdf253100000008000300", @ANYRES32=r10, @ANYBLOB="0c009900030000001d0000000800db00", @ANYRES32, @ANYBLOB="0c0000000000000001ff0000e75039b784ad1113d497e0098d0e68c4696a5ff67f9c53ac41ececcf1ddd874902db502283a1ad6988cd6e95207e5250fe54b2c0e92613b9694cc5bee53130525ab294584bb6e28a52afdf042727da007a564164bd4b352962ed16eba2bfa964272c430994054639b3e598a1ed3e409854dc778996e0228becefaa76fab7f9d9bc40dce6f234a874d4952dfd2178203f3babbec7242cc775656a64eae402"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f00000014c0)=ANY=[], 0x494}], 0x1, 0x0, 0x0, 0x8811}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071042b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000210017022dbd7000fedbdf050013008000000008000a00079b3b664a6fcd958253b9cc844cc3ed00000014000200fe8000000000000000000000040000bb14000200fc010000000000000000000000000001080018004e204e2100"/107], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.0212611s ago: executing program 6 (id=8817): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="360300"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00'], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="440000002c00010000000000fcdbdf253400f2800c001900"], 0x44}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="a0000000290001"], 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="ec000000100001002d"], 0xec}}, 0x4000844) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80000000100001e026bd700402d4df2500000000", @ANYRES32=r7, @ANYBLOB="884e0600c16a010060001280110001006272696467655f736c61766500000000480005800500"], 0x80}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff0d00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="080004"], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000003700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b5090800000000007babf0ff00000000be9800000000000004080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf91000000000000760800000000000085000000c6000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.862112887s ago: executing program 4 (id=8818): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, '\x00', {'xfrm0\x00'}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x3}]}}}]}, 0x3c}}, 0x0) 2.722634257s ago: executing program 5 (id=8819): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002380)=@raw={'raw\x00', 0x701, 0x3, 0x270, 0x0, 0xb, 0x108, 0x108, 0x0, 0x1d8, 0x1c8, 0x1c8, 0x1d8, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'ip6erspan0\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@esp={{0x30}, {[], 0xd2857df73be921dd}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'veth1_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x4, 0x1, [0x23, 0x9, 0x31, 0x1a, 0x36, 0x4, 0x31, 0x6, 0xd, 0x2f, 0x2a, 0x1f, 0x3b, 0x37, 0x2b, 0x20], 0x2, 0xa}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000100)) recvfrom$unix(r1, &(0x7f0000000080)=""/76, 0x4c, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811005000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1daa000000000000711019000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 2.721754933s ago: executing program 0 (id=8820): r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20401}, 0x8010) 2.555576633s ago: executing program 5 (id=8821): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000002d000900fffffffffddbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0xe}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xffff, 0x5, 0x6, 0x10001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x1, &(0x7f0000000300)=""/191, &(0x7f00000003c0)=0xbf) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0xc0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0xc0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a540500000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000028050380180000800c00018006000100d10300000800034000000001"], 0x57c}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) (async) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="61106c000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000180)={{r12}, 0x1, &(0x7f00000000c0)=[0x4], 0x0, 0x2, 0x1}) 2.52847434s ago: executing program 0 (id=8822): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x1, 0x0, 0xfffffffc, {0xe}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 2.388591627s ago: executing program 4 (id=8823): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000000)=0x1, 0x4) (async) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x76, &(0x7f00000001c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x40, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a300", 0x0, 0x33, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, [@dstopts={0x4}], "0b0b79279cea4588"}}}}}}}, 0x0) (async) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) syz_emit_ethernet(0x96, &(0x7f0000000980)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x60, 0x6, 0x0, @remote, @local, {[], {{0x300, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x10, "0900c7e2f68e08ddf7b27874d17b"}, @sack={0x5, 0xe, [0xd2d, 0x130c, 0x3]}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0xa, [0x1, 0x3]}]}}}}}}}}, 0x0) 2.304237183s ago: executing program 8 (id=8824): ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000002c0)={{}, 0x0, 0x0, @inherit={0x48, &(0x7f0000019400)=ANY=[]}, @devid}) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x9, 0xc, 0x18, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @private2, 0xc4d}, 0x1c) 2.255679659s ago: executing program 6 (id=8825): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.253348576s ago: executing program 5 (id=8826): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=ANY=[@ANYBLOB="180000001900010000000000000000000000090004000680"], 0x18}, 0x1, 0x0, 0x0, 0x20000}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfa}, 0x14}}, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40880}, 0x0) 2.021088543s ago: executing program 6 (id=8827): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x10, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x78, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="3c424603a510"}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x400, 0x2, 0x7, 0x0, {0x0, 0x9, 0x0, 0x9, 0x0, 0x1, 0x1, 0x3}, 0x1, 0x7, 0x43}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x4, {0x92b3, 0x7ff, 0x5, 0xff01}}}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x20000840) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000200), 0xe) r4 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r4, &(0x7f0000000080)={&(0x7f0000000140)={0xa, 0xa, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xefcd}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@flowinfo={{0x14, 0x29, 0xb, 0x14}}], 0x18}, 0x922bac8556bda5ce) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b704000000000000850000004600000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c6176650000000058000580050019a103000000050005000000000005000c0007000000050007000000000005000a00ffa100000500080000000000040018000500060001000000060002000100000005001e00000000000500010003000000140003006272696467655f736c6176655f30"], 0xa4}}, 0x4040) r5 = socket$can_raw(0x1d, 0x3, 0x1) accept4(r4, 0x0, &(0x7f00000005c0), 0x40800) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)=0x0) ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f00000002c0)=r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r8, &(0x7f0000000300)}, 0x20) close(r5) r9 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000080)=0x2, 0x12) ioctl$AUTOFS_IOC_SETTIMEOUT(r9, 0x80049367, &(0x7f0000000480)=0x4) sendfile(r0, r8, &(0x7f00000004c0)=0xd, 0x8) 1.880308906s ago: executing program 4 (id=8828): syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800450000b0000400000011907800000000000000004e2117c1009c907801000000fdffffff717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d40838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c72097b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd388537719eecd7b1f5591c287cd8bdc5cb100705e002ca89a4b9b02afc4e21d94c732bb769f2581b5b6ae81bd7bad"], 0x0) 1.878134475s ago: executing program 0 (id=8829): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRESOCT], 0x38}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x3, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x40000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000240)=""/189, 0xc0}, {&(0x7f0000000040)=""/222, 0xde}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000180)=""/167, 0x21}, {&(0x7f0000001640)=""/4074, 0xfea}], 0x5, 0x0, 0xffffff08}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x100, 0x0) 1.738595295s ago: executing program 8 (id=8830): r0 = socket(0x8000000010, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000240)={r0, &(0x7f0000000140)='\\%\x00', 0x22080, &(0x7f0000000180)={@_ha_fsid={[0x3, 0x4]}, {0x8, 0x0, 0x8, 0x9}}, 0x7, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x2}) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000040)=0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000003300000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) write(r1, &(0x7f0000000280)="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", 0x219) (async) socket$nl_generic(0x10, 0x3, 0x10) 1.667369625s ago: executing program 5 (id=8831): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0xc, 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x11eac000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x2000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) unshare(0x22020600) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1d, 0x3, 0x65c0bb1c, 0x7, 0x80, 0xffffffffffffffff, 0x10, '\x00', r3, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000080)={r4, 0x0, 0x0, 0x4}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20048044}, 0x4008000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x24, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480a3fd01800b0001007461726765740000480002802c0003009ac420002e61afb9fdd672bad09dfb78c7699cf4e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32000000001c0000001100010000000000000000000400000a"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000040)={0x5, {{0xa, 0x4e21, 0x4042, @mcast1, 0x6}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0xfffffffc}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 1.444267878s ago: executing program 4 (id=8832): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "e4177f", 0x28, 0x89, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], "bd4fb9e9cbae6d1c21edd9ff38ebd97386806c27d875482109e2185d6f15c9ee51b342066e552bce"}}}}}, 0x0) listen(r0, 0x0) poll(&(0x7f0000000200)=[{r0, 0x401}], 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x8918, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000000001be6000005000000", @ANYRES64=r1], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20044804) 1.44381962s ago: executing program 6 (id=8833): r0 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) sendto$phonet(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x23, 0x26, 0x88, 0x6}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x2000040}, 0x20000014) 1.34931748s ago: executing program 0 (id=8834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6a}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 1.33448602s ago: executing program 8 (id=8835): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3801000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006c000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000048000300"], 0x138}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(camellia-generic)\x00'}, 0x58) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000080)={{0x0, 0x8, 0x10000, 0x6, 0x81, 0x2, 0x9, 0x5, 0x0, 0x0, 0xd, 0x959, 0x2, 0xffff, 0x9713}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000b40)={r3, 0x5}) 968.182453ms ago: executing program 4 (id=8836): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x0, {0x0, 0x0, 0x4, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x40050) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000600)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r3, 0x20, &(0x7f00000010c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/194, 0xc2}}, 0x10) 967.071348ms ago: executing program 6 (id=8837): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r4) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r6) sendmsg$IEEE802154_LLSEC_LIST_DEV(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, r7, 0x70b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x40000a0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r7, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x804) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r8, 0x1, 0x47, &(0x7f0000000380), &(0x7f00000003c0)=0x8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000001100)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x4f, 0x0, "39be251d1eabe5d383b83d7b7e3d8a239273c82b1fc06d23d50e17e69c6ee2848410590f6c0e2a534af6bf6748eb4c584401b16c30a714c496c77ddfd4e196378b7ab3ef23a522d8b89388ab4e3fb8d0"}, 0xd8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71187d000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x21}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) socket$can_j1939(0x1d, 0x2, 0x7) 742.005167ms ago: executing program 0 (id=8838): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000003b0001031dbd7017fadbdf2502"], 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb4, r1, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffda4, 0x7c}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xd42}, @NL80211_ATTR_FRAME={0x22, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x5}, @device_a, @device_b, @from_mac=@broadcast, {0x2, 0x6}, @value=@ver_80211n={0x0, 0x1000, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0x5, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x2d]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x14, 0xcd, [0x401, 0x3, 0xe8, 0x1, 0x5, 0x7, 0x5739, 0xce17]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0x5a9, 0x1, 0x3ff, 0x3, 0xccb, 0x200, 0x101, 0xb2, 0x9]}, @NL80211_ATTR_FRAME={0x2a, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_a, @random="b0a108891514", {0x3, 0x8}}, @sp_mp_open={0xf, 0x1, {0x580, {0x1, 0x8, [{0x2, 0x1}, {0xb}, {0x2}, {0x6c}, {0x5}, {0x12, 0x1}, {0xb, 0x1}, {0x24}]}, @void, @void}}}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f00000001c0)={r2, &(0x7f0000000040)='\xff\xff\xff\xff\xff\xff', 0x0, &(0x7f0000000080)={@_ha_fsid={[0x7fff, 0x8]}, {0x2, 0x5, 0x3, 0x8}}, 0xfffffffc, &(0x7f0000000100), &(0x7f0000000140)=0x3}) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x4, 0x3}}, 0x10) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$packet(0x11, 0x2, 0x300) write$tun(r2, &(0x7f0000000300)={@val={0x0, 0xd}, @void, @eth={@broadcast, @remote, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "eb209b769f00542f703fac7f745b9b2b041d5c6f062a7eaf", "f8ba0891f363725dde14fc14566603926b4ae350fdab6c84f40f8ae8054f790d"}}}}}}}, 0x76) 678.62549ms ago: executing program 8 (id=8839): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000002c000880280000022400010000000000000000000000000000000000000000000000000000000000000000000800050001000000140002007767310000000000000000000000000008000700ff00000014000200776732"], 0x78}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0xe3, 0x71, 0x11, 0x24, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) r6 = openat$cgroup_devices(r4, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000080)={'a', ' *:* ', 'rm\x00'}, 0x9) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) (async) r7 = socket$inet_sctp(0x2, 0x0, 0x84) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000006c0)={0x0, 0xcd, "f0867531b1a9df133161f42ce9c02befd26ce209fcd33b86eaa48bab57ebec8e23cdf49a8f264a8d015465f8ff5ae2cd9840d08251de118ca51192c0da1db5aecd70e79006bf2a85c39728e1fc09d479ec44154e2efc23679859c88a49b8a7545e8e23bc3da7baf618620ec78ec0595a1944f128f2ddb47cd4be00dc7370740b8791e5b0d9d5097701081955dbd52c8d84c96badfdd620b68a9ea26dc521b02a37b49b786f1bc8e3b70061903964ca3545115fcce4444fe711913a6f1c3847cfbcce82e02d8d3026861ab17b96"}, &(0x7f00000007c0)=0xd5) getsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000800)=@assoc_id=r8, &(0x7f0000000840)=0x4) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x150, 0x3, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_LABELS_MASK={0xc, 0x17, [0xff, 0xbc15]}, @CTA_TUPLE_ORIG={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xe}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x2, 0x4}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x16}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x7, 0x10}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x5}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1, 0x8}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x3, 0x21}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x3}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x2}}]}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x402}, @CTA_FILTER={0x3c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x600}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x142}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x508}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x86}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x400}]}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0x150}, 0x1, 0x0, 0x0, 0x480d0}, 0x2400c880) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005001e000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000840"], 0x60}, 0x1, 0x0, 0x0, 0x20000890}, 0x0) (async) ioctl$OCFS2_IOC_REFLINK(r3, 0x40186f04, &(0x7f00000000c0)={&(0x7f0000000000)='\x00', &(0x7f0000000080)=':L\x00', 0x8}) 538.798978ms ago: executing program 5 (id=8840): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) (async) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r0, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=':', 0x1}], 0x1}}], 0x1, 0x4080) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000080)=0x20) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, &(0x7f0000000880)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x1c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x8}}}, 0x2a) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) write$tun(r1, 0x0, 0x78) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x5, 0x44, 0x2, 0x8}, 0x20) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000180)="138c494949d8a5c33cb7c5060e64d4b7a2a46947538eed8a6ef6d2b69e", 0x1d}], 0x1) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x84, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {0x7ffe}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1, 0x2c}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_IE={0x4}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9ee}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_HIDDEN_SSID={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) (async) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 31.85831ms ago: executing program 6 (id=8841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x28, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff5, 0x1}, {0x8, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) 0s ago: executing program 4 (id=8842): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SPORT={0x6, 0x1c, 0x4e23}]}, 0x24}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) kernel console output (not intermixed with test programs): 225': attribute type 1 has an invalid length. [ 900.713738][ T933] ip6erspan0: entered allmulticast mode [ 900.847933][ T942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7233'. [ 901.055071][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 901.094808][ T958] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7235'. [ 901.138966][ T958] netlink: 'syz.6.7235': attribute type 16 has an invalid length. [ 901.143739][ T957] netlink: 'syz.4.7236': attribute type 1 has an invalid length. [ 901.299053][ T964] netlink: 52 bytes leftover after parsing attributes in process `syz.6.7238'. [ 901.309437][ T957] 8021q: adding VLAN 0 to HW filter on device bond7 [ 901.369662][ T962] bond7: (slave gretap2): making interface the new active one [ 901.378193][ T962] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 901.418586][ T965] netlink: 'syz.7.7237': attribute type 1 has an invalid length. [ 901.428291][ T961] netlink: 'syz.7.7237': attribute type 1 has an invalid length. [ 901.624277][ T974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7240'. [ 901.715436][ T971] netlink: 'syz.6.7239': attribute type 1 has an invalid length. [ 901.774349][ T971] 8021q: adding VLAN 0 to HW filter on device bond2 [ 901.876168][ T971] bridge_slave_1: left allmulticast mode [ 901.906382][ T971] bridge_slave_1: left promiscuous mode [ 901.963497][ T971] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.055502][ T971] bridge_slave_0: left allmulticast mode [ 902.069247][ T985] netlink: 256 bytes leftover after parsing attributes in process `syz.7.7242'. [ 902.078368][ T985] netlink: 256 bytes leftover after parsing attributes in process `syz.7.7242'. [ 902.090389][ T971] bridge_slave_0: left promiscuous mode [ 902.096228][ T971] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.125036][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 902.219961][ T992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7244'. [ 902.228913][ T992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7244'. [ 902.790994][ T1015] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 902.952791][ T9903] Bluetooth: hci6: command 0x0406 tx timeout [ 903.009340][ T1021] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7251'. [ 903.145304][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 904.214741][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 905.334881][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 906.444742][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 907.454738][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 908.505256][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 909.574538][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 910.694558][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 911.814705][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 912.924765][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 913.934755][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 914.994612][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 916.054520][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 917.174554][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 918.294520][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 919.404758][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 920.414740][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 921.464989][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 922.544511][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 923.654554][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 924.681857][ T1038] x_tables: duplicate underflow at hook 4 [ 924.725959][ T1042] netlink: 'syz.6.7254': attribute type 12 has an invalid length. [ 924.774659][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 924.835232][ T1046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7257'. [ 924.844949][ T1046] netlink: Invalid conntrack timeout [ 924.850310][ T1046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 924.881075][ T1042] bond3: option primary_reselect: invalid value (255) [ 924.975283][ T1042] bond3 (unregistering): Released all slaves [ 925.034706][ T1062] ip6t_srh: unknown srh invflags 4000 [ 925.121011][ T1064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7260'. [ 925.205104][ T1064] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7260'. [ 925.214127][ T1064] nbd: illegal input index -8454144 [ 925.894754][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 926.000107][ T1103] tunl0: entered promiscuous mode [ 926.017827][ T1103] netlink: 'syz.6.7271': attribute type 4 has an invalid length. [ 926.047555][ T1103] netlink: 9 bytes leftover after parsing attributes in process `syz.6.7271'. [ 926.347231][ T1116] xt_bpf: check failed: parse error [ 926.482200][ T1123] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7277'. [ 926.644924][ T1132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7279'. [ 926.653885][ T1132] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7279'. [ 926.905735][ T1139] sctp: [Deprecated]: syz.0.7282 (pid 1139) Use of struct sctp_assoc_value in delayed_ack socket option. [ 926.905735][ T1139] Use struct sctp_sack_info instead [ 926.977659][ T1143] pim6reg527: entered allmulticast mode [ 927.015695][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 927.334049][ T1156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7288'. [ 927.392796][ T1161] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7290'. [ 927.488164][ T1161] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 927.889080][ T1177] netlink: 'syz.7.7295': attribute type 1 has an invalid length. [ 927.945072][ T1177] 8021q: adding VLAN 0 to HW filter on device bond2 [ 928.016991][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 928.056657][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 928.071361][ T1177] bond2: (slave batadv_slave_0): making interface the new active one [ 928.109347][ T1186] netlink: 'syz.6.7294': attribute type 3 has an invalid length. [ 928.135549][ T1186] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7294'. [ 928.144759][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 928.151872][ T1177] bond2: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 928.505887][ T1195] netlink: 'syz.0.7301': attribute type 13 has an invalid length. [ 928.513784][ T1195] netlink: 'syz.0.7301': attribute type 17 has an invalid length. [ 928.637065][ T1195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 928.846446][ T1195] bond_slave_0: left allmulticast mode [ 928.854924][ T1195] veth1_to_bond: left promiscuous mode [ 929.131033][ T1195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 929.147832][ T1195] 8021q: adding VLAN 0 to HW filter on device bond1 [ 929.165645][ T1195] 8021q: adding VLAN 0 to HW filter on device bond3 [ 929.176389][ T1195] 8021q: adding VLAN 0 to HW filter on device bond4 [ 929.191693][ T1195] bridge2: left promiscuous mode [ 929.202441][ T1217] openvswitch: netlink: Duplicate key (type 6). [ 929.225874][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 929.260709][ T1195] ip6erspan0: left allmulticast mode [ 929.311960][T27118] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.319300][T27118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 929.406884][ T1215] v: renamed from veth0_vlan (while UP) [ 929.686171][T20838] bond3: (slave bridge2): link status definitely down, disabling slave [ 929.697069][T20838] bond3: now running without any active interface! [ 929.731622][T20841] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 929.747189][ T1226] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 930.200995][ T1251] __nla_validate_parse: 3 callbacks suppressed [ 930.201016][ T1251] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7316'. [ 930.295048][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 930.357600][ T1251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7316'. [ 930.645675][ T1258] smc: net device lo applied user defined pnetid SYZ0 [ 930.652526][ T1258] smc: smcd device lo applied user defined pnetid SYZ0 [ 930.735624][ T1263] netlink: 'syz.7.7320': attribute type 11 has an invalid length. [ 931.414677][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 931.451805][ T1282] tunl0: entered promiscuous mode [ 931.512996][ T1282] netlink: 'syz.0.7329': attribute type 4 has an invalid length. [ 931.520784][ T1282] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7329'. [ 931.583124][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.665806][ T1283] netlink: 'syz.0.7329': attribute type 4 has an invalid length. [ 931.723998][ T1283] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7329'. [ 932.528446][ T1324] x_tables: duplicate underflow at hook 2 [ 932.534691][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 932.876047][ T1336] netlink: 'syz.7.7344': attribute type 39 has an invalid length. [ 932.911756][ T1339] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7345'. [ 932.961620][ T1344] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7344'. [ 933.217323][ T1354] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7349'. [ 933.341479][ T1355] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.7347'. [ 933.664613][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 933.812704][ T1363] xt_hashlimit: size too large, truncated to 1048576 [ 933.867656][ T1363] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 933.917244][ T1363] netlink: Conntrack attr has 12 unknown bytes [ 933.923498][ T1363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 934.058439][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 934.235535][ T1378] openvswitch: netlink: IPv4 tun info is not correct [ 934.316139][ T1378] openvswitch: netlink: IPv4 tun info is not correct [ 934.342438][ T1378] openvswitch: netlink: IPv4 tun info is not correct [ 934.365733][ T1378] openvswitch: netlink: IPv4 tun info is not correct [ 934.372923][ T1378] openvswitch: netlink: IPv4 tun info is not correct [ 934.538164][ T1395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7359'. [ 934.566247][ T1398] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 934.654192][ T1393] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7360'. [ 935.557380][ T1436] __nla_validate_parse: 1 callbacks suppressed [ 935.557400][ T1436] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7373'. [ 935.673796][ T1436] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7373'. [ 935.693489][ T1439] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7374'. [ 935.991089][ T1456] netlink: 'syz.0.7377': attribute type 3 has an invalid length. [ 936.097085][ T1467] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7381'. [ 936.158304][ T1467] geneve4: entered promiscuous mode [ 936.163583][ T1467] geneve4: entered allmulticast mode [ 936.343069][T29185] IPVS: starting estimator thread 0... [ 936.386177][ T1467] IPv6: sit3: Disabled Multicast RS [ 936.393101][ T1467] sit3: entered allmulticast mode [ 936.516022][ T1475] IPVS: using max 33 ests per chain, 79200 per kthread [ 936.584816][ T1003] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 936.593691][ T1003] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 936.645582][ T1003] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 936.660097][T20838] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 937.047507][ T1477] xt_hashlimit: size too large, truncated to 1048576 [ 937.597838][ T1505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7387'. [ 937.620247][ T1507] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7388'. [ 937.784755][ T1505] netlink: 140 bytes leftover after parsing attributes in process `syz.4.7387'. [ 937.967797][ T1511] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7390'. [ 937.981228][ T1513] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 938.012072][ T1511] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7390'. [ 938.055019][ C1] net_ratelimit: 12 callbacks suppressed [ 938.055043][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 938.528827][ T1528] Cannot find del_set index 4 as target [ 939.070006][ T1544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7399'. [ 939.138948][ T9267] bond0: (slave bond_slave_0): interface is now down [ 939.146107][ T9267] bond0: (slave bond_slave_1): interface is now down [ 939.156132][ T9267] bond0: now running without any active interface! [ 939.175679][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 939.450712][ T1560] bond8: entered promiscuous mode [ 939.469501][ T1560] bond8: entered allmulticast mode [ 939.510278][ T1560] 8021q: adding VLAN 0 to HW filter on device bond8 [ 939.613115][ T1574] netlink: 'syz.4.7411': attribute type 21 has an invalid length. [ 939.766836][ T1571] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 939.909113][ T1571] bond3 (unregistering): Released all slaves [ 940.025025][ T1574] netlink: 'syz.4.7411': attribute type 21 has an invalid length. [ 940.041616][ T9275] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 940.050939][ T9275] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 940.059758][ T9275] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 940.294770][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 940.476619][ T1601] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 940.580233][ T9267] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 940.966660][ T1613] pim6reg1: entered promiscuous mode [ 940.972038][ T1613] pim6reg1: entered allmulticast mode [ 941.414978][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 941.899847][ T1634] __nla_validate_parse: 7 callbacks suppressed [ 941.899867][ T1634] netlink: 252 bytes leftover after parsing attributes in process `syz.7.7425'. [ 941.957296][ T1634] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7425'. [ 942.481030][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 942.535018][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 942.647908][ T1658] syzkaller0: left promiscuous mode [ 942.653188][ T1658] syzkaller0: left allmulticast mode [ 942.686624][ T1658] netlink: 116 bytes leftover after parsing attributes in process `syz.4.7432'. [ 943.308794][ T1689] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.7443'. [ 943.342507][ T1694] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7442'. [ 943.363738][ T1692] ip_tables: iptables: counters copy to user failed while replacing table [ 943.658582][ T1707] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 943.665220][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 943.985114][ T9903] Bluetooth: hci4: command 0x0406 tx timeout [ 944.418882][ T1720] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7449'. [ 944.665219][T29798] Bluetooth: hci2: link tx timeout [ 944.671050][T29798] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 944.784612][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 945.904661][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 946.098098][ T1785] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7469'. [ 946.122070][ T1786] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7469'. [ 946.157959][ T9275] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 946.165764][ T9275] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 946.196939][ T9432] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 946.275488][ T1791] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7471'. [ 946.307082][ T1792] macvlan0: entered promiscuous mode [ 946.334909][ T1791] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7471'. [ 946.671645][ T9432] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 946.757661][ T9903] Bluetooth: hci2: command 0x0405 tx timeout [ 946.803333][ T9432] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 946.921167][ T1811] __nla_validate_parse: 2 callbacks suppressed [ 946.921186][ T1811] netlink: 576 bytes leftover after parsing attributes in process `syz.6.7478'. [ 946.988720][ T1810] netlink: 'syz.0.7477': attribute type 8 has an invalid length. [ 946.996523][ T1810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7477'. [ 947.005487][ T1810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7477'. [ 947.024861][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 947.141935][ T1816] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7480'. [ 947.571061][ T1825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 947.649779][ T1828] geneve2: entered promiscuous mode [ 947.722639][ T1830] netlink: 'syz.7.7484': attribute type 11 has an invalid length. [ 947.747515][ T1830] netlink: 224 bytes leftover after parsing attributes in process `syz.7.7484'. [ 947.913212][ T1839] netlink: 'syz.6.7486': attribute type 6 has an invalid length. [ 948.051132][ T1842] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 948.104707][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 948.203515][ T1833] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7485'. [ 948.247714][ T1851] netlink: 'syz.7.7487': attribute type 1 has an invalid length. [ 948.255507][ T1851] netlink: 244 bytes leftover after parsing attributes in process `syz.7.7487'. [ 948.601309][ T1840] bond9 (unregistering): Released all slaves [ 948.907869][ T1873] netlink: 'syz.7.7492': attribute type 7 has an invalid length. [ 948.915668][ T1873] netlink: 140 bytes leftover after parsing attributes in process `syz.7.7492'. [ 948.995248][ T9903] Bluetooth: hci2: command 0x0405 tx timeout [ 949.174739][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 949.902923][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 949.943888][ T1889] gtp0: entered promiscuous mode [ 950.020800][ T1889] gtp0: entered allmulticast mode [ 950.090097][ T1901] syzkaller1: entered promiscuous mode [ 950.095635][ T1901] syzkaller1: entered allmulticast mode [ 950.294826][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 950.740967][ T1918] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7503'. [ 951.232886][ T1940] ieee802154 phy1 wpan1: encryption failed: -22 [ 951.381824][ T1939] tun0: tun_chr_ioctl cmd 1074025675 [ 951.413258][ T1939] tun0: persist disabled [ 951.424938][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 951.896050][ T1933] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7506'. [ 951.905306][ T1957] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 952.086539][ T1933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 952.240886][ T1933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 952.404974][ T1972] __nla_validate_parse: 1 callbacks suppressed [ 952.404996][ T1972] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7518'. [ 952.420086][ T1972] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7518'. [ 952.428975][ T1972] netlink: 'syz.7.7518': attribute type 15 has an invalid length. [ 952.446094][ T1972] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7518'. [ 952.455007][ T1972] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7518'. [ 952.463899][ T1972] netlink: 'syz.7.7518': attribute type 15 has an invalid length. [ 952.480574][T27118] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 952.504102][ T9279] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 952.512801][ T9279] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 952.527535][ T9279] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 952.544709][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 952.629490][ T1972] gretap0: entered promiscuous mode [ 952.635534][ T1972] vlan2: entered promiscuous mode [ 953.117951][ T1984] netlink: 'syz.7.7522': attribute type 11 has an invalid length. [ 953.125843][ T1984] netlink: 'syz.7.7522': attribute type 4 has an invalid length. [ 953.133593][ T1984] netlink: 224 bytes leftover after parsing attributes in process `syz.7.7522'. [ 953.468452][ T1992] nbd: must specify a device to reconfigure [ 953.538996][ T1994] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7527'. [ 953.562834][ T1992] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7526'. [ 953.624715][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 953.644614][ T1997] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7528'. [ 954.137549][ T2011] netlink: 'syz.7.7534': attribute type 1 has an invalid length. [ 954.360146][ T2011] 8021q: adding VLAN 0 to HW filter on device bond3 [ 954.373114][ T2026] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7534'. [ 954.459925][ T2031] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20003 [ 954.468418][ T2031] IPVS: set_ctl: invalid protocol: 4 10.1.1.0:20002 [ 954.685313][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 954.718738][ T2037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 954.896800][ T2039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 954.928326][ T2046] team0: Device ipvlan0 failed to register rx_handler [ 955.342864][ T2057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7544'. [ 955.589987][ T2057] macvtap1: entered promiscuous mode [ 955.595381][ T2057] vlan0: entered promiscuous mode [ 955.705366][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 955.717805][ T2057] macvtap1: entered allmulticast mode [ 955.726537][ T2057] vlan0: entered allmulticast mode [ 955.731847][ T2057] veth0_vlan: entered allmulticast mode [ 955.821217][ T2067] netlink: 'syz.0.7549': attribute type 5 has an invalid length. [ 956.509130][ T2075] geneve2: entered promiscuous mode [ 956.764612][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 957.056985][ T2104] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 957.167501][ T2108] bond4: entered promiscuous mode [ 957.233795][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 957.416178][ T9280] pim6reg: left allmulticast mode [ 957.786106][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 958.301294][ T9280] bond2 (unregistering): (slave bridge2): Releasing active interface [ 958.309537][ T9280] bridge2 (unregistering): left promiscuous mode [ 958.316006][ T9280] bridge2 (unregistering): left allmulticast mode [ 958.330313][ T9280] bond8 (unregistering): (slave bridge3): Releasing backup interface [ 958.349543][ T9280] bond5 (unregistering): (slave vlan3): Releasing active interface [ 958.412148][ T9280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 958.424092][ T9280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 958.434778][ T9280] bond0 (unregistering): Released all slaves [ 958.448331][ T9280] bond1 (unregistering): Released all slaves [ 958.515153][ T9280] bond2 (unregistering): Released all slaves [ 958.534453][ T9280] bond3 (unregistering): Released all slaves [ 958.554575][ T9280] bond4 (unregistering): Released all slaves [ 958.575125][ T9280] bond5 (unregistering): Released all slaves [ 958.632896][ T9280] bond6 (unregistering): Released all slaves [ 958.653706][ T9280] bond7 (unregistering): Released all slaves [ 958.673326][ T9280] bond8 (unregistering): Released all slaves [ 958.693099][ T9280] bond9 (unregistering): Released all slaves [ 958.745881][ T9280] bond10 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 958.758052][ T9280] bond10 (unregistering): Released all slaves [ 958.777448][ T2108] tipc: Enabling of bearer rejected, failed to enable media [ 959.165531][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 959.316129][ T2137] __nla_validate_parse: 7 callbacks suppressed [ 959.316148][ T2137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7571'. [ 959.375302][ T2137] bridge: RTM_NEWNEIGH with invalid ether address [ 959.583946][ T2139] batadv0: entered promiscuous mode [ 959.598867][ T2139] macsec1: entered promiscuous mode [ 959.716932][ T2139] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 959.796096][ T2139] batadv0: left promiscuous mode [ 959.931930][ T9280] tipc: Disabling bearer [ 959.951325][ T9280] tipc: Disabling bearer [ 960.030539][ T2155] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7576'. [ 960.106480][ T9280] tipc: Left network mode [ 960.584431][ T30] audit: type=1107 audit(1786924192.625:14): pid=2158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ãFC2\k*ßÉ®Ž}êiól¢ÏãÑAN\«¬r,M]¸3øõ+92f¯­|ø£ò·/ìfÿw~BéR+’EIg/Dì[:GåºÄ»?k9©Ã4 ¨Ÿ$Ùjdן|ø ÍfXÒu^]5ŸB€&؆ÛkØÉ®ÂxRK”"ø€V>耼{—»á¨nåu]X ¿£T3ÝS¸µ'äÅÛµö…—CH/r}#{µ| Í š³.gZ-ÚÕÜ0Ds$š[ËB&ÖW“þ™m]y6Þs†9c±Â×UQŸ€WݬS' [ 960.666462][ T30] audit: type=1107 audit(1786924192.625:15): pid=2158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ãFC2\k*ßÉ®Ž}êiól¢ÏãÑAN\«¬r,M]¸3øõ+92f¯­|ø£ò·/ìfÿw~BéR+’EIg/Dì[:GåºÄ»?k9©Ã4 ¨Ÿ$Ùjdן|ø ÍfXÒu^]5ŸB€&؆ÛkØÉ®ÂxRK”"ø€V>耼{—»á¨nåu]X ¿£T3ÝS¸µ'äÅÛµö…—CH/r}#{µ| Í š³.gZ-ÚÕÜ0Ds$š[ËB&ÖW“þ™m]y6Þs†9c±Â×UQŸ€WݬS' [ 960.699637][ T2166] netlink: 'syz.4.7579': attribute type 1 has an invalid length. [ 960.707411][ T2166] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7579'. [ 960.744456][ T2168] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 961.385309][ T2182] netlink: 'syz.5.7585': attribute type 1 has an invalid length. [ 961.393118][ T2182] netlink: 'syz.5.7585': attribute type 2 has an invalid length. [ 961.412068][ T2187] xt_hashlimit: size too large, truncated to 1048576 [ 961.538786][ T2182] netlink: 'syz.5.7585': attribute type 2 has an invalid length. [ 961.546598][ T2182] netlink: 188 bytes leftover after parsing attributes in process `syz.5.7585'. [ 961.639045][ T2193] netlink: 'syz.4.7587': attribute type 21 has an invalid length. [ 961.980976][ T2198] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7584'. [ 963.024686][ T2230] netlink: 'syz.0.7594': attribute type 1 has an invalid length. [ 963.048130][ T2237] netlink: 'syz.5.7596': attribute type 49 has an invalid length. [ 963.215014][ T2230] 8021q: adding VLAN 0 to HW filter on device bond5 [ 963.234398][ T2230] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7594'. [ 963.518597][ T2237] ip6gretap0: entered promiscuous mode [ 963.524130][ T2237] ip6gretap0: entered allmulticast mode [ 963.579445][ T2231] bond5: (slave geneve2): making interface the new active one [ 963.589091][ T2231] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 963.713465][ T2249] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7599'. [ 963.726826][ T2247] bridge0: port 3(vlan2) entered blocking state [ 963.727248][ T2247] bridge0: port 3(vlan2) entered disabled state [ 963.727977][ T2247] vlan2: entered allmulticast mode [ 963.727996][ T2247] geneve0: entered allmulticast mode [ 963.732920][ T2247] vlan2: entered promiscuous mode [ 963.732938][ T2247] geneve0: entered promiscuous mode [ 964.244303][ T9280] hsr_slave_0: left promiscuous mode [ 964.250417][ T9280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.257843][ T9280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.276319][ T9280] veth1_macvtap: left promiscuous mode [ 964.281862][ T9280] veth0_macvtap: left promiscuous mode [ 964.287633][ T9280] veth1_vlan: left promiscuous mode [ 964.345777][ T9280] veth0_vlan: left promiscuous mode [ 964.707349][ T9280] team0 (unregistering): Port device vlan0 removed [ 964.731588][ T2260] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7601'. [ 964.902484][ T9280] team0 (unregistering): Port device team_slave_1 removed [ 964.921871][ T9280] team0 (unregistering): Port device team_slave_0 removed [ 965.256653][ T2211] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 965.685898][ T2271] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7605'. [ 966.500375][ T2295] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7610'. [ 966.608295][ T2302] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7610'. [ 967.087703][ T2327] netlink: 256 bytes leftover after parsing attributes in process `syz.6.7616'. [ 967.676172][ T2348] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7623'. [ 967.876039][ T2345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7622'. [ 968.061536][ T2345] hsr_slave_1 (unregistering): left promiscuous mode [ 968.235661][ T9280] IPVS: stop unused estimator thread 0... [ 968.262111][ T2369] netlink: set zone limit has 4 unknown bytes [ 968.292145][ T2364] xt_hashlimit: size too large, truncated to 1048576 [ 968.351843][ T2374] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7628'. [ 968.428639][ T2374] netlink: 144 bytes leftover after parsing attributes in process `syz.6.7628'. [ 968.438721][ T2371] netlink: 'syz.4.7627': attribute type 7 has an invalid length. [ 968.609305][ T2371] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7627'. [ 969.229216][ T2394] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 970.144468][ T2430] syzkaller0: entered promiscuous mode [ 970.150021][ T2430] syzkaller0: entered allmulticast mode [ 970.244708][ T2434] xt_limit: Overflow, try lower: 536871034/127 [ 970.276809][ T2434] netlink: 'syz.6.7638': attribute type 1 has an invalid length. [ 971.158516][ T2465] __nla_validate_parse: 1 callbacks suppressed [ 971.158536][ T2465] netlink: 284 bytes leftover after parsing attributes in process `syz.4.7639'. [ 971.603812][ T2497] ip_tunnel: non-ECT from 10.1.1.0 with TOS=0x3 [ 971.810312][ T2500] tipc: Started in network mode [ 971.815271][ T2500] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 971.876055][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 971.915651][ T2500] tipc: Enabled bearer , priority 10 [ 972.188999][ T2500] vlan3: entered allmulticast mode [ 972.194196][ T2500] bond0: entered allmulticast mode [ 972.257972][ T2525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7652'. [ 972.410292][ T2500] bond_slave_0: entered allmulticast mode [ 972.416202][ T2500] bond_slave_1: entered allmulticast mode [ 972.422312][ T2511] veth1_to_bond: entered allmulticast mode [ 972.526644][ T2511] veth1_to_bond: left allmulticast mode [ 973.076446][ T9418] tipc: Node number set to 10136234 [ 973.094747][ T2556] netlink: 'syz.5.7657': attribute type 1 has an invalid length. [ 973.102547][ T2556] netlink: 756 bytes leftover after parsing attributes in process `syz.5.7657'. [ 973.544046][ T2576] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.7662'. [ 973.655097][ T2573] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 973.894542][ T2593] C: renamed from lo (while UP) [ 973.957149][ T2593] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 974.416783][ T2623] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7671'. [ 974.464366][ T2623] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7671'. [ 974.549105][ T2627] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7671'. [ 974.577254][ T2633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 974.602302][ T2627] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7671'. [ 975.000233][ T2657] openvswitch: netlink: Flow key attr not present in new flow. [ 975.209899][ T2671] netlink: 104 bytes leftover after parsing attributes in process `syz.7.7679'. [ 975.250178][ T2671] netlink: 'syz.7.7679': attribute type 5 has an invalid length. [ 975.394163][ T2671] netlink: 'syz.7.7679': attribute type 9 has an invalid length. [ 975.401966][ T2671] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7679'. [ 976.163388][ T2708] bond0: entered promiscuous mode [ 976.233916][ T2708] bond_slave_0: entered promiscuous mode [ 976.239928][ T2708] bond_slave_1: entered promiscuous mode [ 976.251439][ T2708] hsr1: entered promiscuous mode [ 976.564991][ T2721] __nla_validate_parse: 1 callbacks suppressed [ 976.565012][ T2721] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7686'. [ 976.580206][ T2721] netlink: 'syz.7.7686': attribute type 7 has an invalid length. [ 976.587963][ T2721] netlink: 'syz.7.7686': attribute type 8 has an invalid length. [ 976.595721][ T2721] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7686'. [ 976.730961][ T2732] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7688'. [ 976.997433][ T2748] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7687'. [ 977.006452][ T2748] openvswitch: netlink: Flow key attr not present in new flow. [ 977.039206][ T2749] x_tables: duplicate underflow at hook 2 [ 977.301593][ T2757] netlink: 184 bytes leftover after parsing attributes in process `syz.7.7692'. [ 977.515419][ T2761] bond6: option mode: invalid value (10) [ 977.525181][ T2761] bond6 (unregistering): Released all slaves [ 978.018640][ T2780] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7696'. [ 978.034777][ T2779] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7696'. [ 978.077188][ T2780] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7696'. [ 978.175427][ T2779] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7696'. [ 978.207944][ T2782] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7697'. [ 978.325412][ T2782] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.344882][ T2782] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.599527][ T2796] geneve3: entered promiscuous mode [ 979.313617][ T2839] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.601206][ T2839] bridge_slave_0 (unregistering): left allmulticast mode [ 979.665351][ T2839] bridge_slave_0 (unregistering): left promiscuous mode [ 979.694947][ T2839] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.943128][ T2863] veth1_macvtap: left promiscuous mode [ 981.019245][ T2910] Unsupported ieee802154 address type: 0 [ 981.229825][ T2925] netlink: 'syz.7.7723': attribute type 2 has an invalid length. [ 981.670934][ T2942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 981.687325][ T2949] __nla_validate_parse: 3 callbacks suppressed [ 981.687344][ T2949] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7729'. [ 981.702547][ T2949] openvswitch: netlink: Flow key attr not present in new flow. [ 981.991147][ T2960] IPv6: NLM_F_REPLACE set, but no existing node found! [ 982.037155][ T2966] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7730'. [ 982.046174][ T2966] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7730'. [ 982.350632][ T2935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 982.393665][ T2971] netlink: 244 bytes leftover after parsing attributes in process `syz.4.7732'. [ 982.932970][ T5274] veth1_macvtap: entered promiscuous mode [ 982.993307][ T2979] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7733'. [ 983.002255][ T2979] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7733'. [ 983.011223][ T2979] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7733'. [ 983.405906][ T3000] netlink: 'syz.0.7739': attribute type 2 has an invalid length. [ 983.581112][ T3007] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7741'. [ 983.590149][ T3007] block nbd3: Unsupported socket: should be TCP or UNIX. [ 984.419400][ T3043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7750'. [ 985.289528][ T3079] netlink: 'syz.7.7755': attribute type 16 has an invalid length. [ 985.375684][ T3079] netlink: 'syz.7.7755': attribute type 17 has an invalid length. [ 985.664189][ T3096] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7759'. [ 985.764680][ T3096] nbd: must specify at least one socket [ 986.060982][ T3079] syz_tun: left promiscuous mode [ 986.501540][ T3079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 987.021355][ T3079] gretap1: left promiscuous mode [ 987.026381][ T3079] gretap1: left allmulticast mode [ 987.064245][ T3079] bond1: left promiscuous mode [ 987.069138][ T3079] ip6gre1: left promiscuous mode [ 987.077288][ T3079] gretap2: left promiscuous mode [ 987.082462][ T3079] gretap2: left allmulticast mode [ 987.095702][ T3079] gtp0: left promiscuous mode [ 987.100439][ T3079] gtp0: left allmulticast mode [ 987.110174][ T3079] bond4: left promiscuous mode [ 987.115473][ T3079] vlan3: left allmulticast mode [ 987.120401][ T3079] bond0: left allmulticast mode [ 987.125285][ T3079] bond_slave_0: left allmulticast mode [ 987.130770][ T3079] bond_slave_1: left allmulticast mode [ 987.136841][ T3079] hsr1: left promiscuous mode [ 987.267000][ T3087] syzkaller0: entered promiscuous mode [ 987.296802][ T3087] syzkaller0: entered allmulticast mode [ 987.367371][ T3109] mac80211_hwsim hwsim58 wlan0: entered allmulticast mode [ 987.733796][T27118] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 987.742662][T27118] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.758132][ T9280] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 987.766982][ T9280] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.790124][T27116] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 987.807826][T27116] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.048013][ T3136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7765'. [ 988.805266][ T3137] wg1 speed is unknown, defaulting to 1000 [ 988.807909][ T3136] team0: left allmulticast mode [ 988.816027][ T3136] team_slave_0: left allmulticast mode [ 988.872592][ T3136] team_slave_1: left allmulticast mode [ 988.886512][ T3136] team0: left promiscuous mode [ 988.891362][ T3136] team_slave_0: left promiscuous mode [ 988.897003][ T3136] team_slave_1: left promiscuous mode [ 988.902879][ T3136] bridge0: port 3(team0) entered disabled state [ 989.009029][ T3136] team0: Cannot enslave team device to itself [ 989.019430][ T3137] wg1 speed is unknown, defaulting to 1000 [ 989.322261][ T3169] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7769'. [ 989.602514][ T3137] wg1 speed is unknown, defaulting to 1000 [ 990.170078][ T3137] infiniband syz2: set active [ 990.185871][ T3137] infiniband syz2: added wg1 [ 990.229574][ T3137] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 990.231999][ T3137] infiniband syz2: Couldn't open port 1 [ 990.246275][ T3137] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 990.261335][ T3137] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 990.278496][ T3137] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 990.311823][ T3106] wg1 speed is unknown, defaulting to 1000 [ 990.334081][ T9280] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 990.342933][ T9280] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.486488][ T3137] RDS/IB: syz2: added [ 990.504509][ T3137] smc: adding ib device syz2 with port count 1 [ 990.510811][ T3137] smc: ib device syz2 port 1 has no pnetid [ 990.577081][ T3209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7775'. [ 990.738071][ T3219] netlink: 'syz.0.7776': attribute type 1 has an invalid length. [ 990.768391][ T3106] wg1 speed is unknown, defaulting to 1000 [ 990.820575][ T3137] wg1 speed is unknown, defaulting to 1000 [ 991.035430][ T3225] netlink: 'syz.0.7779': attribute type 1 has an invalid length. [ 991.779813][ T3246] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 991.804268][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 991.977278][ T3247] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 991.986790][ T3247] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.995708][ T3247] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 992.181288][ T3137] wg1 speed is unknown, defaulting to 1000 [ 992.266791][ T3260] netlink: 'syz.5.7789': attribute type 13 has an invalid length. [ 992.829415][ T3272] IPVS: length: 137 != 24 [ 993.027995][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.089031][ T3294] netlink: 'syz.4.7795': attribute type 21 has an invalid length. [ 994.098647][ T3137] wg1 speed is unknown, defaulting to 1000 [ 994.897310][ T3313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 995.060075][ T5274] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 995.482863][ T3137] wg1 speed is unknown, defaulting to 1000 [ 995.927547][ T3335] netlink: 216 bytes leftover after parsing attributes in process `syz.0.7808'. [ 995.936684][ T3335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7808'. [ 996.066987][ T3340] syzkaller0: Caught tx_queue_len zero misconfig [ 996.567146][ T3353] netlink: 'syz.5.7811': attribute type 2 has an invalid length. [ 996.574944][ T3353] netlink: 244 bytes leftover after parsing attributes in process `syz.5.7811'. [ 996.601462][ T3354] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 996.736852][ T3356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7811'. [ 996.861164][ T3137] wg1 speed is unknown, defaulting to 1000 [ 996.971936][ T3359] netlink: 'syz.4.7812': attribute type 21 has an invalid length. [ 997.150278][ T3362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7813'. [ 997.172360][ T3366] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7814'. [ 997.181908][ T3359] bond9: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 997.193474][ T3359] bond9 (unregistering): Released all slaves [ 997.249941][ T3362] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 998.288704][ T3137] wg1 speed is unknown, defaulting to 1000 [ 998.375300][ T3388] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7818'. [ 998.666299][ T3391] netlink: 'syz.5.7820': attribute type 1 has an invalid length. [ 998.698247][ T3391] netlink: 16179 bytes leftover after parsing attributes in process `syz.5.7820'. [ 999.148202][ T3407] x_tables: duplicate entry at hook 3 [ 999.330888][ T3407] openvswitch: netlink: Flow actions attr not present in new flow. [ 999.491287][ T3137] wg1 speed is unknown, defaulting to 1000 [ 999.791499][ T3422] netlink: 'syz.7.7830': attribute type 1 has an invalid length. [ 1000.172009][ T3422] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1000.465598][ T3428] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1000.809741][ T3453] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7835'. [ 1000.828036][ T3426] netlink: Unknown conntrack attr (0) [ 1001.187227][ T3461] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7836'. [ 1001.289750][ T3464] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1001.638102][ T3477] netlink: 'syz.4.7843': attribute type 28 has an invalid length. [ 1001.675858][ T3471] IPVS: set_ctl: invalid protocol: 60319 24.0.0.0:0 [ 1001.684700][ T3477] netlink: 'syz.4.7843': attribute type 3 has an invalid length. [ 1001.694679][ T3478] IPVS: set_ctl: invalid protocol: 60319 24.0.0.0:0 [ 1001.704639][ T3477] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7843'. [ 1001.885420][ T3482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7844'. [ 1001.959433][ T3491] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7845'. [ 1002.001257][ T3493] netlink: 'syz.6.7847': attribute type 4 has an invalid length. [ 1002.009344][ T3491] netlink: 'syz.7.7845': attribute type 3 has an invalid length. [ 1002.091511][ T3491] netlink: 'syz.7.7845': attribute type 21 has an invalid length. [ 1002.319689][ T3504] netlink: 'syz.6.7852': attribute type 1 has an invalid length. [ 1002.348106][ T3502] netlink: 'syz.0.7850': attribute type 21 has an invalid length. [ 1002.379807][ T3502] IPv6: NLM_F_CREATE should be specified when creating new route [ 1002.418934][ T3502] netlink: 'syz.0.7850': attribute type 1 has an invalid length. [ 1002.616404][ T3509] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1002.657562][ T3511] netlink: 156 bytes leftover after parsing attributes in process `syz.7.7854'. [ 1002.970313][ T3520] team0: Port device dummy0 removed [ 1002.979007][ T3520] bridge_slave_1: left promiscuous mode [ 1002.984832][ T3520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.033728][ T3525] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.7859'. [ 1003.099239][ T3520] bond0: (slave bond_slave_0): Releasing backup interface [ 1003.220463][ T3520] bond0: (slave bond_slave_1): Releasing backup interface [ 1003.315209][ T3520] team0: Port device team_slave_0 removed [ 1003.342179][ T3520] team0: Port device team_slave_1 removed [ 1003.387993][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1003.395445][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1003.404710][ T3520] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1003.422349][ T3525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7859'. [ 1004.352318][ T3564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7870'. [ 1004.454523][ T3564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7870'. [ 1004.506045][ T3564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7870'. [ 1004.663451][ T3567] syzkaller0: entered promiscuous mode [ 1004.669012][ T3567] syzkaller0: entered allmulticast mode [ 1010.057880][ T3605] __nla_validate_parse: 3 callbacks suppressed [ 1010.057906][ T3605] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7882'. [ 1010.074050][ T3620] batman_adv: batadv0: Adding interface: dummy0 [ 1010.080355][ T3620] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.105569][ T3620] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1010.398967][ T9280] dvmrp1: left allmulticast mode [ 1010.501375][ T3653] netlink: 165 bytes leftover after parsing attributes in process `syz.5.7888'. [ 1010.532571][ T3652] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7889'. [ 1010.543206][ T3652] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7889'. [ 1010.807901][ T3663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7892'. [ 1010.855910][ T3663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7892'. [ 1011.224882][ T9280] bond6 (unregistering): (slave gretap1): Releasing active interface [ 1011.312378][ T3676] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1011.419140][ T9280] bond5 (unregistering): (slave geneve3): Releasing active interface [ 1011.706325][ T9280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1011.734540][ T9280] bond_slave_0: left allmulticast mode [ 1011.802801][ T9280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1011.811936][ T9280] bond_slave_1: left allmulticast mode [ 1011.862537][ T9280] bond0 (unregistering): (slave bond2): Releasing backup interface [ 1011.871209][ T9280] bond2 (unregistering): left allmulticast mode [ 1011.877785][ T9280] bond0 (unregistering): Released all slaves [ 1011.890839][ T9280] bond1 (unregistering): Released all slaves [ 1011.910823][ T9280] bond2 (unregistering): Released all slaves [ 1011.930303][ T9280] bond3 (unregistering): Released all slaves [ 1011.969646][ T9280] bond4 (unregistering): Released all slaves [ 1011.989781][ T9280] bond5 (unregistering): Released all slaves [ 1012.009520][ T9280] bond6 (unregistering): Released all slaves [ 1012.125233][ T3663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7892'. [ 1012.134169][ T3663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7892'. [ 1012.454965][ T3683] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1012.460961][ T3683] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1012.712759][ T3704] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1012.721586][ T3683] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1012.800364][ T3683] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1012.957507][ T3712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7902'. [ 1013.061757][ T3683] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1013.067746][ T3683] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1013.158336][ T3683] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1013.164318][ T3683] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1013.184919][ T3712] mac80211_hwsim hwsim58 wlan0: entered promiscuous mode [ 1013.192016][ T3712] mac80211_hwsim hwsim58 wlan0: left allmulticast mode [ 1013.342893][ T3717] vlan2: left allmulticast mode [ 1013.347916][ T3717] geneve0: left allmulticast mode [ 1013.352983][ T3717] vlan2: left promiscuous mode [ 1013.357769][ T3717] geneve0: left promiscuous mode [ 1013.363171][ T3717] bridge0: port 3(vlan2) entered disabled state [ 1013.392708][ T3717] bridge_slave_1: left allmulticast mode [ 1013.398447][ T3717] bridge_slave_1: left promiscuous mode [ 1013.423506][ T3717] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.461922][ T3717] bridge_slave_0: left allmulticast mode [ 1013.467646][ T3717] bridge_slave_0: left promiscuous mode [ 1013.473431][ T3717] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.511582][ T3683] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1013.517569][ T3683] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1013.807441][ T3728] netlink: 'syz.0.7907': attribute type 32 has an invalid length. [ 1013.815353][ T3728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7907'. [ 1013.961368][ T3728] bond6: option coupled_control: invalid value (2) [ 1014.097911][ T3728] bond6 (unregistering): Released all slaves [ 1015.096936][ T3754] xt_ipcomp: unknown flags 1D [ 1015.307467][ T3754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7913'. [ 1015.318084][ T3764] netlink: 'syz.5.7915': attribute type 4 has an invalid length. [ 1015.407074][ T3765] netlink: 'syz.5.7915': attribute type 4 has an invalid length. [ 1015.669741][ T3771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1016.095587][ T3775] bond4 (unregistering): Released all slaves [ 1016.178441][ T3785] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7919'. [ 1016.256234][ T3785] bond7: Invalid ad_actor_system MAC address. [ 1016.323837][ T3785] bond7: option ad_actor_system: invalid value (1) [ 1016.339505][ T3785] bond7 (unregistering): Released all slaves [ 1016.424904][ T3774] ip6erspan0: entered allmulticast mode [ 1016.893700][ T3800] netlink: 'syz.6.7924': attribute type 1 has an invalid length. [ 1016.929389][ T3800] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1016.971086][ T3800] vlan0: entered promiscuous mode [ 1016.976202][ T3800] bond4: entered promiscuous mode [ 1016.981452][ T3800] vlan0: entered allmulticast mode [ 1016.986622][ T3800] bond4: entered allmulticast mode [ 1017.541593][ T3821] mac80211_hwsim hwsim80 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1017.564930][ T3814] bridge8: entered promiscuous mode [ 1017.570261][ T3814] bridge8: entered allmulticast mode [ 1017.582920][ T3824] netlink: 288 bytes leftover after parsing attributes in process `syz.4.7929'. [ 1017.609462][ T3821] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7927'. [ 1017.687431][ T3821] netlink: 'syz.7.7927': attribute type 7 has an invalid length. [ 1017.745224][ T3821] netlink: 'syz.7.7927': attribute type 8 has an invalid length. [ 1017.806404][ T3821] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7927'. [ 1018.139795][ T3839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7930'. [ 1018.162947][ T9280] hsr_slave_0: left promiscuous mode [ 1018.169242][ T9280] hsr_slave_1: left promiscuous mode [ 1018.276996][ T9280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1018.284468][ T9280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1018.400835][ T9280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1018.482897][ T9280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1018.563588][ T3850] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 1018.570367][ T9280] veth1_vlan: left promiscuous mode [ 1018.575689][ T9280] veth0_vlan: left promiscuous mode [ 1018.589762][ T3851] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 1018.757069][ T3856] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7936'. [ 1019.601121][ T9280] team0 (unregistering): Port device team_slave_1 removed [ 1019.751639][ T9280] team0 (unregistering): Port device dummy0 removed [ 1019.819539][ T3872] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1020.224938][ T3888] netlink: 'syz.4.7942': attribute type 3 has an invalid length. [ 1020.526711][ T30] audit: type=1804 audit(1786924252.565:16): pid=3911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.7945" name="/newroot/478/cgroup.controllers" dev="tmpfs" ino=2442 res=1 errno=0 [ 1020.549153][ T30] audit: type=1800 audit(1786924252.565:17): pid=3911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7945" name="cgroup.controllers" dev="tmpfs" ino=2442 res=0 errno=0 [ 1021.092439][ T3930] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7947'. [ 1021.265536][ T3938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7952'. [ 1021.304428][ T3941] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7953'. [ 1021.870127][ T3956] netlink: 'syz.0.7957': attribute type 83 has an invalid length. [ 1021.985581][ T3962] bridge_slave_1: left allmulticast mode [ 1021.991298][ T3962] bridge_slave_1: left promiscuous mode [ 1021.997140][ T3962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.093684][ T9280] IPVS: stop unused estimator thread 0... [ 1022.489001][ T3980] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7962'. [ 1022.597152][ T3980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7962'. [ 1022.768543][ T3988] lo: Caught tx_queue_len zero misconfig [ 1022.832790][ T3988] netlink: 'syz.5.7962': attribute type 15 has an invalid length. [ 1023.063253][ T3995] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7965'. [ 1023.213146][ T4005] netlink: 'syz.4.7966': attribute type 4 has an invalid length. [ 1023.367842][ T4005] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1023.391015][ T4005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7966'. [ 1023.441354][ T4005] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7966'. [ 1023.845216][ T4025] veth0: left allmulticast mode [ 1023.850161][ T4025] veth0: left promiscuous mode [ 1023.855218][ T4025] bridge0: port 4(veth0) entered disabled state [ 1023.967909][ T4025] batman_adv: batadv0: Adding interface: veth0 [ 1023.974150][ T4025] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1024.255965][ T4025] batman_adv: batadv0: Interface activated: veth0 [ 1024.271188][ T4023] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 1024.313369][ T4027] bond8: option packets_per_slave: invalid value (18446744073709551615) [ 1024.409204][ T4027] bond8: option packets_per_slave: allowed values 0 - 65535 [ 1024.426920][ T4027] bond8 (unregistering): Released all slaves [ 1024.550610][ T4042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7975'. [ 1024.559585][ T4042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7975'. [ 1024.593957][ T4025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1024.601414][ T4025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1024.632011][ T4025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1024.639462][ T4025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1024.659649][ T4025] batman_adv: batadv0: Interface deactivated: veth0 [ 1024.666325][ T4025] batman_adv: batadv0: Removing interface: veth0 [ 1025.296875][ T4062] netlink: 'syz.6.7981': attribute type 1 has an invalid length. [ 1025.571389][ T4074] bond9: entered promiscuous mode [ 1025.576564][ T4074] bond9: entered allmulticast mode [ 1025.582180][ T4074] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1026.495379][ T4116] netlink: 'syz.6.7993': attribute type 1 has an invalid length. [ 1026.543039][ T4116] __nla_validate_parse: 2 callbacks suppressed [ 1026.543060][ T4116] netlink: 224 bytes leftover after parsing attributes in process `syz.6.7993'. [ 1026.745179][ T4120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7994'. [ 1026.754143][ T4120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7994'. [ 1026.986001][ T4128] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7995'. [ 1027.085454][ T4100] sctp: [Deprecated]: syz.5.7989 (pid 4100) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1027.085454][ T4100] Use struct sctp_sack_info instead [ 1027.556054][ T4149] netlink: 'syz.6.8000': attribute type 2 has an invalid length. [ 1027.563881][ T4149] netlink: 156 bytes leftover after parsing attributes in process `syz.6.8000'. [ 1027.604629][ T4151] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7999'. [ 1027.900075][ T4163] netlink: 168 bytes leftover after parsing attributes in process `syz.4.8004'. [ 1028.034642][ T4171] syzkaller1: entered promiscuous mode [ 1028.040215][ T4171] syzkaller1: entered allmulticast mode [ 1028.060119][ T4170] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8005'. [ 1028.178453][ T4176] x_tables: duplicate underflow at hook 3 [ 1028.228397][ T4164] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8002'. [ 1028.237428][ T4164] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1028.413480][ T4184] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8008'. [ 1028.836320][ T4193] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 1030.703303][ T4261] macvtap2: entered promiscuous mode [ 1030.708876][ T4261] macvtap2: entered allmulticast mode [ 1030.727689][ T4269] netlink: 'syz.6.8030': attribute type 83 has an invalid length. [ 1031.605081][ T4299] __nla_validate_parse: 8 callbacks suppressed [ 1031.605102][ T4299] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8039'. [ 1032.010013][ T4315] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8046'. [ 1032.063202][ T4315] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1032.323295][ T4325] syzkaller0: entered promiscuous mode [ 1032.339115][ T4325] syzkaller0: entered allmulticast mode [ 1032.908336][ T4342] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8055'. [ 1032.917294][ T4342] netlink: 'syz.7.8055': attribute type 10 has an invalid length. [ 1032.925145][ T4342] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8055'. [ 1032.987860][ T4343] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8055'. [ 1033.005054][ T4343] netlink: 'syz.7.8055': attribute type 10 has an invalid length. [ 1033.019508][ T4343] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8055'. [ 1033.076467][ T4343] geneve3: entered promiscuous mode [ 1033.081746][ T4343] geneve3: entered allmulticast mode [ 1033.370549][ T4353] netlink: 'syz.5.8059': attribute type 1 has an invalid length. [ 1033.378354][ T4353] netlink: 244 bytes leftover after parsing attributes in process `syz.5.8059'. [ 1033.454926][ T9275] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.519909][ T9275] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.557260][ T9275] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.623350][ T9275] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.779370][ T4358] macvlan0: entered promiscuous mode [ 1033.784757][ T4358] macvlan0: entered allmulticast mode [ 1033.790643][ T4358] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 1033.868071][ T4368] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8065'. [ 1034.149547][ T4376] ip_tables: iptables: counters copy to user failed while replacing table [ 1034.387061][ T4390] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8070'. [ 1034.445676][ T4395] netlink: 6 bytes leftover after parsing attributes in process `syz.4.8072'. [ 1034.603347][ T4406] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20002 [ 1034.767377][ T4416] netlink: 'syz.7.8076': attribute type 21 has an invalid length. [ 1035.241130][ T4425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1035.262238][ T4425] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1035.715049][ T4440] wg1 speed is unknown, defaulting to 1000 [ 1035.823558][ T4445] netlink: 'syz.7.8088': attribute type 1 has an invalid length. [ 1035.948147][ T4445] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1036.022494][ T4449] bond7: (slave gretap3): making interface the new active one [ 1036.031188][ T4449] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 1036.199018][ T4451] v: renamed from veth0_vlan (while UP) [ 1036.504060][ T4469] netlink: 'syz.5.8092': attribute type 1 has an invalid length. [ 1036.539041][ T4469] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1036.655063][ T4469] bond8: (slave geneve2): making interface the new active one [ 1036.706962][ T4473] netlink: 'syz.0.8096': attribute type 11 has an invalid length. [ 1036.714860][ T4473] netlink: 'syz.0.8096': attribute type 4 has an invalid length. [ 1036.722712][ T4473] __nla_validate_parse: 2 callbacks suppressed [ 1036.722731][ T4473] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8096'. [ 1036.747711][ T4469] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 1037.500511][ T4491] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8100'. [ 1037.544317][ T9903] block nbd3: Receive control failed (result -32) [ 1037.598328][ T4493] netlink: 164 bytes leftover after parsing attributes in process `syz.7.8099'. [ 1037.600461][ T4491] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8100'. [ 1037.609199][ T4493] netlink: 48 bytes leftover after parsing attributes in process `syz.7.8099'. [ 1037.629324][ T4491] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8100'. [ 1038.273398][ T4529] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1038.281227][ T4529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1039.463896][ T4553] tipc: Enabling of bearer rejected, failed to enable media [ 1039.780492][ T4566] netlink: 108 bytes leftover after parsing attributes in process `syz.5.8117'. [ 1039.792504][ T4568] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 1039.858936][ T4568] netlink: 72 bytes leftover after parsing attributes in process `syz.6.8118'. [ 1039.972150][ T9432] IPVS: starting estimator thread 0... [ 1039.982391][ T4566] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1040.024132][ T4572] netlink: 112 bytes leftover after parsing attributes in process `syz.0.8119'. [ 1040.044865][ T4574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8120'. [ 1040.294890][ T4571] IPVS: using max 28 ests per chain, 67200 per kthread [ 1040.358065][ T4584] x_tables: duplicate underflow at hook 2 [ 1040.571740][ T4594] netlink: 'syz.6.8126': attribute type 10 has an invalid length. [ 1040.810317][ T4594] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1041.037363][ T4613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1041.281230][ T4619] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1041.449386][ T4626] xt_hashlimit: size too large, truncated to 1048576 [ 1041.675301][ T4637] netlink: 'syz.5.8139': attribute type 1 has an invalid length. [ 1041.691878][ T4636] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20001 [ 1041.772897][ T4637] syzkaller0: entered promiscuous mode [ 1041.784606][ T4637] syzkaller0: entered allmulticast mode [ 1041.843219][ T4641] __nla_validate_parse: 1 callbacks suppressed [ 1041.843239][ T4641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8142'. [ 1042.477885][T29798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1042.498837][T29798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1042.507358][T29798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1042.516307][T29798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1042.524750][T29798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1042.630268][ T9903] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1042.705948][ T9903] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1042.714659][ T9903] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1042.728566][ T9903] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1042.739736][ T9903] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1043.233168][ T4682] bond5: Unable to set up delay as MII monitoring is disabled [ 1043.242620][ T4682] bond5 (unregistering): Released all slaves [ 1043.486796][T26741] syz_tun (unregistering): left allmulticast mode [ 1043.683516][ T4654] wg1 speed is unknown, defaulting to 1000 [ 1044.315846][ T4654] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.323130][ T4654] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.355993][ T4654] bridge_slave_0: entered allmulticast mode [ 1044.364496][ T4654] bridge_slave_0: entered promiscuous mode [ 1044.373649][ T4654] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.380833][ T4654] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.388370][ T4654] bridge_slave_1: entered allmulticast mode [ 1044.396418][ T4654] bridge_slave_1: entered promiscuous mode [ 1044.439482][ T4654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1044.469558][ T4654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1044.510111][ T4654] team0: Port device team_slave_0 added [ 1044.519737][ T4654] team0: Port device team_slave_1 added [ 1044.555981][ T4654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1044.590756][ T4654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1044.616815][ T4654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1044.630607][ T4654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1044.637696][ T4654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1044.663631][ T4654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1044.747653][ T4654] hsr_slave_0: entered promiscuous mode [ 1044.754579][ T4654] hsr_slave_1: entered promiscuous mode [ 1044.761014][ T4654] debugfs: 'hsr0' already exists in 'hsr' [ 1044.766780][ T4654] Cannot create hsr debugfs directory [ 1044.933041][ T9903] Bluetooth: hci0: command tx timeout [ 1045.206639][ T4654] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1045.217490][ T4654] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.235966][ T4654] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1045.438978][ T4654] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1045.449384][ T4654] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.461949][ T4654] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1045.662260][ T4654] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1045.672609][ T4654] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.683057][ T4654] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1046.021188][ T4654] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1046.032199][ T4654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1046.040488][ T4654] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1046.098737][ T4654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1046.107325][ T4654] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1046.120105][ T4654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1046.129692][ T4654] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1046.141007][ T4654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1046.295407][ T4654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1046.329863][ T4654] 8021q: adding VLAN 0 to HW filter on device team0 [ 1046.346254][T20841] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.353436][T20841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1046.373238][ T9279] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.380447][ T9279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1047.011713][ T4654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1047.105463][ T9903] Bluetooth: hci0: command tx timeout [ 1047.390878][ T4654] veth0_vlan: entered promiscuous mode [ 1047.444609][ T4654] veth1_vlan: entered promiscuous mode [ 1047.481730][ T4654] veth0_macvtap: entered promiscuous mode [ 1047.492816][ T4654] veth1_macvtap: entered promiscuous mode [ 1047.547739][ T4654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1047.565171][ T4654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1047.719966][T20841] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.727855][T20841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.818089][T20838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.825980][T20838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.866888][T27118] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.884635][T27118] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.893412][T27118] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.902146][T27118] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.216375][ T9903] Bluetooth: hci0: command tx timeout [ 1051.237240][ T9903] Bluetooth: hci0: command tx timeout [ 1054.436324][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.538586][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1095.405112][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1100.547350][ T4756] set match dimension is over the limit! [ 1100.761877][ T4769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8157'. [ 1100.897093][ T4773] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8162'. [ 1101.210786][ T4741] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1101.717280][ T4782] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1101.802386][ T4782] netlink: 116 bytes leftover after parsing attributes in process `syz.4.8168'. [ 1102.003568][ T4798] bridge0: port 1(vlan3) entered blocking state [ 1102.023308][ T4798] bridge0: port 1(vlan3) entered disabled state [ 1102.218246][ T4798] vlan3: entered allmulticast mode [ 1102.223439][ T4798] geneve0: entered allmulticast mode [ 1102.233418][ T4798] vlan3: entered promiscuous mode [ 1102.246193][ T4798] geneve0: entered promiscuous mode [ 1102.286862][ T4798] No such timeout policy "s" [ 1102.291520][ T4798] netlink: Failed to associated timeout policy 's' [ 1102.301681][ T4814] xt_hashlimit: size too large, truncated to 1048576 [ 1102.635550][ T4819] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8176'. [ 1102.706526][ T4819] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8176'. [ 1102.732563][ T4819] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8176'. [ 1102.830814][ T4832] veth1_to_bond: entered allmulticast mode [ 1102.977036][ T4836] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 1103.034897][ T4836] bond6 (unregistering): Released all slaves [ 1103.129457][ T4842] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20000 [ 1103.149866][ T4842] tipc: Enabled bearer , priority 10 [ 1103.165344][ T4841] tipc: Resetting bearer [ 1103.217263][ T4844] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8179'. [ 1103.259711][ T4841] tipc: Disabling bearer [ 1103.373380][ T4831] veth1_to_bond: left allmulticast mode [ 1103.627677][ T4859] netlink: 'syz.6.8184': attribute type 8 has an invalid length. [ 1103.635495][ T4859] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8184'. [ 1103.756279][ T4863] netlink: 224 bytes leftover after parsing attributes in process `syz.7.8186'. [ 1103.832774][ T4861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8185'. [ 1103.985516][ T4867] syzkaller0: entered promiscuous mode [ 1103.991073][ T4867] syzkaller0: entered allmulticast mode [ 1104.194823][ T4880] netlink: 'syz.6.8191': attribute type 29 has an invalid length. [ 1104.757099][ T4907] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1104.758326][ T4906] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1105.504510][ T4950] IPVS: set_ctl: invalid protocol: 60 10.1.1.2:20004 [ 1105.947810][ T4970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1106.230078][ T4985] __nla_validate_parse: 4 callbacks suppressed [ 1106.230098][ T4985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8212'. [ 1106.251472][ T4985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8212'. [ 1106.760507][ T5000] bond0: Caught tx_queue_len zero misconfig [ 1107.448754][ T5031] netlink: 'syz.4.8225': attribute type 30 has an invalid length. [ 1107.460710][ T5026] IPVS: length: 239 != 348839659992 [ 1107.812474][ T5038] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8227'. [ 1107.922304][ T5022] scsi_nl_rcv_msg: discarding partial skb [ 1108.520189][ T5062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8235'. [ 1108.613432][ T5064] netlink: Conntrack attr has 12 unknown bytes [ 1108.619779][ T5064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1108.636884][ T5062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8235'. [ 1108.968931][ T5080] ipvlan2: entered allmulticast mode [ 1108.974296][ T5080] batadv_slave_1: entered allmulticast mode [ 1108.982625][ T5080] batman_adv: batadv0: Adding interface: ipvlan2 [ 1109.052286][ T9434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.087090][ T5080] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1109.202413][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.215478][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.225398][ T5080] batman_adv: batadv0: Interface activated: ipvlan2 [ 1109.320615][ T5085] geneve4: entered promiscuous mode [ 1109.326042][ T5085] geneve4: entered allmulticast mode [ 1109.344033][ T5089] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1109.497176][T27116] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1109.520980][ T9279] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1109.530954][ T9279] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1109.545024][ T5089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8244'. [ 1109.554587][ T9279] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1109.652546][ T5089] netlink: 388 bytes leftover after parsing attributes in process `syz.4.8244'. [ 1109.933276][ T3107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.993180][ T5091] netlink: 76 bytes leftover after parsing attributes in process `syz.6.8245'. [ 1110.045205][ T9434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.126368][ T5104] netlink: 'syz.4.8249': attribute type 3 has an invalid length. [ 1111.116824][ T9407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.146051][ T5145] xt_TCPMSS: Only works on TCP SYN packets [ 1111.312741][ T5153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8259'. [ 1111.400873][ T3107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.446658][ T5152] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8261'. [ 1111.588339][ T5148] bond8: Removing last ns target with arp_interval on [ 1111.665055][ T5152] bridge0: port 1(batadv2) entered blocking state [ 1111.673929][ T5152] bridge0: port 1(batadv2) entered disabled state [ 1111.680594][ T5152] batadv2: entered allmulticast mode [ 1111.709968][ T5152] batadv2: entered promiscuous mode [ 1112.102214][ T9279] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 1112.111493][ T9279] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 1112.185502][ T9407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.369392][ T30] audit: type=1800 audit(1786924344.435:18): pid=5182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.8266" name=680B20 dev="tmpfs" ino=1582 res=0 errno=0 [ 1112.581710][ T5188] xt_hashlimit: size too large, truncated to 1048576 [ 1112.902722][ T5195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1112.935710][ T5195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1112.983501][ T5195] bond0 (unregistering): Released all slaves [ 1113.249497][ T9407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.373462][T20838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.381964][T20838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.451247][ T5214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8277'. [ 1113.821281][ T30] audit: type=1800 audit(1786924345.895:19): pid=5233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.8282" name="memory.events" dev="tmpfs" ino=1598 res=0 errno=0 [ 1113.985498][ T3107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.994380][ T3107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.258350][ T9407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.392044][ T5257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8289'. [ 1114.438830][ T3107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.716312][ T5266] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1115.025028][ T5286] sctp: [Deprecated]: syz.5.8296 (pid 5286) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1115.025028][ T5286] Use struct sctp_sack_info instead [ 1115.058909][ T5288] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 1115.326274][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.360505][ T5295] netlink: 'syz.4.8300': attribute type 4 has an invalid length. [ 1115.374000][ T5293] netlink: 72 bytes leftover after parsing attributes in process `syz.6.8298'. [ 1115.384520][ T5300] netlink: 'syz.0.8299': attribute type 1 has an invalid length. [ 1115.617256][ T5307] netlink: 'syz.6.8303': attribute type 1 has an invalid length. [ 1115.625056][ T5307] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.8303'. [ 1115.634373][ T5307] netlink: 'syz.6.8303': attribute type 1 has an invalid length. [ 1115.642119][ T5307] netlink: 2016 bytes leftover after parsing attributes in process `syz.6.8303'. [ 1115.677755][ T5309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1115.891717][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.949802][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.365382][ T5322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8305'. [ 1116.440311][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.542894][ T5338] netlink: 88 bytes leftover after parsing attributes in process `syz.6.8309'. [ 1116.626553][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.637121][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.379652][ T5361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8313'. [ 1117.632354][ T5361] bond6: Invalid ad_actor_system MAC address. [ 1117.638504][ T5361] bond6: option ad_actor_system: invalid value (1) [ 1117.647319][ T5359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8312'. [ 1117.661782][ T5369] x_tables: duplicate underflow at hook 1 [ 1117.667677][ T5359] netlink: 'syz.4.8312': attribute type 10 has an invalid length. [ 1117.675523][ T5359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8312'. [ 1117.687050][ T5361] bond6 (unregistering): Released all slaves [ 1117.866270][ T5359] geneve2: entered promiscuous mode [ 1117.871546][ T5359] geneve2: entered allmulticast mode [ 1118.916596][ T5407] netlink: 'syz.0.8326': attribute type 1 has an invalid length. [ 1118.970486][ T5407] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1118.992628][ T5407] bond6: (slave ip6erspan1): making interface the new active one [ 1119.001860][ T5407] bond6: (slave ip6erspan1): Enslaving as an active interface with an up link [ 1119.089812][ T5412] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8327'. [ 1119.227713][ T5414] IPv6: NLM_F_CREATE should be specified when creating new route [ 1119.336552][ T5414] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8327'. [ 1119.518535][ T5432] hsr_slave_0: left promiscuous mode [ 1119.594750][ T5432] hsr_slave_1: left promiscuous mode [ 1119.757819][ T9407] net_ratelimit: 8 callbacks suppressed [ 1119.757838][ T9407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.815126][ T1003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.824100][ T1003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.868615][ T5448] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8330'. [ 1120.162229][ T5459] netlink: 'syz.0.8336': attribute type 12 has an invalid length. [ 1120.170107][ T5459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8336'. [ 1120.268888][ T5459] netlink: 'syz.0.8336': attribute type 12 has an invalid length. [ 1120.355581][ T5459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8336'. [ 1120.476901][ T5464] netlink: 'syz.5.8337': attribute type 1 has an invalid length. [ 1120.532739][ T3106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.612422][ T5464] bond9: entered promiscuous mode [ 1120.664578][ T5464] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1120.676061][ T5472] ip_tables: iptables: counters copy to user failed while replacing table [ 1120.693198][ T5465] vlan3: entered allmulticast mode [ 1120.699326][ T5465] bond9: entered allmulticast mode [ 1120.765050][ T9407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.773285][ T9407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.774333][ T5464] netlink: 'syz.5.8337': attribute type 1 has an invalid length. [ 1120.800025][ T5465] bond9: (slave bridge12): making interface the new active one [ 1120.810546][ T5465] bridge12: entered promiscuous mode [ 1120.817230][ T5465] bridge12: entered allmulticast mode [ 1120.829901][ T5465] bond9: (slave bridge12): Enslaving as an active interface with an up link [ 1120.896294][ T5464] netlink: 'syz.5.8337': attribute type 1 has an invalid length. [ 1120.904370][ T5464] netlink: 'syz.5.8337': attribute type 1 has an invalid length. [ 1120.912372][ T5464] netlink: 'syz.5.8337': attribute type 1 has an invalid length. [ 1120.920678][ T5464] netlink: 'syz.5.8337': attribute type 1 has an invalid length. [ 1121.039068][ T5464] netlink: 'syz.5.8337': attribute type 1 has an invalid length. [ 1121.066058][ T5464] netlink: 'syz.5.8337': attribute type 1 has an invalid length. [ 1121.112203][ T5490] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.113221][ T5464] netlink: 'syz.5.8337': attribute type 1 has an invalid length. [ 1121.162043][ T5464] netlink: 'syz.5.8337': attribute type 1 has an invalid length. [ 1121.665827][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.826133][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.196321][ T5517] __nla_validate_parse: 2 callbacks suppressed [ 1122.196343][ T5517] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8354'. [ 1122.316967][ T5524] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20000 [ 1122.611526][ T5531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8360'. [ 1122.634478][ T5531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8360'. [ 1122.865556][ T5531] xt_CT: No such helper "snmp" [ 1122.882484][ T5541] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8362'. [ 1122.916744][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.267125][ T5545] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8364'. [ 1123.297416][ T5562] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8364'. [ 1124.071215][ T5593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8373'. [ 1124.105162][ T5588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8375'. [ 1124.159369][ T5588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1124.217167][ T5602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8376'. [ 1124.275655][ T5602] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8376'. [ 1124.292391][ T5588] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1124.325873][ T5588] batman_adv: batadv0: Removing interface: ipvlan2 [ 1124.430887][ T5588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1124.908236][ T5622] bond10: option arp_missed_max: invalid value (0) [ 1124.914817][ T5622] bond10: option arp_missed_max: allowed values 1 - 255 [ 1124.923527][ T5622] bond10 (unregistering): Released all slaves [ 1125.038260][ T5625] net_ratelimit: 6 callbacks suppressed [ 1125.038287][ T5625] openvswitch: netlink: Tunnel attr 0 has unexpected len 108 expected 8 [ 1125.076135][ T9407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.360388][ T5633] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1125.494176][ T5639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1126.670852][ T5684] validate_nla: 12 callbacks suppressed [ 1126.670871][ T5684] netlink: 'syz.0.8396': attribute type 1 has an invalid length. [ 1126.755730][ T5684] netlink: 'syz.0.8396': attribute type 1 has an invalid length. [ 1126.775242][ T5684] netlink: 'syz.0.8396': attribute type 1 has an invalid length. [ 1126.807010][ T5684] netlink: 'syz.0.8396': attribute type 1 has an invalid length. [ 1126.850228][ T5684] netlink: 'syz.0.8396': attribute type 1 has an invalid length. [ 1126.882522][ T5684] netlink: 'syz.0.8396': attribute type 1 has an invalid length. [ 1126.914331][ T5684] netlink: 'syz.0.8396': attribute type 1 has an invalid length. [ 1126.959059][ T5684] netlink: 'syz.0.8396': attribute type 1 has an invalid length. [ 1126.981271][ T5684] netlink: 'syz.0.8396': attribute type 1 has an invalid length. [ 1127.002165][ T5684] netlink: 'syz.0.8396': attribute type 1 has an invalid length. [ 1127.576483][ T5709] __nla_validate_parse: 6 callbacks suppressed [ 1127.576506][ T5709] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8407'. [ 1127.603412][ T5709] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8407'. [ 1128.467771][ T5739] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8414'. [ 1128.548165][ T5742] --map-set only usable from mangle table [ 1128.837804][ T5743] --map-set only usable from mangle table [ 1129.128104][ T5750] bond5 (unregistering): Released all slaves [ 1129.516208][T29798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1129.562132][T29798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1129.585263][ T5770] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1129.617439][ T5770] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1129.626582][ T5770] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1130.418449][ T5796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8426'. [ 1130.773939][ T5804] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.8428'. [ 1130.881220][ T5763] wg1 speed is unknown, defaulting to 1000 [ 1130.989326][ T5802] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.8428'. [ 1131.222342][ T5817] netlink: 'syz.0.8432': attribute type 11 has an invalid length. [ 1131.242964][ T5817] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8432'. [ 1131.640859][ T5823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8433'. [ 1131.865606][ T5824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1132.040650][ T9903] Bluetooth: hci3: command tx timeout [ 1132.287759][ T5831] netlink: zone id is out of range [ 1132.292980][ T5831] netlink: zone id is out of range [ 1132.664442][ T5829] team0: Port device syz_tun added [ 1133.582181][ T5848] ip_tables: iptables: counters copy to user failed while replacing table [ 1133.819371][ T5850] Bluetooth: MGMT ver 1.23 [ 1133.853145][ T5845] kthread_run failed with err -4 [ 1134.127197][ T9903] Bluetooth: hci3: command tx timeout [ 1134.390889][ T5866] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8446'. [ 1134.412542][ T5866] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8446'. [ 1135.167724][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.174922][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.182232][ T5763] bridge_slave_0: entered allmulticast mode [ 1135.270468][ T5883] xt_hashlimit: size too large, truncated to 1048576 [ 1135.310476][ T5763] bridge_slave_0: entered promiscuous mode [ 1135.334796][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.342117][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.541448][ T5763] bridge_slave_1: entered allmulticast mode [ 1135.649989][ T5763] bridge_slave_1: entered promiscuous mode [ 1135.946077][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1135.958544][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1135.998043][ T5763] team0: Port device team_slave_0 added [ 1136.007046][ T5763] team0: Port device team_slave_1 added [ 1136.306135][ T9903] Bluetooth: hci3: command tx timeout [ 1136.533811][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1136.541659][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.791456][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1136.805147][ T5909] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8458'. [ 1136.858910][ T5910] erspan0: entered promiscuous mode [ 1136.871892][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1136.878883][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.904783][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1137.022386][ T5914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8459'. [ 1137.662191][ T5763] hsr_slave_0: entered promiscuous mode [ 1137.668926][ T5763] hsr_slave_1: entered promiscuous mode [ 1137.675349][ T5763] debugfs: 'hsr0' already exists in 'hsr' [ 1137.681106][ T5763] Cannot create hsr debugfs directory [ 1137.883380][ T5926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1137.945327][ T5932] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8465'. [ 1138.022883][ T5922] bridge0: port 2(veth0) entered blocking state [ 1138.029304][ T5922] bridge0: port 2(veth0) entered disabled state [ 1138.035777][ T5922] veth0: entered allmulticast mode [ 1138.047107][ T5922] veth0: entered promiscuous mode [ 1138.501670][ T9903] Bluetooth: hci3: command tx timeout [ 1138.515053][ T5939] dvmrp0: entered allmulticast mode [ 1139.188982][ T5957] validate_nla: 26 callbacks suppressed [ 1139.189002][ T5957] netlink: 'syz.5.8470': attribute type 49 has an invalid length. [ 1139.261132][ T5955] tipc: Started in network mode [ 1139.266085][ T5955] tipc: Node identity ac14142f, cluster identity 4711 [ 1139.273139][ T5955] tipc: New replicast peer: 172.20.20.170 [ 1139.279515][ T5955] tipc: Enabled bearer , priority 10 [ 1139.417356][ T5958] tipc: New replicast peer: 0.0.0.0 [ 1139.645711][ T5763] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1139.754061][ T5763] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1139.853267][ T5763] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1139.989932][ T5763] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1140.133905][ T5966] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1140.311395][ T5763] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1140.333782][ T5982] ip6t_rpfilter: unknown options [ 1140.410918][ T5763] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1140.418813][ T3110] tipc: Node number set to 2886997039 [ 1140.449327][ T5982] netlink: 164 bytes leftover after parsing attributes in process `syz.5.8475'. [ 1140.556255][ T5982] netlink: 164 bytes leftover after parsing attributes in process `syz.5.8475'. [ 1140.584284][ T5982] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8475'. [ 1140.610973][ T5986] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8475'. [ 1140.620021][ T5763] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1140.693753][ T5763] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1141.401215][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8480'. [ 1141.643760][ T6018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8481'. [ 1141.698094][ T6018] netlink: 'syz.0.8481': attribute type 1 has an invalid length. [ 1141.889205][ T6018] bond7: entered promiscuous mode [ 1142.000697][ T9903] Bluetooth: hci0: command 0x0401 tx timeout [ 1142.014006][ T6018] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1142.031364][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1142.120677][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 1142.127996][ T6014] team0: Caught tx_queue_len zero misconfig [ 1142.149615][ T6022] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1142.156824][ T6022] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1142.194941][ T6029] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8483'. [ 1142.273847][ T6022] bond7: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1142.333638][ T6020] netlink: 576 bytes leftover after parsing attributes in process `syz.0.8481'. [ 1142.348471][ T6022] bond7: (slave ip6gre1): making interface the new active one [ 1142.356108][ T6022] ip6gre1: entered promiscuous mode [ 1142.363398][ T6022] bond7: (slave ip6gre1): Enslaving as an active interface with an up link [ 1142.372196][ T6023] netlink: 'syz.6.8483': attribute type 2 has an invalid length. [ 1142.658117][ T9272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.665322][ T9272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1142.674583][ T9272] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.681729][ T9272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1142.916598][ T5763] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1143.011994][ T5763] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1144.290849][ T6060] netlink: 284 bytes leftover after parsing attributes in process `syz.5.8492'. [ 1144.300029][ T6060] ip6tnl0: Caught tx_queue_len zero misconfig [ 1144.721818][ T6078] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8497'. [ 1145.419979][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1145.771405][ T6096] netlink: 140 bytes leftover after parsing attributes in process `syz.6.8500'. [ 1146.442448][ T6111] xt_bpf: check failed: parse error [ 1147.857919][ T5763] veth0_vlan: entered promiscuous mode [ 1147.914418][ T5763] veth1_vlan: entered promiscuous mode [ 1148.094549][ T6153] bridge0: port 3(batadv1) entered blocking state [ 1148.101234][ T6153] bridge0: port 3(batadv1) entered disabled state [ 1148.107886][ T6153] batadv1: entered allmulticast mode [ 1148.233388][ T6153] batadv1: entered promiscuous mode [ 1148.582398][ T5763] veth0_macvtap: entered promiscuous mode [ 1148.640770][ T9272] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1148.650051][ T9272] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1148.775038][ T5763] veth1_macvtap: entered promiscuous mode [ 1148.795839][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1148.807417][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1148.871690][ T1003] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.910426][T20838] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.919993][T20838] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.929002][T20838] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.134664][ T6167] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1149.390165][ T6171] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8521'. [ 1150.059680][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8524'. [ 1150.382597][ T6185] ip6gretap0: entered allmulticast mode [ 1150.417834][ T9267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1150.635817][ T9267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1150.676178][ T6199] ip6t_srh: unknown srh match flags 5F28 [ 1150.843468][ T9267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1150.851588][ T9267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.203092][ T6204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.321358][ T6204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.529711][ T6211] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2) [ 1151.551060][ T6211] bond5 (unregistering): Released all slaves [ 1153.019311][ T6232] netlink: 256 bytes leftover after parsing attributes in process `syz.8.8537'. [ 1153.138414][ T5770] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1153.215954][ T6232] netlink: 256 bytes leftover after parsing attributes in process `syz.8.8537'. [ 1153.218230][ T5770] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1153.246760][ T5770] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1153.287562][ T6242] mac80211_hwsim hwsim90 wlan0: entered promiscuous mode [ 1153.307266][ T5770] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1153.315417][ T5770] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1153.364504][ T6242] batman_adv: batadv0: Adding interface: wlan0 [ 1153.370746][ T6242] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1153.398404][ T6241] netlink: 'syz.0.8540': attribute type 1 has an invalid length. [ 1153.426983][ T6245] xt_ecn: cannot match TCP bits for non-tcp packets [ 1153.539631][ T6242] batman_adv: batadv0: Interface activated: wlan0 [ 1153.542297][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8541'. [ 1153.570400][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8540'. [ 1153.814820][ T6247] bridge5: entered promiscuous mode [ 1153.826111][ T6247] bond8: (slave bridge5): making interface the new active one [ 1153.834534][ T6247] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 1154.481361][ T6262] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1154.734777][ T6262] bond9: entered allmulticast mode [ 1154.801916][ T6262] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1154.810978][ T6268] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.8545'. [ 1155.394875][ T9903] Bluetooth: hci7: command tx timeout [ 1155.735925][ T6233] wg1 speed is unknown, defaulting to 1000 [ 1155.859686][ T6285] x_tables: duplicate underflow at hook 1 [ 1156.876395][ T6318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8554'. [ 1156.891685][ T6317] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8554'. [ 1157.153752][ T6322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1157.474725][ T9903] Bluetooth: hci7: command tx timeout [ 1157.775348][ T6330] netlink: 'syz.8.8559': attribute type 1 has an invalid length. [ 1158.013744][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8561'. [ 1158.052930][ T6336] netlink: 176 bytes leftover after parsing attributes in process `syz.6.8561'. [ 1158.100077][ T6336] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8561'. [ 1158.249473][ T6342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8563'. [ 1159.052636][ T6353] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8566'. [ 1159.584845][ T9903] Bluetooth: hci7: command tx timeout [ 1159.893039][ T6368] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8571'. [ 1160.226001][ T6233] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.233220][ T6233] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.240540][ T6233] bridge_slave_0: entered allmulticast mode [ 1160.248176][ T6233] bridge_slave_0: entered promiscuous mode [ 1160.469542][ T6233] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.483540][ T6233] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.490909][ T6233] bridge_slave_1: entered allmulticast mode [ 1160.607158][ T6233] bridge_slave_1: entered promiscuous mode [ 1161.014622][ T6391] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8576'. [ 1161.062070][ T6233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1161.075236][ T6233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1161.184708][ T6392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8576'. [ 1161.497182][ T6233] team0: Port device team_slave_0 added [ 1161.505979][ T6233] team0: Port device team_slave_1 added [ 1161.541578][ T6233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1161.614724][ T9903] Bluetooth: hci7: command tx timeout [ 1161.769016][ T6233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.864657][ T6233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1161.898184][ T6396] netlink: 'syz.4.8578': attribute type 2 has an invalid length. [ 1162.422118][ T6233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1162.429155][ T6233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1162.455449][ T6233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.473986][ T6410] netlink: 'syz.4.8582': attribute type 1 has an invalid length. [ 1162.799553][ T6420] sctp: [Deprecated]: syz.8.8584 (pid 6420) Use of int in max_burst socket option. [ 1162.799553][ T6420] Use struct sctp_assoc_value instead [ 1162.897332][ T6410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1163.109612][ T6233] hsr_slave_0: entered promiscuous mode [ 1163.119450][ T6233] hsr_slave_1: entered promiscuous mode [ 1163.125938][ T6233] debugfs: 'hsr0' already exists in 'hsr' [ 1163.131716][ T6233] Cannot create hsr debugfs directory [ 1163.212606][ T6426] ieee802154 phy1 wpan1: encryption failed: -22 [ 1163.258913][ T6428] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8587'. [ 1163.329534][ T6424] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1163.353163][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8587'. [ 1163.915855][ T6233] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.965126][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8589'. [ 1164.231934][ T6440] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 1164.280681][ T6440] ip6erspan0: entered allmulticast mode [ 1164.610555][ T6233] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.847145][ T6456] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8594'. [ 1165.142847][ T6233] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.178096][ T6459] x_tables: duplicate underflow at hook 2 [ 1165.418470][ T6233] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.611671][ T6470] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8598'. [ 1165.647073][ T6470] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8598'. [ 1166.607177][ T6478] veth5: entered promiscuous mode [ 1166.612300][ T6478] veth5: entered allmulticast mode [ 1167.104255][ T6233] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1167.291856][ T6233] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1167.428714][ T6233] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1167.610704][ T6233] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1167.618810][ T6233] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1167.649600][ T6233] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1167.658138][ T6233] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1167.671343][ T6233] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1167.798201][ T6510] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 1167.851712][ T6510] batman_adv: batadv0: Adding interface: wlan0 [ 1167.858111][ T6510] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1167.883261][ T6510] batman_adv: batadv0: Interface activated: wlan0 [ 1168.172187][ T6233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1168.191858][ T6233] 8021q: adding VLAN 0 to HW filter on device team0 [ 1168.226395][ T6516] netlink: 104 bytes leftover after parsing attributes in process `syz.8.8607'. [ 1168.312034][ T9280] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.319247][ T9280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1168.329027][ T9280] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.336209][ T9280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1168.548600][ T6233] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1168.559011][ T6233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1169.480250][ T6535] mac80211_hwsim hwsim68 syzkaller0: entered promiscuous mode [ 1169.487798][ T6535] mac80211_hwsim hwsim68 syzkaller0: entered allmulticast mode [ 1169.556453][ T6539] openvswitch: netlink: Flow key attr not present in new flow. [ 1169.919778][ T6544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8615'. [ 1170.423088][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8618'. [ 1170.679951][ T6560] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8618'. [ 1171.248499][ T6233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1171.284600][ T6574] syzkaller0: entered allmulticast mode [ 1171.799766][ T6587] netlink: zone id is out of range [ 1171.804963][ T6587] netlink: zone id is out of range [ 1171.810398][ T6587] netlink: del zone limit has 4 unknown bytes [ 1172.230081][ T6598] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8626'. [ 1172.607259][ T6599] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1172.737818][ T6599] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1173.199914][ T6233] veth0_vlan: entered promiscuous mode [ 1173.213940][ T6233] veth1_vlan: entered promiscuous mode [ 1173.657772][ T6233] veth0_macvtap: entered promiscuous mode [ 1173.668344][ T6233] veth1_macvtap: entered promiscuous mode [ 1173.894406][ T6621] batman_adv: batadv0: Interface deactivated: wlan0 [ 1174.050977][ T6632] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8634'. [ 1174.106969][ T6233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1174.235945][ T6233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1174.323993][ T9272] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.333015][ T9272] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.319858][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.392395][ T9279] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.635216][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8639'. [ 1175.648378][ T6649] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1175.657031][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.664898][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1175.675438][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8638'. [ 1175.789035][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8641'. [ 1176.026355][ T9275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1176.034262][ T9275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1177.033197][ T6677] netlink: 136 bytes leftover after parsing attributes in process `syz.5.8534'. [ 1177.319457][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.387366][ T6684] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1177.586784][ T9275] bond0: (slave netdevsim1): link status definitely down, disabling slave [ 1179.660385][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8664'. [ 1179.734879][ T6745] netlink: 'syz.8.8664': attribute type 8 has an invalid length. [ 1180.175795][ T6755] netlink: 'syz.4.8669': attribute type 23 has an invalid length. [ 1180.200063][ T6758] netlink: 'syz.5.8667': attribute type 1 has an invalid length. [ 1180.294851][ T6757] team0: Device gtp0 is of different type [ 1180.391877][ T6761] tls_set_device_offload: netdev not found [ 1180.539500][ T6760] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8670'. [ 1180.646224][ T6758] team0: Port device geneve2 added [ 1180.651969][ T6766] macvlan0: entered promiscuous mode [ 1181.126708][ T6773] netlink: 'syz.6.8673': attribute type 12 has an invalid length. [ 1181.229382][ T6776] netlink: 'syz.8.8675': attribute type 2 has an invalid length. [ 1181.237185][ T6776] netlink: 'syz.8.8675': attribute type 1 has an invalid length. [ 1181.316309][ T6776] pimreg: entered allmulticast mode [ 1181.411414][ T6782] xt_bpf: check failed: parse error [ 1181.585493][ T6783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1182.096324][ T6797] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8676'. [ 1182.645013][ T6783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1182.714209][ T6790] ip_vti0: entered promiscuous mode [ 1182.753400][ T6809] netlink: 'syz.8.8682': attribute type 4 has an invalid length. [ 1182.790300][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8676'. [ 1182.881873][ T6811] netlink: 'syz.8.8682': attribute type 4 has an invalid length. [ 1182.939302][ T6806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8676'. [ 1183.223182][ T6814] sctp: [Deprecated]: syz.5.8685 (pid 6814) Use of int in max_burst socket option. [ 1183.223182][ T6814] Use struct sctp_assoc_value instead [ 1183.694732][ T30] audit: type=1800 audit(1786924415.725:20): pid=6825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8687" name=0A dev="tmpfs" ino=2753 res=0 errno=0 [ 1183.905797][ T6832] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8689'. [ 1184.161036][ T6836] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8690'. [ 1184.170060][ T6836] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8690'. [ 1184.462152][ T6832] netlink: 'syz.8.8689': attribute type 5 has an invalid length. [ 1184.641755][ T6843] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.8691'. [ 1185.134083][ T6849] netlink: 'syz.4.8693': attribute type 2 has an invalid length. [ 1185.141919][ T6849] netlink: 'syz.4.8693': attribute type 8 has an invalid length. [ 1185.149670][ T6849] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8693'. [ 1185.346596][ T6859] netlink: 'syz.4.8693': attribute type 2 has an invalid length. [ 1185.354395][ T6859] netlink: 'syz.4.8693': attribute type 8 has an invalid length. [ 1185.362156][ T6859] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8693'. [ 1185.527458][ T6872] netlink: 72 bytes leftover after parsing attributes in process `syz.5.8699'. [ 1185.987081][ T6882] xt_TCPMSS: Only works on TCP SYN packets [ 1187.123499][ T6914] __nla_validate_parse: 4 callbacks suppressed [ 1187.123520][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8713'. [ 1187.932851][ T6930] IPVS: length: 239 != 24 [ 1188.148820][ T6935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8717'. [ 1188.247817][ T6936] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8720'. [ 1188.466080][ T6938] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8722'. [ 1188.732496][ T6942] netlink: 'syz.5.8723': attribute type 1 has an invalid length. [ 1189.008118][ T6950] sctp: [Deprecated]: syz.8.8726 (pid 6950) Use of int in maxseg socket option. [ 1189.008118][ T6950] Use struct sctp_assoc_value instead [ 1189.713125][ T6961] bridge0: port 4(gretap0) entered blocking state [ 1189.719791][ T6961] bridge0: port 4(gretap0) entered disabled state [ 1189.726548][ T6961] gretap0: entered allmulticast mode [ 1189.743649][ T6961] gretap0: entered promiscuous mode [ 1189.750944][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8730'. [ 1190.425709][ T6993] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1190.627655][ T6996] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1190.758855][ T6998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1191.521147][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8746'. [ 1191.903094][ T7026] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8750'. [ 1192.101088][ T7027] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8750'. [ 1192.135425][ T7031] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 1192.554320][ T7042] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1193.819158][ T7070] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1193.821567][ T7071] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1193.838178][ T7074] ip6gre1: entered promiscuous mode [ 1194.171611][ T7074] ip6gre1: entered allmulticast mode [ 1194.350789][ T7085] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 1194.360019][ T7085] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 1194.557642][ T7084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1194.931843][ T7097] Cannot find add_set index 0 as target [ 1194.976517][ T7097] netlink: 'syz.4.8772': attribute type 3 has an invalid length. [ 1194.997612][ T7097] netlink: 3 bytes leftover after parsing attributes in process `syz.4.8772'. [ 1195.430967][ T7107] block nbd0: NBD_DISCONNECT [ 1195.624285][ T7107] block nbd0: Send disconnect failed -32 [ 1195.630465][ T7107] block nbd0: shutting down sockets [ 1196.511647][ T7167] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 1196.518933][ C0] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 1196.548983][ T3117] IPVS: starting estimator thread 0... [ 1196.590392][ T7162] erspan0: entered allmulticast mode [ 1196.806722][ T7168] IPVS: using max 27 ests per chain, 64800 per kthread [ 1197.350867][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8789'. [ 1197.416499][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8789'. [ 1197.425811][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8789'. [ 1197.435040][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8789'. [ 1197.444267][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8789'. [ 1197.453638][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8789'. [ 1197.462797][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8789'. [ 1197.472076][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8789'. [ 1197.535274][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8789'. [ 1197.544484][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8789'. [ 1198.414484][ T7107] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1198.778632][ T7189] netlink: 'syz.8.8793': attribute type 23 has an invalid length. [ 1198.857083][ T7191] syzkaller1: entered promiscuous mode [ 1198.862622][ T7191] syzkaller1: entered allmulticast mode [ 1198.986373][ T7191] TC_ACT_REPEAT abuse ? [ 1200.126341][ T7213] netlink: 'syz.0.8801': attribute type 3 has an invalid length. [ 1200.750512][ T7239] veth0: entered promiscuous mode [ 1200.756043][ T7239] batadv_slave_1: entered promiscuous mode [ 1200.836972][ T7237] batadv_slave_1: left promiscuous mode [ 1200.854782][ T7237] veth0: left promiscuous mode [ 1201.206902][ T7260] netlink: 'syz.6.8817': attribute type 25 has an invalid length. [ 1201.693623][ T7270] IPVS: persistence engine module ip_vs_pe_À not found [ 1201.963470][ T7284] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1202.341314][ T7292] netlink: 'syz.6.8827': attribute type 1 has an invalid length. [ 1203.457876][ T7313] nbd6: detected capacity change from 0 to 63 [ 1203.576441][ T7313] block nbd6: NBD_DISCONNECT [ 1203.610323][ T7313] block nbd6: Disconnected due to user request. [ 1203.616655][ T7313] block nbd6: shutting down sockets [ 1203.631334][ C0] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1203.641177][ C0] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1203.648974][ C0] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1203.658518][ C0] Buffer I/O error on dev nbd6, logical block 1, async page read [ 1203.666284][ C0] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1203.675830][ C0] Buffer I/O error on dev nbd6, logical block 2, async page read [ 1203.683596][ C0] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1203.693166][ C0] Buffer I/O error on dev nbd6, logical block 3, async page read [ 1203.707412][ T1481] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1203.721384][ T1481] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1203.732112][ T1481] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1203.742184][ T1481] Buffer I/O error on dev nbd6, logical block 1, async page read [ 1203.751052][ T1481] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1203.760841][ T1481] Buffer I/O error on dev nbd6, logical block 2, async page read [ 1203.771200][ T1481] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1203.785076][ T1481] Buffer I/O error on dev nbd6, logical block 3, async page read [ 1203.793994][ T1481] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1203.804502][ T1481] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1203.812464][ T1481] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1203.822837][ T1481] Buffer I/O error on dev nbd6, logical block 1, async page read [ 1203.836490][ T5974] ldm_validate_partition_table(): Disk read failed. [ 1204.019441][ T5974] Dev nbd6: unable to read RDB block 0 [ 1204.038012][ T5974] nbd6: unable to read partition table [ 1204.101209][ T5974] ldm_validate_partition_table(): Disk read failed. [ 1204.148139][ T5974] Dev nbd6: unable to read RDB block 0 [ 1204.193399][ T5974] nbd6: unable to read partition table [ 1204.216010][ T5974] [ 1204.218418][ T5974] ====================================================== [ 1204.225492][ T5974] WARNING: possible circular locking dependency detected [ 1204.232640][ T5974] syzkaller #0 Not tainted [ 1204.237085][ T5974] ------------------------------------------------------ [ 1204.244275][ T5974] udevd/5974 is trying to acquire lock: [ 1204.249848][ T5974] ffffffff8ec848e0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x6a/0x610 [ 1204.259843][ T5974] [ 1204.259843][ T5974] but task is already holding lock: [ 1204.267249][ T5974] ffffffff903d6680 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 1204.277944][ T5974] [ 1204.277944][ T5974] which lock already depends on the new lock. [ 1204.277944][ T5974] [ 1204.288363][ T5974] [ 1204.288363][ T5974] the existing dependency chain (in reverse order) is: [ 1204.297402][ T5974] [ 1204.297402][ T5974] -> #8 (uevent_sock_mutex){+.+.}-{4:4}: [ 1204.305390][ T5974] __mutex_lock+0x19d/0x1550 [ 1204.310551][ T5974] kobject_uevent_net_broadcast+0x27e/0x560 [ 1204.317005][ T5974] kobject_uevent_env+0x566/0x9e0 [ 1204.322584][ T5974] device_add+0x544/0xb80 [ 1204.327588][ T5974] device_create+0x269/0x300 [ 1204.332725][ T5974] msr_device_create+0x33/0x50 [ 1204.338070][ T5974] cpuhp_invoke_callback+0x434/0x810 [ 1204.343938][ T5974] cpuhp_thread_fun+0x362/0x780 [ 1204.349346][ T5974] smpboot_thread_fn+0x57c/0xa80 [ 1204.354833][ T5974] kthread+0x388/0x470 [ 1204.359465][ T5974] ret_from_fork+0x514/0xb70 [ 1204.364642][ T5974] ret_from_fork_asm+0x1a/0x30 [ 1204.369968][ T5974] [ 1204.369968][ T5974] -> #7 (cpuhp_state-up){+.+.}-{0:0}: [ 1204.377573][ T5974] cpuhp_thread_fun+0x127/0x780 [ 1204.383085][ T5974] smpboot_thread_fn+0x57c/0xa80 [ 1204.388595][ T5974] kthread+0x388/0x470 [ 1204.393234][ T5974] ret_from_fork+0x514/0xb70 [ 1204.398377][ T5974] ret_from_fork_asm+0x1a/0x30 [ 1204.403724][ T5974] [ 1204.403724][ T5974] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 1204.411502][ T5974] cpus_read_lock+0x42/0x160 [ 1204.416636][ T5974] static_key_slow_inc+0x12/0x30 [ 1204.422185][ T5974] nbd_genl_reconfigure+0x1301/0x1e80 [ 1204.428186][ T5974] genl_family_rcv_msg_doit+0x233/0x340 [ 1204.434295][ T5974] genl_rcv_msg+0x614/0x7a0 [ 1204.439352][ T5974] netlink_rcv_skb+0x226/0x4a0 [ 1204.444665][ T5974] genl_rcv+0x28/0x40 [ 1204.449199][ T5974] netlink_unicast+0x7bb/0x940 [ 1204.454550][ T5974] netlink_sendmsg+0x813/0xb40 [ 1204.459867][ T5974] sock_sendmsg_nosec+0x13a/0x180 [ 1204.465461][ T5974] ____sys_sendmsg+0x54e/0x850 [ 1204.470808][ T5974] ___sys_sendmsg+0x2a5/0x360 [ 1204.476039][ T5974] __x64_sys_sendmsg+0x1b1/0x290 [ 1204.481536][ T5974] do_syscall_64+0x174/0x580 [ 1204.486680][ T5974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.493120][ T5974] [ 1204.493120][ T5974] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1204.500795][ T5974] __mutex_lock+0x19d/0x1550 [ 1204.505938][ T5974] nbd_queue_rq+0x373/0x1150 [ 1204.511084][ T5974] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1204.517340][ T5974] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1204.524288][ T5974] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1204.530851][ T5974] blk_mq_run_work_fn+0x16c/0x300 [ 1204.536441][ T5974] process_scheduled_works+0xa8e/0x14e0 [ 1204.542546][ T5974] worker_thread+0xa47/0xfb0 [ 1204.547703][ T5974] kthread+0x388/0x470 [ 1204.552323][ T5974] ret_from_fork+0x514/0xb70 [ 1204.557470][ T5974] ret_from_fork_asm+0x1a/0x30 [ 1204.562790][ T5974] [ 1204.562790][ T5974] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1204.570043][ T5974] __mutex_lock+0x19d/0x1550 [ 1204.575184][ T5974] nbd_queue_rq+0xc1/0x1150 [ 1204.580244][ T5974] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1204.586342][ T5974] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1204.593231][ T5974] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1204.599758][ T5974] blk_mq_run_work_fn+0x16c/0x300 [ 1204.605333][ T5974] process_scheduled_works+0xa8e/0x14e0 [ 1204.611431][ T5974] worker_thread+0xa47/0xfb0 [ 1204.616561][ T5974] kthread+0x388/0x470 [ 1204.621181][ T5974] ret_from_fork+0x514/0xb70 [ 1204.626321][ T5974] ret_from_fork_asm+0x1a/0x30 [ 1204.631640][ T5974] [ 1204.631640][ T5974] -> #3 (set->srcu){.+.+}-{0:0}: [ 1204.638792][ T5974] __synchronize_srcu+0xc9/0x2f0 [ 1204.644283][ T5974] elevator_switch+0x1e8/0x7b0 [ 1204.649715][ T5974] elevator_change+0x2fa/0x480 [ 1204.655027][ T5974] elevator_set_default+0x375/0x440 [ 1204.660776][ T5974] blk_register_queue+0x3f3/0x4e0 [ 1204.666397][ T5974] __add_disk+0x6cb/0xe30 [ 1204.671294][ T5974] add_disk_fwnode+0x100/0x3a0 [ 1204.676602][ T5974] nbd_dev_add+0x733/0xb60 [ 1204.681562][ T5974] nbd_init+0x15f/0x1e0 [ 1204.686396][ T5974] do_one_initcall+0x250/0x870 [ 1204.691800][ T5974] do_initcall_level+0x10a/0x1a0 [ 1204.697396][ T5974] do_initcalls+0x59/0xa0 [ 1204.702274][ T5974] kernel_init_freeable+0x29d/0x3e0 [ 1204.708019][ T5974] kernel_init+0x1d/0x1d0 [ 1204.712984][ T5974] ret_from_fork+0x514/0xb70 [ 1204.718143][ T5974] ret_from_fork_asm+0x1a/0x30 [ 1204.723464][ T5974] [ 1204.723464][ T5974] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1204.731333][ T5974] __mutex_lock+0x19d/0x1550 [ 1204.736487][ T5974] elevator_change+0x1af/0x480 [ 1204.741805][ T5974] elevator_set_none+0xb5/0x140 [ 1204.747203][ T5974] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1204.753550][ T5974] nbd_start_device+0x189/0xb30 [ 1204.758942][ T5974] nbd_genl_connect+0x1597/0x1c10 [ 1204.764507][ T5974] genl_family_rcv_msg_doit+0x233/0x340 [ 1204.770611][ T5974] genl_rcv_msg+0x614/0x7a0 [ 1204.775671][ T5974] netlink_rcv_skb+0x226/0x4a0 [ 1204.780975][ T5974] genl_rcv+0x28/0x40 [ 1204.785501][ T5974] netlink_unicast+0x7bb/0x940 [ 1204.790843][ T5974] netlink_sendmsg+0x813/0xb40 [ 1204.796152][ T5974] sock_sendmsg_nosec+0x13a/0x180 [ 1204.801725][ T5974] ____sys_sendmsg+0x54e/0x850 [ 1204.807036][ T5974] ___sys_sendmsg+0x2a5/0x360 [ 1204.812370][ T5974] __x64_sys_sendmsg+0x1b1/0x290 [ 1204.817853][ T5974] do_syscall_64+0x174/0x580 [ 1204.823016][ T5974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.829455][ T5974] [ 1204.829455][ T5974] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1204.838104][ T5974] blk_alloc_queue+0x544/0x690 [ 1204.843424][ T5974] __blk_mq_alloc_disk+0x194/0x390 [ 1204.849104][ T5974] nbd_dev_add+0x494/0xb60 [ 1204.854067][ T5974] nbd_init+0x15f/0x1e0 [ 1204.858774][ T5974] do_one_initcall+0x250/0x870 [ 1204.864093][ T5974] do_initcall_level+0x10a/0x1a0 [ 1204.869573][ T5974] do_initcalls+0x59/0xa0 [ 1204.874648][ T5974] kernel_init_freeable+0x29d/0x3e0 [ 1204.880393][ T5974] kernel_init+0x1d/0x1d0 [ 1204.885276][ T5974] ret_from_fork+0x514/0xb70 [ 1204.890427][ T5974] ret_from_fork_asm+0x1a/0x30 [ 1204.895747][ T5974] [ 1204.895747][ T5974] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1204.903451][ T5974] __lock_acquire+0x1520/0x2cf0 [ 1204.908890][ T5974] lock_acquire+0x106/0x350 [ 1204.913946][ T5974] fs_reclaim_acquire+0x71/0x100 [ 1204.919491][ T5974] kmem_cache_alloc_node_noprof+0x6a/0x610 [ 1204.925843][ T5974] __alloc_skb+0x1d7/0x7a0 [ 1204.930796][ T5974] alloc_uevent_skb+0x7d/0x230 [ 1204.936113][ T5974] kobject_uevent_net_broadcast+0x2fa/0x560 [ 1204.942555][ T5974] kobject_uevent_env+0x566/0x9e0 [ 1204.948133][ T5974] nbd_config_put+0x185/0x660 [ 1204.953354][ T5974] nbd_release+0xfe/0x140 [ 1204.958231][ T5974] bdev_release+0x571/0x690 [ 1204.963370][ T5974] blkdev_release+0x15/0x20 [ 1204.968430][ T5974] __fput+0x418/0xa50 [ 1204.972968][ T5974] fput_close_sync+0x11f/0x240 [ 1204.978287][ T5974] __x64_sys_close+0x7e/0x110 [ 1204.983537][ T5974] do_syscall_64+0x174/0x580 [ 1204.988680][ T5974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.995130][ T5974] [ 1204.995130][ T5974] other info that might help us debug this: [ 1204.995130][ T5974] [ 1205.005377][ T5974] Chain exists of: [ 1205.005377][ T5974] fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex [ 1205.005377][ T5974] [ 1205.018206][ T5974] Possible unsafe locking scenario: [ 1205.018206][ T5974] [ 1205.025741][ T5974] CPU0 CPU1 [ 1205.031179][ T5974] ---- ---- [ 1205.036648][ T5974] lock(uevent_sock_mutex); [ 1205.041290][ T5974] lock(cpuhp_state-up); [ 1205.048170][ T5974] lock(uevent_sock_mutex); [ 1205.055324][ T5974] lock(fs_reclaim); [ 1205.059356][ T5974] [ 1205.059356][ T5974] *** DEADLOCK *** [ 1205.059356][ T5974] [ 1205.067634][ T5974] 3 locks held by udevd/5974: [ 1205.072410][ T5974] #0: ffff888028061350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1b8/0x690 [ 1205.082056][ T5974] #1: ffff888027fdca60 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0xa0 [ 1205.092824][ T5974] #2: ffffffff903d6680 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 1205.104129][ T5974] [ 1205.104129][ T5974] stack backtrace: [ 1205.110052][ T5974] CPU: 0 UID: 0 PID: 5974 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 1205.110079][ T5974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1205.110093][ T5974] Call Trace: [ 1205.110104][ T5974] [ 1205.110116][ T5974] dump_stack_lvl+0xe8/0x150 [ 1205.110149][ T5974] print_circular_bug+0x2e1/0x300 [ 1205.110186][ T5974] check_noncircular+0x12e/0x150 [ 1205.110223][ T5974] __lock_acquire+0x1520/0x2cf0 [ 1205.110255][ T5974] ? lockdep_unlock+0x5d/0xd0 [ 1205.110279][ T5974] ? __lock_acquire+0x13e8/0x2cf0 [ 1205.110314][ T5974] ? kmem_cache_alloc_node_noprof+0x6a/0x610 [ 1205.110339][ T5974] lock_acquire+0x106/0x350 [ 1205.110365][ T5974] ? kmem_cache_alloc_node_noprof+0x6a/0x610 [ 1205.110405][ T5974] ? napi_skb_cache_get+0x151/0x7d0 [ 1205.110426][ T5974] ? lock_acquire+0x106/0x350 [ 1205.110455][ T5974] fs_reclaim_acquire+0x71/0x100 [ 1205.110480][ T5974] ? kmem_cache_alloc_node_noprof+0x6a/0x610 [ 1205.110504][ T5974] kmem_cache_alloc_node_noprof+0x6a/0x610 [ 1205.110528][ T5974] ? local_lock_release+0x9c/0x160 [ 1205.110547][ T5974] ? __alloc_skb+0x189/0x7a0 [ 1205.110566][ T5974] ? __alloc_skb+0x1d7/0x7a0 [ 1205.110583][ T5974] ? __alloc_skb+0x1d7/0x7a0 [ 1205.110606][ T5974] __alloc_skb+0x1d7/0x7a0 [ 1205.110628][ T5974] alloc_uevent_skb+0x7d/0x230 [ 1205.110662][ T5974] kobject_uevent_net_broadcast+0x2fa/0x560 [ 1205.110698][ T5974] kobject_uevent_env+0x566/0x9e0 [ 1205.110733][ T5974] nbd_config_put+0x185/0x660 [ 1205.110758][ T5974] nbd_release+0xfe/0x140 [ 1205.110779][ T5974] ? __pfx_nbd_release+0x10/0x10 [ 1205.110807][ T5974] bdev_release+0x571/0x690 [ 1205.110842][ T5974] ? __pfx_blkdev_release+0x10/0x10 [ 1205.110872][ T5974] blkdev_release+0x15/0x20 [ 1205.110901][ T5974] __fput+0x418/0xa50 [ 1205.110931][ T5974] fput_close_sync+0x11f/0x240 [ 1205.110957][ T5974] ? __pfx_fput_close_sync+0x10/0x10 [ 1205.110986][ T5974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.111009][ T5974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.111030][ T5974] __x64_sys_close+0x7e/0x110 [ 1205.111058][ T5974] do_syscall_64+0x174/0x580 [ 1205.111081][ T5974] ? trace_irq_disable+0x3b/0x140 [ 1205.111106][ T5974] ? clear_bhb_loop+0x70/0xc0 [ 1205.111130][ T5974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.111151][ T5974] RIP: 0033:0x7fd9346a7407 [ 1205.111173][ T5974] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1205.111191][ T5974] RSP: 002b:00007ffcf85db290 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 1205.111214][ T5974] RAX: ffffffffffffffda RBX: 00007fd934e57880 RCX: 00007fd9346a7407 [ 1205.111230][ T5974] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1205.111242][ T5974] RBP: 00007fd934e576e8 R08: 0000000000000000 R09: 0000000000000000 [ 1205.111256][ T5974] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 1205.111273][ T5974] R13: 0000555f18d92190 R14: 0000000000000008 R15: 0000555f18daded0 [ 1205.111298][ T5974] [ 1212.704218][ C0] sched: DL replenish lagged too much