last executing test programs: 7m55.929807215s ago: executing program 3 (id=935): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000080)={0x1100, 0x1, 0x80000008, 0xa00000000010003}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 7m55.766926442s ago: executing program 3 (id=939): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) syz_emit_ethernet(0xca, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800450000bc000400000006907864010104ac1414aafffc0020a34081556cc6bb4c78f0b3ba", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac000000907800001e70050c74a267af746b2387efce786976ed4d23f31757b2dfba8169883c082ff271038bf923f2b1f8fcecd63c43cf1a6c1f2a000851ba950fa0f69be4349dfa9e553e73013ec65f5af9158ea0ac2481f6d6119ee5b7773058394e9010cae5f72390f9a29c1b4860d9a7b1db0dde828e080a0008000000000002fe11f98908fb227731c97d01646669cf5905060000877f000000"], 0x0) 7m55.655560837s ago: executing program 3 (id=944): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000380)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @random, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "199646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x200, 0x0, 0x203}}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000080)={0x8, 'geneve0\x00', {'lo\x00'}, 0x5}) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRESHEX=r3], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x24008890) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x10000009}]}, 0x30}}, 0x0) 7m55.483862993s ago: executing program 3 (id=948): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) sendmsg$key(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000380)={{r1}, "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"}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900a60d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) (async) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900a60d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 7m55.301633016s ago: executing program 3 (id=951): syz_emit_ethernet(0x306, &(0x7f0000000000)={@multicast, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "897e92", 0x2d0, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}, @mcast2, {[@hopopts={0x0, 0x1c, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xa3, 0xcd, "7fce597ffd312c16b52ba127fc27a63a9d3d5127ecb2fd328f28f41a5271f28a5e96a68b7f91bb80833d8295b0616fc9a793e074339d05acb75c1ca8e7320c67ed351cd32de0cd890f5f3e50c401bfb961fa9935c229d7c5250dd48772db6a1056cef2d7ee219e4901ba3429a191574d4fda146a905c2007aaea40f02695f9ddf066b03876d2b67518a1eab8d000ff147c1149cc978e80f9ee1d039e4bf19d7f5163626b4f37dd84888073ff72875a8d3f1a885c433b04cb765e3257b8c485d33e9116e08b01eb8ec6053a3cc7"}, @pad1]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x1b, 0x1, [0xb1, 0x7ff], "608371487c9cb61e83de58f4156f9e07ce89dc6a7e6f341f65b08c"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0, 0x2], "d6cfae2338d48066f62e742fd8fd5f576bbeae925367c372ecdae12b0de1013dbbb15351b2428e4bd9e24871790697c12c833ba6f68d705b821a71df60a44323893796ed1e2cb325b36e29b3fa45ee860c64f2519775a3061caecb0bcd86fa50d5c1e97d29472db82b62822d3b5f139035ea7cadf196d6afb0920ff6910c665674cfcec7a1c1851a"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "89bc871a22e08f6ab8f7faad05b369ff27660f85da986e2037d72de740dcf478e2663c830d9883ad2c3678c2a8b4b0163c40772389a7250b4f6d9aa175330302228aa05b85fbca92b403260fbb441f2ed2252916ffdaf80ae2423240d67f619b04e6f9907b2ed67ad02e1d0efc9af9d963d67f1b6320dc17bcbee1b976581c05e05814676423887b1811623d284bab23961127b2c06e8875725d5ccaa73cc86eaa33ad77582463a21e33abf8c06b99cc12a276b2b22cb040901f3e844914b5328c006e0a49e78801f9e46daeb08e3f3f6b8ca60732de91655b5394a5607e565b1c2c9ca09428cd71f3569010aa2b45b8"}, {0x8, 0x88be, 0x4, {{0x5, 0x1, 0x3, 0x1, 0x0, 0x1, 0x5, 0x2}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x3, {{0x6, 0x2, 0x9, 0x2, 0x1, 0x3, 0x0, 0x2}, 0x2, {0x1, 0x6, 0x3, 0x9, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "88"}}}}}}}, 0x0) 7m55.224672105s ago: executing program 3 (id=953): syz_emit_ethernet(0x4e, &(0x7f0000000100)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x88e5, @generic={{0x10, 0x4, 0x3, 0x3e, 0x40, 0x65, 0x0, 0x6, 0x5e, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1, {[@lsrr={0x83, 0x13, 0xb6, [@broadcast, @private=0xa010101, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x8, 0x69, 0x0, 0x5, [0x80]}, @generic={0x88, 0x10, "4821ec83c7e45ffe91f59a156071"}]}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x11, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc9}, {}, {}, [@alu={0x7, 0x0, 0xa, 0x8, 0x8, 0x4, 0xffffffffffffffff}, @generic={0x2, 0xe, 0xd, 0x9cf, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, &(0x7f0000000300), 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xa, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x2, 0x3, 0x2}, {0x4, 0x2, 0x8, 0x7}, {0x4, 0x1, 0xf, 0x8}, {0x4, 0x4, 0x10, 0x4}, {0x2, 0x3, 0x4, 0x2}], 0x10, 0x9}, 0x94) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000000540)) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x88e5, @generic={{0x10, 0x4, 0x3, 0x3e, 0x40, 0x65, 0x0, 0x6, 0x5e, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1, {[@lsrr={0x83, 0x13, 0xb6, [@broadcast, @private=0xa010101, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x8, 0x69, 0x0, 0x5, [0x80]}, @generic={0x88, 0x10, "4821ec83c7e45ffe91f59a156071"}]}}}}}}, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x11, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc9}, {}, {}, [@alu={0x7, 0x0, 0xa, 0x8, 0x8, 0x4, 0xffffffffffffffff}, @generic={0x2, 0xe, 0xd, 0x9cf, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, &(0x7f0000000300), 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xa, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x2, 0x3, 0x2}, {0x4, 0x2, 0x8, 0x7}, {0x4, 0x1, 0xf, 0x8}, {0x4, 0x4, 0x10, 0x4}, {0x2, 0x3, 0x4, 0x2}], 0x10, 0x9}, 0x94) (async) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000000540)) (async) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) (async) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) (async) 7m40.238178853s ago: executing program 32 (id=953): syz_emit_ethernet(0x4e, &(0x7f0000000100)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x88e5, @generic={{0x10, 0x4, 0x3, 0x3e, 0x40, 0x65, 0x0, 0x6, 0x5e, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1, {[@lsrr={0x83, 0x13, 0xb6, [@broadcast, @private=0xa010101, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x8, 0x69, 0x0, 0x5, [0x80]}, @generic={0x88, 0x10, "4821ec83c7e45ffe91f59a156071"}]}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x11, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc9}, {}, {}, [@alu={0x7, 0x0, 0xa, 0x8, 0x8, 0x4, 0xffffffffffffffff}, @generic={0x2, 0xe, 0xd, 0x9cf, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, &(0x7f0000000300), 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xa, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x2, 0x3, 0x2}, {0x4, 0x2, 0x8, 0x7}, {0x4, 0x1, 0xf, 0x8}, {0x4, 0x4, 0x10, 0x4}, {0x2, 0x3, 0x4, 0x2}], 0x10, 0x9}, 0x94) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000000540)) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x88e5, @generic={{0x10, 0x4, 0x3, 0x3e, 0x40, 0x65, 0x0, 0x6, 0x5e, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1, {[@lsrr={0x83, 0x13, 0xb6, [@broadcast, @private=0xa010101, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x8, 0x69, 0x0, 0x5, [0x80]}, @generic={0x88, 0x10, "4821ec83c7e45ffe91f59a156071"}]}}}}}}, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x11, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc9}, {}, {}, [@alu={0x7, 0x0, 0xa, 0x8, 0x8, 0x4, 0xffffffffffffffff}, @generic={0x2, 0xe, 0xd, 0x9cf, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, &(0x7f0000000300), 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xa, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x2, 0x3, 0x2}, {0x4, 0x2, 0x8, 0x7}, {0x4, 0x1, 0xf, 0x8}, {0x4, 0x4, 0x10, 0x4}, {0x2, 0x3, 0x4, 0x2}], 0x10, 0x9}, 0x94) (async) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000000540)) (async) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) (async) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) (async) 4m48.891321033s ago: executing program 0 (id=3714): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000002871104d000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e21, @broadcast}, 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), 0x4) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 4m48.718893594s ago: executing program 0 (id=3718): r0 = socket(0x28, 0x5, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x81b21000) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0xff, 0x3, 0x600}, 0x21) listen(r0, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2711, @local}, 0x10) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000140)={0x1}, 0x8) accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10, 0x0) close(r3) pwrite64(r0, &(0x7f00000000c0)="2e861dd6d2e03f9f7e9c9c02a23306c9be91b2f98ff873bc8c", 0x19, 0x9) 4m48.576714659s ago: executing program 0 (id=3722): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb88a820008100400086dd67c172f500303aff00000000000000000000ffffac1414aafe8000000000000000000000000000aa040090780000ffbf6554d03a04008801fe880000000000000000000000000003200100"/110], 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r1, 0x118, 0x3, 0x0, &(0x7f00000003c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0xc7, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb88a820008100400086dd67c172f500303aff00000000000000000000ffffac1414aafe8000000000000000000000000000aa040090780000ffbf6554d03a04008801fe880000000000000000000000000003200100"/110], 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) (async) getsockopt$inet_buf(r1, 0x118, 0x3, 0x0, &(0x7f00000003c0)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0xc7, 0x4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) (async) 4m48.468433166s ago: executing program 0 (id=3726): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x808}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x0, 0xc0, 0x2}}}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="e1"]}]}}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000680), 0x0, 0x24000040) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r4, 0x3, 0x7}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000fddbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="4400028040000100240001006c625f686173685f73746174730000000000007cd6df1dbb1a48fe0000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x884) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe8000000000000000000000000000bb00000000000000000000070000000000242065580000000000000021000086dd080088be4305400f10"], 0x0) 4m48.129832068s ago: executing program 0 (id=3731): socketpair(0x2a, 0x2, 0x0, &(0x7f00000001c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket(0x1e, 0x4, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000200)="c9f20854396a362350b657669bf211a9fb1171bda9b0a59a9dfbbd66958bf21dfe946e67882ea5718657f666a28c8afdb69ec6f3b55d2d8fcd52285867622edb3a0cc7e5ba8dcb4df2abf11e39108a7a7a635b2120a36156e4e3d0b56ce724b718bb426fa6c6444aad2b496f3abb0fcb4676940d16f700b0f876addd6f95927874346118e7ee0c575d66328dfe01ec6f01ed6b2917157fb1673db0c2a90eb7230bef74daeefcc5c4fabcd17476c504ba964732102e8b43cff4cb78cc"}, 0x20) 4m47.736933201s ago: executing program 0 (id=3733): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r1, 0x5452, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 4m33.013333427s ago: executing program 33 (id=3733): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r1, 0x5452, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m33.267376179s ago: executing program 6 (id=5612): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x40, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x5, 0x10, 0x0, 0x1, [@generic="8b"]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'batadv_slave_0\x00', &(0x7f0000000040)=@ethtool_channels={0x3d, 0x5, 0x7, 0x9, 0x2, 0x2, 0x8, 0x3, 0x4}}) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400"], 0x2c}}, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x5}, &(0x7f00000002c0)=0x90) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0xffe0}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004894}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd2f, 0x10b52c, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0xffe0, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) r13 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) close(r12) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r14 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r14, 0x107, 0xf, &(0x7f0000000600), 0x56) 2m32.958597256s ago: executing program 6 (id=5622): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0xb}, 0x0) 2m32.896523665s ago: executing program 6 (id=5625): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000400000014000500fc010c0000000000000000000000000008000200050000001c0006"], 0x4c}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000044) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffff708000540000000020900020073797a3100000000080003400000011c08000640ffffff000c000b400000000000000003140000001100010000000000000000000700000a"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008081) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), 0xffffffffffffffff) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r2, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000300)) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028005000300000000000800014000000001080002400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) (async, rerun: 64) listen(r6, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x4f) (async, rerun: 64) listen(r6, 0x0) (rerun: 64) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010727bd7000fbdbdf25190000002000018008000300040000001400020067726574617030"], 0x34}, 0x1, 0x0, 0x0, 0x4040894}, 0x4040094) (async, rerun: 32) r9 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, 0x0, &(0x7f0000000140)) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) 2m32.710064852s ago: executing program 6 (id=5629): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/78, 0x4e}], 0x2}, 0x0) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) 2m32.631192352s ago: executing program 6 (id=5633): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x49, &(0x7f0000000040), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, 0x0, 0x5d) 2m32.580859249s ago: executing program 6 (id=5637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0xffd5, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040090) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40048c0}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x25dffbfc, {0x0, 0x0, 0x74, r3, 0x800, 0x55007}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xf}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x58}}, 0x0) 2m17.40960743s ago: executing program 34 (id=5637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0xffd5, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040090) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40048c0}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x25dffbfc, {0x0, 0x0, 0x74, r3, 0x800, 0x55007}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xf}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x58}}, 0x0) 2m0.49874045s ago: executing program 2 (id=6305): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000080)=ANY=[@ANYRES16=r4], 0xa) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x2) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYRES16=r8], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r5}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x800}, 0x8) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a00110414f9f4070009040080fffffffe110001000000000800040001000000", 0x24) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x80133}) connect$netlink(0xffffffffffffffff, &(0x7f00000001c0)=@unspec, 0xc) 2m0.175512485s ago: executing program 2 (id=6312): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690046000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRESOCT=r0, @ANYBLOB="01002bbd7000fedbdf25010000000000000009410000004c0018000000046574680000000000000000000000000000000000000000000000000000000000001a00"/98], 0x68}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 2m0.100257977s ago: executing program 2 (id=6316): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x98, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 2m0.029807836s ago: executing program 2 (id=6318): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) (async) poll(&(0x7f0000000c80)=[{r2, 0x8284}], 0x1, 0x0) (async) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="840000000a0601010000000000000000010000000900020073797a310000000005000100070000000800094000000008540008"], 0x84}}, 0x0) (async) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r4, @ANYBLOB="01000000000000047fc9010000000400048008000200010000000800010000000000d00008802c00078008000600c500000008000500aee6633708000600d9000000080005002d7c9172080005006d67491d0c0007800800050024da98751c00078008000500878f000008000600df0000de"], 0x10c}}, 0x0) 1m59.907548833s ago: executing program 2 (id=6321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="f4ffffff00"], 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c0000002c00ed002bbd7000ffdbdf25077c0000100001800c00dd800800f400", @ANYRES32=r6, @ANYRESHEX=r5], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc090) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr(camellia))\x00'}, 0x58) close(r7) (async, rerun: 64) setsockopt(r4, 0x1, 0x3ff, &(0x7f0000000580)="864a83a93942caaf2df520d9bced67817b81b2c03aa242a8bc926eb046f006519a3bbb97fc2aa8ec99639e43c694e4ce82b1aecc08eac0ffcd62d1f7304610cacf0779944f190c411e5a7c63c732900c153416853df44e157d2b20ada9e2905c235510de99bbbb47d4cb9d71492143bdb827fca3d99ec24146037bd36ae6e511d71c43bcf94b2c83a55df3ef6cafc2ff2a73df929b825c2a637d222f68bba43716d17f7411687ee4aec154b4ae32d606f49c8dc288656ca574834bfe27184632066be560e08e800d78e35eeb68f2d3e3e7d408c677b0a2e466dd2ec1c64dcc654b3ebbd96c87a8c34582f6c242ebed", 0xef) (rerun: 64) sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000002000000129bd7000fddbdf360a1010020e0000000c69010014000200fe8000000000000000000000000000bb14000100ff000000000000000000000001000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) (rerun: 64) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000540)=0x60) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r8}, 0x2, 0x2, 0x15}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000ff000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) (async, rerun: 32) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, 0x0, 0x0) (async, rerun: 32) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) (async, rerun: 32) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r10, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r9], 0x38}}, 0x10) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) 1m59.758656013s ago: executing program 2 (id=6325): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r1, 0x5, 0x0, 0x0, {0x6, 0x74, 0x600}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}]}, 0x40}, 0x1, 0xffffffff00000003}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x8b}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) socketpair(0x6, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$l2tp6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x6, @loopback, 0xff}, 0x20) 1m44.716888139s ago: executing program 35 (id=6325): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r1, 0x5, 0x0, 0x0, {0x6, 0x74, 0x600}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}]}, 0x40}, 0x1, 0xffffffff00000003}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x8b}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) socketpair(0x6, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$l2tp6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x6, @loopback, 0xff}, 0x20) 3.398902391s ago: executing program 7 (id=8348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40dc0, 0x0) write$tun(r0, &(0x7f0000000040)={@void, @void, @llc={@llc={0xbc, 0x6, "28d8", "db3b09410a77145a30776dd2d2"}}}, 0x11) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080), 0x4) r2 = socket$packet(0x11, 0x3, 0x300) r3 = accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000140)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x104805}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x268, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_PAYLOAD={0xc2, 0xa, "d9c29510caebc7fc30b12a824a13c492e2f24fbdd7d62fe2a03d0312ae032c32b8527928bdc31f3f7575e8683907d86ac4ae78f20fa26fcfd698fbc64d3c328a8544644cf0bb74a3895578790363f4b3fe2f2977175e092d9da525b93a82e0bd4bbc6201250d25c73a506433cc1abb75d1ac9b4e5247aface33437f52a1b84a49b5f8bb72996aaa9f4e7854d25d5bc692bbf9c4a00c745f189d1758468adf887b30bdacd1cc58ad14f79702fbb3a8dea02e7749d9bb610abb3991941e4ad"}, @NFQA_CT={0x190, 0xb, 0x0, 0x1, [@CTA_NAT_DST={0xa4, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010101}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x14}}]}, @CTA_TUPLE_MASTER={0x90, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x81}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7f}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffffa}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x20}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @generic={0x5, 0xc, 0xa, 0xf, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000540)='GPL\x00', 0x4, 0xe, &(0x7f0000000580)=""/14, 0x41100, 0x2, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x2, 0xe, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x1, 0x1, r5, 0x1, 0x1, 0x1, r1], &(0x7f0000000640)=[{0x4, 0x2, 0x8, 0x4}, {0x0, 0x3, 0xd, 0xa}, {0x5, 0x4}], 0x10, 0x3}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000740)=r6, 0x4) r7 = accept4$unix(0xffffffffffffffff, &(0x7f0000000780), &(0x7f0000000800)=0x6e, 0xc0000) close(r7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r6, 0x0, 0xba, 0xa6, &(0x7f0000000840)="9e6f62cf35ac4772a5391e278a97a2c062582c927049cee721e815e411ca460fdd7d90a5880f6f1d9edb0225f1101aacad8c0c1da78acc34649e31ad10ec7309725fd6f02cf61b1e1fb8bf24cc7ecc0ad0bafb8df0138929790ac755b3acf1236e6fa5190bec72a9317f02eacfe635069f807bb814a787b5ee9c3a8a13939f5b3b6d200a118d019533876159038ae490e0fa8c9a5ebce825b23e020c43571ae320e0c43c8db90981c9c7bf9ca759d581714e6c9541db94a2e8f0", &(0x7f0000000900)=""/166, 0x7f, 0x0, 0xe, 0x31, &(0x7f00000009c0)="d64827ee1cac4eb867a44e1b1b15", &(0x7f0000000a00)="a2b29cabbcccd198bd139c3f295e662739f03c62e58f7e3da7a416e8f50c894aeb6e6aa91b24c23fab87358d3ae44b72f7", 0x4}, 0x50) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r7, 0x80585882, &(0x7f0000000ac0)={0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={r8}, 0x4) syz_emit_ethernet(0x1e, &(0x7f0000000b80)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @val={@void, {0x8100, 0x5, 0x0, 0x1}}, {@llc_tr={0x11, {@llc={0xdc, 0x6, "8baa", "99dd14d9d9adb5e5"}}}}}, 0x0) recvmmsg$unix(r8, &(0x7f0000003700)=[{{&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000c40)=""/153, 0x99}, {&(0x7f0000000d00)=""/12, 0xc}, {&(0x7f0000000d40)=""/187, 0xbb}, {&(0x7f0000000e00)=""/173, 0xad}], 0x4, &(0x7f0000000f00)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000f40)=""/194, 0xc2}, {&(0x7f0000001040)}, {&(0x7f0000001080)=""/170, 0xaa}, {&(0x7f0000001140)=""/95, 0x5f}, {&(0x7f00000011c0)=""/34, 0x22}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/138, 0x8a}, {&(0x7f00000022c0)=""/149, 0x95}, {&(0x7f0000002380)=""/229, 0xe5}, {&(0x7f0000002480)=""/89, 0x59}], 0xa}}, {{&(0x7f00000025c0)=@abs, 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002640)=""/200, 0xc8}, {&(0x7f0000002740)=""/248, 0xf8}, {&(0x7f0000002840)=""/198, 0xc6}, {&(0x7f0000002940)=""/164, 0xa4}, {&(0x7f0000002a00)=""/27, 0x1b}, {&(0x7f0000002a40)=""/166, 0xa6}, {&(0x7f0000002b00)=""/211, 0xd3}, {&(0x7f0000002c00)=""/158, 0x9e}], 0x8, &(0x7f0000002d40)}}, {{&(0x7f0000002d80), 0x6e, &(0x7f00000035c0)=[{&(0x7f0000002e00)=""/247, 0xf7}, {&(0x7f0000002f00)=""/183, 0xb7}, {&(0x7f0000002fc0)=""/201, 0xc9}, {&(0x7f00000030c0)=""/168, 0xa8}, {&(0x7f0000003180)=""/47, 0x2f}, {&(0x7f00000031c0)=""/191, 0xbf}, {&(0x7f0000003280)=""/104, 0x68}, {&(0x7f0000003300)=""/210, 0xd2}, {&(0x7f0000003400)=""/176, 0xb0}, {&(0x7f00000034c0)=""/223, 0xdf}], 0xa, &(0x7f0000003680)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}], 0x4, 0x20, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003800)={r8, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003ac0)={{r5, 0xffffffffffffffff}, &(0x7f0000003a40), &(0x7f0000003a80)=r9}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003bc0)={0x18, 0x1a, &(0x7f0000003840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@map_val={0x18, 0xb, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x7}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003940)='syzkaller\x00', 0x8, 0x4b, &(0x7f0000003980)=""/75, 0x41000, 0x0, '\x00', r4, 0x0, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003a00)={0x0, 0xd, 0x10000, 0x680000}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000003b00)=[r10, r5, r10, r9, r12, r5, 0x1, r10], &(0x7f0000003b40)=[{0x3, 0x1, 0xf, 0x9}, {0x1, 0x2, 0x2, 0x7}, {0x0, 0x2, 0x7, 0x8}, {0x0, 0x1, 0xe, 0x2}, {0x3, 0x4, 0x7, 0x3}, {0x2, 0x3, 0x1, 0x8}, {0x2, 0x5, 0x9, 0x7}], 0x10, 0x6}, 0x94) write$nci(r9, &(0x7f0000003c80)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x1}, 0x4) r13 = socket(0x3, 0x4, 0x4) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000003e00)={0x2, &(0x7f0000003dc0)=[{0x1, 0x10, &(0x7f0000003cc0)="31d64f51e2354877f03dc5067aefb4f7", 0x1, 0x1}, {0x1, 0xbb, &(0x7f0000003d00)="e8559d5a2f7793ecafe8ecd37d05967f9e6fbdaafbc5af7253f463928c3bbcd5ece00610f8a08ce5c267e9cfb02964a97019f1f7f771eccda12074fbdd098b2b4e5503d2f70c5ce6348e37a380a4753acd9fb878ec4ca6bce4b4ee67c6055047bd85c50907eac918b59441e22d42c37569a895e4b6228c7eacc45812d7ddf5f67f0b8705c3a0279dd5b09c89b992bc50a3d4841c5136a23e0514a5a599a940817d864b555b06558d7c4ef34015c7573caf0f0de3e5c93bb11d51b5", 0x1}]}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r13, &(0x7f0000003f00)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x20, 0x1411, 0x928, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40) recvfrom$unix(r10, &(0x7f0000003f40)=""/220, 0xdc, 0x2120, &(0x7f0000004040)=@file={0x0, './file0\x00'}, 0x6e) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f00000040c0)={'veth0\x00', @multicast}) ioctl$sock_inet_tcp_SIOCATMARK(r8, 0x8905, &(0x7f0000004100)) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r6, 0x8010671f, &(0x7f0000004180)={&(0x7f0000004140)}) 3.232905191s ago: executing program 7 (id=8353): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f00000000c0)={0x0, 0x3, [0x8, 0x5, 0x80000000, 0x8, 0x6, 0x4]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x3}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8}]}}}]}, 0x44}}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r2, 0x28, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000000380)="3418", &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, 0x0, &(0x7f00000002c0)=""/26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 3.083866362s ago: executing program 7 (id=8358): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) 2.843012363s ago: executing program 7 (id=8364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000005a40), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000005b00)={0x0, 0x0, &(0x7f0000005ac0)={&(0x7f0000005a80)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x5}}}, 0x24}}, 0xc0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000003140)={'bond_slave_1\x00', &(0x7f00000030c0)=@ethtool_perm_addr={0x20, 0x6, "12a70e6ddb0a"}}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0xffffffffffffff7c}]}]}, 0x50}}, 0x0) 2.623442267s ago: executing program 7 (id=8371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x4c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r3, 0x5, 0x74bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r3, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x4f}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}}, 0x40080) 2.489624887s ago: executing program 7 (id=8376): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={0x0, 0x12, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x3}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r2, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x7f, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 1.101094045s ago: executing program 5 (id=8406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0x7, 0x4, {{0x16, 0x4, 0x2, 0x30, 0x58, 0x68, 0x0, 0x0, 0x4, 0x0, @loopback, @loopback, {[@timestamp={0x44, 0x24, 0x46, 0x0, 0x6, [0x7, 0x8, 0x8, 0xe, 0x2, 0x10, 0x8, 0x0]}, @timestamp={0x44, 0x10, 0x6b, 0x0, 0xd, [0x7b68, 0xfffffffd, 0xfffffffb]}, @generic={0x86, 0xf, "6e9def52e70a054ea30d7f5240"}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@bridge_delneigh={0x40, 0x1d, 0x200, 0x70bd2b, 0x25dfdbfe, {0x2, 0x0, 0x0, r2, 0x8, 0x24, 0x1}, [@NDA_NH_ID={0x8, 0xd, 0xffff7850}, @NDA_IFINDEX={0x8}, @NDA_NH_ID={0x8, 0xd, 0xbd}, @NDA_LLADDR={0xa, 0x2, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048090}, 0x0) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a2003200010100000057fc5ad90200fb6a880000d6c9db0000db15d088bd8b7002300e00d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c805bbf9315033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23ded2aa000000", 0xb8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3bf97ff8836d000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0xfffffd85, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="600000000906010800000000000000ed00070000000900020073797a310000000067fe020073797a3200000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e2200"], 0x60}, 0x1, 0x0, 0x0, 0x10000042}, 0x800) 990.154603ms ago: executing program 8 (id=8407): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000000), 0x4) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES8, @ANYRESOCT, @ANYRES64, @ANYBLOB="e09245f495cafe0e433b7d41d91e510fd970c2d2aec09f3c2f62b81aced417be0c43f560690fdd6eb342eeb042e218316fe9fda24a3d46b4495136ca819c35c5", @ANYRES16=r0], 0x48) (async) r2 = socket$kcm(0x23, 0x5, 0x0) sendmsg$sock(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x28, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[], 0x8c}}, 0xc1) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) (async) r5 = socket$kcm(0x2, 0xa, 0x2) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_type(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r9, &(0x7f0000000280), 0x9) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f0000000300)={r1, &(0x7f0000000140)='syzkaller1\x00', 0x64000, &(0x7f00000001c0)={@_ha_fsid={[0xbf3, 0x1]}, {0x3554, 0x9, 0x7, 0x2}}, 0x7, &(0x7f0000000280), &(0x7f00000002c0)}) write$tun(r10, &(0x7f0000000100)=ANY=[@ANYRESHEX=r3, @ANYRES16=r2], 0x78) 939.064593ms ago: executing program 1 (id=8408): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={r1, 0x2e0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff206000000002000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0xff25, 0x0, 0x0}, 0x50) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r4, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000500)=""/79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x1e, &(0x7f00000011c0)=ANY=[@ANYBLOB="ffffffff3b6b59c5eae00400000068993a9e1fb908cf000000000000000000000000000000209c2766c03ecb9595fc8887e0ef0bba9e1b6fc2f0a8f9d2c0d547d8c908634c3e3950df79333ae08693ed1f3a399ed798fe57b6a87c686eaf9306f417b72e8365"], 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000040)=0x27, 0x4) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r6 = openat$cgroup_freezer_state(r2, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000001080)='FROZEN\x00', 0x7) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={r1, 0x2e0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff206000000002000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0xff25, 0x0, 0x0}, 0x50) (async) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socket$inet6(0xa, 0x805, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r4, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000500)=""/79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_emit_ethernet(0x1e, &(0x7f00000011c0)=ANY=[@ANYBLOB="ffffffff3b6b59c5eae00400000068993a9e1fb908cf000000000000000000000000000000209c2766c03ecb9595fc8887e0ef0bba9e1b6fc2f0a8f9d2c0d547d8c908634c3e3950df79333ae08693ed1f3a399ed798fe57b6a87c686eaf9306f417b72e8365"], 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000040)=0x27, 0x4) (async) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) (async) openat$cgroup_freezer_state(r2, &(0x7f00000002c0), 0x2, 0x0) (async) write$cgroup_freezer_state(r6, &(0x7f0000001080)='FROZEN\x00', 0x7) (async) 848.801483ms ago: executing program 1 (id=8409): socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket(0x40000000015, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r0], 0x38}}, 0x10) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222}, 0x90) socket$rds(0x15, 0x5, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$OCFS2_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000280)={0x0, 0x2, 0x3, 0x9, 0x1, 0x8}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x140b, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000040) 715.053674ms ago: executing program 1 (id=8411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x4, &(0x7f0000000080)=""/124, &(0x7f0000000040)=0x7c) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 699.467925ms ago: executing program 5 (id=8412): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004840}, 0x20) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x92, 0x0, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x92, 0x0, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}}}}}}}, 0x0) 696.610107ms ago: executing program 4 (id=8413): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000ea15e9018e6cd5"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r4}, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0x3, 0xa}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x9a8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x290}}, 0x4048010) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000140)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000ea15e9018e6cd5"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r4}, 0xc) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0x3, 0xa}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x9a8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x290}}, 0x4048010) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000140)) (async) 692.649622ms ago: executing program 1 (id=8414): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000100)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x28}}, 0x40080) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x24, r4, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb47}, 0x94) 634.728048ms ago: executing program 8 (id=8415): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}, @nested={0x4, 0x29}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 543.28134ms ago: executing program 1 (id=8416): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x5, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x4, r0}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000300000000020000000000", @ANYRES32=0x0, @ANYRES32], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 542.686854ms ago: executing program 4 (id=8417): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r1, &(0x7f0000000240)={0x1a, 0x207, 0x7, 0x6c, 0x3, 0x0, @remote}, 0x10) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/100, 0x64}, {&(0x7f00000018c0)=""/4122, 0x107b}, {&(0x7f0000000080)=""/118, 0x76}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f0000000000)=""/73, 0x49}, {&(0x7f0000000100)=""/45}], 0x5}, 0x7}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, 0x0}, 0x80000}, {{0x0, 0x0, 0x0}, 0x8000005}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}}], 0x5c, 0x2042, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@remote, 0x0, 0x2b}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) 542.503737ms ago: executing program 5 (id=8418): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16=r0, @ANYBLOB="080029bd7000fddbdf2508000000440003800800030003000000080003000b00000008000300165d0000080003000000000008000100001000000800030000000000080002"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000800) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="120000005400012c000000000000000007"], 0x18}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000001c0)={0x0, 'veth0_vlan\x00', {}, 0x6}) 493.791308ms ago: executing program 8 (id=8419): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002380)=[{{&(0x7f0000000480)={0xa, 0x0, 0x0, @private0, 0x7fffffff}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000580)='3', 0x1}], 0x1}}], 0x1, 0x44191) listen(r0, 0x100) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000540)={0x3b}, 0x8) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r2}, 0x20) accept4(r0, 0x0, 0x0, 0x0) 471.717172ms ago: executing program 1 (id=8420): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) (async) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r7, 0x0) (async) sendmmsg(r6, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000100)="313f7ac12164f7", 0x7}], 0x1}}], 0x1, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "9c47c71d3a804a77", "097b43061271a36add1571f7d885fa04", "2e8ebcc4", "26708b8bbb280a31"}, 0x28) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, &(0x7f0000000100)=0xb, 0x4) (async) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 406.682514ms ago: executing program 4 (id=8421): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x3c, r2, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x20, 0x17, {0x1d, 0x4bb, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}}}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x8050}, 0x4000000) sendmsg$nl_route_sched_retired(r0, &(0x7f0000004f40)={0x0, 0x0, &(0x7f0000004f00)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0x11}, 0x24}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001c00)={0x0, @in, 0x0, 0x0, 0xffffffff}, &(0x7f0000001cc0)=0x9c) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001c00)={0x0, @in, 0x0, 0x0, 0xffffffff}, &(0x7f0000001cc0)=0x9c) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0x1, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000640), r1) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04000000", @ANYRES16=r8, @ANYBLOB="010000000000fcdbdf25230000000c00018008000100", @ANYRES32=r9, @ANYBLOB], 0x20}}, 0x8000) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04000000", @ANYRES16=r8, @ANYBLOB="010000000000fcdbdf25230000000c00018008000100", @ANYRES32=r9, @ANYBLOB], 0x20}}, 0x8000) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x5c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x5c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8881}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8881}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x0, 0x9, 0x0, 0x5}, {0x0, 0x0, 0x804}, 0x200, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newlink={0x130, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x100, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xf0, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x8}}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x2b}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x130}}, 0x0) 385.243072ms ago: executing program 4 (id=8422): r0 = socket$unix(0x1, 0x5, 0x0) syz_emit_ethernet(0xfe, &(0x7f0000000000)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xc8, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0xe, 0x14, "002b228078c8e10a87cf10a0e37bbe3522e2a0d5812008b645088f2672636368285a5538b713f5ab1d5b71e89a6c3f0890a2bdec87949dbe3e6283e5dee7833bd36cf9eb41d293a9dbc1a8096375d96f244eda9dd1b1435ac7241701e58e05d46b50b0a12c58673757640be944806693a698a9bba6018624eefa98f28e3cfee5d951fcf227c6c8d55d58fcee8d57c51500dfdc5ec9179e731fd90ef87a45"}]}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$xdp(r2, &(0x7f0000002c80)={&(0x7f0000000140)={0x2c, 0xc, r1, 0x1a}, 0x10, &(0x7f0000002c00)=[{&(0x7f0000000280)="cfcebeaac9c022fedbe9a84ea3ccbeeaabb2e81d66b1", 0x16}, {&(0x7f00000002c0)="90d391ed4ccb0abf05da44363b146af3a2cbf51999dc28cadf", 0x19}, {&(0x7f0000000600)="ba6fe1911cae4e94f3ff5e8b08a702ae0ffe05ecee9e2c05c7ba83da3aef254ff57f6344915940836dd829777656bd95b081442d555362604f7a31946282e97ab5984cc42576efe2ce48e5eb75353b28ff64e0d0017407ae9369d3eccbd9cd25c9a921b832141940bfe5b83c34741eab98ce8cce74f4db1e8936a912b27d0d1949f38ff4b4f22af70408df4efbd586227fe36141baaea9e8ffdc2341e50cb598cdee3edfee8adcda1ecae53f8754c482133b8516fd2c7937e9f99612f94986cfbfc8e9eed402a8e2a82d0a4c27b3079e463f6e", 0xd3}, {&(0x7f0000000ac0)="cccc186f6802f505bc8a8ee9d6e72fab3f7c5df2bc25b8fc830599a4544fb4f6008bbb682b3c66ebc2daa765873618de40acc7b0d6260aa373c4c682b3fe5a595818f21fa76e214761c60ccbc2b9dbd86389f2de8b7bee8842235dd11e0fd3af409cccedaaa8f314885903f2f18f02536a792ba87f5f30d2dd464e322f2b09bd8b559aedf253762c668cd2ce0cf2fb465f7cd6228066b9fc08a83c06ff5f6294c88f0c87b3624b5e107d2b02ee942c929908b99ea2d5c7d9486c529b5b", 0xbd}, {&(0x7f0000001a00)="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", 0x1000}, {&(0x7f0000002a00)="6986a3cd79ecf77132fd74284f6432f1f3a0855a6f29795f9a5f3ba3b8b901ba26d8d65a5dc47124d372645623f91a602f9c89f56a88a4590960f71cade2efc1f98fcef0cf86961c2abb83cb33b7b81df0d61de6c34fc6f5b14486133312ca23", 0x60}, {&(0x7f0000002a80)="be57ca5bee4bac82b634495aafc16d5e46693a53ec311e6a660a0ccaf2812ea819fba5cb27921e4da1fd8f3519440eeabad1c7ce3ee6192b65b1765e6b8d1b9deb394b626118ebfa7b543beb0b34d1058ace30a8528570936c2db02814d5a1a7dc6b74f478", 0x65}, {&(0x7f0000002b00)="aba42f4ad5b9bafe3621b76c65c83f4243b8d2d0e1ef54923ed8ab9c91f2482125dec971d7ffed1b2b6a3edfe83fa4a417a7938bad8c9b38b9838a629fc614d75dce5530bef31faa58baf87ce78932165bb2ab30b3624aacf0866a7b580e39c5c516f579d4ac54a80bcad6d1af54313c4b348eb30456ada65c7a99f00a353c7b80c0cf617b7d674a05f5459a42081e39c2b27ea74f8f70b002c74589a4196509a710e3d10d816212fa932caba07fa633bd4247c7b9e0cbcc277928a525c6709ee0c79885d9c523dc7b0f89bde5278270d18a3ead42a43fa2d3b27078d2b338098d434aebfb457edd13835d14f09381113ce240eb0fbdbaec1a7e", 0xfa}], 0x8}, 0x40040) sendmmsg$inet(r3, &(0x7f00000049c0)=[{{&(0x7f0000000dc0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f00000019c0)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x2, 0x40090) syz_emit_ethernet(0x14, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863, "5aa772f37902"}}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x7fff, 0x9, 0x8008, 0x6e, 0x4005, 0x0, 0x7, 0x1, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}, 0x1}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x108, 0x108, 0x4, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x6c, 0x0, 0x68, 0x3}, @ptr={0xc, 0x0, 0x0, 0x2, 0x4}, @const={0xe, 0x0, 0x0, 0xa, 0x3}, @enum={0x9, 0x2, 0x0, 0x6, 0x4, [{0x4, 0xffffffc0}, {0x1, 0x7ff}]}, @enum64={0x10, 0x8, 0x0, 0x13, 0x0, 0x2, [{0xb, 0xd070, 0xffffffff}, {0xf, 0x9, 0x4}, {0xa, 0x3, 0x2}, {0x109, 0x8, 0x2}, {0x5, 0x5, 0x3}, {0x1, 0x7, 0x5}, {0xb, 0x7, 0x9}, {0xe, 0x400, 0xfffffffe}]}, @volatile={0x5, 0x0, 0x0, 0x9, 0x1}, @var={0xa, 0x0, 0x0, 0xe, 0x4, 0x2}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x1, 0x1}, {0x0, 0x3}, {0x10, 0x4}, {0x10, 0xffffffff}]}, @var={0x6, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x30, 0x0]}}, &(0x7f0000000500)=""/179, 0x124, 0xb3, 0x0, 0x5}, 0x28) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWSET={0x1ec, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_SET_DESC={0x1b0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x130, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff0001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc5b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x56d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1921029c}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd9b0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd69c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x17}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7989}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}]}]}, @NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc0000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc00}]}]}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_SIZE={0x8}]}]}], {0x14, 0x10}}, 0x214}}, 0x4008050) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3c0000001800dd8d00000000fdffffff020000000000000600000000060015000100000018001680140001"], 0x3c}}, 0x0) 379.508588ms ago: executing program 5 (id=8423): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000340)=0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x83}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) 299.105269ms ago: executing program 4 (id=8424): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050001000000000071112e00000000008510fd0002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x70) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect(r0, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x80) 280.598326ms ago: executing program 8 (id=8425): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x10011, 0x1, 0x2, 0x2, 0xc}, 0x20) r0 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x126}, 0x1c) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r1, 0x8b32, &(0x7f0000000040)) 233.087077ms ago: executing program 5 (id=8426): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x38, r1, 0x307, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000002040)=0xe5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 189.858559ms ago: executing program 4 (id=8427): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2={0xff, 0x6}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32=r3, @ANYBLOB="080026040a000100000000000000000008000f0005"], 0x30}, 0x1, 0x0, 0x0, 0x20044080}, 0x80c0) 119.054655ms ago: executing program 8 (id=8428): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x25dfdbfd, {0x3, 0x2}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) (async) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r1, 0x29, 0x38, 0x0, 0x0) (async) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffc}, 0x20) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010200000000000000000000000005000100070000000c0007800800120000f5ff00050004000000000005000500020000220900020073797a310000000011000300686173683a6e65742c6e6574"], 0x58}}, 0x0) (async) r3 = epoll_create(0x9) (async) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) (async) listen(r4, 0x0) recvmmsg(r4, &(0x7f00000043c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x142, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000080)={0x40000000}) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff", @ANYRESHEX=r1, @ANYRES16=r1], 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000280)) 60.379041ms ago: executing program 5 (id=8429): syz_emit_ethernet(0x86, &(0x7f0000000680)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local, {[@rr={0x7, 0x3}, @rr={0x7, 0x7, 0x0, [@rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 8 (id=8430): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)={0x0, @aes256, 0x0, @desc2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003"], 0x0, 0x37}, 0x28) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x500, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x2}) ioctl$TUNSETCARRIER(r5, 0x400454e2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r8) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x38, r9, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000004) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, '+%$+(%&\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x2c000040) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0xfe33) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.7.6296'. [ 468.044084][T28259] netlink: 'syz.7.6302': attribute type 39 has an invalid length. [ 468.062913][T28259] hsr_slave_0: left promiscuous mode [ 468.076976][T28264] netlink: 'syz.2.6305': attribute type 1 has an invalid length. [ 468.086574][T28259] hsr_slave_1: left promiscuous mode [ 468.128192][T28270] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 468.129506][T28264] bond4: entered promiscuous mode [ 468.145311][T28264] 8021q: adding VLAN 0 to HW filter on device bond4 [ 468.159077][T28272] bond4: entered allmulticast mode [ 468.195535][T28274] netlink: 'syz.1.6308': attribute type 1 has an invalid length. [ 468.229789][T28264] bond4: (slave bridge1): making interface the new active one [ 468.240497][T28264] bridge1: entered promiscuous mode [ 468.250386][T28264] bridge1: entered allmulticast mode [ 468.258742][T28264] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 468.274689][T28277] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 468.672597][T28313] netlink: 'syz.2.6321': attribute type 1 has an invalid length. [ 468.701239][T28312] netlink: 'syz.2.6321': attribute type 1 has an invalid length. [ 469.056800][T28333] bridge0: left promiscuous mode [ 469.065556][T28337] netlink: 'syz.5.6329': attribute type 1 has an invalid length. [ 469.074451][T28337] netlink: 'syz.5.6329': attribute type 11 has an invalid length. [ 469.157867][T28333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.176142][T28333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.307723][ T35] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.340385][ T35] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.373119][ T1165] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.398375][ T1165] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.493252][T28366] netlink: 'syz.4.6339': attribute type 9 has an invalid length. [ 469.585373][T28372] net_ratelimit: 16 callbacks suppressed [ 469.585395][T28372] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 469.813416][T28392] veth1_to_batadv: mtu less than device minimum [ 469.915198][T28401] syzkaller0: entered promiscuous mode [ 469.921930][T28401] syzkaller0: entered allmulticast mode [ 469.969537][T28397] syzkaller1: entered promiscuous mode [ 469.979112][T28397] syzkaller1: entered allmulticast mode [ 470.121039][T28417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.138587][T28418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.143888][T28417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.212681][T28424] 8021q: adding VLAN 0 to HW filter on device bond2 [ 470.494387][T28452] veth1_macvtap: left promiscuous mode [ 470.499987][T28452] macsec0: entered allmulticast mode [ 470.544968][T28455] macsec0: entered promiscuous mode [ 470.551702][T28455] veth1_macvtap: entered promiscuous mode [ 470.557489][T28455] veth1_macvtap: entered allmulticast mode [ 470.563791][T28455] macsec0: left promiscuous mode [ 470.568930][T28455] macsec0: left allmulticast mode [ 470.575023][T28455] veth1_macvtap: left allmulticast mode [ 471.197630][T28497] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 471.200632][T28495] openvswitch: netlink: Multiple metadata blocks provided [ 471.474732][T28519] xt_connbytes: Forcing CT accounting to be enabled [ 471.484086][T28519] xt_bpf: check failed: parse error [ 471.631930][T28525] validate_nla: 4 callbacks suppressed [ 471.631948][T28525] netlink: 'syz.7.6395': attribute type 1 has an invalid length. [ 471.662600][T28525] bond3: entered promiscuous mode [ 471.668102][T28525] 8021q: adding VLAN 0 to HW filter on device bond3 [ 471.697936][T28525] 8021q: adding VLAN 0 to HW filter on device bond3 [ 471.716190][T28525] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 471.742255][T28525] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 471.780379][T28525] bond3: (slave ip6gre1): making interface the new active one [ 471.789906][T28525] ip6gre1: entered promiscuous mode [ 471.796795][T28525] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 471.993041][T28549] netlink: 'syz.5.6402': attribute type 1 has an invalid length. [ 472.054685][T28549] bond10: entered promiscuous mode [ 472.060677][T28549] 8021q: adding VLAN 0 to HW filter on device bond10 [ 472.173273][T28559] syzkaller0: entered promiscuous mode [ 472.186774][T28559] syzkaller0: entered allmulticast mode [ 472.316142][T28576] ipt_rpfilter: unknown options [ 472.350033][T28578] netlink: 'syz.7.6412': attribute type 3 has an invalid length. [ 472.529748][T28591] netlink: 'syz.5.6417': attribute type 3 has an invalid length. [ 472.566980][T28591] __nla_validate_parse: 72 callbacks suppressed [ 472.566995][T28591] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6417'. [ 472.636104][T28597] netlink: 'syz.1.6419': attribute type 1 has an invalid length. [ 472.679265][T28597] 8021q: adding VLAN 0 to HW filter on device bond3 [ 472.770685][T28602] xt_cgroup: path and classid specified [ 472.909097][T28625] mac80211_hwsim hwsim53 syzkaller0: entered promiscuous mode [ 472.916910][T28625] mac80211_hwsim hwsim53 syzkaller0: entered allmulticast mode [ 473.163821][T28645] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6433'. [ 473.242781][T28652] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 473.286498][T28657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6434'. [ 473.295968][T28651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6434'. [ 473.385264][T28660] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6438'. [ 473.462110][T28656] H: renamed from dummy0 [ 473.655310][T28676] netlink: 388 bytes leftover after parsing attributes in process `syz.1.6441'. [ 473.721967][T28682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6443'. [ 473.907133][T28699] netlink: 'syz.5.6450': attribute type 7 has an invalid length. [ 473.938904][T28699] netlink: 'syz.5.6450': attribute type 5 has an invalid length. [ 473.964412][T28699] netlink: 17 bytes leftover after parsing attributes in process `syz.5.6450'. [ 474.057653][T28708] netlink: 'syz.5.6454': attribute type 1 has an invalid length. [ 474.090134][T28715] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6456'. [ 474.106423][T28708] 8021q: adding VLAN 0 to HW filter on device bond12 [ 474.118457][T28709] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 474.184259][T28726] netlink: 212180 bytes leftover after parsing attributes in process `syz.5.6458'. [ 474.283265][T28732] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 474.292629][T28734] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 474.306137][T28734] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 474.428533][T28744] netlink: 'syz.5.6465': attribute type 3 has an invalid length. [ 474.437506][T28744] netlink: 'syz.5.6465': attribute type 3 has an invalid length. [ 474.538595][T28757] netlink: Unknown conntrack attr (0) [ 474.608819][T28760] xt_policy: output policy not valid in PREROUTING and INPUT [ 474.666662][T28764] pim6reg1: entered promiscuous mode [ 474.693857][T28764] pim6reg1: entered allmulticast mode [ 474.760227][T28773] Cannot find set identified by id 65534 to match [ 474.815001][T28777] netlink: get zone limit has 4 unknown bytes [ 474.887923][T28783] syzkaller0: entered promiscuous mode [ 474.896055][T28783] syzkaller0: entered allmulticast mode [ 475.082248][T28783] nbd8: detected capacity change from 0 to 63 [ 475.213387][ T35] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.223378][ T35] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.233605][ T35] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.242864][T27536] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.628830][ T5617] block nbd8: Receive control failed (result -104) [ 475.635498][ T5624] block nbd8: Receive control failed (result -32) [ 475.701347][T28828] block nbd9: server does not support multiple connections per device. [ 475.711174][T28828] block nbd9: shutting down sockets [ 475.889681][ T147] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.909943][ T147] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.939005][ T147] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.961058][ T147] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.019766][T28856] netlink: 'syz.7.6506': attribute type 11 has an invalid length. [ 476.148241][T28868] --map-set only usable from mangle table [ 476.602576][T28909] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 476.639945][T28909] xt_cgroup: invalid path, errno=-2 [ 476.700889][T28912] x_tables: duplicate underflow at hook 1 [ 476.713290][T28912] sctp: [Deprecated]: syz.7.6523 (pid 28912) Use of int in max_burst socket option. [ 476.713290][T28912] Use struct sctp_assoc_value instead [ 477.217104][ T1165] bond0: (slave bond_slave_0): interface is now down [ 477.232539][ T1165] bond0: (slave bond_slave_1): interface is now down [ 477.251699][ T1165] bond0: now running without any active interface! [ 477.325324][T28958] 8021q: adding VLAN 0 to HW filter on device bond5 [ 477.564578][T28978] bridge0: port 1(veth1_to_bridge) entered blocking state [ 477.572163][T28978] bridge0: port 1(veth1_to_bridge) entered disabled state [ 477.579566][T28978] veth1_to_bridge: entered allmulticast mode [ 477.588926][T28978] veth1_to_bridge: entered promiscuous mode [ 477.655466][T28982] __nla_validate_parse: 21 callbacks suppressed [ 477.655484][T28982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6544'. [ 477.767121][T28989] sit0: entered promiscuous mode [ 477.774285][T28989] validate_nla: 2 callbacks suppressed [ 477.774302][T28989] netlink: 'syz.5.6547': attribute type 1 has an invalid length. [ 477.788945][T28989] netlink: 1 bytes leftover after parsing attributes in process `syz.5.6547'. [ 477.996311][T29010] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6552'. [ 478.052214][T29010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6552'. [ 478.254690][T29038] xt_l2tp: missing protocol rule (udp|l2tpip) [ 478.313208][T29044] macvtap1: entered promiscuous mode [ 478.318606][T29044] vlan0: entered promiscuous mode [ 478.325419][T29044] macvtap1: entered allmulticast mode [ 478.331160][T29044] vlan0: entered allmulticast mode [ 478.336374][T29044] veth0_vlan: entered allmulticast mode [ 478.362386][T29043] macvtap2: entered promiscuous mode [ 478.388534][T29043] macvtap2: entered allmulticast mode [ 478.450414][T29045] netlink: 'syz.4.6562': attribute type 1 has an invalid length. [ 478.472316][T29045] 8021q: adding VLAN 0 to HW filter on device bond2 [ 478.489594][T29045] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6562'. [ 478.541855][T29062] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6567'. [ 479.154407][T29066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6568'. [ 479.167134][T29066] netlink: 'syz.4.6568': attribute type 3 has an invalid length. [ 479.167155][T29067] netlink: 'syz.4.6568': attribute type 3 has an invalid length. [ 479.176842][T29066] netlink: 666 bytes leftover after parsing attributes in process `syz.4.6568'. [ 479.184807][T29067] netlink: 666 bytes leftover after parsing attributes in process `syz.4.6568'. [ 479.255700][T29067] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6568'. [ 479.346747][T29072] netlink: 'syz.4.6569': attribute type 1 has an invalid length. [ 479.367257][T29072] 8021q: adding VLAN 0 to HW filter on device bond3 [ 479.383973][T29071] netlink: 'syz.4.6569': attribute type 1 has an invalid length. [ 479.391855][T29071] netlink: 'syz.4.6569': attribute type 2 has an invalid length. [ 479.805159][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055fa3800: rx timeout, send abort [ 479.813993][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055fa3800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 481.197241][T29028] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 481.334640][T29085] x_tables: duplicate underflow at hook 3 [ 481.380508][T29085] IPVS: set_ctl: invalid protocol: 1 172.30.0.2:20004 [ 481.403808][T29085] IPVS: set_ctl: invalid protocol: 164 10.1.1.1:20002 [ 481.426731][T29096] SET target dimension over the limit! [ 481.821957][T29131] syzkaller1: entered promiscuous mode [ 481.836341][T29131] syzkaller1: entered allmulticast mode [ 481.910351][T29139] syzkaller1: entered promiscuous mode [ 481.917517][T29139] syzkaller1: entered allmulticast mode [ 482.413027][T29178] xt_hashlimit: size too large, truncated to 1048576 [ 482.428333][T29176] xt_hashlimit: max too large, truncated to 1048576 [ 482.445270][T29177] xt_hashlimit: max too large, truncated to 1048576 [ 482.463960][T29180] netlink: 'syz.4.6602': attribute type 1 has an invalid length. [ 483.220038][T29236] : renamed from gretap0 [ 483.317456][T29247] __nla_validate_parse: 8 callbacks suppressed [ 483.317475][T29247] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6623'. [ 483.350434][T29248] syzkaller0: entered promiscuous mode [ 483.356920][T29248] syzkaller0: entered allmulticast mode [ 483.367642][T29247] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6623'. [ 483.381703][T29248] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 483.539662][T29263] netlink: 'syz.5.6628': attribute type 1 has an invalid length. [ 483.614908][T29275] netlink: 'syz.4.6631': attribute type 1 has an invalid length. [ 483.628730][T29275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6631'. [ 483.654652][T29275] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6631'. [ 483.676723][T29275] C: renamed from lo [ 483.689004][T29275] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 483.716865][T29275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6631'. [ 484.106527][T29314] netlink: zone id is out of range [ 484.151657][T29314] netlink: zone id is out of range [ 484.171554][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 484.181044][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 484.188412][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 484.197652][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 484.205247][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 484.217178][T29314] netlink: zone id is out of range [ 484.225292][T29314] netlink: zone id is out of range [ 484.231190][T29314] netlink: zone id is out of range [ 484.236601][T29314] netlink: zone id is out of range [ 484.252434][T29314] netlink: zone id is out of range [ 484.258101][T29318] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6642'. [ 484.279054][T29322] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6640'. [ 484.305883][T29314] netlink: zone id is out of range [ 484.314658][T29314] netlink: zone id is out of range [ 484.450728][T29333] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 484.509901][T29342] ip6tnl2: entered allmulticast mode [ 484.537458][T29342] bridge11: entered promiscuous mode [ 484.551478][T29342] bridge11: entered allmulticast mode [ 484.765003][T29364] netlink: 'syz.5.6652': attribute type 3 has an invalid length. [ 484.782679][T29364] netlink: 'syz.5.6652': attribute type 3 has an invalid length. [ 484.805610][T29363] syzkaller0: entered promiscuous mode [ 484.806987][T29364] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6652'. [ 484.821131][T29363] syzkaller0: entered allmulticast mode [ 484.925326][T29375] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6656'. [ 484.947894][T29374] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6656'. [ 485.100283][T29383] bond13: Unable to set peer notification delay as MII monitoring is disabled [ 485.117611][T29383] bond13 (unregistering): Released all slaves [ 485.286798][T29405] Cannot find add_set index 2 as target [ 485.302690][T29408] Cannot find add_set index 2 as target [ 485.337026][T29410] netlink: 'syz.7.6663': attribute type 63 has an invalid length. [ 485.372054][T29410] netlink: 'syz.7.6663': attribute type 63 has an invalid length. [ 485.386255][T29321] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.402640][T29321] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.410674][T29321] bridge_slave_0: entered allmulticast mode [ 485.427892][T29321] bridge_slave_0: entered promiscuous mode [ 485.453602][T29321] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.486272][T29321] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.519557][T29321] bridge_slave_1: entered allmulticast mode [ 485.539071][T29415] Bluetooth: MGMT ver 1.23 [ 485.557271][T29321] bridge_slave_1: entered promiscuous mode [ 485.561213][T29420] netlink: 'syz.7.6667': attribute type 1 has an invalid length. [ 485.608017][T29420] netlink: 'syz.7.6667': attribute type 1 has an invalid length. [ 485.628190][T29321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.664259][T29321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.774515][T29321] team0: Port device team_slave_0 added [ 485.797526][T29321] team0: Port device team_slave_1 added [ 485.933539][T29321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.988471][T29321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.019039][T29321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.056859][T29321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.080529][T29321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.113666][T29321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.224635][T29321] hsr_slave_0: entered promiscuous mode [ 486.233066][T29321] hsr_slave_1: entered promiscuous mode [ 486.239496][T29321] debugfs: 'hsr0' already exists in 'hsr' [ 486.245511][ T5617] Bluetooth: hci0: command tx timeout [ 486.251437][T29321] Cannot create hsr debugfs directory [ 486.401470][T29321] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 486.429324][T29321] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 486.453841][T29321] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 486.482778][T29321] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 486.508232][T29321] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 486.539615][T29321] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 486.564537][T29321] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 486.593875][T29321] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 486.666688][T29490] netlink: 'syz.5.6685': attribute type 6 has an invalid length. [ 486.676435][T16689] IPVS: starting estimator thread 0... [ 486.684485][T29490] netlink: 'syz.5.6685': attribute type 6 has an invalid length. [ 486.771149][T29502] IPVS: using max 45 ests per chain, 108000 per kthread [ 486.775085][T29504] netlink: 'syz.4.6686': attribute type 11 has an invalid length. [ 486.859078][T29321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.925557][T29321] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.944713][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.951894][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.975193][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.982382][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.097274][T29516] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 487.185838][T29521] IPv6: NLM_F_CREATE should be specified when creating new route [ 487.777990][T29557] 8021q: adding VLAN 0 to HW filter on device bond6 [ 487.804163][T29321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.996515][T29583] mac80211_hwsim hwsim67 syzkaller0: entered promiscuous mode [ 488.029429][T29583] mac80211_hwsim hwsim67 syzkaller0: entered allmulticast mode [ 488.197767][T29602] ip6t_srh: unknown srh match flags 4000 [ 488.205902][T29601] ip6t_srh: unknown srh match flags 4000 [ 488.274658][T29601] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 488.324276][ T5624] Bluetooth: hci0: command tx timeout [ 488.343268][T29321] veth0_vlan: entered promiscuous mode [ 488.368884][T29619] x_tables: duplicate underflow at hook 1 [ 488.372182][T29602] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 488.384977][T29619] __nla_validate_parse: 17 callbacks suppressed [ 488.385008][T29619] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6711'. [ 488.387034][T29622] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6710'. [ 488.395095][T29321] veth1_vlan: entered promiscuous mode [ 488.419702][T29622] netlink: 1 bytes leftover after parsing attributes in process `syz.7.6710'. [ 488.434256][T29622] netlink: 618 bytes leftover after parsing attributes in process `syz.7.6710'. [ 488.434886][T29619] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6711'. [ 488.467425][T29626] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6712'. [ 488.493464][T29626] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6712'. [ 488.503904][T29321] veth0_macvtap: entered promiscuous mode [ 488.526037][T29321] veth1_macvtap: entered promiscuous mode [ 488.592051][T29321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.627700][T29321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.675725][T29634] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6715'. [ 488.699023][T27537] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.718655][T27537] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.774728][T27537] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.797884][T27537] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.837348][T29646] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6719'. [ 488.954326][T27537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.987029][T27537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.058078][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.089996][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.173505][T29663] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6725'. [ 489.548884][T29701] veth0: entered promiscuous mode [ 489.565243][T29700] net_ratelimit: 47 callbacks suppressed [ 489.565262][T29700] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 489.653173][T29701] veth0: left promiscuous mode [ 489.653519][T29712] xt_hashlimit: size too large, truncated to 1048576 [ 489.879063][T29721] sctp: [Deprecated]: syz.7.6739 (pid 29721) Use of struct sctp_assoc_value in delayed_ack socket option. [ 489.879063][T29721] Use struct sctp_sack_info instead [ 490.023283][T29728] nbd: must specify at least one socket [ 490.037031][T29728] nbd: must specify at least one socket [ 490.056707][T29727] ip6gre2: entered allmulticast mode [ 490.060017][T29732] validate_nla: 36 callbacks suppressed [ 490.060034][T29732] netlink: 'syz.7.6744': attribute type 39 has an invalid length. [ 490.173304][T29737] syzkaller0: entered promiscuous mode [ 490.190544][T29737] syzkaller0: entered allmulticast mode [ 490.402358][ T5624] Bluetooth: hci0: command 0x040f tx timeout [ 490.588555][T29780] netlink: 'syz.8.6760': attribute type 4 has an invalid length. [ 490.603489][T29780] netlink: 'syz.8.6760': attribute type 15 has an invalid length. [ 490.628798][T29780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.780338][T29803] tipc: Invalid UDP bearer configuration [ 490.780377][T29803] tipc: Enabling of bearer rejected, failed to enable media [ 490.879759][T29810] netlink: 'syz.5.6769': attribute type 2 has an invalid length. [ 490.890204][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.928243][T29810] netlink: 'syz.5.6769': attribute type 1 has an invalid length. [ 490.936753][T29810] netlink: 'syz.5.6769': attribute type 2 has an invalid length. [ 490.947128][T29810] netlink: 'syz.5.6769': attribute type 1 has an invalid length. [ 490.958861][T29810] netlink: 'syz.5.6769': attribute type 2 has an invalid length. [ 490.962439][T16689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.014814][T29811] sit0: left promiscuous mode [ 491.040071][T29811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.049821][T29811] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.059402][T29811] batman_adv: batadv0: Interface activated: H [ 491.067312][T29811] batadv0: mtu less than device minimum [ 491.069530][T29827] netlink: 'syz.8.6771': attribute type 1 has an invalid length. [ 491.075081][T29811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 491.093126][T29811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 491.104655][T29811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 491.115611][T29811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 491.126869][T29811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 491.148927][T29811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.187478][T29811] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 491.198344][T29811] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 491.214767][T29811] veth1_vlan: left promiscuous mode [ 491.221690][T29811] veth0_vlan: left promiscuous mode [ 491.227654][T29811] veth0_vlan: entered promiscuous mode [ 491.236640][T29811] veth1_vlan: entered promiscuous mode [ 491.246901][T29811] veth1_macvtap: left promiscuous mode [ 491.254790][T29811] veth0_macvtap: left promiscuous mode [ 491.261663][T29811] veth0_macvtap: entered promiscuous mode [ 491.270422][T29811] veth1_macvtap: entered promiscuous mode [ 491.308120][ T147] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.317296][ T147] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.348533][ T147] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.362722][T27537] bond12: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 491.377440][T27537] bond12: (slave veth0_to_bond): making interface the new active one [ 491.392541][T27537] bond12: active interface up! [ 491.398760][ T147] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.711335][T29845] syzkaller1: entered promiscuous mode [ 491.716956][T29845] syzkaller1: entered allmulticast mode [ 491.726065][T29845] netlink: 'syz.4.6773': attribute type 1 has an invalid length. [ 492.481026][ T5624] Bluetooth: hci0: command 0x040f tx timeout [ 492.996843][T29726] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 493.048259][ T1165] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.057593][ T1165] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.067878][ T1165] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.079940][ T1165] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.794396][T29808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 494.029830][T29870] batadv0: entered promiscuous mode [ 494.056105][T29870] macsec1: entered promiscuous mode [ 494.074216][T29870] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 494.101918][T29870] batadv0: left promiscuous mode [ 494.147264][T29879] __nla_validate_parse: 21 callbacks suppressed [ 494.147290][T29879] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6786'. [ 494.168762][T29877] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6786'. [ 494.183471][T29880] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 494.416215][T29907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6794'. [ 494.430311][T29905] IPv6: NLM_F_CREATE should be specified when creating new route [ 494.561436][ T5617] Bluetooth: hci0: command 0x040f tx timeout [ 494.601448][T27537] net_ratelimit: 36 callbacks suppressed [ 494.601480][T27537] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 494.624211][T27537] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 494.658108][T29917] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6799'. [ 494.719022][T29918] 8021q: adding VLAN 0 to HW filter on device bond13 [ 494.854229][T29932] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6803'. [ 494.868177][T29935] netlink: 'syz.7.6804': attribute type 11 has an invalid length. [ 494.902230][T29935] netlink: 199788 bytes leftover after parsing attributes in process `syz.7.6804'. [ 495.093843][T29950] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6808'. [ 495.121489][T16690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.142648][T29952] validate_nla: 7 callbacks suppressed [ 495.142667][T29952] netlink: 'syz.7.6811': attribute type 11 has an invalid length. [ 495.192395][ T147] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 495.207866][ T147] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 495.264090][T29957] netlink: 199172 bytes leftover after parsing attributes in process `syz.4.6809'. [ 495.280716][T29963] bond0: (slave bond_slave_1): Releasing backup interface [ 495.337000][T29961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6813'. [ 495.396927][T29969] bond3: left promiscuous mode [ 495.402295][T29969] ip6gre1: left promiscuous mode [ 495.558250][T29980] xt_hashlimit: size too large, truncated to 1048576 [ 495.595967][T29984] netlink: 'syz.4.6822': attribute type 21 has an invalid length. [ 495.604923][T29984] IPv6: NLM_F_CREATE should be specified when creating new route [ 495.653918][T29987] Cannot find add_set index 65532 as target [ 495.675437][T29987] Cannot find add_set index 65532 as target [ 495.762862][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.768049][T29995] netlink: 'syz.4.6825': attribute type 1 has an invalid length. [ 495.782482][ T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 495.796892][ T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 495.843570][T29998] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6826'. [ 495.922822][T30004] netlink: 'syz.1.6829': attribute type 1 has an invalid length. [ 495.937401][T30006] geneve2: entered promiscuous mode [ 495.943858][T30006] geneve2: entered allmulticast mode [ 495.965193][T30004] 8021q: adding VLAN 0 to HW filter on device bond8 [ 495.972671][T27537] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 495.982248][T27537] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 495.996329][T27537] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 496.006467][T27537] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 496.162520][T16696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.316500][T30034] netlink: 'syz.4.6837': attribute type 1 has an invalid length. [ 496.337777][ T147] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 496.455575][T30034] bond4: entered promiscuous mode [ 496.462919][T30034] 8021q: adding VLAN 0 to HW filter on device bond4 [ 496.489875][T30047] pimreg3: entered allmulticast mode [ 496.581238][T30055] netlink: 'syz.4.6844': attribute type 11 has an invalid length. [ 496.641178][ T5617] Bluetooth: hci0: command 0x040f tx timeout [ 496.659032][T27537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.670587][T27537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.942696][T30089] xt_socket: unknown flags 0x8 [ 497.175124][T30108] tipc: Started in network mode [ 497.180052][T30108] tipc: Node identity be3fddbdf3a1, cluster identity 4711 [ 497.188315][T30108] tipc: Enabled bearer , priority 0 [ 497.199203][T30108] syzkaller0: entered promiscuous mode [ 497.207928][T30108] syzkaller0: entered allmulticast mode [ 497.225280][T30111] xt_nat: multiple ranges no longer supported [ 497.356077][T30116] netlink: 'syz.5.6865': attribute type 1 has an invalid length. [ 497.391631][T30116] 8021q: adding VLAN 0 to HW filter on device bond14 [ 497.505982][T30121] tipc: Resetting bearer [ 497.545292][T30116] bond14: (slave geneve3): making interface the new active one [ 497.555372][T30116] bond14: (slave geneve3): Enslaving as an active interface with an up link [ 497.567061][T30107] tipc: Resetting bearer [ 497.577098][T30107] tipc: Disabling bearer [ 497.754768][T30131] netlink: 'syz.8.6869': attribute type 267 has an invalid length. [ 497.767604][T30131] netlink: 'syz.8.6869': attribute type 3 has an invalid length. [ 498.259530][T30119] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 498.271997][T30119] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 498.283145][T30162] netlink: 'syz.7.6877': attribute type 11 has an invalid length. [ 498.397734][T30160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.422235][T30160] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.438372][T30160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.518970][T30160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.546432][T30160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.576024][T30180] netlink: 'syz.8.6879': attribute type 1 has an invalid length. [ 498.610076][T30119] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 498.616072][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.616142][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.620229][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.638091][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.648509][T30119] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 498.800651][T30119] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 498.826795][T30119] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 498.846922][T30189] syzkaller1: tun_chr_ioctl cmd 35108 [ 498.874397][T30119] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 498.889673][T30119] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 498.945168][T30119] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 498.968965][T30119] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 499.153227][ T5624] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 499.175986][ T5624] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 499.184373][ T5624] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 499.195061][T20128] syz_tun (unregistering): left allmulticast mode [ 499.205137][ T5624] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 499.219573][ T5624] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 499.278972][ T5617] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 499.290233][ T5617] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 499.299163][ T5617] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 499.311129][ T5617] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 499.322215][ T5617] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 499.342391][T27537] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.353327][T27537] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.464499][T27537] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.510502][T27537] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.585233][T30225] __nla_validate_parse: 8 callbacks suppressed [ 499.585846][T30225] netlink: 10 bytes leftover after parsing attributes in process `syz.8.6892'. [ 499.625587][T30223] net_ratelimit: 22 callbacks suppressed [ 499.625618][T30223] openvswitch: netlink: IPv4 tun info is not correct [ 499.652036][T27537] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.676132][T27537] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.700304][T30230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6894'. [ 499.735706][T27537] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.753700][T27537] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.808574][T30230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6894'. [ 499.952480][ T1165] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 499.967497][ T1165] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 499.976349][T30249] syzkaller1: entered promiscuous mode [ 500.012519][T30249] syzkaller1: entered allmulticast mode [ 500.226689][T30260] netlink: 'syz.1.6902': attribute type 8 has an invalid length. [ 500.243257][T16707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.269688][T30260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6902'. [ 500.324454][T16696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.394905][T27537] batman_adv: batadv0: Removing interface: gretap2 [ 500.421438][T27537] bond14 (unregistering): (slave geneve3): Releasing active interface [ 500.465984][T27537] bond5 (unregistering): (slave bridge1): Releasing active interface [ 500.522445][ T147] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 500.537385][ T147] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 500.577679][T27537] bond9 (unregistering): (slave bridge8): Releasing backup interface [ 500.607930][T30281] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6905'. [ 500.663878][T27537] bond0 (unregistering): (slave team0): Releasing backup interface [ 500.688390][T27537] bond0 (unregistering): Released all slaves [ 500.699376][T30286] netlink: 'syz.4.6906': attribute type 24 has an invalid length. [ 500.710727][T27537] bond1 (unregistering): Released all slaves [ 500.726322][T27537] bond2 (unregistering): Released all slaves [ 500.739104][T27537] bond3 (unregistering): Released all slaves [ 500.751763][T27537] bond4 (unregistering): Released all slaves [ 500.766624][T27537] bond5 (unregistering): Released all slaves [ 500.781309][T27537] bond6 (unregistering): Released all slaves [ 500.794231][T27537] bond7 (unregistering): Released all slaves [ 500.808912][T27537] bond8 (unregistering): Released all slaves [ 500.823942][T27537] bond9 (unregistering): Released all slaves [ 500.836738][T27537] bond10 (unregistering): Released all slaves [ 500.851460][T27537] bond11 (unregistering): Released all slaves [ 500.864148][T27537] bond12 (unregistering): (slave veth0_to_bond): Releasing active interface [ 500.875577][T27537] bond12 (unregistering): Released all slaves [ 500.888837][T16707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.902395][T27537] bond13 (unregistering): Released all slaves [ 500.916686][T27537] bond14 (unregistering): Released all slaves [ 500.953716][T30260] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.999025][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 501.074882][ T1172] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 501.089740][ T1172] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 501.105200][T27537] tipc: Disabling bearer [ 501.105325][T27537] tipc: Left network mode [ 501.186066][T27537] IPVS: stopping backup sync thread 25032 ... [ 501.362534][ T5624] Bluetooth: hci9: command tx timeout [ 501.461573][T27537] hsr_slave_0: left promiscuous mode [ 501.498518][T27537] hsr_slave_1: left promiscuous mode [ 501.525874][T27537] batman_adv: batadv0: Interface deactivated: H [ 501.552585][T27537] batman_adv: batadv0: Removing interface: H [ 501.576904][T30330] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6911'. [ 501.603451][T27537] veth1_macvtap: left promiscuous mode [ 501.609283][T30332] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6913'. [ 501.616653][T27537] veth0_macvtap: left promiscuous mode [ 501.625523][T27537] veth1_vlan: left promiscuous mode [ 501.632010][T27537] veth0_vlan: left promiscuous mode [ 501.958303][T30331] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6912'. [ 501.968126][T30331] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6912'. [ 501.981221][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 502.045795][T30349] x_tables: duplicate entry at hook 2 [ 502.250517][T30370] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 502.327173][T30182] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.353131][T30375] netlink: 'syz.7.6921': attribute type 21 has an invalid length. [ 502.383217][T30375] netlink: 128 bytes leftover after parsing attributes in process `syz.7.6921'. [ 502.399027][T30182] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.421811][T30182] bridge_slave_0: entered allmulticast mode [ 502.444939][T30182] bridge_slave_0: entered promiscuous mode [ 502.474869][T27537] IPVS: stop unused estimator thread 0... [ 502.486286][T30182] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.510445][T30182] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.542335][T30182] bridge_slave_1: entered allmulticast mode [ 502.573474][T30182] bridge_slave_1: entered promiscuous mode [ 502.632882][T30182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.650679][T30182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.716546][T30182] team0: Port device team_slave_0 added [ 502.741709][T30182] team0: Port device team_slave_1 added [ 502.743474][T19953] IPVS: starting estimator thread 0... [ 502.822945][T30182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.842415][T30182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.871063][T30405] IPVS: using max 57 ests per chain, 136800 per kthread [ 502.895759][T30182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.911830][T30182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.918932][T30182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.946993][T30182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.996647][T30182] hsr_slave_0: entered promiscuous mode [ 503.003563][T30182] hsr_slave_1: entered promiscuous mode [ 503.009947][T30182] debugfs: 'hsr0' already exists in 'hsr' [ 503.017834][T30182] Cannot create hsr debugfs directory [ 503.351406][T30442] netlink: 'syz.1.6934': attribute type 1 has an invalid length. [ 503.366160][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 503.414167][T30442] bond9: (slave bridge4): making interface the new active one [ 503.422661][T30442] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 503.431559][ T13] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.442741][ T5624] Bluetooth: hci9: command tx timeout [ 503.445359][ T13] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.459300][ T13] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.485898][ T13] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.695484][T30461] mac80211_hwsim hwsim67 syzkaller0: left promiscuous mode [ 503.716898][T30461] mac80211_hwsim hwsim67 syzkaller0: left allmulticast mode [ 503.759907][T30461] netlink: 'syz.4.6942': attribute type 7 has an invalid length. [ 503.881317][T30182] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 503.919804][T30182] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 503.941784][T30182] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 503.967591][T30182] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 504.051849][T30483] bond2: entered promiscuous mode [ 504.058806][T30182] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 504.073789][T30182] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 504.083829][T30182] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 504.095920][T30182] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 504.107354][T30477] mac80211_hwsim hwsim67 syzkaller0: entered promiscuous mode [ 504.120183][T30477] mac80211_hwsim hwsim67 syzkaller0: entered allmulticast mode [ 504.132853][T30473] bridge_slave_0: invalid flags given to default FDB implementation [ 504.339760][T30511] : entered promiscuous mode [ 504.403302][T30182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.483184][T30182] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.521810][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.528966][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.540770][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.548007][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.578035][T30521] gtp0: entered promiscuous mode [ 504.593360][T30521] gtp0: entered allmulticast mode [ 504.820685][T30544] __nla_validate_parse: 14 callbacks suppressed [ 504.820703][T30544] netlink: 56 bytes leftover after parsing attributes in process `syz.8.6959'. [ 504.845445][T30550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6961'. [ 504.987405][T30562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6963'. [ 505.127655][T30573] net_ratelimit: 9 callbacks suppressed [ 505.127685][T30573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 505.227155][T30580] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6966'. [ 505.252106][T30593] netlink: 'syz.4.6967': attribute type 1 has an invalid length. [ 505.365725][ T4952] block nbd8: Connection timed out, retrying (0/2 alive) [ 505.373817][ T4952] block nbd8: Connection timed out, retrying (0/2 alive) [ 505.382337][ T4952] block nbd8: Connection timed out, retrying (0/2 alive) [ 505.389977][ T25] block nbd8: Dead connection, failed to find a fallback [ 505.399700][ T25] block nbd8: shutting down sockets [ 505.407140][ T4952] block nbd8: Connection timed out, retrying (0/2 alive) [ 505.415107][ T25] blk_print_req_error: 138 callbacks suppressed [ 505.415134][ T25] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 505.435131][ T25] buffer_io_error: 138 callbacks suppressed [ 505.435160][ T25] Buffer I/O error on dev nbd8, logical block 1, async page read [ 505.447551][T30593] bond5: entered promiscuous mode [ 505.452540][ T25] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 505.465515][ T25] Buffer I/O error on dev nbd8, logical block 0, async page read [ 505.473889][ T25] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 505.485010][ T25] Buffer I/O error on dev nbd8, logical block 3, async page read [ 505.493688][ T25] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 505.503773][ T25] Buffer I/O error on dev nbd8, logical block 2, async page read [ 505.506770][T30593] 8021q: adding VLAN 0 to HW filter on device bond5 [ 505.513580][T23499] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 505.528609][T16690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.529259][ T5624] Bluetooth: hci9: command tx timeout [ 505.538355][T23499] Buffer I/O error on dev nbd8, logical block 0, async page read [ 505.552511][T23499] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 505.562238][T23499] Buffer I/O error on dev nbd8, logical block 1, async page read [ 505.570498][T23499] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 505.582400][T23499] Buffer I/O error on dev nbd8, logical block 2, async page read [ 505.590939][T23499] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 505.600670][T23499] Buffer I/O error on dev nbd8, logical block 3, async page read [ 505.610010][T23499] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 505.632984][T23499] Buffer I/O error on dev nbd8, logical block 0, async page read [ 505.652785][T23499] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 505.675220][T23499] Buffer I/O error on dev nbd8, logical block 1, async page read [ 505.695402][T30618] openvswitch: netlink: Key type 1030 is out of range max 32 [ 505.695814][T23499] ldm_validate_partition_table(): Disk read failed. [ 505.738332][T23499] Dev nbd8: unable to read RDB block 0 [ 505.758454][T23499] nbd8: unable to read partition table [ 505.779367][T30182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.807257][T23499] ldm_validate_partition_table(): Disk read failed. [ 505.816758][T30622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 505.849205][T23499] Dev nbd8: unable to read RDB block 0 [ 505.858349][T23499] nbd8: unable to read partition table [ 506.195527][T30642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6978'. [ 506.322490][T16707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.378910][T30182] veth0_vlan: entered promiscuous mode [ 506.414079][T30182] veth1_vlan: entered promiscuous mode [ 506.465575][T30182] veth0_macvtap: entered promiscuous mode [ 506.497877][T30182] veth1_macvtap: entered promiscuous mode [ 506.533639][T30662] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 506.545941][T30662] bond6 (unregistering): Released all slaves [ 506.562125][T16689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.594565][T30182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.618198][T30182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.646462][T27537] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.665401][T27537] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.692762][T27537] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.709854][T27537] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.887282][T27537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.910067][T27537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.922137][T30677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.930442][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.955258][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.970296][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.984798][T30677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.993308][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.074310][T30695] IPv6: Can't replace route, no match found [ 507.090578][T30696] netlink: 'syz.4.6989': attribute type 7 has an invalid length. [ 507.135229][T30696] netlink: 'syz.4.6989': attribute type 8 has an invalid length. [ 507.215993][T30701] ip6t_srh: unknown srh match flags 4000 [ 507.307336][T30713] x_tables: duplicate entry at hook 1 [ 507.319652][T30709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6993'. [ 507.601415][ T5624] Bluetooth: hci9: command tx timeout [ 507.623541][T30727] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.631061][T30727] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.768760][T30727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.786568][T30727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.796649][T30747] x_tables: duplicate underflow at hook 1 [ 507.891459][T30727] bond2: left promiscuous mode [ 507.909880][ T1165] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.946614][ T1165] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.976392][ T1165] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.005707][ T1165] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.039111][ T1165] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.062388][T30755] xt_CT: You must specify a L4 protocol and not use inversions on it [ 508.072219][ T1165] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.102531][T30755] ve: renamed from vlan0 (while UP) [ 508.137972][ T1165] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.177564][ T1165] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.203216][T30764] netlink: 'syz.4.7007': attribute type 23 has an invalid length. [ 508.313256][T30774] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 4, id = 0 [ 508.520142][T30784] gretap2: entered promiscuous mode [ 508.558259][T30784] batman_adv: batadv0: Adding interface: gretap2 [ 508.581967][T30784] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.615232][T30784] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 508.713932][T30792] syzkaller0: entered promiscuous mode [ 508.745559][T30792] syzkaller0: entered allmulticast mode [ 508.828962][T30813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7016'. [ 508.871970][T30809] vlan2: entered promiscuous mode [ 508.883371][T30809] hsr0: entered promiscuous mode [ 508.890184][T30809] vlan2: entered allmulticast mode [ 508.905133][T30809] hsr0: entered allmulticast mode [ 508.910276][T30809] hsr_slave_0: entered allmulticast mode [ 508.922842][T30809] hsr_slave_1: entered allmulticast mode [ 509.219205][T30841] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 509.776970][T30883] netlink: 'syz.8.7037': attribute type 17 has an invalid length. [ 509.822534][T30885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7038'. [ 509.838255][T30893] vlan2: entered promiscuous mode [ 509.856083][T30893] bridge0: entered promiscuous mode [ 509.894355][T30898] netlink: 'syz.8.7042': attribute type 30 has an invalid length. [ 510.051534][T30912] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7044'. [ 510.100179][T30913] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 510.211425][T30919] netlink: 996 bytes leftover after parsing attributes in process `syz.8.7047'. [ 510.240135][T30919] netlink: 27356 bytes leftover after parsing attributes in process `syz.8.7047'. [ 510.498890][T30937] tipc: Enabling of bearer rejected, failed to enable media [ 510.544361][T30937] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7052'. [ 510.558848][T30947] netlink: 'syz.7.7055': attribute type 4 has an invalid length. [ 510.685250][T30957] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7057'. [ 510.813937][T30971] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7060'. [ 510.834326][T30970] netlink: 212328 bytes leftover after parsing attributes in process `syz.7.7060'. [ 510.845724][T30970] net_ratelimit: 1 callbacks suppressed [ 510.845752][T30970] netlink: Unknown conntrack attr (type=2304, max=9) [ 510.878954][T30972] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 510.894971][T30972] bond4 (unregistering): Released all slaves [ 510.939879][T30953] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.947057][T30953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.954545][T30953] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.961695][T30953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.002744][T30953] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 511.016561][T30953] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 511.034358][T30953] team1: left promiscuous mode [ 511.046173][T30953] 8021q: adding VLAN 0 to HW filter on device team1 [ 511.062502][T30953] 8021q: adding VLAN 0 to HW filter on device bond4 [ 511.070336][T30953] macvtap1: left promiscuous mode [ 511.078288][T30953] macvtap2: left promiscuous mode [ 511.083703][T30953] ve: left promiscuous mode [ 511.091749][T30953] 8021q: adding VLAN 0 to HW filter on device bond7 [ 511.110064][T30953] 8021q: adding VLAN 0 to HW filter on device bond9 [ 511.377990][T30988] netlink: 'syz.1.7064': attribute type 2 has an invalid length. [ 511.398948][T30988] netlink: 'syz.1.7064': attribute type 8 has an invalid length. [ 511.413284][T30988] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7064'. [ 511.505555][T30993] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7066'. [ 511.563940][T31001] syzkaller0: entered promiscuous mode [ 511.578943][T31001] syzkaller0: entered allmulticast mode [ 511.718363][T31012] : renamed from bond0 [ 511.760942][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 511.820473][T31018] netlink: 'syz.7.7074': attribute type 4 has an invalid length. [ 511.836909][T31013] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.683141][T31069] netlink: 'syz.7.7090': attribute type 1 has an invalid length. [ 512.784154][T31082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 512.855526][T31084] netlink: 'syz.1.7096': attribute type 1 has an invalid length. [ 512.866858][T31084] netlink: 'syz.1.7096': attribute type 1 has an invalid length. [ 513.010214][T31101] netlink: 'syz.4.7102': attribute type 13 has an invalid length. [ 513.020258][T31101] netlink: 'syz.4.7102': attribute type 58 has an invalid length. [ 513.174999][T31108] openvswitch: netlink: IP tunnel TTL not specified. [ 513.993927][T31165] netlink: 'syz.1.7125': attribute type 11 has an invalid length. [ 514.349566][T27537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.371190][T27537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.471768][T31182] syzkaller0: entered promiscuous mode [ 514.484444][T31182] syzkaller0: entered allmulticast mode [ 514.638651][T31202] block nbd8: NBD_DISCONNECT [ 514.645974][T31202] block nbd8: Send disconnect failed -32 [ 514.666330][T31202] block nbd8: Send disconnect failed -32 [ 514.767293][T31204] IPv6: sit1: Disabled Multicast RS [ 514.919592][T31221] __nla_validate_parse: 15 callbacks suppressed [ 514.919624][T31221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7142'. [ 514.972996][T31218] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7139'. [ 514.998891][T31218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7139'. [ 515.069971][T31238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7142'. [ 515.188830][T31243] syzkaller0: entered promiscuous mode [ 515.202620][T31243] syzkaller0: entered allmulticast mode [ 515.537062][T31257] °“ûkHÜåº|Aä: renamed from gretap0 (while UP) [ 515.902893][T31284] netlink: 44 bytes leftover after parsing attributes in process `syz.8.7161'. [ 515.916496][T31284] netlink: 43 bytes leftover after parsing attributes in process `syz.8.7161'. [ 515.929957][T31284] netlink: 'syz.8.7161': attribute type 6 has an invalid length. [ 515.941818][T31284] netlink: 'syz.8.7161': attribute type 5 has an invalid length. [ 515.949720][T31284] netlink: 43 bytes leftover after parsing attributes in process `syz.8.7161'. [ 516.059572][T31305] netlink: 592 bytes leftover after parsing attributes in process `syz.5.7163'. [ 516.107524][T31309] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7166'. [ 516.126604][T31295] Bluetooth: MGMT ver 1.23 [ 516.132626][T31295] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7163'. [ 516.165691][ T1172] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.174870][ T1172] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.186040][ T1172] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.213783][ T1172] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.527429][T31337] block nbd0: Unsupported socket: should be TCP or UNIX. [ 516.564276][T31337] mac80211_hwsim hwsim67 syzkaller0: left promiscuous mode [ 516.581323][T31337] mac80211_hwsim hwsim67 syzkaller0: left allmulticast mode [ 516.613645][T31337] netlink: 'syz.4.7176': attribute type 1 has an invalid length. [ 516.648405][T31343] IPVS: Scheduler module ip_vs_sip not found [ 516.899849][T31359] 8021q: adding VLAN 0 to HW filter on device bond6 [ 516.914426][T31359] bond5: (slave bond6): Enslaving as an active interface with an up link [ 517.015758][T31371] geneve2: left promiscuous mode [ 517.025328][T31371] geneve2: left allmulticast mode [ 517.041414][T31371] bond4: left promiscuous mode [ 517.058844][T31371] gtp0: left promiscuous mode [ 517.069257][T31371] gtp0: left allmulticast mode [ 517.080504][T31371] bond5: left promiscuous mode [ 517.093996][T31383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.127849][T31371] gretap2: left promiscuous mode [ 517.163638][ T1165] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 517.195415][ T1165] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 517.214473][ T1165] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 517.232126][T31386] tipc: Enabled bearer , priority 0 [ 517.247673][ T1165] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 517.334712][T31381] syzkaller0: entered promiscuous mode [ 517.340318][T31381] syzkaller0: entered allmulticast mode [ 517.348914][T31381] tipc: Resetting bearer [ 517.378627][T31398] openvswitch: netlink: Flow actions attr not present in new flow. [ 517.399970][T31380] tipc: Resetting bearer [ 517.480525][T31403] netlink: 'syz.5.7195': attribute type 2 has an invalid length. [ 517.615004][T31380] tipc: Disabling bearer [ 517.895717][T31427] syzkaller0: entered promiscuous mode [ 517.903545][T31427] syzkaller0: entered allmulticast mode [ 517.909540][T31442] netlink: 'syz.7.7200': attribute type 5 has an invalid length. [ 517.929383][T31442] geneve2: entered promiscuous mode [ 517.935205][T31442] geneve2: entered allmulticast mode [ 517.947391][T27537] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 517.979921][T27537] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 518.037096][T27537] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 518.074358][T27537] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 518.238276][T31427] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 518.276176][T31427] bond1 (unregistering): Released all slaves [ 518.544163][T31480] netlink: 'syz.8.7212': attribute type 1 has an invalid length. [ 518.623903][T31480] 8021q: adding VLAN 0 to HW filter on device bond7 [ 518.664825][T31484] bond7: (slave geneve2): making interface the new active one [ 518.685008][T31484] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 518.694991][T31486] veth1_macvtap: left promiscuous mode [ 518.703910][T27537] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.713963][T27537] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.724561][T27537] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.741263][T27537] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.904130][T31503] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 518.931977][T31509] netlink: 'syz.1.7220': attribute type 1 has an invalid length. [ 518.970395][T31508] pim6reg527: entered allmulticast mode [ 518.984959][T31513] netlink: 'syz.5.7224': attribute type 2 has an invalid length. [ 519.037577][T31515] netlink: 'syz.8.7225': attribute type 11 has an invalid length. [ 519.113866][T31517] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 519.201361][T31527] netlink: 'syz.8.7229': attribute type 1 has an invalid length. [ 519.256439][T31527] 8021q: adding VLAN 0 to HW filter on device bond8 [ 519.265544][T31528] syzkaller0: entered promiscuous mode [ 519.272321][T31528] syzkaller0: entered allmulticast mode [ 519.318303][T31527] bond8: (slave geneve3): making interface the new active one [ 519.328755][T31527] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 520.286614][T31589] sctp: [Deprecated]: syz.7.7248 (pid 31589) Use of int in maxseg socket option. [ 520.286614][T31589] Use struct sctp_assoc_value instead [ 520.340393][T31592] xt_socket: unknown flags 0x50 [ 520.705944][T31611] 8021q: adding VLAN 0 to HW filter on device bond9 [ 520.879287][T31633] __nla_validate_parse: 22 callbacks suppressed [ 520.879307][T31633] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7257'. [ 520.949957][T31641] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7262'. [ 521.082190][T31653] syzkaller1: entered promiscuous mode [ 521.105061][T31653] syzkaller1: entered allmulticast mode [ 521.212801][T31672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7269'. [ 521.223032][T31672] validate_nla: 4 callbacks suppressed [ 521.223066][T31672] netlink: 'syz.4.7269': attribute type 8 has an invalid length. [ 521.252882][T31675] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7267'. [ 521.392422][T31675] bond10: entered promiscuous mode [ 521.409401][T31675] 8021q: adding VLAN 0 to HW filter on device bond10 [ 521.489374][T31691] 8021q: adding VLAN 0 to HW filter on device bond10 [ 521.499848][T31691] bond10: (slave sit2): The slave device specified does not support setting the MAC address [ 521.512814][T31691] bond10: (slave sit2): Error -95 calling set_mac_address [ 524.143207][T31663] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 524.294780][T31720] netlink: 'syz.1.7279': attribute type 1 has an invalid length. [ 524.332654][T31724] bridge_slave_0: left allmulticast mode [ 524.338865][T31724] bridge_slave_0: left promiscuous mode [ 524.347161][T31724] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.365272][T31724] bridge_slave_1: left allmulticast mode [ 524.373131][T31724] bridge_slave_1: left promiscuous mode [ 524.378978][T31724] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.392896][T31724] bond0: (slave bond_slave_0): Releasing backup interface [ 524.406769][T31724] bond0: (slave bond_slave_1): Releasing backup interface [ 524.421806][T31724] team0: Port device team_slave_0 removed [ 524.432477][T31724] team0: Port device team_slave_1 removed [ 524.439166][T31724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.447509][T31724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.470715][T31724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.480678][T31724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.490472][T31724] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 524.508976][T31720] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 524.601288][T31742] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 524.888051][T31770] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 524.929225][T31777] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7293'. [ 524.950237][T31779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7290'. [ 524.965813][T31773] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 525.034939][T31773] bond10 (unregistering): Released all slaves [ 525.442140][T19953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.484627][T19953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.521171][T19953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.601834][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.752065][T31761] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 527.923830][T31810] bridge0: port 3(netdevsim0) entered blocking state [ 527.940283][T31813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7302'. [ 527.948041][T31810] bridge0: port 3(netdevsim0) entered disabled state [ 527.983117][T31810] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 528.025135][T31810] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 528.064209][T31820] syzkaller1: entered allmulticast mode [ 528.193209][T31830] netlink: 48 bytes leftover after parsing attributes in process `syz.8.7310'. [ 528.321184][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.349781][T31848] netlink: 'syz.4.7314': attribute type 1 has an invalid length. [ 528.418110][T31848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.552928][T31864] netlink: 224 bytes leftover after parsing attributes in process `syz.7.7317'. [ 528.565946][T19953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.764019][T31876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7319'. [ 528.783466][T31876] netlink: 'syz.4.7319': attribute type 30 has an invalid length. [ 528.792655][T31876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7319'. [ 528.831405][T31879] syzkaller0: entered promiscuous mode [ 528.840377][T31879] syzkaller0: entered allmulticast mode [ 528.909652][T31881] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 528.916799][T31881] syzkaller1: Linktype set failed because interface is up [ 529.042048][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.055956][T19953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.067032][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.247834][T31903] bond0: (slave gre0): refused to change device type [ 529.428811][T31912] netlink: 'syz.1.7328': attribute type 1 has an invalid length. [ 529.504651][T31914] netlink: 'syz.7.7329': attribute type 22 has an invalid length. [ 529.506668][T31916] netlink: 'syz.7.7329': attribute type 22 has an invalid length. [ 529.552016][T31916] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7329'. [ 529.587235][T31914] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7329'. [ 529.602403][ T147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.610692][T19385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.618823][T19385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.677427][T31923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7332'. [ 529.707453][T31927] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7333'. [ 529.722976][T16696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.157623][T31954] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7339'. [ 530.620488][T31976] netlink: 'syz.7.7344': attribute type 1 has an invalid length. [ 530.642402][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.681158][T19953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.722541][T19953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.801891][T16690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.832361][T31936] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 532.954562][T31996] __nla_validate_parse: 3 callbacks suppressed [ 532.954596][T31996] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7351'. [ 532.986251][T31997] netlink: 'syz.8.7350': attribute type 2 has an invalid length. [ 533.019069][T32002] gretap0: entered promiscuous mode [ 533.028770][T32002] vlan0: entered promiscuous mode [ 533.104549][T32011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.190059][T32025] bond0: (slave bond_slave_1): Releasing backup interface [ 533.214975][T32024] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7358'. [ 533.228924][T32026] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7358'. [ 533.318444][T32035] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7361'. [ 533.436364][T32047] netlink: 'syz.1.7365': attribute type 20 has an invalid length. [ 533.444625][T32047] IPv6: NLM_F_CREATE should be specified when creating new route [ 533.459068][T32047] netlink: 'syz.1.7365': attribute type 20 has an invalid length. [ 533.569676][T16690] hid-generic 0005:16C0:5505.0002: item fetching failed at offset 0/1 [ 533.580181][T16690] hid-generic 0005:16C0:5505.0002: probe with driver hid-generic failed with error -22 [ 533.632188][T32066] netlink: 'syz.1.7370': attribute type 33 has an invalid length. [ 533.634255][T32067] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7369'. [ 533.653755][T32067] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7369'. [ 533.761519][T19953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.888137][T32078] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 534.045148][T32091] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 534.066575][T32086] bond6: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 534.079016][T32086] bond6 (unregistering): Released all slaves [ 534.142233][T32099] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7379'. [ 534.216760][T32101] netlink: 'syz.8.7380': attribute type 11 has an invalid length. [ 534.227269][T32101] netlink: 199820 bytes leftover after parsing attributes in process `syz.8.7380'. [ 534.368041][T32113] netlink: 72 bytes leftover after parsing attributes in process `syz.8.7384'. [ 534.505189][T32121] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7388'. [ 534.652579][ T29] audit: type=1804 audit(1781996573.406:24): pid=32130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7391" name="/newroot/263/cgroup.controllers" dev="tmpfs" ino=1356 res=1 errno=0 [ 534.747386][ T29] audit: type=1800 audit(1781996573.406:25): pid=32130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7391" name="cgroup.controllers" dev="tmpfs" ino=1356 res=0 errno=0 [ 534.805431][T19385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.814422][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.822892][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.833809][T19385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.846154][T16690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.856895][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.876137][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.117023][T32155] netlink: 'syz.1.7402': attribute type 1 has an invalid length. [ 535.199633][T32174] sctp: [Deprecated]: syz.4.7405 (pid 32174) Use of int in max_burst socket option. [ 535.199633][T32174] Use struct sctp_assoc_value instead [ 535.319666][T32184] netlink: 'syz.7.7410': attribute type 4 has an invalid length. [ 535.335365][T32188] netlink: 'syz.7.7410': attribute type 4 has an invalid length. [ 535.721691][T32212] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.729221][T32212] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.883554][T32212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.897536][T32212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.987808][T32212] team1: left allmulticast mode [ 536.003855][T32212] macvtap1: left allmulticast mode [ 536.010135][T32212] ve: left allmulticast mode [ 536.015239][T32212] veth0_vlan: left allmulticast mode [ 536.020655][T32212] macvtap2: left allmulticast mode [ 536.094081][T27537] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.104015][T27537] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.116231][T27537] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.129414][T27537] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.155802][T27537] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.188929][T27537] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.198917][T27537] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.209180][T27537] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.258858][T32236] netlink: 'syz.5.7425': attribute type 1 has an invalid length. [ 536.338410][T32236] ip6gretap1: entered promiscuous mode [ 536.360280][T32236] ip6gretap1: entered allmulticast mode [ 536.373792][T32236] bond1: (slave ip6gretap1): making interface the new active one [ 536.382541][T32236] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 536.390440][T32236] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 536.398709][T32236] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 537.068285][T32311] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.091709][T32311] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 537.126564][T32317] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20001 [ 537.249814][T32311] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.268650][T32311] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 537.347656][T32311] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.386761][T32311] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 537.419781][T32341] veth0: entered promiscuous mode [ 537.445326][T32338] mac80211_hwsim hwsim67 syzkaller0: entered promiscuous mode [ 537.464650][T32338] mac80211_hwsim hwsim67 syzkaller0: entered allmulticast mode [ 537.475004][T32343] veth0: left promiscuous mode [ 537.480540][T32349] netlink: 'syz.1.7460': attribute type 10 has an invalid length. [ 537.497253][T32311] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.511125][T32311] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 537.538607][T32349] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 537.548796][T32351] netlink: 'syz.8.7461': attribute type 1 has an invalid length. [ 537.620365][T32351] 8021q: adding VLAN 0 to HW filter on device bond12 [ 537.727087][T32359] netlink: 'syz.1.7463': attribute type 83 has an invalid length. [ 537.918433][T32364] vlan2: left promiscuous mode [ 537.928123][T32364] hsr0: left promiscuous mode [ 537.933545][T32364] vlan2: left allmulticast mode [ 537.938670][T32364] hsr0: left allmulticast mode [ 537.943901][T32364] hsr_slave_0: left allmulticast mode [ 537.949396][T32364] hsr_slave_1: left allmulticast mode [ 537.957938][T32364] ip6gretap1: left promiscuous mode [ 537.963385][T32364] ip6gretap1: left allmulticast mode [ 537.969590][T32364] A link change request failed with some changes committed already. Interface ip6gretap1 may have been left with an inconsistent configuration, please check. [ 537.993237][ T147] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.003253][ T147] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 538.015964][ T147] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.042933][T32370] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 538.119687][T32359] syzkaller0: entered promiscuous mode [ 538.129157][T32359] syzkaller0: entered allmulticast mode [ 538.136936][ T147] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.146546][ T147] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.172684][ T147] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.184757][ T147] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.193241][ T147] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 538.221482][T32382] __nla_validate_parse: 22 callbacks suppressed [ 538.221501][T32382] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7470'. [ 538.395365][ T147] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.408450][ T147] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 538.417509][ T147] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.426820][ T147] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 538.484893][T32401] validate_nla: 1 callbacks suppressed [ 538.484922][T32401] netlink: 'syz.1.7475': attribute type 9 has an invalid length. [ 538.505326][T32401] netlink: 640 bytes leftover after parsing attributes in process `syz.1.7475'. [ 538.668183][T32411] netlink: 'syz.7.7478': attribute type 8 has an invalid length. [ 538.890102][T32431] netlink: 48 bytes leftover after parsing attributes in process `syz.8.7484'. [ 538.896940][T32434] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 539.098043][T32450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.109395][T32450] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7490'. [ 539.259952][T32465] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7492'. [ 539.294988][T32470] x_tables: unsorted entry at hook 2 [ 539.646000][T32496] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7504'. [ 539.745812][T32497] bond2 (unregistering): Released all slaves [ 539.780510][T32504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7508'. [ 539.793019][T32504] netlink: 'syz.4.7508': attribute type 16 has an invalid length. [ 539.801434][T32504] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7508'. [ 539.801590][T32505] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7507'. [ 539.833507][T32501] gtp1: entered allmulticast mode [ 539.840171][T32501] team0: Device gtp1 is of different type [ 539.855338][T32504] veth0_macvtap: entered allmulticast mode [ 539.867439][T32505] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7507'. [ 540.370569][T32538] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 540.649524][T32557] syzkaller0: entered promiscuous mode [ 540.699841][T32557] syzkaller0: entered allmulticast mode [ 541.076343][T32616] syzkaller1: entered promiscuous mode [ 541.084638][T32616] syzkaller1: entered allmulticast mode [ 541.265853][T32628] netlink: 'syz.7.7536': attribute type 4 has an invalid length. [ 541.358554][T32636] ip6t_REJECT: ECHOREPLY is not supported [ 541.367472][T32641] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 541.393635][T32636] macsec0: entered promiscuous mode [ 541.442540][T32636] macsec0 (unregistering): left promiscuous mode [ 541.728455][T32663] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 541.748561][T32658] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 543.266682][ T303] __nla_validate_parse: 18 callbacks suppressed [ 543.266703][ T303] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.7575'. [ 543.338981][ T313] netlink: 260 bytes leftover after parsing attributes in process `syz.5.7578'. [ 543.376255][ T315] x_tables: unsorted underflow at hook 2 [ 543.388623][ T317] netlink: 260 bytes leftover after parsing attributes in process `syz.5.7578'. [ 543.494826][ T324] netlink: 'syz.5.7580': attribute type 1 has an invalid length. [ 543.547988][ T324] 8021q: adding VLAN 0 to HW filter on device bond2 [ 543.604081][ T324] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 543.631185][ T337] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7585'. [ 543.644295][T19385] IPVS: starting estimator thread 0... [ 543.672391][ T324] macvlan2: entered promiscuous mode [ 543.677811][ T324] macvlan2: entered allmulticast mode [ 543.695014][ T324] bond2: entered promiscuous mode [ 543.702627][ T324] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 543.714684][ T324] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 543.741350][ T340] IPVS: using max 48 ests per chain, 115200 per kthread [ 543.755190][ T324] bond2: left promiscuous mode [ 543.798084][ T351] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7587'. [ 543.818028][ T339] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 543.966424][ T365] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7591'. [ 544.159528][ T389] bridge0: port 3(gretap0) entered blocking state [ 544.182521][ T389] bridge0: port 3(gretap0) entered disabled state [ 544.207828][ T389] gretap0: entered allmulticast mode [ 544.238526][ T393] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.7596'. [ 544.250189][ T395] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7598'. [ 544.250214][ T395] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7598'. [ 544.250238][ T395] netlink: 'syz.5.7598': attribute type 15 has an invalid length. [ 544.260711][ T389] gretap0: entered promiscuous mode [ 544.278427][ T397] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 544.284101][ T393] netlink: Unknown conntrack attr (0) [ 544.302618][ T398] netlink: 156 bytes leftover after parsing attributes in process `syz.8.7599'. [ 544.343923][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 544.361340][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 544.377394][ T401] syzkaller1: entered promiscuous mode [ 544.394112][ T401] syzkaller1: entered allmulticast mode [ 544.460031][ T389] bond4: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 544.475014][ T389] bond4 (unregistering): Released all slaves [ 544.517137][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 544.526253][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 544.554213][ T413] openvswitch: netlink: Flow key attr not present in new flow. [ 544.739612][ T419] syzkaller0: entered promiscuous mode [ 544.752573][ T419] syzkaller0: entered allmulticast mode [ 544.777722][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.785947][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.944326][ T443] netlink: 'syz.7.7614': attribute type 8 has an invalid length. [ 545.325067][ T476] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 545.551422][ T499] netlink: 'syz.5.7635': attribute type 1 has an invalid length. [ 545.739633][ T510] bond3: (slave bridge1): making interface the new active one [ 545.779134][ T510] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 546.244707][ T556] nbd: nbd64 already in use [ 546.448198][ T577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.467947][ T580] netlink: 'syz.4.7658': attribute type 12 has an invalid length. [ 546.499527][T23499] udevd[23499]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 547.048402][ T644] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 547.269890][ T670] x_tables: duplicate underflow at hook 2 [ 547.563455][ T688] netlink: 'syz.4.7689': attribute type 1 has an invalid length. [ 548.641095][ T5624] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 548.876427][ T771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 549.121457][ T5624] Bluetooth: hci9: command 0x0405 tx timeout [ 551.289232][ T762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 551.302346][ T774] netlink: 'syz.8.7712': attribute type 1 has an invalid length. [ 551.322942][ T774] __nla_validate_parse: 34 callbacks suppressed [ 551.322975][ T774] netlink: 224 bytes leftover after parsing attributes in process `syz.8.7712'. [ 551.417578][ T783] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7714'. [ 551.430388][ T785] netlink: 404 bytes leftover after parsing attributes in process `syz.7.7715'. [ 551.564842][ T792] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 551.575049][ T800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7719'. [ 551.606313][ T800] netlink: 'syz.4.7719': attribute type 1 has an invalid length. [ 551.615556][ T800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7719'. [ 551.749129][ T818] netlink: 'syz.1.7724': attribute type 1 has an invalid length. [ 551.769306][ T818] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7724'. [ 551.870326][ T843] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7726'. [ 552.123934][ T860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7731'. [ 552.167113][ T863] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7732'. [ 552.214044][ T860] hsr_slave_1 (unregistering): left promiscuous mode [ 552.615250][ T902] x_tables: duplicate underflow at hook 2 [ 553.007247][ T938] netlink: 'syz.7.7749': attribute type 5 has an invalid length. [ 553.019773][ T938] netlink: 164 bytes leftover after parsing attributes in process `syz.7.7749'. [ 553.574386][ T995] netlink: 'syz.8.7760': attribute type 1 has an invalid length. [ 553.604367][ T998] netlink: 'syz.8.7760': attribute type 1 has an invalid length. [ 553.659679][ T1004] netlink: 'syz.1.7761': attribute type 24 has an invalid length. [ 553.769848][ T1010] netlink: 'syz.7.7763': attribute type 1 has an invalid length. [ 553.822328][ T1010] bond5: entered promiscuous mode [ 553.827896][ T1010] 8021q: adding VLAN 0 to HW filter on device bond5 [ 553.837491][ T1008] nbd: must specify an index to disconnect [ 553.848884][ T1015] netlink: 'syz.4.7765': attribute type 4 has an invalid length. [ 553.893586][ T1017] bond5: (slave bridge4): making interface the new active one [ 553.937120][ T1017] bridge4: entered promiscuous mode [ 553.964131][ T1017] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 554.044493][ T1025] syzkaller0: entered promiscuous mode [ 554.064980][ T1025] syzkaller0: entered allmulticast mode [ 554.133613][ T1030] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20000 [ 554.195684][ T1038] lo: entered allmulticast mode [ 554.494105][ T1073] netlink: 'syz.1.7778': attribute type 24 has an invalid length. [ 554.512919][ T1080] Cannot find add_set index 0 as target [ 554.652378][ T1089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.903551][ T1114] bond10: option lp_interval: invalid value (0) [ 554.910331][ T1114] bond10: option lp_interval: allowed values 1 - 2147483647 [ 554.922258][ T1114] bond10 (unregistering): Released all slaves [ 555.294491][ T1149] 8021q: adding VLAN 0 to HW filter on device bond6 [ 555.397845][ T1158] bond6: (slave dummy0): Enslaving as a backup interface with an up link [ 555.406561][ T12] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 555.406695][ T829] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.444760][ T829] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.465946][ T829] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.489338][ T1149] dummy0: entered promiscuous mode [ 555.498720][ T1149] bond6: (slave dummy0): Removing an active aggregator [ 555.507820][ T1149] bond6: (slave dummy0): Releasing backup interface [ 555.569281][ T829] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.630275][ T1171] 8021q: adding VLAN 0 to HW filter on device bond7 [ 555.642606][ T1169] syzkaller1: entered promiscuous mode [ 555.648655][ T1169] syzkaller1: entered allmulticast mode [ 555.661141][ T1177] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 556.074557][ T1217] xfrm1: entered promiscuous mode [ 556.210444][ T1229] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 556.260499][ T29] audit: type=1804 audit(1781996595.006:26): pid=1234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.7826" name="/newroot/216/cgroup.controllers" dev="tmpfs" ino=1130 res=1 errno=0 [ 556.288801][ T29] audit: type=1800 audit(1781996595.036:27): pid=1234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.7826" name="cgroup.controllers" dev="tmpfs" ino=1130 res=0 errno=0 [ 556.399507][ T1243] validate_nla: 7 callbacks suppressed [ 556.399523][ T1243] netlink: 'syz.8.7830': attribute type 5 has an invalid length. [ 556.419683][ T1243] __nla_validate_parse: 18 callbacks suppressed [ 556.419700][ T1243] netlink: 36 bytes leftover after parsing attributes in process `syz.8.7830'. [ 556.441272][ T1243] block nbd8: Unsupported socket: should be TCP or UNIX. [ 556.519786][ T1249] netlink: 'syz.8.7831': attribute type 1 has an invalid length. [ 556.528529][ T1249] nbd: error processing sock list [ 556.564965][ T1252] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7833'. [ 556.608415][ T1254] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7834'. [ 556.622709][ T1254] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7834'. [ 556.660593][ T1261] netlink: 268 bytes leftover after parsing attributes in process `syz.1.7836'. [ 556.853210][ T1274] netlink: 'syz.1.7840': attribute type 24 has an invalid length. [ 556.992407][ T1279] netlink: 'syz.4.7842': attribute type 1 has an invalid length. [ 557.000620][ T1279] netlink: 'syz.4.7842': attribute type 2 has an invalid length. [ 557.251556][ T1295] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7847'. [ 557.264715][ T1295] netlink: 92 bytes leftover after parsing attributes in process `syz.7.7847'. [ 557.282832][ T1295] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7847'. [ 557.338424][ T1299] tipc: Enabling of bearer rejected, failed to enable media [ 557.399004][ T1304] openvswitch: netlink: IPv4 tun info is not correct [ 557.409132][ T1299] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7849'. [ 557.500233][ T1314] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 557.508926][ T1314] bond4: option packets_per_slave: allowed values 0 - 65535 [ 557.523979][ T1314] bond4 (unregistering): Released all slaves [ 557.714899][ T1340] netlink: 188 bytes leftover after parsing attributes in process `syz.4.7858'. [ 557.844780][ T1349] tc action pedit unable to extract header offset for header type (0x5) [ 557.853225][ T1349] tc action pedit unable to extract header offset for header type (0x5) [ 557.854306][ T1327] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 557.861606][ T1349] tc action pedit unable to extract header offset for header type (0x5) [ 557.861621][ T1349] tc action pedit unable to extract header offset for header type (0x5) [ 557.861632][ T1349] tc action pedit unable to extract header offset for header type (0x5) [ 557.861642][ T1349] tc action pedit unable to extract header offset for header type (0x5) [ 557.861653][ T1349] tc action pedit unable to extract header offset for header type (0x5) [ 557.861663][ T1349] tc action pedit unable to extract header offset for header type (0x5) [ 557.861674][ T1349] tc action pedit unable to extract header offset for header type (0x5) [ 557.861684][ T1349] tc action pedit unable to extract header offset for header type (0x5) [ 557.861702][ T1349] 0: reclassify loop, rule prio 0, protocol 800 [ 557.973875][ T1356] netlink: 'syz.1.7865': attribute type 1 has an invalid length. [ 557.989003][ T1356] netlink: 'syz.1.7865': attribute type 2 has an invalid length. [ 558.072583][ T1364] bond8: (slave ip6_vti0): Device is not bonding slave [ 558.079878][ T1364] bond8: option active_slave: invalid value (ip6_vti0) [ 558.098463][ T1364] bond8 (unregistering): Released all slaves [ 558.267705][ T1375] geneve4: entered promiscuous mode [ 558.311424][ T1375] geneve4: entered allmulticast mode [ 558.411005][ T1392] netlink: 'syz.4.7879': attribute type 2 has an invalid length. [ 558.680464][ T1419] netlink: 'syz.4.7885': attribute type 1 has an invalid length. [ 558.696125][ T1419] netlink: 'syz.4.7885': attribute type 1 has an invalid length. [ 558.712093][ T1421] IPVS: set_ctl: invalid protocol: 0 172.30.1.8:20002 [ 559.085514][ T1453] bond10: option all_slaves_active: invalid value (222) [ 559.097924][ T1453] bond10 (unregistering): Released all slaves [ 559.134952][ T1462] bond6 (unregistering): Released all slaves [ 559.273612][ T1474] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 559.314812][ T1475] syzkaller0: entered promiscuous mode [ 559.322371][ T1475] syzkaller0: entered allmulticast mode [ 559.336089][ T1471] block nbd8: server does not support multiple connections per device. [ 559.364794][ T1471] block nbd8: shutting down sockets [ 559.397543][ T1482] syzkaller0: entered promiscuous mode [ 559.407977][ T1482] syzkaller0: entered allmulticast mode [ 559.417116][ T1484] veth0_to_bond: default FDB implementation only supports local addresses [ 559.676953][ T1502] 8021q: adding VLAN 0 to HW filter on device bond14 [ 560.745924][ T1577] ip6gre1: entered allmulticast mode [ 560.771761][ T1599] veth0: entered promiscuous mode [ 560.843165][ T1596] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 560.851586][ T1599] veth0 (unregistering): left promiscuous mode [ 561.172813][ T1637] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 561.594848][ T1677] __nla_validate_parse: 24 callbacks suppressed [ 561.594880][ T1677] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7963'. [ 561.661000][ T1680] validate_nla: 3 callbacks suppressed [ 561.661017][ T1680] netlink: 'syz.1.7966': attribute type 83 has an invalid length. [ 561.670552][ T1684] netlink: 'syz.7.7965': attribute type 1 has an invalid length. [ 561.685193][ T1680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7966'. [ 561.696108][ T1684] netlink: 96 bytes leftover after parsing attributes in process `syz.7.7965'. [ 561.718118][ T1684] netlink: 1 bytes leftover after parsing attributes in process `syz.7.7965'. [ 561.733787][ T1687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7967'. [ 561.739169][ T1685] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7965'. [ 561.757283][ T1680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7966'. [ 561.781019][ T1692] openvswitch: netlink: IP tunnel dst address not specified [ 561.945217][ T1711] netlink: 'syz.4.7972': attribute type 83 has an invalid length. [ 562.017953][ T1716] xt_hashlimit: overflow, try lower: 3/0 [ 562.036389][ T1716] xt_hashlimit: overflow, try lower: 3/0 [ 562.156666][ T1725] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7976'. [ 562.199928][ T1731] netlink: 'syz.4.7979': attribute type 3 has an invalid length. [ 562.330086][ T1736] bond15: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 562.346872][ T1736] bond15 (unregistering): Released all slaves [ 562.473913][ T1749] netlink: 4868 bytes leftover after parsing attributes in process `syz.5.7984'. [ 562.492652][ T1749] openvswitch: netlink: Flow key attr not present in new flow. [ 562.674285][ T1769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7991'. [ 563.077115][ T1804] netlink: 'syz.1.8001': attribute type 1 has an invalid length. [ 563.107161][ T1806] netlink: 'syz.4.8003': attribute type 14 has an invalid length. [ 563.134207][ T834] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.144693][ T1806] netlink: 'syz.4.8003': attribute type 14 has an invalid length. [ 563.155789][ T834] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.169503][ T834] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.179099][ T834] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.246174][ T1815] : entered promiscuous mode [ 563.379445][ T1825] xt_NFQUEUE: number of total queues is 0 [ 563.384189][ T1823] tipc: Started in network mode [ 563.390302][ T1823] tipc: Node identity a2a99e0a755c, cluster identity 4711 [ 563.398309][ T1823] tipc: Enabled bearer , priority 0 [ 563.407600][ T1823] syzkaller0: entered promiscuous mode [ 563.413884][ T1823] syzkaller0: entered allmulticast mode [ 563.433049][ T1823] tipc: Resetting bearer [ 563.494724][ T1822] tipc: Resetting bearer [ 563.502883][ T1822] tipc: Disabling bearer [ 563.587225][ T1836] netlink: 'syz.8.8015': attribute type 1 has an invalid length. [ 563.626792][ T1836] bond15: (slave geneve4): making interface the new active one [ 563.635438][ T1836] bond15: (slave geneve4): Enslaving as an active interface with an up link [ 563.644728][ T35] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 563.653813][ T35] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 563.662819][ T35] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 563.672242][ T35] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 563.687399][ T1836] syzkaller0: entered promiscuous mode [ 563.693060][ T1836] syzkaller0: entered allmulticast mode [ 563.839776][ T1844] netlink: 'syz.5.8018': attribute type 1 has an invalid length. [ 563.897397][ T1844] bond4: entered promiscuous mode [ 563.906858][ T1844] 8021q: adding VLAN 0 to HW filter on device bond4 [ 563.930174][ T1850] syzkaller0: entered promiscuous mode [ 563.936571][ T1850] syzkaller0: entered allmulticast mode [ 564.220449][ T1866] netlink: 'syz.5.8026': attribute type 21 has an invalid length. [ 564.244361][ T1866] bond5: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 564.255532][ T1866] bond5 (unregistering): Released all slaves [ 564.452794][ T1875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.572360][ T1888] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20001 [ 564.774612][ T1900] IPv6: NLM_F_CREATE should be specified when creating new route [ 564.971011][ T1915] v: renamed from vlan0 [ 565.174982][ T1927] bond6: Invalid ad_actor_system MAC address. [ 565.183388][ T1927] bond6: option ad_actor_system: invalid value (1) [ 565.208572][ T1927] bond6 (unregistering): Released all slaves [ 565.298229][ T1940] 8021q: adding VLAN 0 to HW filter on device bond16 [ 565.421862][ T1958] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 565.427107][ T1957] veth0: entered promiscuous mode [ 565.439310][ T1942] syzkaller0: entered promiscuous mode [ 565.453683][ T1942] syzkaller0: entered allmulticast mode [ 565.539289][ T1953] 8021q: adding VLAN 0 to HW filter on device  [ 565.547468][ T1953] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.558980][ T1953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.594434][ T1953] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 565.626391][ T1965] tipc: Enabled bearer , priority 10 [ 565.655409][ T834] bridge0: port 1(veth1_to_bridge) entered blocking state [ 565.663044][ T834] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 565.712937][ T1944] veth0: left promiscuous mode [ 565.861330][ T1982] Unknown options in mask b7f2 [ 566.743413][ T24] tipc: Node number set to 784833428 [ 566.831823][ T2070] validate_nla: 7 callbacks suppressed [ 566.831840][ T2070] netlink: 'syz.5.8085': attribute type 1 has an invalid length. [ 566.832655][ T2071] __nla_validate_parse: 96 callbacks suppressed [ 566.832680][ T2071] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.8083'. [ 566.874102][ T2070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 566.888172][ T2070] macvlan2: entered promiscuous mode [ 566.893956][ T2070] macvlan2: entered allmulticast mode [ 566.900470][ T2070] bond5: entered promiscuous mode [ 566.906262][ T2070] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 566.914595][ T2070] bond5: left promiscuous mode [ 567.618152][ T2078] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8087'. [ 568.525220][ T2082] netlink: 'syz.8.8088': attribute type 13 has an invalid length. [ 568.533583][ T2082] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8088'. [ 568.544258][ T2082] netlink: 'syz.8.8088': attribute type 13 has an invalid length. [ 568.552646][ T2082] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8088'. [ 568.615701][ T2085] xt_TCPMSS: Only works on TCP SYN packets [ 569.449741][ T2038] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 569.461893][ T2090] netlink: 'syz.8.8090': attribute type 11 has an invalid length. [ 569.483161][ T2090] netlink: 199788 bytes leftover after parsing attributes in process `syz.8.8090'. [ 569.766835][ T2118] x_tables: duplicate entry at hook 1 [ 569.874353][ T2121] netlink: 'syz.5.8098': attribute type 1 has an invalid length. [ 570.058216][ T2133] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8103'. [ 570.153231][ T2142] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8108'. [ 570.179443][ T2142] netlink: 'syz.1.8108': attribute type 4 has an invalid length. [ 570.192830][ T2142] netlink: 'syz.1.8108': attribute type 1 has an invalid length. [ 570.218941][ T2142] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8108'. [ 570.369587][ T2155] netlink: 'syz.1.8111': attribute type 12 has an invalid length. [ 570.413198][ T2155] openvswitch: netlink: Message has 8 unknown bytes. [ 570.429306][ T2155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.507019][ T2162] openvswitch: netlink: Flow key attr not present in new flow. [ 570.666959][ T2170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8117'. [ 570.728310][ T2173] tipc: Started in network mode [ 570.750149][ T2173] tipc: Node identity da7ea8b95344, cluster identity 4711 [ 570.782522][ T2173] tipc: Enabled bearer , priority 0 [ 570.805585][ T2175] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8118'. [ 571.013520][ T2172] tipc: Disabling bearer [ 571.177383][ T2217] netlink: 'syz.4.8130': attribute type 1 has an invalid length. [ 571.214211][ T2217] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 571.320351][ T2231] openvswitch: netlink: Flow key attr not present in new flow. [ 571.424293][ T2241] bond10: Invalid ad_actor_system MAC address. [ 571.442975][ T2241] bond10: option ad_actor_system: invalid value (1) [ 571.453377][ T2241] bond10 (unregistering): Released all slaves [ 571.824729][ T2265] vlan0: entered promiscuous mode [ 571.868425][ T2282] __nla_validate_parse: 5 callbacks suppressed [ 571.868443][ T2282] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8150'. [ 571.947595][ T2286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8152'. [ 571.969263][ T2288] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 572.063180][ T2295] gretap0: entered promiscuous mode [ 572.076914][ T2295] batman_adv: batadv0: Adding interface: gretap0 [ 572.096529][ T2295] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 572.136330][ T2295] batman_adv: batadv0: Not using interface gretap0 (retrying later): interface not active [ 572.147432][ T2297] 8021q: VLANs not supported on ip6tnl0 [ 572.158234][ T2302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8158'. [ 572.161570][ T2297] Cannot find set identified by id 65534 to match [ 572.179228][ T2300] tipc: Enabled bearer , priority 0 [ 572.191974][ T2300] syzkaller0: entered promiscuous mode [ 572.209947][ T2300] syzkaller0: entered allmulticast mode [ 572.238260][ T2300] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 572.278956][ T2300] tipc: Resetting bearer [ 572.293001][ T2304] netlink: 'syz.8.8160': attribute type 5 has an invalid length. [ 572.306192][ T2299] tipc: Resetting bearer [ 572.339189][ T2299] tipc: Disabling bearer [ 572.352741][ T2315] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8164'. [ 572.386058][ T2314] netlink: 'syz.1.8163': attribute type 5 has an invalid length. [ 572.431426][ T2323] xt_hashlimit: invalid interval [ 572.443824][ T2319] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8165'. [ 572.510408][ T2319] xt_CT: You must specify a L4 protocol and not use inversions on it [ 572.570016][ T2328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 572.603140][ T2329] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8168'. [ 573.432443][ T2408] netlink: 'syz.4.8195': attribute type 1 has an invalid length. [ 573.456163][ T2408] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8195'. [ 573.510315][ T2412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8197'. [ 573.551101][ T2416] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8198'. [ 573.587688][ T2416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8198'. [ 573.988895][ T2444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.098417][ T2455] netlink: 'syz.7.8208': attribute type 1 has an invalid length. [ 574.186623][ T2463] netlink: 'syz.1.8212': attribute type 9 has an invalid length. [ 574.254512][ T2463] bridge8: entered promiscuous mode [ 574.272601][ T2463] bridge8: entered allmulticast mode [ 574.387879][ T2481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.805046][ T2529] netlink: 'syz.7.8228': attribute type 1 has an invalid length. [ 577.740452][ T2522] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 577.852556][ T2581] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 577.934960][ T2588] tipc: Enabled bearer , priority 0 [ 577.955939][ T2588] syzkaller0: entered promiscuous mode [ 577.968305][ T2588] syzkaller0: entered allmulticast mode [ 577.981858][ T2588] __nla_validate_parse: 5 callbacks suppressed [ 577.981886][ T2588] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8236'. [ 578.005003][ T2588] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 578.053403][ T2588] tipc: Resetting bearer [ 578.055666][ T2606] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8242'. [ 578.070392][ T2583] tipc: Resetting bearer [ 578.079263][ T2583] tipc: Disabling bearer [ 578.185904][ T2620] Unsupported xt match [ 578.185921][ T2620] unable to load match [ 578.200603][ T2620] netlink: 'syz.5.8246': attribute type 21 has an invalid length. [ 578.208928][ T2620] netlink: 156 bytes leftover after parsing attributes in process `syz.5.8246'. [ 578.323679][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:3840) [ 578.368229][ T2625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.376676][ T2625] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.387671][ T2625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.414117][ T2625] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 578.428307][ T2625] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 578.459445][ T2625] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 578.468452][ T1695] bond2: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 578.478438][ T1695] bond2: (slave veth0_to_bond): making interface the new active one [ 578.490079][ T1695] bond2: active interface up! [ 580.919855][ T2592] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 581.093885][ T2647] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8249'. [ 581.113928][ T2646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8252'. [ 581.133100][ T2648] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8251'. [ 581.162338][ T2647] x_tables: duplicate underflow at hook 3 [ 581.169009][ T2652] netlink: 'syz.1.8253': attribute type 83 has an invalid length. [ 581.334858][ T2668] netlink: 'syz.7.8256': attribute type 30 has an invalid length. [ 581.409169][ T2679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8259'. [ 581.506781][ T2686] 8021q: VLANs not supported on vcan0 [ 581.593945][ T2694] netlink: 'syz.4.8263': attribute type 10 has an invalid length. [ 581.603689][ T2694] batman_adv: batadv0: Removing interface: gretap2 [ 581.765994][ T2703] bond9: Removing last arp target with arp_interval on [ 581.806196][ T2709] xt_CT: You must specify a L4 protocol and not use inversions on it [ 581.898285][ T2716] netlink: 'syz.7.8267': attribute type 21 has an invalid length. [ 581.922199][ T2716] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8267'. [ 581.967117][ T2716] netlink: 'syz.7.8267': attribute type 21 has an invalid length. [ 581.993818][ T2716] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8267'. [ 582.021723][ T2731] 8021q: VLANs not supported on pim6reg0 [ 582.053580][ T2731] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8267'. [ 582.068231][ T1165] tipc: Subscription rejected, illegal request [ 582.082400][ T2733] bond17: option min_links: invalid value (18446744073709551614) [ 582.106390][ T2733] bond17: option min_links: allowed values 0 - 2147483647 [ 582.120262][ T2733] bond17 (unregistering): Released all slaves [ 582.244710][ T2746] syzkaller0: entered promiscuous mode [ 582.252554][ T2746] syzkaller0: entered allmulticast mode [ 582.270065][ T2735] tipc: Enabled bearer , priority 0 [ 582.293189][ T2743] tipc: Resetting bearer [ 582.311740][ T2734] tipc: Resetting bearer [ 582.349837][ T2734] tipc: Disabling bearer [ 582.370034][ T2751] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 582.538211][ T2776] bond0: option miimon: invalid value (18446744071829782528) [ 582.569851][ T2776] bond0: option miimon: allowed values 0 - 2147483647 [ 582.724767][ T2791] netlink: 'syz.4.8286': attribute type 1 has an invalid length. [ 583.182539][ T2843] netlink: 'syz.4.8301': attribute type 1 has an invalid length. [ 583.194130][ T2843] __nla_validate_parse: 8 callbacks suppressed [ 583.194158][ T2843] netlink: 184 bytes leftover after parsing attributes in process `syz.4.8301'. [ 583.211631][ T2843] netlink: 'syz.4.8301': attribute type 1 has an invalid length. [ 583.234868][ T2843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8301'. [ 583.291585][ T2846] hsr0 speed is unknown, defaulting to 1000 [ 583.335989][ T2846] hsr0 speed is unknown, defaulting to 1000 [ 583.359064][ T2846] hsr0 speed is unknown, defaulting to 1000 [ 583.380391][ T2846] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 583.416001][ T2846] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 583.458633][ T2846] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 583.480199][ T2846] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 583.518947][ T2846] hsr0 speed is unknown, defaulting to 1000 [ 583.537845][ T2846] hsr0 speed is unknown, defaulting to 1000 [ 583.571087][ T2846] hsr0 speed is unknown, defaulting to 1000 [ 583.597657][ T2887] syzkaller0: entered promiscuous mode [ 583.614958][ T2887] syzkaller0: entered allmulticast mode [ 583.634028][ T2846] hsr0 speed is unknown, defaulting to 1000 [ 583.689587][ T2846] hsr0 speed is unknown, defaulting to 1000 [ 583.707092][ T2846] hsr0 speed is unknown, defaulting to 1000 [ 583.722854][ T2846] hsr0 speed is unknown, defaulting to 1000 [ 583.733700][ T2846] hsr0 speed is unknown, defaulting to 1000 [ 583.741663][ T2846] hsr0 speed is unknown, defaulting to 1000 [ 583.760006][ T2846] hsr0 speed is unknown, defaulting to 1000 [ 583.774088][ T2846] hsr0 speed is unknown, defaulting to 1000 [ 583.796647][ T2846] hsr0 speed is unknown, defaulting to 1000 [ 583.830368][ T2846] hsr0 speed is unknown, defaulting to 1000 [ 583.840561][ T2846] hsr0 speed is unknown, defaulting to 1000 [ 583.865303][ T2906] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8317'. [ 583.898662][ T2902] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 583.931556][T16690] IPVS: starting estimator thread 0... [ 583.939663][ T2912] netlink: 'syz.1.8318': attribute type 181 has an invalid length. [ 584.021411][ T2913] IPVS: using max 52 ests per chain, 124800 per kthread [ 584.093651][ T2926] netlink: 'syz.1.8322': attribute type 1 has an invalid length. [ 584.210100][ T2934] syzkaller1: entered promiscuous mode [ 584.236250][ T2934] syzkaller1: entered allmulticast mode [ 584.425459][ T2956] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8331'. [ 584.514974][ T2964] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8333'. [ 584.531157][ T2956] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8331'. [ 584.546768][ T2969] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8334'. [ 584.647727][ T2980] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8334'. [ 584.667456][ T2969] 8021q: adding VLAN 0 to HW filter on device bond17 [ 584.685578][ T2980] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8334'. [ 584.708856][ T2985] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8340'. [ 584.712475][ T2979] netlink: 'syz.4.8336': attribute type 15 has an invalid length. [ 584.792800][ T2990] bond17 (unregistering): Released all slaves [ 584.958304][ T3006] xt_socket: unknown flags 0xe4 [ 585.062652][ T3012] netlink: 'syz.8.8347': attribute type 15 has an invalid length. [ 585.289422][ T3028] bridge9: entered promiscuous mode [ 585.318254][ T3031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.325980][ T3028] bridge9: entered allmulticast mode [ 585.397103][ T3045] netlink: zone id is out of range [ 585.408991][ T3045] netlink: zone id is out of range [ 585.424370][ T3045] netlink: zone id is out of range [ 585.435560][ T3045] netlink: zone id is out of range [ 585.458041][ T3045] netlink: zone id is out of range [ 585.485000][ T3045] netlink: zone id is out of range [ 585.529053][ T3045] netlink: zone id is out of range [ 585.541809][ T3045] netlink: zone id is out of range [ 585.749685][ T3070] netlink: 'syz.8.8363': attribute type 3 has an invalid length. [ 585.785162][ T3084] netlink: 'syz.1.8368': attribute type 1 has an invalid length. [ 585.940462][ T3084] 8021q: adding VLAN 0 to HW filter on device bond10 [ 585.953256][ T3083] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 586.270450][ T3121] hsr0 speed is unknown, defaulting to 1000 [ 586.306795][ T3128] netlink: 'syz.4.8379': attribute type 16 has an invalid length. [ 586.325514][ T3130] sctp: [Deprecated]: syz.5.8382 (pid 3130) Use of int in max_burst socket option. [ 586.325514][ T3130] Use struct sctp_assoc_value instead [ 586.348378][ T3128] netlink: 'syz.4.8379': attribute type 17 has an invalid length. [ 586.423078][ T3124] bridge0: port 1(veth1_to_bridge) entered disabled state [ 586.506511][ T3141] netlink: 'syz.8.8385': attribute type 29 has an invalid length. [ 586.515915][ T3128] dummy0: left promiscuous mode [ 586.523546][ T3128] bridge0: port 1(veth1_to_bridge) entered blocking state [ 586.530854][ T3128] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 586.992526][ T3176] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.066208][ T3176] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.095777][ T3186] veth0_to_batadv: entered promiscuous mode [ 587.103666][ T3186] veth0_to_batadv: left promiscuous mode [ 587.119073][ T3186] bridge0: port 1(veth1_to_bridge) entered disabled state [ 587.139313][ T3188] bond0: entered promiscuous mode [ 587.147516][ T3188] bond_slave_0: entered promiscuous mode [ 587.167469][ T3176] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.243876][ T3176] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 587.272122][ T3176] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 587.287862][ T3176] bridge0: port 3(netdevsim0) entered disabled state [ 587.300063][ T3176] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.374395][ T3205] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 587.414599][ T834] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.471649][ T834] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.493524][ T834] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.509104][ T834] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.569547][ T30] INFO: task syz.6.5637:25905 blocked for more than 143 seconds. [ 588.602384][ T30] Not tainted syzkaller #0 [ 588.608217][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 588.628840][ T30] task:syz.6.5637 state:D stack:27568 pid:25905 tgid:25904 ppid:20230 task_flags:0x400140 flags:0x00080002 [ 588.685156][ T30] Call Trace: [ 588.699973][ T30] [ 588.711318][ T30] __schedule+0x17d9/0x56c0 [ 588.716882][ T30] ? trace_irq_enable+0x3b/0x140 [ 588.722773][ T30] ? __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 588.729999][ T30] ? netlink_rcv_skb+0x226/0x4a0 [ 588.736673][ T30] ? genl_rcv+0x28/0x40 [ 588.742140][ T30] ? __pfx___schedule+0x10/0x10 [ 588.747393][ T30] ? rcu_is_watching+0x15/0xb0 [ 588.752922][ T30] ? rcu_is_watching+0x15/0xb0 [ 588.758457][ T30] ? lock_release+0x4b/0x3c0 [ 588.766850][ T30] ? rcu_is_watching+0x15/0xb0 [ 588.774236][ T30] schedule+0x164/0x360 [ 588.778717][ T30] schedule_preempt_disabled+0x13/0x30 [ 588.786969][ T30] __mutex_lock+0x7bf/0x1550 [ 588.793788][ T30] ? __mutex_lock+0x5d4/0x1550 [ 588.798961][ T30] ? nfsd_nl_threads_get_doit+0x1c0/0x790 [ 588.806253][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 588.812758][ T30] ? __nlmsg_put+0xef/0x1b0 [ 588.817675][ T30] ? genlmsg_put+0x137/0x2e0 [ 588.829280][ T30] nfsd_nl_threads_get_doit+0x1c0/0x790 [ 588.835672][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 588.842974][ T30] ? __nla_parse+0x40/0x60 [ 588.847988][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 588.856416][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 588.863812][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 588.869780][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 588.878892][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 588.886951][ T30] genl_rcv_msg+0x614/0x7a0 [ 588.894922][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 588.900321][ T30] ? ref_tracker_free+0x689/0x830 [ 588.906390][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 588.914705][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 588.920573][ T30] netlink_rcv_skb+0x226/0x4a0 [ 588.926580][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 588.932503][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 588.938182][ T30] ? down_read+0x2be/0x330 [ 588.944957][ T30] genl_rcv+0x28/0x40 [ 588.949256][ T30] netlink_unicast+0x7bb/0x940 [ 588.954978][ T30] netlink_sendmsg+0x813/0xb40 [ 588.960098][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.966914][ T30] ? futex_unqueue+0x22/0x240 [ 588.974312][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 588.979798][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 588.988117][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.994269][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 588.999491][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 589.006825][ T30] ? lock_release+0x4b/0x3c0 [ 589.012106][ T30] ? import_iovec+0x73/0xa0 [ 589.016889][ T30] ___sys_sendmsg+0x2a5/0x360 [ 589.022273][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 589.027542][ T30] ? futex_wait+0x2a2/0x390 [ 589.032669][ T30] ? __fget_files+0x2a/0x420 [ 589.037485][ T30] ? __fget_files+0x3a2/0x420 [ 589.042895][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 589.048010][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 589.054171][ T30] ? rcu_is_watching+0x15/0xb0 [ 589.058984][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.065574][ T30] do_syscall_64+0x174/0x580 [ 589.070331][ T30] ? trace_irq_disable+0x3b/0x140 [ 589.075986][ T30] ? clear_bhb_loop+0x40/0x90 [ 589.080742][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.086645][ T30] RIP: 0033:0x7fd65619ce59 [ 589.091741][ T30] RSP: 002b:00007fd656f87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 589.100224][ T30] RAX: ffffffffffffffda RBX: 00007fd656415fa0 RCX: 00007fd65619ce59 [ 589.108717][ T30] RDX: 0000000004040090 RSI: 0000200000000000 RDI: 0000000000000005 [ 589.117251][ T30] RBP: 00007fd656232e6f R08: 0000000000000000 R09: 0000000000000000 [ 589.125817][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.134432][ T30] R13: 00007fd656416038 R14: 00007fd656415fa0 R15: 00007ffe860c29f8 [ 589.142959][ T30] [ 589.146492][ T30] INFO: lockdep is turned off. [ 589.153966][ T30] NMI backtrace for cpu 1 [ 589.153991][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 589.154009][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 589.154019][ T30] Call Trace: [ 589.154026][ T30] [ 589.154033][ T30] dump_stack_lvl+0xe8/0x150 [ 589.154055][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 589.154157][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 589.154183][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 589.154202][ T30] sys_info+0x135/0x170 [ 589.154217][ T30] watchdog+0xfd7/0x1030 [ 589.154240][ T30] ? watchdog+0x1c7/0x1030 [ 589.154262][ T30] kthread+0x388/0x470 [ 589.154277][ T30] ? __pfx_watchdog+0x10/0x10 [ 589.154295][ T30] ? __pfx_kthread+0x10/0x10 [ 589.154310][ T30] ret_from_fork+0x514/0xb70 [ 589.154327][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 589.154342][ T30] ? __switch_to+0xc89/0x1420 [ 589.154364][ T30] ? __pfx_kthread+0x10/0x10 [ 589.154379][ T30] ret_from_fork_asm+0x1a/0x30 [ 589.154403][ T30] [ 589.154456][ T30] Sending NMI from CPU 1 to CPUs 0: [ 589.282657][ C0] NMI backtrace for cpu 0 [ 589.282677][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 589.282695][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 589.282706][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 589.282734][ C0] Code: fc 7f 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 97 21 00 fb f4 7c 03 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 589.282748][ C0] RSP: 0018:ffffffff8e607de0 EFLAGS: 00000246 [ 589.282764][ C0] RAX: ffff88812527c000 RBX: ffffffff819a5170 RCX: 0000000080000001 [ 589.282777][ C0] RDX: 0000000000000001 RSI: ffffffff8c291100 RDI: ffffffff819a5170 [ 589.282790][ C0] RBP: ffffffff8e607eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 589.282802][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 589.282813][ C0] R13: 1ffffffff1cd1de8 R14: 1ffffffff1cc0fc4 R15: dffffc0000000000 [ 589.282827][ C0] FS: 0000000000000000(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 [ 589.282840][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 589.282852][ C0] CR2: 000055557995d4e8 CR3: 000000007fa00000 CR4: 00000000003526f0 [ 589.282869][ C0] Call Trace: [ 589.282875][ C0] [ 589.282882][ C0] default_idle+0x9/0x20 [ 589.282905][ C0] default_idle_call+0x72/0xb0 [ 589.282929][ C0] do_idle+0x2e0/0x540 [ 589.282953][ C0] ? __pfx_do_idle+0x10/0x10 [ 589.282979][ C0] cpu_startup_entry+0x43/0x60 [ 589.283002][ C0] rest_init+0x2de/0x300 [ 589.283017][ C0] start_kernel+0x38a/0x3e0 [ 589.283051][ C0] x86_64_start_reservations+0x24/0x30 [ 589.283069][ C0] x86_64_start_kernel+0x137/0x1b0 [ 589.283087][ C0] common_startup_64+0x13e/0x157 [ 589.283115][ C0] [ 589.467594][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 589.474476][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 589.483599][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 589.493673][ T30] Call Trace: [ 589.496962][ T30] [ 589.499892][ T30] vpanic+0x56c/0xa60 [ 589.503888][ T30] ? __pfx___schedule+0x10/0x10 [ 589.508743][ T30] ? __pfx_vpanic+0x10/0x10 [ 589.513253][ T30] panic+0xc5/0xd0 [ 589.516981][ T30] ? __pfx_panic+0x10/0x10 [ 589.521400][ T30] ? preempt_schedule_common+0x82/0xd0 [ 589.526870][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 589.532265][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 589.538440][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 589.544617][ T30] watchdog+0x1030/0x1030 [ 589.548965][ T30] ? watchdog+0x1c7/0x1030 [ 589.553395][ T30] kthread+0x388/0x470 [ 589.557763][ T30] ? __pfx_watchdog+0x10/0x10 [ 589.562452][ T30] ? __pfx_kthread+0x10/0x10 [ 589.567061][ T30] ret_from_fork+0x514/0xb70 [ 589.571743][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 589.576857][ T30] ? __switch_to+0xc89/0x1420 [ 589.581551][ T30] ? __pfx_kthread+0x10/0x10 [ 589.586142][ T30] ret_from_fork_asm+0x1a/0x30 [ 589.590922][ T30] [ 589.594198][ T30] Kernel Offset: disabled [ 589.598510][ T30] Rebooting in 86400 seconds..