last executing test programs: 9m15.626638878s ago: executing program 2 (id=1019): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00082abd7000fedbdf25010000000800080001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24008855) pipe(&(0x7f0000000280)={0xffffffffffffffff}) openat$cgroup_ro(r2, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) sendfile(r3, r0, 0x0, 0x7d1d7457) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) 9m15.519455908s ago: executing program 2 (id=1020): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0xd, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000a500000095"], &(0x7f0000000680)='GPL\x00', 0x9, 0x1002, &(0x7f00000006c0)=""/4098, 0x41000}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="7eda379feb0100000000640000000a000000050000000000000a04000000090000000200000604000000060000000000000005000000376d000009000000010000130800000010000000a64028c5ff000000070000000000000b000000000a0000000000000a0500000007000000000000090202000000473000300000615f009abf3cfbecd6f366"], &(0x7f00000000c0)=""/115, 0x86, 0x73, 0x0, 0x9ff}, 0x28) 9m15.474904512s ago: executing program 2 (id=1023): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b400000000000000611138000000000054000000000000009500000000000000bf4ab41f57177a09badf2d609444dce0a96da39d4a798136691a3acad1a53ca6ce540a262ed4d483bc474439e647a1fe8030f2b3decef1295ff730339c3b5ca0adc5f22a7b86087fcde36b3b7cb28db72bad9afec5d35b5e41055d58aa2e7cc3a7b823d0e6b013fb8d78d2bb25a3487045b6cc75954d55d645146a97a9b3467e370ad955419fe2164b973301d9ddc38b6281c82a230dc1f9e00e95f5874e6964663a4b40c9c46b665868aa5b296c1e5f80a8059d"], &(0x7f0000000340)='GPL\x00', 0x4, 0x3e0, &(0x7f0000000380)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000480), 0x0, 0x10, &(0x7f00000004c0), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) write(r2, &(0x7f0000000040)="33000000080006010100fff40200", 0xe) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000006c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000780)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x1, 0xfffe, 0x0, 0x6, 0x8a, 0x0, 0x20}, 0x9c) sendto$inet6(r0, &(0x7f0000000840)='\t', 0x1, 0x65055, &(0x7f0000000880)={0xa, 0x4e20, 0x5, @local, 0x7}, 0x1c) 9m15.294612718s ago: executing program 2 (id=1024): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) unshare(0x2a020400) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, 0x0, 0x0) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r3, &(0x7f0000000380)={0xa, 0x0, 0x3, @mcast2, 0x80009499, 0x1}, 0x20) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a0101000000000000000001e5ff030900030073797a32000000000900010073797a300000000074000000060a010400000000000000000100000008000b40000000000900010073797a30000000004c000480240001800b000100736f636b6574000014000280080002400000000c080001400000000124000180090001006d61737100000000140002800800024000000002080003"], 0xe8}}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r4, &(0x7f00000004c0)="a80000004100010003000000eaff0000030100002a0000003200010000112233445566778899aabb88a84500894f000140004011b778c0a80101c0a8010204d2162e000c00007465737400004c00020008000300010000001000010000008899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c000600020000000000", 0xa8, 0x0, 0x0, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) (async, rerun: 32) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (rerun: 32) tee(r7, r7, 0x9, 0x1) (async) r8 = accept4(r0, 0x0, &(0x7f0000000240), 0x180000) (async) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x9}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000851}, 0x4044001) ioctl$sock_inet6_udp_SIOCINQ(r8, 0x541b, &(0x7f00000002c0)) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="07000f010000000000000200000008000300", @ANYRES32=r6], 0x28}}, 0x0) (async) connect$pppl2tp(r8, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x1, 0x1, 0x1, {0xa, 0x4e23, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}, 0x32) 9m14.895924881s ago: executing program 2 (id=1030): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x10001, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r3}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffe, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x10006361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xa, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x20004890) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, &(0x7f0000000a80)="bad39900", 0x5dc, 0x840, &(0x7f0000000ac0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 9m14.571357613s ago: executing program 2 (id=1033): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000180)="ff02040000ffffffffffffffff1f2be82db1af00", 0x14) (async, rerun: 64) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8d}, 0x1c) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x12) (async, rerun: 32) pipe(0xfffffffffffffffe) (rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="230000000500000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001580)="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", &(0x7f0000001700), 0x8000200, r2}, 0x38) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x38, r3, 0x400, 0x70bd26, 0x25ffdbff, {{}, {@val={0x0, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xffffff18, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}]}, 0x38}, 0x1, 0x0, 0x0, 0x890}, 0x40081) 8m59.437481265s ago: executing program 32 (id=1033): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000180)="ff02040000ffffffffffffffff1f2be82db1af00", 0x14) (async, rerun: 64) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8d}, 0x1c) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x12) (async, rerun: 32) pipe(0xfffffffffffffffe) (rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="230000000500000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001580)="9a835d3f1d04fe8a0942fb56762e2fd9d3a253c8c378500f49b15a812535d8cdeac8b792be1030498a503056150109b49af50c5feb584ea39f381adbdeb4bd6dda60c6c97532176a7a231e708ed9a6bc03bb7e66eefe30e4004c1aae8383aa387bb14e4ac6829017894e465dc682171a8a4e5276e6a5d23b48cf4bc9366fd07f49458cd473b86f6b2ce0ccc39d7db31e5494aaa38cf67201a16187b5f1149e97c541ae49e05a8b6eb30fab2062186312a9db4db12eab1af3120fb9227196b54e8fbe0d9ee48d88a380df05b75c9efadc56da57ad59ead8f3d3e5c208c0d031dfe233f9a0e8512546f090fca9d43ed026d9a8e554e913c2d16264f741abfe265e9f5caf1ca307f50ea6c95bc0622b5442f84df231070a82fd84d8f968332aee3153a22daa18c3afbfb86db03de0069e0c18c353b8f9a2045a8cad5ae660a3b23ca8", &(0x7f0000001700), 0x8000200, r2}, 0x38) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x38, r3, 0x400, 0x70bd26, 0x25ffdbff, {{}, {@val={0x0, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xffffff18, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}]}, 0x38}, 0x1, 0x0, 0x0, 0x890}, 0x40081) 3.412507604s ago: executing program 0 (id=5404): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000001600)=0x79, 0x4) bind$inet(r0, &(0x7f0000001640)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001680)={0x1, &(0x7f00000016c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001700)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001740)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001840)="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", 0x222}], 0x1}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000900)="32d33a47d96ceacc565129f837dfc4ec8df24612082800303fbc4c7dae05b96c2dc595b8a5423ed1f26242d23d00e63343269943cd8325184548d97bb1085e03db4273de962dd2f26e098f50dacdbfe88abdf7c99297dbb9ebb71f5113e890734e69f1f1e540a1e7d6a7e78ade4e9e137143c093594d83d4643ffd96379d62815f23f62612a63030395130ff5718ab986f7546c4dc5fc63a992c53b61f737ef683ec", 0xa2}, {&(0x7f0000001b00)="9cf1495e028e22049259947af71c968820aac2153e36e05237044004130a31b25cd08e4a582dd094e3cd495eb7e28321e85d8e7da6651a68cb993498df2236fcab1ea0a1cc628ddbe16ac9191d6917ee7f319afaae6058b0a13fa0258fb74bf114e1a95c71a81b46d5d333aef5db36219c3bd7f905a25f5bb07bd3055d210022f04b5acf6a8e20086a71b6b5c7bb87d9c7a209b7f0e56dac72bf77c9773d1b702c45c9460829ffbf704fbbe1635b301183a8867463de2a0fae686630b7db109ed37404eadf39e858bee704a9d000bc1aae96b1b4d529573e38241eed0e", 0xdd}, {&(0x7f0000001c00)="20b9", 0x2}], 0x3}}], 0x2, 0x2090) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd2d, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, r6, 0x3, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40440) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, r2, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0x38, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "54aa6dc958f5e0e728e5276d1de4e515395916dd2777b934e744b4699a02ed92"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x48800}, 0x8050) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000001c80)=0xdf8, 0x4) writev(r0, &(0x7f0000001cc0)=[{&(0x7f0000001d00)="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", 0x2f9}], 0x1) 3.310328465s ago: executing program 5 (id=5405): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000180), 0x4) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850700000000007f000000000100", @ANYRES32=r3, @ANYRES32=r1], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000130005e22cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="12030000000001000a000100aaaaaaaaaabb0000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8042) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000b00)={'syzkaller1\x00', 0x1}) r6 = socket(0x1, 0x803, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000f00)={'b', ' *:* ', 'rwm\x00'}, 0xa) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_queued\x00', 0x275a, 0x0) accept4$nfc_llcp(r7, &(0x7f0000000b80), &(0x7f0000000c00)=0x60, 0x1800) write$cgroup_int(r7, &(0x7f0000000400), 0xffffff6a) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) getsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f00000004c0)={@loopback, 0x0}, &(0x7f0000000500)=0x14) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtfilter={0x54, 0x2c, 0xd27, 0x60bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) recvfrom(r4, &(0x7f00000009c0)=""/55, 0x37, 0x41, &(0x7f0000000a00)=@ieee802154={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x80) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000229bd7000fbdbdf25040000003c000680060001000200000008000300ac1414aa060001000200000008000700", @ANYRES32=r9, @ANYBLOB="060005004e230000060005004e23000008000700", @ANYRES32=r12, @ANYBLOB="6be074f661bf6efb10b20f8c72d22d76d46cb0893f121bda65b91a15ee57e9f52ece680a8a28c0129f3b2fea138e712179ac00ee2752d06472c0614b84480d3cb30b1ebc0e784a6c8f8cb4892757ad5e56fef1d83743fb3aa62ca2b5efa99157db3d7cad987114874eadb3fed06ce4d6d70ca5ec7794cdad15e7ddf777f4f5e7875cee6f1b1a0ded4c900ac7a403563e7d1fe1e82a5442c11b12a112db6dcaa05c2a4bc125e7a64f1759d913df4c0533843c59dbe885f94096fa72f32c64984919e7a90ca3361552e718a3b97dc8825a54206c937efec3b59f58bcc7dc57cde511c40b28fc5aece8113c1400079327010e705c056274c1301ba432af19930d27cff35efe840eef96e429e7c95bd5fa8ca24deda0e3366418aa332dd20c1728d34ee9525d43df3f75f3ef106ff5a3dcb1ed5df64194bf38208b640f49bb62a8b64d9b0abdf319c2ec17f52d2cb1490e231c1eb2d81ae230f7068f68cd"], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000980)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB="fa00", @ANYRES16=r8, @ANYBLOB="000129bd7000fedbdf25040000000800030000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) 3.002435251s ago: executing program 4 (id=5411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = socket$inet6(0xa, 0x3, 0x6) (rerun: 32) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000000)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000240)={@multicast2, @local}, 0xc) (async) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000280)={0x4, {{0x2, 0x4e23, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], 0x110) getsockopt$inet6_opts(r1, 0x29, 0x39, 0x0, &(0x7f0000000080)) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0xdcb752864a71b7f8}]}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}]}], {0x14}}, 0x104}}, 0x0) (rerun: 32) 2.682495574s ago: executing program 4 (id=5413): r0 = socket$inet_sctp(0x2, 0x5, 0x84) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="8fa7dc315f468bc82699f1585a6c8f80a181159a3bc9282ebb4b9a0b8df645f54348d02363cba4d539e9fd3da57d25c2083859943c3d6b47b1e179fc90d80870254f1a4bd868a3db96c4d5a4591716dcbd64551f98cdca51a9faafe3329672fa43354eebf0a1104971e7d603b2c0f618c9efb60c61ee796178ecddedbcc7269e741787800971689b38d83a0d0e0c68822e7a1fe0448ea120c6bc93985f0004c987727e9ec4a647273fd9e6b6a30bd9c538a779ae8f0b71663d8c52a2c643054001dbb44609e2cf1b", 0xc8}, {&(0x7f0000000100)}], 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000180)=0x1, 0x2) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f00000001c0)={0x0, {0x10, 0xf446, 0xb, 0x3, 0xff}}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xd9c262c7ccd633ea}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xd0, 0x67}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x100}, 0x4000880) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xd9c262c7ccd633ea}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xd0, 0x67}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x100}, 0x4000880) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000340)={'wlan0\x00', {0x2, 0x4e21, @loopback}}) (async) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000340)={'wlan0\x00', {0x2, 0x4e21, @loopback}}) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000380)={0x40, 0x6, 0x9, 0x7, 0x200000}) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000400)=0x1108f04, 0x4) (async) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000400)=0x1108f04, 0x4) ioctl$XFS_IOC_FSGROWFSLOG(r3, 0x4008586f, &(0x7f0000000440)={0x0, 0x3ff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r1) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r1) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r6, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x2c}}, 0x20000000) (async) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r6, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x2c}}, 0x20000000) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f00000005c0)) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f00000005c0)) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000600)=0xff) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000640)=@assoc_value, &(0x7f0000000680)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f00000006c0)={0x1, 0x4}, 0x8) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xd7fd, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0xfffffff8, 0x0, 0xffffffffffffffff, 0x43c2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000a40)={@private0, 0x0}, &(0x7f0000000a80)=0x14) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000c40)={0xffffffffffffffff, &(0x7f0000000b40)='\x00', 0x145080, &(0x7f0000000b80)={@align=0x6, {0x3, 0x6, 0xe, 0x5}}, 0x8000, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000c40)={0xffffffffffffffff, &(0x7f0000000b40)='\x00', 0x145080, &(0x7f0000000b80)={@align=0x6, {0x3, 0x6, 0xe, 0x5}}, 0x8000, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c80)={0x1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c80)={0x1, 0xffffffffffffffff}, 0x4) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@arena={0x21, 0x0, 0x0, 0x2c, 0x40400, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x25, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xf36}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x0, 0xc, 0x6, 0x4, 0x50}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000940)='GPL\x00', 0x9, 0xb5, &(0x7f0000000980)=""/181, 0x518e6a80050d5a0a, 0x2, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000b00)={0x2, 0x5, 0x10001, 0xfff}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000fc0)=[r11, r12, r13, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff], &(0x7f0000001000)=[{0x4, 0x1, 0xe, 0x7}, {0x3, 0x1, 0xb, 0x9}], 0x10, 0x9}, 0x94) 2.530365682s ago: executing program 4 (id=5414): r0 = socket(0x2, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x40241, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000940)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000980)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r1, &(0x7f00000009c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x12d, 0xb29, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x2f9, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp={0x44, 0x4, 0x1b, 0x0, 0x6}]}}, {0x4e20, 0x4e21, 0x2e1, 0x0, @wg=@data={0x4, 0x202, 0x7, "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"}}}}, 0x307) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000440)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000480)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r4, &(0x7f00000004c0)='x', 0x1, 0x0, 0x0, 0x0) (async) sendto$inet6(r4, &(0x7f00000004c0)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000500)={0x0, 0x1}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000500)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000540)={0x0, 0x4, 0x7a}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000540)={0x0, 0x4, 0x7a}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000880)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f00000008c0)='GPL\x00'}, 0x80) socket$tipc(0x1e, 0x2, 0x0) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f00000005c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) bind$tipc(r5, &(0x7f0000000600)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000640)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) (async) bind$tipc(r6, &(0x7f0000000640)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000680)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) bind$tipc(r7, &(0x7f0000000680)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r7, &(0x7f00000006c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000700)={0x42, 0x2, 0x2}, 0x10) bind$tipc(r5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000580)={0x0, 0x6, 0x7a}, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) (async) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) 2.463514123s ago: executing program 0 (id=5415): bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000d80)={@multicast1, @local}, 0xc) (async) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000d80)={@multicast1, @local}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000dc0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000e00)=ANY=[], 0x32600) (async) write$cgroup_subtree(r1, &(0x7f0000000e00)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x12, r1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000e40)=""/145, &(0x7f0000000f00)=0x24b) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, r2, 0x1, 0x1}, 0x50) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f00000000c0)=0x4, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x10, 0x4, &(0x7f0000000c00)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x1f}]}, &(0x7f0000000c40)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0x10, &(0x7f0000000a80)=ANY=[@ANYRES64=r3, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYBLOB="c1044e1c0b4a205ce55f846ee9d1fae450d7123b57a7773da5f689fc4d88f955bfc6318593dc55e7499431ebfe8e0a17a6cda174f9da99ddc5f55596a8cc5ee297ba1d8ea6473caf", @ANYRES64=r5], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2480627057a446b02fd29c0e852c9f000000180001092cbd7000ffdbdf2502180000000000080009000008001200ac141400"], 0x24}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2480627057a446b02fd29c0e852c9f000000180001092cbd7000ffdbdf2502180000000000080009000008001200ac141400"], 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r6, 0x5, 0xe, 0x0, &(0x7f00000007c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r6, 0x5, 0xe, 0x0, &(0x7f00000007c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) pipe(&(0x7f00000003c0)) (async) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r8, 0x541b, &(0x7f00000006c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fc}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fc}, 0x94) r9 = socket(0x1d, 0x80802, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r9) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000000a00)={0x1, 0x9}, &(0x7f0000000b00)=0x8) 2.45893252s ago: executing program 5 (id=5416): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x24000855) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a118001500060014b9c3600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x4) (async) syz_emit_ethernet(0x52, &(0x7f0000000280)={@local, @empty, @val={@void}, {@ipv4={0x6000, @tipc={{0x5, 0x4, 0x0, 0x1, 0x40, 0x68, 0x0, 0x0, 0x6, 0x0, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x1, 0xb}, 0x0, 0x2}}}}}}}}}, 0x0) (async, rerun: 64) r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x80800) (rerun: 64) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)={r2, 0x9}, 0x8) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 2.242712726s ago: executing program 4 (id=5417): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f4, &(0x7f0000000380)={'syztnl0\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x4000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x1000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) socket$inet(0x2, 0x4000000000000001, 0xfffffffd) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r3}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) (async) r5 = socket(0x10, 0x3, 0x0) recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40000020) (async) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f, 0x5, 0x25dfdbfd}, 0x18}}, 0x4000) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18070000000000000000000000800000851000000300000018110000", @ANYRES32=r4, @ANYBLOB="00000000000000009500007b00000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) (rerun: 32) 1.956499199s ago: executing program 3 (id=5421): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create(0x7) epoll_create(0x7) epoll_create1(0x80000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000880)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fc2b0000850000000e00000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x400000000010, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x1f, 0x15, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0xe8, 0xe8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0xffffffff}}}, {{@arp={@local, @local, 0x0, 0xff000000, 0x10, 0x4, {@mac, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x7, 0xde35, 0x5, 0xd88, 0x9, 0x9, 'veth0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x242}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="16e4ec77bff1", @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xfc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004040) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c000000090603417c17da00000000000a000000340007800c000180080001407f0000010c00148008000140ac1e01010600044050000000060005406b640000050007000600000005000100060000000900020073797a310000"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000100)="95ed95f1b57ac65244412bd1056ce9509c34f29c9c5d568a7d56e2720d4e40ab46626e93ffc2349ead9fd090561545bd4cb7066dbe213f5b2f251070d935a4d1b747f2b4dba538b9a93f3d418c8c2007dc620ba26900f25696d7c821666f5737875185270e95d5cbdc70189d63534a7f69d6f3f53c7bac3bcf9a5cc36f7c5114ec90b1cb38a8181f1e3ef8fc40306fcf5625a3b81b11545f4d6a466047c9032fda869e5a558cd6dd21af784fd80ae3febbe8ce091e647c9c377762f48c0171799d122dc00d6f52e98821303cf36552e49add", &(0x7f0000000200)=@udp6=r1, 0x2}, 0x20) 1.860062271s ago: executing program 0 (id=5422): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000020000000500000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480), 0x83f, r9}, 0x38) close(r8) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xc, &(0x7f0000000640)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r8}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r10}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f00000008c0)=ANY=[], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000940)={r11}, 0xc) listen(r6, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r12, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e23, 0xfffffffe, @mcast1, 0x87}}, 0x0, 0x0, 0x3a, 0x0, "276148cd1259e41d8f0ffd4be8b6d180a19ecb3e60c92e9fe908c95534a69b91fe9e2770ba387440609895d7fbb1c08bdfd96493f4fc1810d150cc3f2bbd548044dcec63bc8b2168c59e27175814071e"}, 0xd8) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000ffffffffffff", 0x58}], 0x1) close(0x4) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) 1.788616362s ago: executing program 5 (id=5423): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="2400000007060500000000000000000001000000050001000700"], 0x24}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x17, &(0x7f0000000780)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xfaffffff}, {0x6, 0x0, 0x2005, 0xb}}, [@printk={@x, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000840)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c"], 0x48}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f00000002c0)=0x8, 0x4) setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000580)=0xf2b, 0x4) getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f00000005c0)=""/3, &(0x7f0000000600)=0xfec2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000020900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000028000380240000800800034000000002180002801400028008000180fffffffc08e802"], 0xe8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x26, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000e60000e900e14b0000000e0001006e657464657673696d0000000f0002006e650000000000000c00a60081000000000000008bd40665603a95ffff0258fe7d7571cd7493e86083c12edcee63efcfaea5619210d027b26c7b1c2f46f96fce114197ee5fde27180a94634229dabfcf230f16e6c151f9fc6ab9fa17f29b00947784ab73225c93474308ddfc77fc010fb5e395c0b4bd5eeb64a49ef74fa3930a4bc15b"], 0x40}}, 0x40) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000140)={0x0, r3, r4, 0x0, 0x5, '\x00', {0x1, 0x9, 0x60, 0xea, 0x3, 0x1, 0x7ff, 0x3, {0xf60, 0x4}, {0x3, 0x2}, {0x4, 0x3}, 0x1, 0x7, 0x3ff, 0x0, 0xff, 0x80, 0x6, 0x0, 0x1, 0x6, '\x00', 0x7, 0x7fffffff, 0x8}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x13, &(0x7f0000000e00)=ANY=[@ANYBLOB="18080000000000000000000010000300851000000600000018020000", @ANYRES32, @ANYBLOB="00000000200000006600020080ffffff18000000fffffffe00000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000ec0)='GPL\x00', 0x2, 0xde, &(0x7f0000000f00)=""/222}, 0x94) 1.624665796s ago: executing program 3 (id=5425): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf7, 0x2, 0x35, 0x3, 0x8}, {0x77, 0x0, 0x7f, 0x8000, 0x4}, 0x1, 0x9ccd, 0x193d}}, @TCA_TBF_RATE64={0x1, 0x4, 0xa508c888da3da3d9}]}}]}, 0x64}}, 0x4000010) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'veth0_to_batadv\x00', 0x0}) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x54, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1ff}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x35}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xba1}]}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x400, {0x0, 0x0, 0x0, 0x0, 0x1bf5b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001800210128bd7000ffdbdf250101040015000104000000000600000077dde799df4d5c7d0200000008000e00", @ANYRES32=0xee00, @ANYBLOB="0800050002010104"], 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) (async) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="2b0000000600aabbccddeebf", 0xc) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000052000000bc8900000000000035090100f80000009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a04608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) 1.343557557s ago: executing program 0 (id=5426): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000340)=0x207, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) bind$bt_hci(r2, &(0x7f0000000380)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r2, &(0x7f00000003c0)="45000000040000000100", 0xa) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0x2}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB='\a'], 0x10) (async) close(0x4) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0xb4, 0x31, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x9c, 0xc4, 0x0, 0x1, [@typed={0x4, 0x14b}, @generic="5eefba9e6b05c976837f4a6f1f16e5f36e31d68c2c3cf8f13dc5147a316dd7ad46cfa532aa98af4769c8dd65d02b889dc02e2c12b60b7e9e24867964de721e24ab4002abf63a7a6ae2b4de42c047d35a749c87b765d2c3e71b67cf1dcc8aaa0684487050e74f075d2220be6d01c0ed99b02db2d4d5b4f16b275c55e33a3a8277786e215e64671c948f633434", @typed={0x8, 0xe1, 0x0, 0x0, @ipv4=@remote}]}, @typed={0x4, 0x18}]}, 0xb4}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 1.178082882s ago: executing program 3 (id=5427): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x7) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@multicast1, @empty, 0x1, "bcbfa521b98745edef7d76179ffe799987999546e3216ffe6b12a13f9a454324", 0x3, 0x5, 0x30000, 0x9aa}, 0x3c) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x2, @in6={{0xa, 0x4e23, 0xffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r1, 0x1, 0x30}, &(0x7f0000000180)=0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r3, 0x84, 0x81, &(0x7f00000001c0)={r2, 0x3}, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8081, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000240)={'bond_slave_0\x00', @random="7c654dcaf85b"}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="151a9d1a40885398009fe8e30954e02b3b69a5bc518099c8c8289619a3985a9d89ac94c50b3f4e138214bf0bc065708fb6654644df9cf44da875d2abb6d3a867f11be813e0b4923394f20398370aae426731caaa0fd2cc8dd839a8241a798dd5e527cf9f8c4d607e624d315b3d09ee48d71691256e39f3248875f6bf6f4475b1f96266d28072fc2d875601b2b9f8bd41381c40a92f93c416c0fe9e7159dd200f06d7385217cf114c2326cf353a4612a3609d8251bf470c2ec06c0f26cf378bd75ee48eae95f26cd9eb32fc3d7c4c6687fd82de4fc493a757f649c7008058", 0xde, 0x48000, &(0x7f00000003c0)={0xa, 0x4e21, 0x1, @local, 0x3a}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000480)={0x2d0, r7, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}, @NL80211_ATTR_SCAN_FREQUENCIES={0x2c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0x8ec0}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0x100}]}, @NL80211_ATTR_IE={0x213, 0x2a, [@measure_req={0x26, 0xba, {0x8, 0x51, 0x0, "74044315a6d4737f032f289ab7c0cf923db0479834b83dff8f0d71e9da91b2155471a52f4417bd39e01de97192a236fd2a9e7912baf068bc6c88e8ac155c83326ccc2ce37ddcae80af651ccaf22215fa522e63d3f3995f8ed1f9e2ecd907fc7f1ba769bda0cfbb9f28ed537afe9f929f6464518de0c341a3bd5a7854be5a45399e900fbb10fae5d76efd70f1b7dfebcc04ebe9090b3d02eb42bfb5966514d2e60be3fb6146f4fc35ff4a723cfc1ffea695ed6c0898d05e"}}, @mic={0x8c, 0x10, {0x4f5, "ea4f540f1a6b", @short="6b6944f4e0071036"}}, @random_vendor={0xdd, 0xf6, "db8939e8a144e58fb6543af066aa3ee43daab44b3979c4f7652e0eea02fcaebda10da400650bd0d3523ac89b19d102276a42d4c1b959c24b6607db4db183b5e734fad2aa898d5d6a76596cb2ae4513e4b6dd117627f23177a1a3016c4d050610f6ae0fe0cb955a86a0943981fe651ab5cfefba2d8759b1b9c2cddf9d759af0b9cba6c6fa85e72cbb50cdd52cd0b96f94a8313404a81849a342769ff7e6e25effc56fa53946acc160d173775d184e1901a1e826eab1c61f25d08d4c385d606dd4f0dbbfb54a8642c24eb2ea896354820586e5d0970c87b143daa5e7cf3355ee8840ee1607a6ba069ff6c100b54bd2eff7ef0d48248455"}, @rann={0x7e, 0x15, {{0x0, 0x8}, 0xe3, 0xff, @device_a, 0x5, 0xffffffff, 0x8}}, @peer_mgmt={0x75, 0x16, {0x0, 0x4, @void, @val=0x28, @val="2647ef6e25e96dad9ae278934136f875"}}, @mic={0x8c, 0x18, {0x3cd, "bc5208d729d3", @long="9c43a07acb408d8b5441cd7118772563"}}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x3c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x20, 0x0, @random="1fe1665d86c91824dc02e8018d6acf497d06920bc6b6bd6cbb4971ba"}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x220}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="51b30a28e6de"}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f0000000800)) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000840)=0x4) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000880), &(0x7f00000008c0)=0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000000940)={0x7, 0x20, '\x00', 0x0, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0]}) writev(r6, &(0x7f0000000c00)=[{&(0x7f0000000980)="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", 0xfe}, {&(0x7f0000000a80)="5ff49b811a74cdb0394dd5497ecfbcf4c7d2c385b71545319da93c23c96fc3d1e73a61c65844ff68298be37a9aa3f5f873128969b60565c44bea95025b98bf4ada4050c3fd67557ebb7951b978ce509a4ae350d2ab55a04753ecd66ce05b4d88802558f8635a674b8ddb34df59766104c8fe0f1e9b2c60419d3531d8362f420e5f5c2bed", 0x84}, {&(0x7f0000000b40)="87f731542fcffc87b0d99fd7685dfe89a2d2a21e7cc44e8d6dfdcf7583608253003b842737c5aad39bcd2de461755ff77842d53e7e6cedd303114089b84686d58d61b9e32e255d9878568a02454d5c64bc7b4cc9637739bb80d40ccfa78eceb1db7f31199a629c753478ca28a877bfde57f6ee1f01dba0af7e7f949bd259e1007824f7f6137605d3251ba5ab26549850a96b26036f909d3aad796997ba75475fb575694ca5e1", 0xa6}], 0x3) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r8, &(0x7f0000000e80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x54, r9, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xf}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x8004001) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r14, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20001844) sendmsg$NFT_BATCH(r14, &(0x7f0000001940)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001900)={&(0x7f0000001000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSET={0x68c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_DESC={0x368, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1e4, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd61}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x41}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb9b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_CONCAT={0x74, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x509}]}]}, @NFTA_SET_DESC_CONCAT={0x10c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe868}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xacd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5702}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x85}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}]}]}, @NFTA_SET_EXPRESSIONS={0xb0, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x8c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x7c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x81}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x16}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x800}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DESC={0x1fc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x3c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}]}]}, @NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8a5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0x168, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa6ac}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf33}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x789}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5c4c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x205}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffeff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9b2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff801}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xf5b}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_OP={0x8}]}}}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x1b8, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_USERDATA={0x12, 0xc, "0bd8875b5b824f132adacd47be6a"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0xf2, 0xc, "4cdcd1c0749672251f3a3edad54f2bbea67dc0763cd72e4bcd8fdb87b70988c6736e72be5fe3fdee023b92ff627886aca84f93a8a24b0881677a4d45b69136afa07a8bcafea94a69f3a7b5018ba3c8d918b893ea51d4e6fa7b5330f1f751eb7b43adac27ae5f47732186fe86743b86d870479a7cdf76e1124107549247c5be22484c86c0e6f3afdb99331fd1326983df2ca8078dc72c1275493505b4b1b7f25a67920950357dd0e1569e9d9086e9e382085cf604ff75f2fd8e59f21b1dfd692ef2832f436b3c4b9189735f89b22378ecdf34609b656ad52a51c676c1bf164017a33ade087c977462e9651d457cfc"}, @NFTA_CHAIN_USERDATA={0x5f, 0xc, "a1c8b2853f6dea6cb1ee82b279539d446f034edfb7c60c8a4176f66b5431f525914f762b245037e5f522b6f63400c939233a508444cc98bb74c77028d25696fb5f571d3123b13093b0d4c603a81c68a2a907855403abbaac3b38c6"}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xff}, @NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x101, 0x0, 0x0, {0x3}}, @NFT_MSG_DELTABLE={0x40, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8e0}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 1.167191216s ago: executing program 4 (id=5428): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000004000000080000000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x9, &(0x7f00000004c0)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x5ae, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r8) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x14, r9, 0x1, 0x70bd28, 0x25dfdbfc, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000880)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xe0, r9, 0x202, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4004000}, 0x8080) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56e4f, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xff, 0x81}}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4890) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x3b, @multicast2, 0x4e22, 0x0, 'sh\x00', 0x30, 0x8, 0x7c}, 0x2c) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$NILFS_IOCTL_GET_VINFO(r5, 0xc0186e86, &(0x7f0000000940)={&(0x7f00000008c0)=[{0x1, 0x1, 0xffffffffffffffff, 0xfffffffffffffff9}, {0x8000, 0x8, 0x977, 0x3}, {0x5, 0x7fff, 0x2, 0x4}], 0x3, 0x20, 0x0, 0x3}) ioctl$XFS_IOC_GOINGDOWN(r4, 0x8004587d, &(0x7f00000003c0)=0x1) 1.066868809s ago: executing program 1 (id=5429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001fdffffff00000000000300000a3c0000000c000006090a028cdb797a3100000000090701df70797a3100000000100003800c000080010000000000000000000100000a00"/86], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 1.018811939s ago: executing program 3 (id=5430): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001740)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001800)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, @vifc_lcl_ifindex=r2, @dev}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000080)={0x41, 0x4, 0x1, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000000c0)={@empty, @multicast1=0xe0010101, 0x0, "000100"}, 0x3c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000100001040000000000000000000000000000000001000000000000000f00030073797a6b616c6c6572300000340012800a00010076786c616e00000024000280080001000100000008000200e0010101080003000100000005002200010000"], 0x68}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000001680)={'ip6gre0\x00', &(0x7f00000016c0)={'syztnl0\x00', 0x0, 0x4, 0xfe, 0x53, 0x20000003, 0x50, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2={0xff, 0x5}, 0x80, 0x40, 0xe3e1, 0xcff}}) sendmsg$nl_generic(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0xe, 0x4, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000001a40)='GPL\x00', 0x4, 0xc3, &(0x7f0000001a80)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000001b80), 0x8, 0x10, &(0x7f0000001bc0), 0x10}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001840)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='&'], 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001cc0)={0x0, &(0x7f0000001d80)=""/19, 0x0, 0x13, 0x1, 0x38}, 0x28) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001c80)={r11, &(0x7f0000001cc0), &(0x7f0000001d00)=@udp=r9}, 0x20) recvfrom$inet6(r9, &(0x7f0000001d40)=""/26, 0x1a, 0x10160, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/33, 0x21}, {&(0x7f0000001500)=""/158, 0x9e}, {&(0x7f00000015c0)=""/151, 0x97}], 0x4}, 0x9}], 0x3, 0x0, 0x0) bind$packet(r5, &(0x7f0000000240)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) write(r5, &(0x7f0000000280)="ffffffffffff00aabbccddee080045000028000100004011f8cbd0000001e0010101100010000014000061626364000000000000", 0x30) socket$nl_xfrm(0x10, 0x3, 0x6) 1.01841788s ago: executing program 0 (id=5431): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, 0x26, 0x301, 0x270bd1d, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x60088c1}, 0x4000890) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r2, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000002, 0x11, r1, 0xaef000) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_int(r2, 0x1, 0x4c, &(0x7f0000000140)=0x80000000, 0x4) recvmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2122, 0x0) 859.311263ms ago: executing program 1 (id=5432): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x8040) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000c00}, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x23c, r5, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xd4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xbb, 0x3, "eede2073182adeea7222d700e866f8a1ed06de618269a78d12bef64c7e7072c5398b8442141e82d6ed92326f560d045cfaf05d5833bd0dd1278a364e32c3950b59053415a1043be247c4113df2a3236caee87c6bf04e019968375e2a8cfbf52408677540edc97bd8e83319c0fd6e43551e66ff270ac28e8b686c1fce896245bbebdb21bf6e3f7c64671681e5cd43338e06dc979d57d4890f92131ce18ea4122118a121481d69e333ecf45cd4f40ab12612d49af3a7ac20"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x943a}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x31}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xbd}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x31}, 0x101}}}}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x38}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7eda}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x414a8532}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "29b61ab4ee5efc877350bb46385d1647cd2a39a23dc1948b808ab1a254dc6c69"}}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffe}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r6, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x0, 0x80000001}}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xb, 0xbe, "ef5ed5c463b674"}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048000}, 0x40000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'veth0_to_bridge\x00'}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, r8, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xa4}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x9e}]}, 0x38}}, 0x4040011) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f0000000880)=0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000a00)={r3, &(0x7f0000000900)='veth0_to_bridge\x00', 0x20e00, &(0x7f0000000940)={@_ha_fsid={[0xc14, 0xffff]}, {0x7, 0x10, 0x0, 0x5}}, 0x6, &(0x7f0000000980)={@_ha_fsid}, &(0x7f00000009c0)=0x1}) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), r9) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000a40)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x4, 0x4, 0x0, {0xa, 0x4e20, 0x2, @local, 0x10001}}}, 0x32) accept4$bt_l2cap(r9, 0x0, &(0x7f0000000a80), 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) socket$kcm(0x29, 0x0, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r11, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4040804) socket$nl_route(0x10, 0x3, 0x0) sendmsg$AUDIT_GET_FEATURE(r9, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x10, 0x3fb, 0x20, 0x70bd29, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_GET_MPATH(r9, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x4c, r6, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x38}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x820002}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x80, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apm_bios_t:s0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4844}, 0x4800) 726.636664ms ago: executing program 1 (id=5433): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x44, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x53a18, 0x51b23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @wireguard}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000094}, 0x20040040) 662.336114ms ago: executing program 0 (id=5434): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000200)="194b762f4f90da08f8dced9936f1ad073ab43f2868853a6b995f18691a8c4b8c1c9aa16929408c27731dbbdc8152a3a7b83ad924298a6afeb92b3ec28186a66a9d8caaa090762ec03411a9c849dd86a1599f3eecc4c5518703adc89e4f47758cb3309e043cb529b2d24f03eb5c9ece1d14", 0x71}, {&(0x7f0000000280)="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", 0xfd}, {&(0x7f0000000380)="8a4f92c835e7878cb172b9c588850fc170c9f85d793d706db56223bfb2a19a9280d1160517de1c4398c165e6b77ac9b8f10ddaa94b", 0x35}], 0x3, &(0x7f0000000400)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1000}}], 0x18}, 0x200400c0) sendmsg(r1, &(0x7f00000007c0)={&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @empty, 'pim6reg0\x00'}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="2522a1afe26001a98eaaff271f830442ad65c131b5645ad1906dcd4032cb251fa2aa3d7f3bfbdb5e56a71f9af91961a450b15d1ee9eeef1759", 0x39}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x598}, 0x20000000) r2 = socket$rxrpc(0x21, 0x2, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bind$rxrpc(r2, &(0x7f0000000640)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r2, 0x1) sendmsg(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r3, &(0x7f0000000700)={&(0x7f0000000740)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x24, &(0x7f0000000dc0)=[{&(0x7f0000000e00), 0x1000}], 0x1, &(0x7f0000000e40)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvmsg(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000f00)=""/227, 0xe3}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100004}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x88, r5, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x80090}, 0x1) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000018140100020000000300000008000100"], 0x20}, 0x1, 0x0, 0x0, 0x9}, 0x0) 661.539495ms ago: executing program 4 (id=5435): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r1], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x18, &(0x7f00000008c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000b00)={r3}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r4, 0x215eb000) r5 = socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0xf3a, 0x0) write(r8, &(0x7f0000000fc0)="94", 0x1) vmsplice(r11, &(0x7f0000001000)=[{&(0x7f0000001040)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000001140)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r7, r11, 0x8f5, 0x7) write(r9, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000001200)=ANY=[@ANYBLOB="bbbabbbbbbbbaaaaaaaaaa198035010e886c06f07600aa0080000000000000000000"], 0x0) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x60, r12, 0x1, 0xffffffff, 0xfffffffe, {0x37}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x15}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004000}, 0x20040100) sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000000ec0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r12, @ANYBLOB="00022bbd7000fedbdf2510000000080001007063690011000200303030303a30303a31302e300000000008000b00020000000600110004000000080013000700000005001400010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00a10b000006001100000500140001000000080001007063690011000200303030303a30303a31302e300000000008000b000700000006001100faff00000800130000000000050014000100"/198], 0xcc}}, 0x40) r13 = syz_genetlink_get_family_id$gtp(&(0x7f0000000740), r6) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100"/18, @ANYRES32=0x0, @ANYBLOB="080002000100000008000800000000000800090000000000"], 0x34}, 0x1, 0x0, 0x0, 0x24000004}, 0x24040810) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 657.935525ms ago: executing program 5 (id=5436): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x6d91, 0x4) sendmsg$sock(r2, &(0x7f0000000340)={&(0x7f0000000380)=@hci={0x1f, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000400)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x18}, 0x80) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x68}}, 0x20000880) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000240)) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000300), 0x4000000000001f2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd0010000000004000700070100000807f3007500fcff0000000095"], &(0x7f0000000140)='syzkaller\x00', 0x3, 0xf9, &(0x7f0000000640)=""/249, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 494.571505ms ago: executing program 1 (id=5437): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x90}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000040)) r8 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg(r8, 0x0, 0x0, 0x8041) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x7) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 399.817532ms ago: executing program 3 (id=5438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000001a900)={0x0, 0x0, &(0x7f000001a940)={&(0x7f000001a980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed3000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x18, 0x10, &(0x7f00000013c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001440)='GPL\x00', 0xb, 0x100a, &(0x7f0000001480)=""/4106, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x3c, 0xff, 0x0, 0x0, 0x5, 0x10}, [@FIB_RULE_POLICY=@FRA_FWMASK={0x8}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000400001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000062000000ca00000095"], &(0x7f0000000240)='GPL\x00', 0x9, 0xfe7, &(0x7f0000000280)=""/4071, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f000001aa00)={0x0, 0x0, &(0x7f000001aa40)={&(0x7f000001aa80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x2402c055}, 0x8010) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002540)="d8000000140081054e81f782db44b9040a1d080243000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7d9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace80ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000001ab00)={0x0, 0x0, &(0x7f000001ab40)={&(0x7f000001ab80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000030a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010) 377.458994ms ago: executing program 5 (id=5439): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x13, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b535, 0x0, 0x0, 0x0, 0x6}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x6b}}, @printk={@p, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x6c}}]}, &(0x7f0000000900)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffff}, 0x94) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) 134.47943ms ago: executing program 5 (id=5440): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="9510"], &(0x7f0000000280)='syzkaller\x00'}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000100001"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000640ffffffea"], 0xd4}}, 0x4000840) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 36.532623ms ago: executing program 3 (id=5441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x48241, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) shutdown(r1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x10040) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)={@val={0x2000}, @void, @eth={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x20, 0xfffe, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @local}, {0x4e21, 0x600, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x32) 35.397171ms ago: executing program 1 (id=5442): syz_emit_ethernet(0x97, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6012000800613afffe8000000000000000000000000000bbff02000000000000000000000000000186009078ff0000000000000000000000000aa7a7d73362339eaeab79afabe3308ce54006598080a8030037003923493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac1"], 0x0) 0s ago: executing program 1 (id=5443): getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x80000}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000180)=0x2, 0x4) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000001c0)={0x16, @dev={0xac, 0x14, 0x14, 0x39}, 0x4e24, 0x2, 'wlc\x00', 0x30, 0x200, 0x1f}, 0x2c) r4 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r4, &(0x7f0000000200)="7618bd0e028fcb077342a9d6fde328ade036b063a73d1df8b26128706c8a0765fab8f0499cbed71be59a798b2975713b0f049119c248f3ee41d52bd09141b70580c6cca4ab0ddfa0ea78d40e183339b2fe107dca63d90851c8bdb8ab18676511dd3c05dd32b3b1bcf6f13a2600867e", 0x6f, 0x0, &(0x7f0000000280)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @local, 0x6}}, 0x24) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000300)=@add_del={0x2, &(0x7f00000002c0)='veth0_to_team\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@arena={0x21, 0x0, 0x0, 0x34, 0x0, r2, 0xa, '\x00', r1, r2, 0x1, 0x2}, 0x50) bind$netlink(r2, &(0x7f00000003c0)={0x10, 0x0, 0x25dfdbff, 0x1000}, 0xc) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f0000000400)={0x3, 0x3}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000440)=0x4, 0x4) socket$nl_route(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000880)=[{&(0x7f0000000480)="7421dc00a92dec710e85e443c4511e1b56223c3305983c3ab075629d78b075598c767b67399db1b51e130f", 0x2b}, {&(0x7f00000004c0)="349b95822b558bab79a0f00ae74a83536db8e57564d30ae7931f389b9a1bb0a4ec0f102537c45024232d623caa738d327c11b9ab30a7517e0f8a22864f623819bc81d8d71f71605adf8dd8017788d0380d6e3e0d0c8b28101497858cb38824de73f1805b47642bd68450c7c7daaaeca548f29ae78c17e09b1a4c00825fc3a5fb0485571b152c44f7", 0x88}, {&(0x7f0000000580)="11b8b0848ca54f693722fb66371158046a876662da000810c56c3cf1851f4e8d5c73a997a798197ccba1787828a490c4f895fa8b2ee17695801db4", 0x3b}, {&(0x7f00000005c0)="477012270c3fdae7bf60a3a637d7f92294f85a3f975acb8d7198903e41e7f6747f50cb30ceaec7912ac3812ea1c896d4ccf562de7fd65a7b43c8028f39763b2c7cbc9155b95b946b5c4876b8dcb832e99798a26c0fbbf0dd751edf2d551ca6a56b3b1d3613a6d91a5d4a202ac8dd136c161ba311d5441e7434173a72fc4bfc8bee2b0cff2370514df534d6e89c3bc434e8dfa1be2f34e99f727f1b4a11685bc4c5547c7deeae2564f1f65533c2cd305f0b941c1405cda211721f93418b6382dddb218bfdfe294cc4", 0xc8}, {&(0x7f00000006c0)="c230fcc1754b242b328dcddfb5061d0f3f899e7b29ecb7250e9ada32745306ae26f04cc99ad4181d9ec8f483d6981af6d154077b170a1e71d5612f1c818631edb41937d5b12a50a4ac2a4011197f06597e347ebf20c73688bb7258bc2ae6d9822a4ce7cb69534f7d4975b097f2def45fc1457c4e4c66af825a20b6b09be24911a0e9ea08e97a046444b4f3b99d78ca7e5c77dbcde26f98b165b7ad2c1b5196fae0d7830917b4f02061fa", 0xaa}, {&(0x7f0000000780)="718086533061194e1c8c7e418986b97700aa93a1ab99fdb1a9013b9095aba5ece277602c7348b56424f2c6eb4283a1a284e8e4ef54f9fc7bfc61ee972d939a3475172d1983e6f15ec1473e8fa2384ab4ca1e4f3b920a730cff6270ee3618e5ce9c4c221b238adc4f4e4c9bb303c5da4ef414299a679ab213af786bad33784e24f5ae4e1351c6d119629bf2c78b6d3c757180a60db1ef21c7188c7d357a5d33a2d9a14719f81070f0ec3c085431b6e56083b62854e56c90182431beef1e4c58c53aac45bf1cd20619f7b0c227e01c49b06fa995d7396d21de105e447ce54e9727306367c54bc9b34f598d2c71838eda79fe1b70b5", 0xf4}], 0x6) connect$can_j1939(r2, &(0x7f0000000900)={0x1d, r1, 0x1, {0x1, 0xf0, 0x3}, 0xfe}, 0x18) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r3) sendmsg$ETHTOOL_MSG_STATS_GET(r3, &(0x7f0000001e40)={&(0x7f0000000940), 0xc, &(0x7f0000001e00)={&(0x7f00000009c0)={0x1430, r6, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_STATS_SRC={0x8, 0x3, 0x3}, @ETHTOOL_A_STATS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_STATS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_STATS_SRC={0x8, 0x3, 0x2}, @ETHTOOL_A_STATS_GROUPS={0x14c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x140, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',%\'\'\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&\'\'\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',*)\xa6\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2f7b}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ',\xc7@,#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_STATS_GROUPS={0xfc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xca, 0x5, "4922fbdb42bed84cf0af48ad17efec6a6f2acea944039ac21ec7ab3d68e8191614646abdf6eb98bd71019482f70dbab49f7ad379c58a535cf4b311272d04388ff829effef6bfc69e8a78b0622abe23acfdad79bb6789225606a9a183a1844f385848a915ca817fafa04f4e4bec0aaed367f4747057022a9aef0be7993f5cfc4ada5a4c7d01e113dd5ead4d5d31c7e2d24779d9c1eef149fa1e99312b85f56dc0b637c3137cb260c14a2d705fe23120aa1edc70eb9654ccaf5890013c2adea522baad4d271e72"}, @ETHTOOL_A_BITSET_MASK={0x27, 0x5, "a3e560a6fd654143f614762489492c23184ccb172a267f8a3f747b798373be065a9fe1"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_STATS_GROUPS={0x117c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x9, 0x4, "df44492729"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb9}, @ETHTOOL_A_BITSET_MASK={0xf3, 0x5, "c1a86a49cd602e141067480f280800f698421c9e1f46e29cdbabdbadc8f007976744dfe938a1a41ba0f1fe78609d0f64310831d8cbc51bd26f4a2b8eefc989aa874583d1c95384e1dff3ed7b80f9c74f2eeae6d35c562bba36d8d93df6d42c4d55cd624e0b9437a920c126c0cbef02be0725b96810cf0b986de2ba6f52f35f9d6e4b8b870cf399174b2210abec76b82ef5bd4271fed1d48c01b9a36d2c9d60cb3cefab7fdf6f1216315e05f732340e834b5801b0d866a221b18609de995b794f52eac1d655aa77e0caa1735cc0d4048b580ce37e11cbaa1a3ed4eb32d74afd9b71dada831aec63a74556eb3617f9ac"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "20232083"}, @ETHTOOL_A_BITSET_VALUE={0x2a, 0x4, "3cce1f84aac05bde84cf655229e90471bf8322ce63b87a720d8d8e6e2d46ccc6f361e662d205"}, @ETHTOOL_A_BITSET_VALUE={0x2f, 0x4, "ada52fcb98454c20f9156d48c24d882cb051bab37d98b86d276a328762f678f5cc7fe042714b4f1ebb25c5"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}]}, 0x1430}, 0x1, 0x0, 0x0, 0x80}, 0x4044044) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x205520}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x2c, r7, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x101, 0x79}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) connect$rxrpc(r4, &(0x7f0000002000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @rand_addr=0x64010102}}, 0x24) write$bt_hci(r2, &(0x7f0000002040)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x8, 0x2, 0x0, 0x56, "56f3269c9ede7d32939abd211c3764205e9743c4b62edd1d4423adc71ea635"}}}, 0x27) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000020c0), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000003380)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003340)={&(0x7f0000002100)={0x1204, r9, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xd6, 0x5, "f75f0b660d1a767dc909fa6887a0d401db9e08eaadade1b3c8c6347e3ded555c70570ca2b04a2c3a1b159c652daa967d10aaaf22923f7541d99fd391eaf3b8250d4bc2eeec7f19477de7447bef7a3181a53c78752beb96cd3937051eeda353437a332a55007bc22875b69c2b5e3017d9d2c1fd1329da2927513b999efaebef1075f845812670b785d151c9c8401eef70c02dab55f0d285e9dc8aea2b5c9f91dab0988cf4fc367dcfb552d00fbf330ce81af9b3f65b0b3493b87a9cdf195a445110adfe9bd6ea3c7b69df773ddc9b2474d259"}, @ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '**^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'caif0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wlc\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&\'\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd450}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']\\}-\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1014, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x945}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "312801479ba444bf1c3b6d591bada76b6d9561f6c4b0a6f099f3edbe018f11d081f48f5d0ede6e5a8b8b36b40379d2bff2972f0564ea68fbf9c37098bbd1f7ab3cf3ece74d9c20771b53332d7abab882f470b31a16c356d64adb19d47fa1b0395057bbd2c58787ef06cff8700dc2d693d598e838ce08564130e55ab49a14351027b2068ff859f2331438c1bdb70be2b5d6c7d6004e3ba08342176bfcf5c579ea1ef7431cac136cb912d40b019086cddbde2239f6ca23a8dd1e7446936d076db642623630a2f37f719b63bee622e62ff102d3a735eb2eb9e73026531f787f16d8f396727bc2a065029ec3c624eda9f4ebec0414b1d454d4124c2e3c5df19ab81bdb60a52d30470f4441d48a8decb9eef645e2c08d3b98dbc28fd18d3d69dbe0b453888e14ed20bcdb83526d899e1aea562192a18df8e5c9aad5f46baef1df14f633c4f1fd35c2f6f587d64e808968cd41dda0ae33423085ebcd60f88029a5d15abc4e968543d4caae05e7c071812fc30e84e9af6b6202cdf079f3b4cb0c06d1ebd45c1483a7d0914ac38fc1637f4dd862aba08231cef24aebc899d71e1f2bb3c545e44c523687dc3b2e0ae0c63e6a8ee1ee3b6f7c600272bf50f5354743cd886e640b8a343294d6c42ed8a6d429a82e441fc970e275f454ee6c259c8cdb83608671f77f328b4235b53d8fb6ebeecc20fd715f20f2a80672606eccc262fd106109d921e04bd9982bcb719b205450765b7516938c6dc10b1639cb22d983188a78466a5178eecb60a08c5f121fae2229f4a465d136069fc6962d650ea01c919af679728ce5cff153ab2795681dc4481d4ab46fb49f483af519eef52997accfefd4fe69dee74ad787f0a1273bba142ed1113fef1d455b36eac564a1f2a6c10093ff44021447be4ad05c587cafa8b745dec5c4830462796e0fcb8b0d33287d3577f815559887cfceee69663efbc651d8d7aea736f8fe63168c5d271747de6067efa4de38aa0e3503e8f2798e496542091a605d074d43593c88d507aa898d41e85eb955f72559683c682868262ee35497be38374e47f8ce6d2bc677cda88cabb067b63ef4b47bcd0515c0853579ce52e9caeb402b1218aa6e82754a3fb82f8d5cbe2d9dd84dc32f61407db29c8908fc69477c7a191186641c8447d0b2b232982d3801e73ad74df9a705c834f12c338ec68585e27d873db924c565f855d2c60f5f0039251514e2cf904a3a5bc380b78465bde51ae02a6b22e2b34a7f73b47823ef0e8664c77e32327bf2c649b60f7c45dbebe921d6a4a13fa3147b324de75d9a9759d5f8887401983b650553615bb4b1e502b8d6b504ccca0054da37c6377cf0f7aa316af5cd7e4238e03b630fd7b9608f2bfd29c8e8167137d1d86b6d43157248db0534ba1bd1ea29ced399966bed0d8ec1c165f67957275b8654f001fe4c02804b847e1b9b9a2e554a66f581ad6ecb163e48a47a6430dcd077d4117a6ac011207139504bb5474b3f4446a422e68c58358a024c6749303923b52fe9d73915e47fcaceed72984311a7513a8560689d20644d3673475bcaf5ff19663600b38f309e288e5e035dd217514f91d69375261686ba7650b9a282a3daa783057d9d03d00fdd034f6b59183782833fa99293629b4ce3b2ec36fe84d2f912202b57572c0ddfd1645cadbb7493924f3b119a6aaca6b7e20e44ad28bc3b8d5553fb7df90783a0ba0022b49c4fa452f1f60172814baac208ea21883b28b42dfd44dd55b599baf38f6f003d0fa76042942a551b15fa5a500ea089391c943ffaf55ae0cdbee8228487d616fe7d492516c4ec93ecc85025d92ef2bb761afeb0bbb3717e3c600dd6baba1d814f899934c4c3f1635adfadca2b81cf409e8e0f84d4154cf02db02775b7efe0fa72c0b16ca24c1e5618bb8eada2b8011c356a66b03d6dc8072ded144e871a8c2a27c328cf0bbf9e9bafce0678fb8a68ba711c084199c799d08fc30283d4b4584f9d7cd1e3e45759208e85996d178b581d61f2bd34bcca53f15cc42b90d44ecbedc483f72bd8c14611588ae5f29365b4e2e4eb759859f84791e3617a0ba6f10723598ff74d86c7b0177b347e6d4186d4e14c20be31579c706ab6eba43bb9496db29fbb6ea4a7f346fbecd2fb74a5ddb046a5de4e4b75bdc6773c79af91b3260628fd3ab4d0a40048bc3b8170ce243d5d8b1bca484a79f0fcb3ca69b947d00a99e888f45d3791f7168155f6c09d01b8e3e56a65fad1059d2e5ea67051f6a631b6895c6f793852a7aee25b1bbdb6367854d674c9e80df3f63c1f5464bd0ef826361cb7cf99bcfba3624ab59bb82b8dd0bf078f579ff947e0d1180670e027ea34dbb36fb8674886e06bbcb71b1b380ed700bf98cdb6f5991341315aa4691937e679cbb5a4046585f64fb35af9e58fdd0ac112488e79f7453ef847c5e7bb841b22c3b840b603c7e8eacedb070a7701c61d41c1c6dc33d2f409cd2db57f048e4b44d63f3a645741b5964602fd1886f11e6c35a3b0238d67b6c81f9e5219dfda46093a5e021971e19bb0cf61e2e91f6773c26bb451ba764225f8fbc5b643051188255f11286a6e9b3b6ff26f3416147b50ba2b2224b1a98a34d5d46c37eeb0b42c71b920f411c63d662ff24a73a1caa20446baefa5f1af742dad877ba1443d423d0c8f5354bdefffd1e08928e8a48a963cebe1ac37b680546f6d219fabc37273e5aa510e90298b63bc38442bf8b33b0ba8b97579427f3d3b5dd2d0996dde91d228eed1737f4a395841b7695aece8510cd13902ae351c5541d24efd7ca06f486caa6a35e9d5715e84b7e3daa816cb60b60e83dc35d448f89d8f81ba5e9e098e4cb51e6ddf3d97bf172a4e2a5bb34fec1c1aa4623731f898130c0887a2c728a85b3fea59f927a84f6529fdd97728380c733ffbec1e4978b1cad9e242b3c25cf5c6587be5c4434907fc09d61077fa34b046985d06ac32e69cc538acd9a85ad951cdc5bd6dcbdd9255517e7bd0c13e32635591dcb75eff435d3bfb2da62fc322337ec80b6fb82a5ac154747669c3fd1213627f9b98aa1d9c0869efce945492a1ec5aa1d6d36aa194ed114b86ee77956b60732bc98fbb748bfa9101eb96ea9b4aaae23d5f43d1e9bbb790e30cb52cb42a95c84a7dc5453c68572c4f7ed7bebeaaf749330856ba7dced950e53599b318599ad53d6a71c440756aa56588fce119f6f24bebe9374cee3c907e7dfa3e717aba429c23b6dd05acf48d582b6c7f85ff1d682402936f17dc355e1e0a5bbce29cacb8866501fda288a09f94a422459e5fe4bc279503b32cd54d4099b5a8be49bd3a5ebbe49a3caca0771bfc06d704c5f6fec3fc8b6e9d41108928515c7eafd7c1e1ca703afa611dee6bf90c199e1923da1e0daa5fcb3aba777124f8ecca8e8919e389a64033bfc073a09ce74c703c1f0602239b87dfacc0158c3843d8e23dc86aa61d3c15cdf8f71b4b1e22e720f32566461f8de4e4ea83cd3ac861c0f3350a8b66edae28f84ee9c39930e53d6a875671f26dd2d4d9d019032b67290cd8a7bf624841343514b58d71fd2349bd07d544768bcc7f7f8e7902edccd827dea9b4f59555029b05616379cb2b78ee504e94ab500b8c6a8bf5295d50e54dce1095c66c6e512a3a5e0541a4343277306d08d85d51e41963f19aead213e62556777eca5b6ac09bcbab71398875cdeacf1b6f065c534c8613d951797a44608e464a3032b715e31bdda0eda6ce3aa99d345ae42176006a3c0a5a93f488c63dd12209f216425be6914ca54bea8432283cfedb2e7d51e60ea9e22226f8030a7b9ca6bd5de73653b749bcf98e8bdfa7b25270efb28a97a2bb74e2fa8298d68a719d9d9db8e13157ca9bb16a9c42e9c62a76c38e6723f82dbee4b6b998b1784384eda55ba62d85698455ec6d6d84edb60b9557f7a02c39614fa3e20a097f57215f0f6fcfac7e6bb0d7fef8490e4aed8de85dda1275934f3f3f3740fa48324c3582bb5bfa057a49d6e5d3d7e7503b66c5a8129c4ce7538516659b5d42b4c0be730e835c6606bbf1b6ebb956cd625f2b477e8c8adf745fe4525c0c86b4e2bd27c4054b68ca59e1811695e8aacab757256ed1b9b9b2cab632d57d081e700f05820498c7a89017c6be23b8f0a10b57357c2965d175444e917526180d27505978bfd272c2f1a799783b8b44c98d7d5fd2997a2577a27dc123de3516b4d42a96d09b69d004aeef9f8a4b796c2baedd5ca08741837db63bb7dbbc506474fb7da456ba5beb23638d1cf13cdbb66525ea78592418e06c3a1597c534878d20ddcc1a2e9a7aee4f6e39346997e07f8bb8b003019aa24081f68fc2d1e5b1d064e3dd3391182855491ece477f1fb62ced60384931f6e56668f9c6825cec3c43b8a8b0b8693f922dd11f75f3a7b6cd5799d071f84131bc965740633c4b327c836b39e547644df720a56a339369f43955f811e7185b88533df49bb65e04328ca30073a0f315a70bbba0c94e79362484ffb86624b1b439b47bc935b1697417a33d1ce13cf62a49634ebc49f40faafb36c1e3b89889e1ed8cbc42dd61aef6cb871258a3dff7d916f9086bc2d3b07938c250f454c1d0650b4507045e9210168ab5b5768642d1e566c512a686a951f936a2e2b11a47672989e398e9fe920b6ed74a8599884be27c63a0b5862997fdce19ecd049196b57f9d54ccc5e3f20c4cc0b525462863a49d98b0b3fdd1fae71f429af4d82ce7f201d58439f19d786f140acde9ae2a7f8e9c2757ad30bc39ff407c5709130261635a51f4b2784c9c0a22d0805703aa4d9f14f6291cb0527ede2a7fb097b7bb4473034f23555fbb7dfc7e2a8347095f25a1a64910b0f98eea131a8db18607ae8c4dc59db501e58edb1a2fe4d891f5dfa1ae470274737d8303b6c5a2b035d94ea449b2272c8efd89bbe54f3fd584248989b55b1a6f3d8250c37432f0d6070bc225b361c48e8b3c21e8c89e34fb5ca6f6464c65269a40daf957659cf3943a65781de784e0ecc9788ebd53ac71f4fb0090274bf26fbfca58990980a47f91b141317e71e7bf689185704ebbadc0330a1a573af3cf362a5517b4ddeab0f46787e033fe3dbd01b0f88f619d6892d448d2448ff73d6da78436602a7f4772d1b6344c0cc20520edb56e70d215b65298f52906efc4044cf200e9a95befe2a390d889129eba7da8bf2a312c295e9bec759cc6d5e58e7d9495d487f74c9ff5fe699d521d0ce3c8c104af773085f71fd1de41ed0082ba02d1beb08213dcde15858cba523efcff35c162dbd9f783c6c879fd7ae6e967a31a9e819936e5a0c2e27492d52505430b0f7de05e3e774db6b3c75bbb161e45d1570de2804887d1197c3ae674f6d309315180007e56e4260feea7172775f88937808c2b25d89e07cfb7f36fee03269a18b56acb3b83e83eb3f8ed5ce0c74b7f20ec13475fef5da2bb465f29e5424f6674414483869aaaf0e5ef435c5fbee054511c842952eb60f9f6acfc0d0263f3f8f669c5fbd102c6494b3624e78a1fdcc0baf9cb6ae90dd10a41e297e16609ca9da533a191cec6cd9b682ca368c61ea1864348165973181327006dee777a64e3cdd7804318cfc6157faba3f0cc533b8c9c9b7fe018b1d0337a85378c38d754ff71e61464d66128debfe6f0e615e3ce0c7c8c042bfa7f9c3c6651e1482a8522922ddab659b1e6f8e263ad311d07d9de843ae4a1588ea147cd6150d13178e1c2b49a8396f4b2e475c752eb396113786ac684b788640483fbe9e7ecd581574cf0c49cc2f9a7b8aa136249ed0ef7d8f4029cb04f73dfc9f"}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1204}}, 0x1) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000033c0), &(0x7f0000003400)=0xe) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003440)={0x1b, 0x0, 0x0, 0x7, 0x0, r2, 0x4, '\x00', 0x0, r3, 0x4, 0x4, 0x3}, 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) r10 = accept4$alg(r2, 0x0, 0x0, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r10, 0xc0205866, &(0x7f0000003600)={&(0x7f00000034c0)=0x80000000, 0x8, &(0x7f0000003500)=[{}], &(0x7f00000035c0)}) kernel console output (not intermixed with test programs): auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3958" name="blkio.bfq.time_recursive" dev="tmpfs" ino=772 res=0 errno=-22 [ 569.359284][T23443] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.359318][T23443] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.542677][T23487] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3964'. [ 569.585317][T23487] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3964'. [ 569.757201][T23443] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.757234][T23443] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.851509][T23509] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 570.054909][T23443] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.054941][T23443] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.284604][T23443] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.284640][T23443] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.387299][ T6280] net_ratelimit: 19 callbacks suppressed [ 570.387325][ T6280] bond1: (slave batadv0): failed to get link speed/duplex [ 570.567508][T13403] bond1: (slave batadv0): failed to get link speed/duplex [ 570.677166][ T6272] bond1: (slave batadv0): failed to get link speed/duplex [ 570.799347][ T62] bond1: (slave batadv0): failed to get link speed/duplex [ 570.874059][ T50] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.874095][ T50] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.876621][ T50] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.876651][ T50] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.919482][ T62] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.919516][ T62] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.919577][ T62] bond1: (slave batadv0): failed to get link speed/duplex [ 570.934725][T23553] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3975'. [ 570.957267][T23550] netlink: 'syz.0.3974': attribute type 6 has an invalid length. [ 571.208832][ T62] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.208868][ T62] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.291664][ T6281] bond1: (slave batadv0): failed to get link speed/duplex [ 571.426684][T13403] bond1: (slave batadv0): failed to get link speed/duplex [ 571.686486][ T62] bond1: (slave batadv0): failed to get link speed/duplex [ 571.804183][ T62] bond1: (slave batadv0): failed to get link speed/duplex [ 571.906929][T13403] bond1: (slave batadv0): failed to get link speed/duplex [ 572.179152][T23588] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3982'. [ 572.419910][T23590] bond6: option lp_interval: invalid value (0) [ 572.419934][T23590] bond6: option lp_interval: allowed values 1 - 2147483647 [ 572.424163][T23590] bond6 (unregistering): Released all slaves [ 572.641856][T23595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3984'. [ 573.157925][T23609] netlink: 'syz.1.3988': attribute type 8 has an invalid length. [ 573.272076][T23615] veth1_to_team: entered promiscuous mode [ 573.287023][T23615] veth1_to_team: left promiscuous mode [ 573.391890][ T2397] block nbd3: Possible stuck request ffff888028419a00: control (read@0,1024B). Runtime 30 seconds [ 573.395021][ T2397] block nbd3: Possible stuck request ffff888028419bc0: control (read@1024,1024B). Runtime 30 seconds [ 573.395059][ T2397] block nbd3: Possible stuck request ffff888028419d80: control (read@2048,2048B). Runtime 30 seconds [ 573.614126][T23624] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3992'. [ 573.660037][T23624] syzkaller1: entered promiscuous mode [ 573.660064][T23624] syzkaller1: entered allmulticast mode [ 574.096590][T23653] netlink: 'syz.3.3997': attribute type 6 has an invalid length. [ 574.685455][T23680] rxe_eth0 speed is unknown, defaulting to 1000 [ 574.775183][T23689] tipc: Enabled bearer , priority 7 [ 574.870461][T23683] rxe_eth0 speed is unknown, defaulting to 1000 [ 575.061943][T23696] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4011'. [ 575.302820][T23701] xt_CT: You must specify a L4 protocol and not use inversions on it [ 575.338835][T23696] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4011'. [ 575.338869][T23696] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4011'. [ 575.447625][ T62] net_ratelimit: 27 callbacks suppressed [ 575.447651][ T62] bond1: (slave batadv0): failed to get link speed/duplex [ 575.477622][T23705] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4015'. [ 575.556417][ T62] bond1: (slave batadv0): failed to get link speed/duplex [ 575.663683][T23680] wg0 speed is unknown, defaulting to 1000 [ 575.687918][ T6281] bond1: (slave batadv0): failed to get link speed/duplex [ 575.773566][T23721] netlink: 'syz.1.4020': attribute type 1 has an invalid length. [ 575.981752][T23732] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4021'. [ 576.181143][T23739] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4023'. [ 576.241989][T23736] syzkaller1: entered promiscuous mode [ 576.242017][T23736] syzkaller1: entered allmulticast mode [ 576.267609][ T50] bond1: (slave batadv0): failed to get link speed/duplex [ 576.379034][T13403] bond1: (slave batadv0): failed to get link speed/duplex [ 576.491456][ T62] bond1: (slave batadv0): failed to get link speed/duplex [ 576.616283][ T6281] bond1: (slave batadv0): failed to get link speed/duplex [ 576.728060][ T62] bond1: (slave batadv0): failed to get link speed/duplex [ 576.838986][ T62] bond1: (slave batadv0): failed to get link speed/duplex [ 577.136327][ T6281] bond1: (slave batadv0): failed to get link speed/duplex [ 577.302497][T23801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4031'. [ 577.393440][T23683] wg0 speed is unknown, defaulting to 1000 [ 577.466476][T23805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4033'. [ 578.160853][T23836] tap0: tun_chr_ioctl cmd 2152240185 [ 578.230654][T23836] tap0: tun_chr_ioctl cmd 1074025680 [ 578.383338][T23846] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4042'. [ 578.383506][T23847] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4042'. [ 578.533699][T23851] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4043'. [ 578.535286][T23851] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4043'. [ 578.721986][T23862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4045'. [ 578.722009][T23862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4045'. [ 578.722033][T23862] netlink: 'syz.1.4045': attribute type 7 has an invalid length. [ 578.843352][ T5650] block nbd5: Receive control failed (result -32) [ 578.855013][T23862] netlink: 'syz.1.4045': attribute type 7 has an invalid length. [ 579.562825][T23897] netlink: 'syz.1.4055': attribute type 62 has an invalid length. [ 580.490584][T17697] net_ratelimit: 15 callbacks suppressed [ 580.490608][T17697] bond1: (slave batadv0): failed to get link speed/duplex [ 580.596856][ T50] bond1: (slave batadv0): failed to get link speed/duplex [ 580.692664][T23929] netlink: 'syz.0.4068': attribute type 1 has an invalid length. [ 580.777568][T23929] bond6: entered promiscuous mode [ 580.779080][T23929] 8021q: adding VLAN 0 to HW filter on device bond6 [ 580.826676][T23929] syzkaller0: left promiscuous mode [ 580.826769][T23929] syzkaller0: left allmulticast mode [ 580.869291][T17697] bond1: (slave batadv0): failed to get link speed/duplex [ 581.011996][T23943] __nla_validate_parse: 8 callbacks suppressed [ 581.012012][T23943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4071'. [ 581.016655][ T6440] bond1: (slave batadv0): failed to get link speed/duplex [ 581.034977][T23949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4072'. [ 581.040006][T23943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.126654][T13403] bond1: (slave batadv0): failed to get link speed/duplex [ 581.238177][T13403] bond1: (slave batadv0): failed to get link speed/duplex [ 581.262767][T23955] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 581.333763][T23958] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4076'. [ 581.346381][ T6440] bond1: (slave batadv0): failed to get link speed/duplex [ 581.460333][T23964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4077'. [ 581.527057][T23968] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4080'. [ 581.637018][ T6281] bond1: (slave batadv0): failed to get link speed/duplex [ 581.746340][T13403] bond1: (slave batadv0): failed to get link speed/duplex [ 581.959641][T23990] netlink: 'syz.5.4083': attribute type 1 has an invalid length. [ 582.072264][T23990] veth3: entered allmulticast mode [ 582.085705][T23990] bond10: (slave veth3): Enslaving as an active interface with a down link [ 582.098725][T23991] bond6: (slave veth0_to_bond): Releasing active interface [ 582.113712][T23991] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 582.134689][T23999] macvlan3: entered promiscuous mode [ 582.134711][T23999] macvlan3: entered allmulticast mode [ 582.135479][T23999] bond10: entered promiscuous mode [ 582.136059][T23999] bond10: entered allmulticast mode [ 582.139495][T23999] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 582.141283][T23999] bond10: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 582.167632][T23999] bond10: left allmulticast mode [ 582.167659][T23999] bond10: left promiscuous mode [ 582.519031][T24011] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4089'. [ 582.648871][T24018] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4091'. [ 583.044451][T24034] netlink: 'syz.1.4094': attribute type 16 has an invalid length. [ 583.044480][T24034] netlink: 'syz.1.4094': attribute type 17 has an invalid length. [ 583.123277][T24034] 0ªX¹¦Dö»: left allmulticast mode [ 583.199513][T24034] 0·: left allmulticast mode [ 583.199544][T24034] hsr_slave_0: left allmulticast mode [ 583.199565][T24034] hsr_slave_1: left allmulticast mode [ 583.205714][ T6281] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.205826][ T6281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.333592][T24043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4097'. [ 583.343126][T24043] netlink: 'syz.1.4097': attribute type 11 has an invalid length. [ 583.637958][T24059] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4101'. [ 584.319128][T24094] ip6erspan0: entered allmulticast mode [ 584.466031][T24112] vti0: entered promiscuous mode [ 584.466056][T24112] vti0: entered allmulticast mode [ 584.482871][T24112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4114'. [ 584.902038][T24134] netlink: 'syz.1.4118': attribute type 3 has an invalid length. [ 584.954940][T24141] tipc: Started in network mode [ 584.954970][T24141] tipc: Node identity 7f000001, cluster identity 4711 [ 584.955213][T24141] tipc: New replicast peer: 127.0.0.1 [ 584.955565][T24141] tipc: Enabled bearer , priority 10 [ 585.329368][T24154] netlink: 'syz.3.4122': attribute type 61 has an invalid length. [ 585.329394][T24154] netlink: 'syz.3.4122': attribute type 61 has an invalid length. [ 585.509196][T24170] sctp: [Deprecated]: syz.1.4125 (pid 24170) Use of int in max_burst socket option. [ 585.509196][T24170] Use struct sctp_assoc_value instead [ 585.598516][ T6440] net_ratelimit: 29 callbacks suppressed [ 585.598539][ T6440] bond1: (slave batadv0): failed to get link speed/duplex [ 585.638591][T24120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 585.702860][T24120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 585.793344][T24181] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 585.806864][ T50] bond1: (slave batadv0): failed to get link speed/duplex [ 585.865061][T24191] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 585.916674][ T6440] bond1: (slave batadv0): failed to get link speed/duplex [ 586.028719][T13403] bond1: (slave batadv0): failed to get link speed/duplex [ 586.060658][T24203] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 586.068591][T20094] tipc: Node number set to 2130706433 [ 586.138784][T17697] bond1: (slave batadv0): failed to get link speed/duplex [ 586.248029][T17697] bond1: (slave batadv0): failed to get link speed/duplex [ 586.356461][T17697] bond1: (slave batadv0): failed to get link speed/duplex [ 586.708751][T24236] __nla_validate_parse: 7 callbacks suppressed [ 586.708774][T24236] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4142'. [ 586.827815][T24240] pimreg9: entered allmulticast mode [ 587.138560][T24261] netlink: 'syz.3.4148': attribute type 1 has an invalid length. [ 587.164158][T24258] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4147'. [ 587.175870][T24261] 8021q: adding VLAN 0 to HW filter on device bond3 [ 587.214426][T24261] 8021q: adding VLAN 0 to HW filter on device bond3 [ 587.214774][T24261] bond3: (slave gre2): The slave device specified does not support setting the MAC address [ 587.239658][T24261] bond3: (slave gre2): Error -95 calling set_mac_address [ 587.314436][T24263] gretap1: entered promiscuous mode [ 587.325299][T24263] bond3: (slave gretap1): making interface the new active one [ 587.325836][T24263] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 587.394710][T24266] 8021q: adding VLAN 0 to HW filter on device bond4 [ 587.409977][T24266] bond3: (slave bond4): Enslaving as an active interface with a down link [ 587.606082][T24261] bond3 (unregistering): (slave gretap1): Releasing active interface [ 587.647039][T24261] bond3 (unregistering): (slave bond4): Releasing active interface [ 587.687923][T24261] bond3 (unregistering): Released all slaves [ 587.886980][T24287] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4153'. [ 587.974686][T24291] xt_hashlimit: size too large, truncated to 1048576 [ 588.099691][T24293] bridge1: entered promiscuous mode [ 588.099759][T24293] bridge1: entered allmulticast mode [ 588.304042][T24270] virtio_blk virtio5: 1/0/0 default/read/poll queues [ 588.321326][T24270] virtio_blk virtio5: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 588.441803][T24270] vda: unable to read partition table [ 588.565886][T24298] netlink: 'syz.4.4156': attribute type 1 has an invalid length. [ 588.623688][T24298] bond7: entered promiscuous mode [ 588.624169][T24298] 8021q: adding VLAN 0 to HW filter on device bond7 [ 588.668280][T24298] 8021q: adding VLAN 0 to HW filter on device bond7 [ 588.668734][T24298] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address [ 588.668752][T24298] bond7: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 588.672054][T24298] bond7: (slave xfrm1): making interface the new active one [ 588.672147][T24298] xfrm1: entered promiscuous mode [ 588.673874][T24298] bond7: (slave xfrm1): Enslaving as an active interface with an up link [ 588.855057][T24301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4157'. [ 588.857464][T24301] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4157'. [ 589.398467][T24335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4168'. [ 589.402898][T24331] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.402929][T24331] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.473543][T24335] bond0: Unable to set up delay as MII monitoring is disabled [ 589.557965][T24331] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.572613][T24331] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.682178][T24331] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.689296][T24331] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.780726][T24331] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.780759][T24331] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.903429][T24359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4173'. [ 590.139793][T24372] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4176'. [ 590.211431][ T1119] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.211465][ T1119] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.217041][T13404] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.217065][T13404] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.217977][T13404] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.218000][T13404] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.218055][T13404] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.218076][T13404] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.348342][T24379] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 590.485060][T24389] rxe_eth0 speed is unknown, defaulting to 1000 [ 590.707437][ T6440] net_ratelimit: 34 callbacks suppressed [ 590.707462][ T6440] bond1: (slave batadv0): failed to get link speed/duplex [ 590.721199][T24406] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 590.721224][T24406] openvswitch: netlink: Message has 16 unknown bytes. [ 590.818017][ T1119] bond1: (slave batadv0): failed to get link speed/duplex [ 590.929791][ T50] bond1: (slave batadv0): failed to get link speed/duplex [ 591.004403][T24414] netlink: 'syz.3.4185': attribute type 1 has an invalid length. [ 591.004428][T24414] netlink: 'syz.3.4185': attribute type 2 has an invalid length. [ 591.004440][T24414] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4185'. [ 591.028826][T24417] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 1, id = 0 [ 591.047130][ T1119] bond1: (slave batadv0): failed to get link speed/duplex [ 591.157283][ T1119] bond1: (slave batadv0): failed to get link speed/duplex [ 591.254206][T24419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4187'. [ 591.277536][T13404] bond1: (slave batadv0): failed to get link speed/duplex [ 591.399638][ T50] bond1: (slave batadv0): failed to get link speed/duplex [ 591.507080][T17697] bond1: (slave batadv0): failed to get link speed/duplex [ 591.551985][T24389] wg0 speed is unknown, defaulting to 1000 [ 591.710613][ T29] audit: type=1804 audit(1794242206.203:17): pid=24439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4193" name="/newroot/565/cgroup.controllers" dev="tmpfs" ino=2911 res=1 errno=0 [ 591.710863][ T29] audit: type=1800 audit(1794242206.203:18): pid=24439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4193" name="cgroup.controllers" dev="tmpfs" ino=2911 res=0 errno=-22 [ 592.069894][T24458] veth2: entered allmulticast mode [ 592.158054][T24464] veth2: entered allmulticast mode [ 592.211191][T24469] netlink: 'syz.5.4199': attribute type 1 has an invalid length. [ 592.563811][T24483] netlink: 'syz.5.4202': attribute type 16 has an invalid length. [ 592.576724][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 593.064843][T24491] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 593.167045][T24491] bond3 (unregistering): Released all slaves [ 593.418852][T24514] vlan3: entered promiscuous mode [ 593.418879][T24514] macvlan0: entered promiscuous mode [ 593.761378][T24527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4213'. [ 593.784719][T24526] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4213'. [ 593.885834][T24528] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4213'. [ 593.885879][T24528] netlink: 'syz.4.4213': attribute type 8 has an invalid length. [ 593.916780][T24528] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 593.916805][T24528] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 594.112223][T24548] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4217'. [ 594.399298][T24561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4220'. [ 594.627515][T24575] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4225'. [ 595.022469][T24594] veth2: entered allmulticast mode [ 595.061335][T24596] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4232'. [ 595.706532][T24635] netlink: 'syz.1.4239': attribute type 4 has an invalid length. [ 595.747930][ T62] net_ratelimit: 29 callbacks suppressed [ 595.747951][ T62] bond1: (slave batadv0): failed to get link speed/duplex [ 595.857504][T17697] bond1: (slave batadv0): failed to get link speed/duplex [ 595.979562][T17697] bond1: (slave batadv0): failed to get link speed/duplex [ 596.001431][T24638] ip_tables: iptables: counters copy to user failed while replacing table [ 596.077711][T24654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4243'. [ 596.077736][T24654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4243'. [ 596.092838][ T62] bond1: (slave batadv0): failed to get link speed/duplex [ 596.196681][T17697] bond1: (slave batadv0): failed to get link speed/duplex [ 596.307691][T17697] bond1: (slave batadv0): failed to get link speed/duplex [ 596.394098][T24667] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4247'. [ 596.439787][T24667] 8021q: adding VLAN 0 to HW filter on device bond12 [ 596.442754][T24667] ip_tables: iptables: counters copy to user failed while replacing table [ 596.487356][ T6440] bond1: (slave batadv0): failed to get link speed/duplex [ 596.550763][T24670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.563557][T24667] netlink: 'syz.5.4247': attribute type 10 has an invalid length. [ 596.570074][T24670] bond12: (slave bond0): Enslaving as an active interface with an up link [ 596.606678][ T62] bond1: (slave batadv0): failed to get link speed/duplex [ 596.831701][T24688] x_tables: unsorted entry at hook 2 [ 596.860833][T24687] batadv_slave_0: entered promiscuous mode [ 596.878284][T24688] bond8: option tlb_dynamic_lb: invalid value (110) [ 596.879337][T24688] bond8 (unregistering): Released all slaves [ 596.916979][T24685] batadv_slave_0: left promiscuous mode [ 597.715502][T24725] erspan0: entered promiscuous mode [ 597.716831][T24725] gretap0: entered promiscuous mode [ 597.717664][T24725] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 597.717681][T24725] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 598.008644][T24743] macvtap1: entered promiscuous mode [ 598.008667][T24743] batadv0: entered promiscuous mode [ 598.011843][T24743] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 598.015467][T24743] batadv0: left promiscuous mode [ 598.062247][T24749] x_tables: duplicate underflow at hook 2 [ 598.084357][T24745] IPVS: Error connecting to the multicast addr [ 598.203487][T24756] rxe_eth0 speed is unknown, defaulting to 1000 [ 598.316463][T24759] netlink: 'syz.4.4269': attribute type 3 has an invalid length. [ 598.829748][T24769] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 598.831009][T24769] batman_adv: batadv0: Adding interface: gretap1 [ 598.831025][T24769] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.831053][T24769] batman_adv: batadv0: Interface activated: gretap1 [ 598.885050][T24778] netlink: 'syz.0.4275': attribute type 1 has an invalid length. [ 598.885075][T24778] __nla_validate_parse: 10 callbacks suppressed [ 598.885087][T24778] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4275'. [ 598.906037][T24780] netlink: 'syz.3.4276': attribute type 2 has an invalid length. [ 599.010742][T24785] netlink: 'syz.4.4278': attribute type 5 has an invalid length. [ 599.111068][T24790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4279'. [ 599.130963][T24790] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 599.168753][T24756] wg0 speed is unknown, defaulting to 1000 [ 599.363927][T24798] team0: Device vxcan3 is CAN, IEEE 802.15.4 or 6LoWPAN. These device types can't be added as a team port [ 599.394484][T24801] tc_dump_action: action bad kind [ 599.998507][T24820] netlink: 'syz.4.4289': attribute type 12 has an invalid length. [ 600.001214][T24820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4289'. [ 600.160435][T24828] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4290'. [ 600.230597][T24829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4290'. [ 600.295843][T24829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4290'. [ 600.342474][ T6440] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.343489][ T6440] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.343518][ T6440] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.343537][ T6440] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.500176][T24834] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4291'. [ 600.848891][T17697] net_ratelimit: 28 callbacks suppressed [ 600.848914][T17697] bond1: (slave batadv0): failed to get link speed/duplex [ 600.956298][ T6440] bond1: (slave batadv0): failed to get link speed/duplex [ 601.066519][T13404] bond1: (slave batadv0): failed to get link speed/duplex [ 601.128832][T24876] tipc: Enabling of bearer rejected, already enabled [ 601.176333][ T62] bond1: (slave batadv0): failed to get link speed/duplex [ 601.289478][ T50] bond1: (slave batadv0): failed to get link speed/duplex [ 601.396355][ T50] bond1: (slave batadv0): failed to get link speed/duplex [ 601.439089][T24883] netlink: 'syz.5.4301': attribute type 3 has an invalid length. [ 601.478777][T24878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4300'. [ 601.478797][T24878] openvswitch: netlink: IP tunnel dst address not specified [ 601.507092][ T6440] bond1: (slave batadv0): failed to get link speed/duplex [ 601.616302][T13404] bond1: (slave batadv0): failed to get link speed/duplex [ 601.726293][ T50] bond1: (slave batadv0): failed to get link speed/duplex [ 601.730463][T24903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4307'. [ 601.821139][ T29] audit: type=1804 audit(1794242216.313:19): pid=24910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4308" name="/newroot/217/cgroup.controllers" dev="tmpfs" ino=1126 res=1 errno=0 [ 601.821357][ T29] audit: type=1800 audit(1794242216.313:20): pid=24910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4308" name="cgroup.controllers" dev="tmpfs" ino=1126 res=0 errno=-22 [ 601.965797][ T29] audit: type=1804 audit(1794242216.453:21): pid=24917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4309" name="/newroot/281/memory.events" dev="tmpfs" ino=1453 res=1 errno=0 [ 602.079832][T24923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4312'. [ 602.275800][T24936] tipc: Enabling of bearer rejected, already enabled [ 602.863962][T24969] netlink: 'syz.4.4324': attribute type 8 has an invalid length. [ 602.934294][T24973] netlink: 'syz.5.4325': attribute type 1 has an invalid length. [ 603.151307][T24992] netlink: 'syz.0.4331': attribute type 1 has an invalid length. [ 603.227589][T25001] netlink: 'syz.1.4333': attribute type 1 has an invalid length. [ 603.258604][T24992] bond7: entered promiscuous mode [ 603.259061][T24992] 8021q: adding VLAN 0 to HW filter on device bond7 [ 603.362986][T24992] bond7: (slave bridge5): making interface the new active one [ 603.363015][T24992] bridge5: entered promiscuous mode [ 603.364160][T24992] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 603.409554][T25009] netlink: 'syz.4.4334': attribute type 1 has an invalid length. [ 603.453836][ T2397] block nbd3: Possible stuck request ffff888028419a00: control (read@0,1024B). Runtime 60 seconds [ 603.453882][ T2397] block nbd3: Possible stuck request ffff888028419bc0: control (read@1024,1024B). Runtime 60 seconds [ 603.453902][ T2397] block nbd3: Possible stuck request ffff888028419d80: control (read@2048,2048B). Runtime 60 seconds [ 603.489766][T25009] bond8: entered promiscuous mode [ 603.490269][T25009] 8021q: adding VLAN 0 to HW filter on device bond8 [ 603.546292][T25009] bond8: (slave bridge3): making interface the new active one [ 603.546320][T25009] bridge3: entered promiscuous mode [ 603.547847][T25009] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 603.587992][T25009] bond8: entered allmulticast mode [ 603.588011][T25009] bridge3: entered allmulticast mode [ 603.787125][T25033] ip6erspan0: left allmulticast mode [ 604.086428][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 604.210608][ T5641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 604.225526][ T5641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 604.235554][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 604.245768][ T5641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 604.259986][ T5641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 604.348058][ T5650] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 604.355571][ T5650] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 604.367433][T25048] __nla_validate_parse: 9 callbacks suppressed [ 604.367456][T25048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4344'. [ 604.389054][ T5650] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 604.393026][ T5650] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 604.395072][ T5650] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 604.894729][ T1119] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.047798][ T1119] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.062255][T25077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4349'. [ 605.070559][T25077] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4349'. [ 605.157766][T25088] vlan3: entered promiscuous mode [ 605.283588][ T1119] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.340812][T25095] vlan3: entered promiscuous mode [ 605.341535][T25101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4354'. [ 605.440173][ T1119] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.467511][T25104] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4353'. [ 605.542702][T25098] netlink: 4304 bytes leftover after parsing attributes in process `syz.4.4353'. [ 605.626923][T25112] netlink: 'syz.0.4356': attribute type 1 has an invalid length. [ 605.887764][T25044] rxe_eth0 speed is unknown, defaulting to 1000 [ 606.064743][ T1119] dvmrp6: left allmulticast mode [ 606.101881][T25132] net_ratelimit: 28 callbacks suppressed [ 606.101905][T25132] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 606.375808][ T1119] erspan0 (unregistering): left promiscuous mode [ 606.453634][ T1119] bond2 (unregistering): (slave gretap3): Releasing active interface [ 606.498472][ T5650] Bluetooth: hci2: command tx timeout [ 606.695698][ T1119] bond12 (unregistering): (slave bond0): Releasing backup interface [ 606.706787][ T1119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.708310][ T1119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.708955][ T1119] bond0 (unregistering): Released all slaves [ 606.713704][ T1119] bond1 (unregistering): Released all slaves [ 606.758851][ T1119] bond2 (unregistering): Released all slaves [ 606.776848][ T1119] bond3 (unregistering): Released all slaves [ 606.785205][ T1119] bond4 (unregistering): Released all slaves [ 606.820323][ T1119] bond5 (unregistering): Released all slaves [ 606.835427][ T1119] bond6 (unregistering): Released all slaves [ 606.850243][ T1119] bond7 (unregistering): Released all slaves [ 606.871602][ T1119] bond8 (unregistering): Released all slaves [ 606.884122][ T1119] bond9 (unregistering): Released all slaves [ 606.897336][ T1119] bond10 (unregistering): (slave veth3): Releasing active interface [ 606.899288][ T1119] bond10 (unregistering): (slave veth0_to_bond): Releasing active interface [ 606.900566][ T1119] bond10 (unregistering): Released all slaves [ 606.919846][ T1119] bond11 (unregistering): Released all slaves [ 606.935439][ T1119] bond12 (unregistering): Released all slaves [ 606.966430][ T6440] bond1: (slave batadv0): failed to get link speed/duplex [ 607.085668][ T50] bond1: (slave batadv0): failed to get link speed/duplex [ 607.103073][ T1119] ovs-dp0: left promiscuous mode [ 607.218138][ T62] bond1: (slave batadv0): failed to get link speed/duplex [ 607.253312][ T1119] tipc: Left network mode [ 607.307430][T25044] wg0 speed is unknown, defaulting to 1000 [ 607.337361][ T50] bond1: (slave batadv0): failed to get link speed/duplex [ 607.580638][ T62] bond1: (slave batadv0): failed to get link speed/duplex [ 607.786281][T13403] bond1: (slave batadv0): failed to get link speed/duplex [ 608.142173][T25044] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.142353][T25044] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.142498][T25044] bridge_slave_0: entered allmulticast mode [ 608.144987][T25044] bridge_slave_0: entered promiscuous mode [ 608.180502][T25044] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.180612][T25044] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.180757][T25044] bridge_slave_1: entered allmulticast mode [ 608.184509][T25044] bridge_slave_1: entered promiscuous mode [ 608.285930][T25044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.286663][T13403] bond1: (slave batadv0): failed to get link speed/duplex [ 608.317333][T25044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.411173][T25044] team0: Port device team_slave_0 added [ 608.428324][T25044] team0: Port device team_slave_1 added [ 608.463051][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.525278][T25107] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 608.566840][ T5650] Bluetooth: hci2: command tx timeout [ 608.744433][T25152] netlink: 'syz.4.4365': attribute type 1 has an invalid length. [ 608.842584][ T1119] team0 (unregistering): Port device team_slave_1 removed [ 608.869556][ T1119] team0 (unregistering): Port device team_slave_0 removed [ 608.968176][T25163] netlink: 'syz.1.4368': attribute type 1 has an invalid length. [ 608.968200][T25163] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4368'. [ 609.010939][ T62] smc: removing ib device syz0 [ 609.039305][T25166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4365'. [ 609.039615][T25167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4365'. [ 609.052089][T25167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4365'. [ 609.083302][ T50] smc: removing ib device syz1 [ 609.133900][ T50] smbdirect: ib_dev[syz1] removed [ 609.557456][T25156] syzkaller1: entered promiscuous mode [ 609.557478][T25156] syzkaller1: entered allmulticast mode [ 609.563373][T25173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.714418][ T62] smbdirect: ib_dev[syz0] removed [ 609.785500][T25173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.890155][T25190] __nla_validate_parse: 2 callbacks suppressed [ 609.890177][T25190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4371'. [ 610.025579][T25044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.025595][T25044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.025618][T25044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.067045][T25044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.067065][T25044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.067089][T25044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.417337][T13403] bond1: (slave batadv0): failed to get link speed/duplex [ 610.422871][ T5297] 8021q: adding VLAN 0 to HW filter on device eth6 [ 610.646614][ T5650] Bluetooth: hci2: command tx timeout [ 610.983081][T25231] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4378'. [ 611.122980][T25233] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4378'. [ 611.123008][T25233] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4378'. [ 611.133301][T25233] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 611.148091][T25211] bond10: entered allmulticast mode [ 611.156498][ T6440] bond1: (slave batadv0): failed to get link speed/duplex [ 611.243481][T25044] hsr_slave_0: entered promiscuous mode [ 611.262157][T25044] hsr_slave_1: entered promiscuous mode [ 611.262883][T25044] debugfs: 'hsr0' already exists in 'hsr' [ 611.262898][T25044] Cannot create hsr debugfs directory [ 611.263298][T25212] syzkaller1: entered promiscuous mode [ 611.263312][T25212] syzkaller1: entered allmulticast mode [ 611.461599][T25235] sit2: entered promiscuous mode [ 611.469510][T25242] netlink: 22960 bytes leftover after parsing attributes in process `syz.1.4381'. [ 611.541509][T25244] netlink: 'syz.4.4382': attribute type 10 has an invalid length. [ 611.593633][T25238] tc_dump_action: action bad kind [ 611.678294][T25254] netlink: 'syz.3.4383': attribute type 1 has an invalid length. [ 611.901271][T25261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4385'. [ 611.936337][T25265] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4385'. [ 612.085554][T25254] 8021q: adding VLAN 0 to HW filter on device bond3 [ 612.116338][T13403] bond1: (slave batadv0): failed to get link speed/duplex [ 612.227291][T25259] bond3: (slave gretap2): Enslaving as a backup interface with an up link [ 612.365540][T25253] bond3 (unregistering): (slave gretap2): Releasing backup interface [ 612.416445][T25253] bond3 (unregistering): Released all slaves [ 612.729945][ T5650] Bluetooth: hci2: command tx timeout [ 612.800441][T25248] ip6gretap1: entered allmulticast mode [ 612.814421][T25248] batman_adv: batadv0: Adding interface: ip6gretap1 [ 612.814437][T25248] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.814463][T25248] batman_adv: batadv0: Interface activated: ip6gretap1 [ 613.381071][ T5297] 8021q: adding VLAN 0 to HW filter on device eth7 [ 613.536910][ T5002] udevd[5002]: worker [22331] /devices/virtual/block/nbd3 is taking a long time [ 613.689924][T25306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4391'. [ 613.695189][T25307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4391'. [ 613.936649][ T6280] bond1: (slave batadv0): failed to get link speed/duplex [ 614.056930][T17697] bond1: (slave batadv0): failed to get link speed/duplex [ 614.092234][T25330] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4395'. [ 614.367381][T17697] bond1: (slave batadv0): failed to get link speed/duplex [ 614.372370][T25335] syzkaller0: entered promiscuous mode [ 614.372416][T25335] syzkaller0: entered allmulticast mode [ 614.509868][ T29] audit: type=1800 audit(1794242229.003:22): pid=25309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4390" name="memory.events" dev="tmpfs" ino=1555 res=0 errno=-22 [ 614.623437][T25345] x_tables: duplicate underflow at hook 1 [ 614.692969][T13403] bond1: (slave batadv0): failed to get link speed/duplex [ 615.062507][T17697] bond1: (slave batadv0): failed to get link speed/duplex [ 615.088849][T25348] smbdirect: ib_dev[syz]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 615.088885][T25348] smbdirect: ib_dev[syz]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 615.088919][T25348] smbdirect: ib_dev[syz]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 615.259355][ T29] audit: type=1804 audit(1794242229.753:23): pid=25366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4405" name="/newroot/303/memory.events" dev="tmpfs" ino=1566 res=1 errno=0 [ 615.366663][T13403] bond1: (slave batadv0): failed to get link speed/duplex [ 615.476728][T17697] bond1: (slave batadv0): failed to get link speed/duplex [ 615.551908][T25373] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 615.554685][T25373] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4406'. [ 615.563066][T25378] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4407'. [ 615.981682][T25395] netlink: 'syz.1.4410': attribute type 5 has an invalid length. [ 616.002772][T25394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4409'. [ 616.108040][T25400] netlink: 'syz.3.4411': attribute type 2 has an invalid length. [ 616.204773][T25407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4410'. [ 616.574356][T25425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4416'. [ 616.812498][T25395] bond12 (unregistering): Released all slaves [ 616.846417][T13403] net_ratelimit: 3 callbacks suppressed [ 616.846440][T13403] bond1: (slave batadv0): failed to get link speed/duplex [ 617.153094][T25044] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 617.223722][ T1119] IPVS: stop unused estimator thread 0... [ 617.244296][T25044] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 617.278490][T25044] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 617.312115][T25044] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 617.313486][T25044] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 617.335348][T25044] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 617.338830][T17697] bond1: (slave batadv0): failed to get link speed/duplex [ 617.348666][T25044] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 617.396780][T25044] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 617.449876][T17697] bond1: (slave batadv0): failed to get link speed/duplex [ 617.482483][T25453] IPVS: Scheduler module ip_vs_mh not found [ 617.572343][T25469] tipc: Started in network mode [ 617.572374][T25469] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 617.572587][T25469] tipc: Enabled bearer , priority 7 [ 617.598182][ T1119] bond1: (slave batadv0): failed to get link speed/duplex [ 617.718017][ T6440] bond1: (slave batadv0): failed to get link speed/duplex [ 617.802056][T25475] macvtap1: entered promiscuous mode [ 617.802077][T25475] bridge0: entered promiscuous mode [ 617.912079][ T1119] bond1: (slave batadv0): failed to get link speed/duplex [ 617.937271][T25044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.997957][T25044] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.003830][ T6440] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.003933][ T6440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.036656][T13403] bond1: (slave batadv0): failed to get link speed/duplex [ 618.052423][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.052532][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.188638][ T50] bond1: (slave batadv0): failed to get link speed/duplex [ 618.189956][T25493] netlink: 'syz.0.4424': attribute type 2 has an invalid length. [ 618.287381][T25495] bridge3: entered allmulticast mode [ 618.296554][ T6440] bond1: (slave batadv0): failed to get link speed/duplex [ 618.428623][ T6440] bond1: (slave batadv0): failed to get link speed/duplex [ 618.496744][T25507] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 618.696821][ T5923] tipc: Node number set to 9480874 [ 619.560396][T25560] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4435'. [ 619.563781][T25560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4435'. [ 619.689171][T25569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4438'. [ 619.716450][T25569] bond13: (slave bond_slave_0): Device is not our slave [ 619.716477][T25569] bond13: option active_slave: invalid value (bond_slave_0) [ 619.723745][T25569] bond13 (unregistering): Released all slaves [ 619.855067][T25044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.952520][T25581] netlink: 'syz.0.4440': attribute type 10 has an invalid length. [ 619.957819][T25582] netlink: 'syz.0.4440': attribute type 10 has an invalid length. [ 620.574482][T25611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4445'. [ 620.642577][T25619] sctp: [Deprecated]: syz.4.4445 (pid 25619) Use of int in max_burst socket option. [ 620.642577][T25619] Use struct sctp_assoc_value instead [ 620.657543][T25611] bond9: (slave bond_slave_0): Device is not our slave [ 620.657570][T25611] bond9: option active_slave: invalid value (bond_slave_0) [ 620.704437][T25611] bond9 (unregistering): Released all slaves [ 620.884693][T25623] netlink: 'syz.3.4446': attribute type 4 has an invalid length. [ 620.884720][T25623] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4446'. [ 620.934249][T25623] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4446'. [ 620.935132][T25044] veth0_vlan: entered promiscuous mode [ 620.967320][T25044] veth1_vlan: entered promiscuous mode [ 621.003845][T25044] veth0_macvtap: entered promiscuous mode [ 621.040849][T25044] veth1_macvtap: entered promiscuous mode [ 621.074349][T25044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.094554][T25044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.176595][T25632] tc_dump_action: action bad kind [ 621.224131][T13404] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.224422][ T62] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.225056][ T62] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.225207][ T62] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.535020][T25639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.546394][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.546415][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.602044][T25640] veth0: entered promiscuous mode [ 621.604704][T25639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.616495][ T6281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.616514][ T6281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.641844][T25643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.642173][T25640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4448'. [ 621.711671][T25637] veth0: left promiscuous mode [ 621.858008][ T6440] net_ratelimit: 22 callbacks suppressed [ 621.858037][ T6440] bond1: (slave batadv0): failed to get link speed/duplex [ 621.969456][T13403] bond1: (slave batadv0): failed to get link speed/duplex [ 621.973043][T25643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.071410][T25665] netlink: 196 bytes leftover after parsing attributes in process `syz.1.4453'. [ 622.136350][ T50] bond1: (slave batadv0): failed to get link speed/duplex [ 622.247949][T13403] bond1: (slave batadv0): failed to get link speed/duplex [ 622.350049][T25685] netlink: 'syz.1.4458': attribute type 70 has an invalid length. [ 622.354621][T25685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4458'. [ 622.368244][ T6281] bond1: (slave batadv0): failed to get link speed/duplex [ 622.476624][ T50] bond1: (slave batadv0): failed to get link speed/duplex [ 622.586374][T13403] bond1: (slave batadv0): failed to get link speed/duplex [ 622.696496][T13403] bond1: (slave batadv0): failed to get link speed/duplex [ 622.748175][T25713] netlink: 'syz.5.4465': attribute type 29 has an invalid length. [ 622.748198][T25713] netlink: 'syz.5.4465': attribute type 31 has an invalid length. [ 622.748209][T25713] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4465'. [ 622.839406][T13403] bond1: (slave batadv0): failed to get link speed/duplex [ 622.989077][T25713] gre1: entered promiscuous mode [ 623.048416][T13404] bond1: (slave batadv0): failed to get link speed/duplex [ 623.080300][T25728] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4469'. [ 623.086000][T25728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4469'. [ 623.191766][T25744] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4473'. [ 624.323549][T25788] batman_adv: batadv0: Adding interface: veth0 [ 624.323569][T25788] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.323596][T25788] batman_adv: batadv0: Interface activated: veth0 [ 624.493770][T25788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.493796][T25788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.498156][T25788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.498177][T25788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.506901][T25788] batman_adv: batadv0: Interface deactivated: macvlan2 [ 624.506923][T25788] batman_adv: batadv0: Removing interface: macvlan2 [ 624.519055][T25788] batman_adv: batadv0: Interface deactivated: veth0 [ 624.519077][T25788] batman_adv: batadv0: Removing interface: veth0 [ 625.073664][T25818] netlink: 'syz.4.4490': attribute type 7 has an invalid length. [ 625.101922][T25818] netlink: 'syz.4.4490': attribute type 7 has an invalid length. [ 625.196872][ T50] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.196936][ T50] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.196967][ T50] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.196996][ T50] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.198605][T25820] netlink: 'syz.5.4491': attribute type 6 has an invalid length. [ 625.198827][T25820] netlink: 'syz.5.4491': attribute type 6 has an invalid length. [ 625.199042][T25820] netlink: 'syz.5.4491': attribute type 6 has an invalid length. [ 625.199295][T25820] netlink: 'syz.5.4491': attribute type 6 has an invalid length. [ 625.199490][T25820] netlink: 'syz.5.4491': attribute type 6 has an invalid length. [ 625.788001][T25864] __nla_validate_parse: 143 callbacks suppressed [ 625.788027][T25864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4502'. [ 625.823567][T25858] syzkaller1: entered promiscuous mode [ 625.823601][T25858] syzkaller1: entered allmulticast mode [ 625.939251][T25879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4501'. [ 626.125154][T25875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4501'. [ 626.313066][T25891] syzkaller1: entered promiscuous mode [ 626.313090][T25891] syzkaller1: entered allmulticast mode [ 626.876441][T13404] net_ratelimit: 28 callbacks suppressed [ 626.876501][T13404] bond1: (slave batadv0): failed to get link speed/duplex [ 626.989617][ T6440] bond1: (slave batadv0): failed to get link speed/duplex [ 627.117000][T13403] bond1: (slave batadv0): failed to get link speed/duplex [ 627.228020][T13403] bond1: (slave batadv0): failed to get link speed/duplex [ 627.336918][T13403] bond1: (slave batadv0): failed to get link speed/duplex [ 627.409009][T25952] validate_nla: 60 callbacks suppressed [ 627.409031][T25952] netlink: 'syz.1.4520': attribute type 3 has an invalid length. [ 627.445588][T25952] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4520'. [ 627.460443][T25952] bond8: (slave dummy0): Releasing active interface [ 627.476834][ T62] bond1: (slave batadv0): failed to get link speed/duplex [ 627.586915][T13404] bond1: (slave batadv0): failed to get link speed/duplex [ 627.696801][ T62] bond1: (slave batadv0): failed to get link speed/duplex [ 627.806557][T13403] bond1: (slave batadv0): failed to get link speed/duplex [ 627.916540][ T62] bond1: (slave batadv0): failed to get link speed/duplex [ 629.247649][T25891] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 629.566966][T25977] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4527'. [ 629.681151][T25994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4530'. [ 629.681225][T25993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4530'. [ 629.685497][T25994] veth1_to_team: entered promiscuous mode [ 629.708619][T25994] veth1_to_team: left promiscuous mode [ 629.725779][T25993] veth1_to_team: entered promiscuous mode [ 629.732038][T25993] veth1_to_team: left promiscuous mode [ 629.794049][T25997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.334634][T26000] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4532'. [ 630.401956][T26000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4532'. [ 630.484824][T26010] netlink: 212 bytes leftover after parsing attributes in process `syz.0.4535'. [ 630.738995][ T62] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.739086][ T62] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.739169][ T62] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.739844][ T62] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.784716][ T29] audit: type=1800 audit(1794242245.263:24): pid=26029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4537" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1756 res=0 errno=-22 [ 630.929711][T26036] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 631.043635][T26043] __nla_validate_parse: 2 callbacks suppressed [ 631.043657][T26043] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4542'. [ 631.236910][T26058] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4547'. [ 631.252503][T26056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.252532][T26056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.259042][T26056] batman_adv: batadv0: Interface deactivated: veth0 [ 631.259067][T26056] batman_adv: batadv0: Removing interface: veth0 [ 631.339056][T26056] bond1: (slave batadv0): Removing an active aggregator [ 631.358176][T26056] bond1: (slave batadv0): Releasing backup interface [ 631.560931][T26072] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4551'. [ 631.631239][T26077] x_tables: duplicate underflow at hook 1 [ 631.677433][T26077] syzkaller1: entered promiscuous mode [ 631.677460][T26077] syzkaller1: entered allmulticast mode [ 631.715542][T26079] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4554'. [ 631.719772][T26077] syzkaller1: left promiscuous mode [ 631.719792][T26077] syzkaller1: left allmulticast mode [ 631.721631][T26079] netlink: 'syz.0.4554': attribute type 4 has an invalid length. [ 631.721647][T26079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4554'. [ 631.722808][T26077] 8021q: VLANs not supported on syzkaller1 [ 631.997864][T26088] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4555'. [ 632.152638][T26088] syzkaller0: entered promiscuous mode [ 632.152668][T26088] syzkaller0: entered allmulticast mode [ 632.389453][T26104] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4561'. [ 632.555514][T26106] rxe_eth0 speed is unknown, defaulting to 1000 [ 632.833137][T26107] rxe_eth0 speed is unknown, defaulting to 1000 [ 633.093900][T26132] IPv6: NLM_F_CREATE should be specified when creating new route [ 633.532614][ T2397] block nbd3: Possible stuck request ffff888028419a00: control (read@0,1024B). Runtime 90 seconds [ 633.532658][ T2397] block nbd3: Possible stuck request ffff888028419bc0: control (read@1024,1024B). Runtime 90 seconds [ 633.532680][ T2397] block nbd3: Possible stuck request ffff888028419d80: control (read@2048,2048B). Runtime 90 seconds [ 633.776627][T26166] netlink: 'syz.0.4577': attribute type 1 has an invalid length. [ 633.827428][T26163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4577'. [ 633.827668][T26161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4577'. [ 633.830071][T26162] netlink: 'syz.0.4577': attribute type 1 has an invalid length. [ 634.072452][T26163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4577'. [ 634.155975][T26164] gretap1: entered promiscuous mode [ 634.157418][T26162] netlink: 'syz.0.4577': attribute type 1 has an invalid length. [ 634.158167][T26162] netlink: 'syz.0.4577': attribute type 1 has an invalid length. [ 634.214303][T26162] netlink: 'syz.0.4577': attribute type 1 has an invalid length. [ 634.214549][T26162] netlink: 'syz.0.4577': attribute type 1 has an invalid length. [ 634.214749][T26162] netlink: 'syz.0.4577': attribute type 1 has an invalid length. [ 634.215105][T26162] netlink: 'syz.0.4577': attribute type 1 has an invalid length. [ 634.215316][T26162] netlink: 'syz.0.4577': attribute type 1 has an invalid length. [ 634.215563][T26162] netlink: 'syz.0.4577': attribute type 1 has an invalid length. [ 634.802238][T26196] 8021q: adding VLAN 0 to HW filter on device bond1 [ 634.829430][T26199] ip6tnl2: entered allmulticast mode [ 635.179012][T26212] bridge4: entered promiscuous mode [ 635.179039][T26212] bridge4: entered allmulticast mode [ 638.364633][T26220] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 638.364930][T26224] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 638.613275][T26254] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 638.615865][T26254] bond3 (unregistering): Released all slaves [ 638.642929][T26259] __nla_validate_parse: 34 callbacks suppressed [ 638.642949][T26259] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4602'. [ 638.666028][T26266] netlink: 596 bytes leftover after parsing attributes in process `syz.0.4604'. [ 638.691418][T26266] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4604'. [ 638.768077][T26264] rxe_eth0 speed is unknown, defaulting to 1000 [ 639.130636][T26287] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4610'. [ 639.130665][T26287] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4610'. [ 639.130680][T26287] netlink: 31 bytes leftover after parsing attributes in process `syz.5.4610'. [ 639.471274][T26306] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.471311][T26306] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.484266][T26309] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4616'. [ 639.511112][T26315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4617'. [ 639.653465][T26315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4617'. [ 639.653696][T26315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4617'. [ 639.712618][T26306] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.712651][T26306] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.873142][T26306] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.873177][T26306] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.069122][T26306] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.069158][T26306] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.183900][T26332] validate_nla: 26 callbacks suppressed [ 640.183921][T26332] netlink: 'syz.0.4623': attribute type 39 has an invalid length. [ 640.503022][ T50] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 640.503052][ T50] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.587010][ T50] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 640.587042][ T50] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.596397][ T6440] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 640.596425][ T6440] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.596470][ T6440] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 640.596490][ T6440] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.644594][T26345] syzkaller0: entered promiscuous mode [ 640.644616][T26345] syzkaller0: entered allmulticast mode [ 641.006959][T26356] netlink: 'syz.5.4631': attribute type 6 has an invalid length. [ 641.395032][T26359] bond9: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 641.411345][T26359] bond9 (unregistering): Released all slaves [ 642.320959][T26407] sctp: [Deprecated]: syz.4.4641 (pid 26407) Use of int in maxseg socket option. [ 642.320959][T26407] Use struct sctp_assoc_value instead [ 642.743928][T26418] netlink: 'syz.5.4643': attribute type 12 has an invalid length. [ 643.291410][T26453] veth3: entered allmulticast mode [ 644.356028][T26491] __nla_validate_parse: 72 callbacks suppressed [ 644.356052][T26491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4658'. [ 644.719288][T26501] net_ratelimit: 29 callbacks suppressed [ 644.719310][T26501] IPVS: sh: TCP 127.0.0.1:5376 - no destination available [ 644.826340][T26504] netlink: 'syz.4.4662': attribute type 1 has an invalid length. [ 644.847879][T26504] netlink: 'syz.4.4662': attribute type 1 has an invalid length. [ 645.269711][T26509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4663'. [ 645.354689][T26520] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4666'. [ 645.354715][T26520] netlink: 22 bytes leftover after parsing attributes in process `syz.5.4666'. [ 645.380283][T26520] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4666'. [ 645.380312][T26520] netlink: 22 bytes leftover after parsing attributes in process `syz.5.4666'. [ 645.380328][T26520] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 645.447055][T17697] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.466004][T26520] x_tables: duplicate underflow at hook 1 [ 645.966849][T26537] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4672'. [ 645.966875][T26537] nbd: must specify at least one socket [ 646.064417][T26547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4674'. [ 646.199189][T26553] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4676'. [ 646.200564][T26553] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4676'. [ 646.783465][T26537] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 646.783491][T26537] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 646.874642][T26579] syzkaller0: entered promiscuous mode [ 646.874667][T26579] syzkaller0: entered allmulticast mode [ 647.631926][T26617] rxe_eth0 speed is unknown, defaulting to 1000 [ 648.151596][T26642] ip_tables: iptables: counters copy to user failed while replacing table [ 648.152104][T26642] ip_tables: iptables: counters copy to user failed while replacing table [ 648.680591][T26654] netlink: 'syz.1.4699': attribute type 2 has an invalid length. [ 649.111731][T26662] bridge4: entered promiscuous mode [ 649.111755][T26662] bridge4: entered allmulticast mode [ 649.174002][T26662] team0: Port device bridge4 added [ 651.749504][T26690] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 651.798147][T26676] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 652.614885][T26734] __nla_validate_parse: 5 callbacks suppressed [ 652.614906][T26734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4712'. [ 652.614930][T26734] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4712'. [ 652.771428][T26746] xt_nfacct: accounting object `' does not exist [ 652.775002][T26744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4717'. [ 652.794608][T26748] netlink: 4564 bytes leftover after parsing attributes in process `syz.1.4718'. [ 652.794731][T26748] netlink: 4564 bytes leftover after parsing attributes in process `syz.1.4718'. [ 652.795888][T26734] bridge6: entered promiscuous mode [ 652.795906][T26734] bridge6: entered allmulticast mode [ 652.814740][T26747] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4718'. [ 653.069662][T26758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4721'. [ 653.092421][T26759] sctp: [Deprecated]: syz.4.4719 (pid 26759) Use of int in max_burst socket option deprecated. [ 653.092421][T26759] Use struct sctp_assoc_value instead [ 653.242257][T26762] erspan2: entered promiscuous mode [ 653.319068][T26767] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4723'. [ 654.238108][T26787] xt_hashlimit: invalid rate [ 654.311280][T26791] netlink: 'syz.3.4728': attribute type 1 has an invalid length. [ 654.494835][T26794] netlink: 'syz.3.4728': attribute type 10 has an invalid length. [ 654.494858][T26794] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4728'. [ 654.551834][T26795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 654.551852][T26795] IPv6: NLM_F_CREATE should be set when creating new route [ 654.551913][T26795] IPv6: NLM_F_CREATE should be set when creating new route [ 655.689527][T20096] dummy0: entered promiscuous mode [ 655.694338][T26792] batman_adv: batadv0: Adding interface: dummy0 [ 655.694355][T26792] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.694412][T26792] batman_adv: batadv0: Interface activated: dummy0 [ 655.800111][T26803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4729'. [ 655.834936][T26793] batadv0: mtu less than device minimum [ 655.836591][T26793] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 655.838145][T26793] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 655.839613][T26793] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 655.841049][T26793] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 655.842536][T26793] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 655.844101][T26793] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 655.845564][T26793] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 655.847031][T26793] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 655.970743][T26794] batadv0: entered promiscuous mode [ 655.970768][T26794] batadv0: entered allmulticast mode [ 655.972785][T26794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.973657][T26794] bridge0: port 3(batadv0) entered blocking state [ 655.973761][T26794] bridge0: port 3(batadv0) entered disabled state [ 656.107514][T26815] syz_tun: entered allmulticast mode [ 656.167186][T26815] xt_socket: unknown flags 0x4 [ 656.182929][T26826] xt_socket: unknown flags 0x4 [ 656.269744][T26814] syz_tun: left allmulticast mode [ 656.357962][ T1119] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 656.357984][ T1119] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 656.440263][T26838] netlink: 'syz.0.4739': attribute type 11 has an invalid length. [ 656.600295][T26845] syzkaller1: entered promiscuous mode [ 656.600324][T26845] syzkaller1: entered allmulticast mode [ 656.719656][T26849] xt_CT: You must specify a L4 protocol and not use inversions on it [ 656.759801][T26851] ip6gretap0: entered promiscuous mode [ 656.764239][T26855] ip6gretap0: left promiscuous mode [ 657.303276][ T29] audit: type=1800 audit(1794242271.793:25): pid=26888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4752" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1751 res=0 errno=-22 [ 657.370909][T26888] bridge_slave_0: left allmulticast mode [ 657.370934][T26888] bridge_slave_0: left promiscuous mode [ 657.371088][T26888] pimreg: port 1(bridge_slave_0) entered disabled state [ 657.393451][T26888] bridge_slave_1: left allmulticast mode [ 657.393482][T26888] bridge_slave_1: left promiscuous mode [ 657.393687][T26888] pimreg: port 2(bridge_slave_1) entered disabled state [ 657.427486][T26888] bond0: (slave bond_slave_0): Releasing backup interface [ 657.435724][T26888] bond0: (slave bond_slave_1): Releasing backup interface [ 657.458304][T26888] team0: Port device team_slave_0 removed [ 657.463409][T26888] team0: Port device team_slave_1 removed [ 657.463765][T26888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.469322][T26888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.478996][T26888] net_ratelimit: 12 callbacks suppressed [ 657.479012][T26888] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 657.479317][T26889] team0: Mode changed to "broadcast" [ 657.479618][T26891] vlan0: entered promiscuous mode [ 657.502778][T26891] team0: Port device vlan0 added [ 657.504993][T26892] tipc: Enabled bearer , priority 0 [ 657.691904][T26910] netlink: 'syz.5.4757': attribute type 21 has an invalid length. [ 657.691928][T26910] IPv6: NLM_F_CREATE should be specified when creating new route [ 657.692106][T26910] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 657.692116][T26910] IPv6: NLM_F_CREATE should be set when creating new route [ 657.692156][T26910] IPv6: NLM_F_CREATE should be set when creating new route [ 657.692209][T26910] IPv6: NLM_F_CREATE should be set when creating new route [ 657.941162][T26926] __nla_validate_parse: 4 callbacks suppressed [ 657.941182][T26926] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4759'. [ 658.082510][T26934] geneve4: entered promiscuous mode [ 658.097065][ T1119] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 46989 - 0 [ 658.097130][ T1119] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 46989 - 0 [ 658.097161][ T1119] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 46989 - 0 [ 658.097191][ T1119] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 46989 - 0 [ 658.104941][T26936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4763'. [ 658.155558][T26936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4763'. [ 658.427466][T26957] xt_connbytes: Forcing CT accounting to be enabled [ 658.751550][ T5843] bridge0: entered promiscuous mode [ 659.242806][T26972] netlink: 'syz.0.4772': attribute type 1 has an invalid length. [ 659.319205][T26972] bond9: entered promiscuous mode [ 659.321289][T26972] 8021q: adding VLAN 0 to HW filter on device bond9 [ 659.387916][T26972] bond9: (slave bridge7): making interface the new active one [ 659.387946][T26972] bridge7: entered promiscuous mode [ 659.392213][T26972] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 659.723614][T26992] netlink: 'syz.3.4779': attribute type 1 has an invalid length. [ 659.847312][T26992] 8021q: adding VLAN 0 to HW filter on device bond3 [ 659.892747][T26997] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 659.917765][T27000] bond3: entered promiscuous mode [ 659.917795][T27000] bond3: entered allmulticast mode [ 660.260959][T27000] macvlan2: entered promiscuous mode [ 660.260987][T27000] macvlan2: entered allmulticast mode [ 660.280950][T27000] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 660.343940][T27001] syzkaller1: entered promiscuous mode [ 660.343958][T27001] syzkaller1: entered allmulticast mode [ 660.429166][T27012] syzkaller0: entered promiscuous mode [ 660.429196][T27012] syzkaller0: entered allmulticast mode [ 660.463520][T27012] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4782'. [ 660.921939][T27035] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 662.112997][ T1119] IPVS: starting estimator thread 0... [ 662.197314][T27050] IPVS: using max 53 ests per chain, 127200 per kthread [ 663.445900][T27059] netlink: 752 bytes leftover after parsing attributes in process `syz.0.4794'. [ 663.472771][T27068] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4795'. [ 663.481882][T27067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4797'. [ 663.609307][ T2397] block nbd3: Possible stuck request ffff888028419a00: control (read@0,1024B). Runtime 120 seconds [ 663.609356][ T2397] block nbd3: Possible stuck request ffff888028419bc0: control (read@1024,1024B). Runtime 120 seconds [ 663.609412][ T2397] block nbd3: Possible stuck request ffff888028419d80: control (read@2048,2048B). Runtime 120 seconds [ 663.785074][T27080] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4799'. [ 664.113420][T27085] bridge0: port 3(batadv0) entered blocking state [ 664.113555][T27085] bridge0: port 3(batadv0) entered forwarding state [ 664.122743][T27085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.126037][T27085] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.251279][T27085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.251323][T27085] batadv0: mtu less than device minimum [ 664.252221][T27085] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 664.253126][T27085] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 664.253982][T27085] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 664.254872][T27085] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 664.255665][T27085] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 664.256865][T27085] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 664.258211][T27085] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 664.259579][T27085] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 664.260935][T27085] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 664.309818][T27085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.346008][T27085] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 664.346034][T27085] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 664.354716][T27085] veth1_vlan: left promiscuous mode [ 664.356012][T27085] veth0_vlan: left promiscuous mode [ 664.358869][T27085] veth0_vlan: entered promiscuous mode [ 664.361607][T27085] veth1_vlan: entered promiscuous mode [ 664.379113][T27085] veth0_macvtap: left promiscuous mode [ 664.381770][T27085] veth0_macvtap: entered promiscuous mode [ 664.420249][T27085] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 664.422002][T27085] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 664.423741][T27085] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 664.429018][T27085] 8021q: adding VLAN 0 to HW filter on device bond1 [ 664.439999][T27085] 8021q: adding VLAN 0 to HW filter on device bond2 [ 664.449997][T27085] 8021q: adding VLAN 0 to HW filter on device bond4 [ 664.547674][T27092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4803'. [ 664.591679][T27085] 8021q: adding VLAN 0 to HW filter on device bond3 [ 664.621711][T13403] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.621793][T13403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.633902][T13403] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.634032][T13403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.716008][T27107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4803'. [ 664.855900][T27113] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20004 [ 664.993266][T27120] tipc: Started in network mode [ 664.993298][T27120] tipc: Node identity b645801735cb, cluster identity 4711 [ 664.994414][T27120] tipc: Enabled bearer , priority 0 [ 665.004297][T27111] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4809'. [ 665.031035][T27120] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4810'. [ 665.222278][T27123] netlink: 'syz.1.4812': attribute type 1 has an invalid length. [ 665.222305][T27123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4812'. [ 665.223143][T27111] team0: Port device team_slave_0 removed [ 665.252093][T27123] netlink: 'syz.1.4812': attribute type 11 has an invalid length. [ 665.356556][ T6281] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.357960][ T6281] bond3: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 665.392869][ T6281] bond3: (slave veth0_to_bond): making interface the new active one [ 665.392892][ T6281] veth0_to_bond: entered promiscuous mode [ 665.393144][ T6281] veth0_to_bond: entered allmulticast mode [ 665.439990][ T6281] bond3: active interface up! [ 665.457660][T13404] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.473832][T13404] bond2: (slave bond0): link status definitely up, 20000 Mbps full duplex [ 665.491937][T13404] bond2: (slave bond0): making interface the new active one [ 665.513428][T13404] bond2: active interface up! [ 665.519737][ T1119] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.763632][T27147] netlink: 'syz.1.4820': attribute type 1 has an invalid length. [ 665.858246][T27155] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4820'. [ 665.894542][T27147] bond13: entered promiscuous mode [ 665.894836][T27147] 8021q: adding VLAN 0 to HW filter on device bond13 [ 665.992929][T27166] netlink: 'syz.5.4824': attribute type 32 has an invalid length. [ 666.123831][ T5843] tipc: Node number set to 2207154199 [ 666.576486][T27195] netlink: 'syz.4.4831': attribute type 2 has an invalid length. [ 666.724884][T27202] netlink: 'syz.0.4833': attribute type 1 has an invalid length. [ 666.725081][T27202] netlink: 'syz.0.4833': attribute type 1 has an invalid length. [ 666.725220][T27202] netlink: 'syz.0.4833': attribute type 1 has an invalid length. [ 666.725366][T27202] netlink: 'syz.0.4833': attribute type 1 has an invalid length. [ 666.725523][T27202] netlink: 'syz.0.4833': attribute type 1 has an invalid length. [ 666.725659][T27202] netlink: 'syz.0.4833': attribute type 1 has an invalid length. [ 667.046941][ T6281] wlan0: Trigger new scan to find an IBSS to join [ 667.873817][T27236] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 667.904700][T27236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.273085][T27261] syzkaller0: entered promiscuous mode [ 668.273110][T27261] syzkaller0: entered allmulticast mode [ 668.556586][T27278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.766067][T27328] team0 (unregistering): Port device team_slave_0 removed [ 669.813243][T27328] team0 (unregistering): Port device team_slave_1 removed [ 669.840735][T27328] team0 (unregistering): Port device bridge4 removed [ 669.877874][T27336] __nla_validate_parse: 38 callbacks suppressed [ 669.877895][T27336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4867'. [ 669.945989][T27342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4867'. [ 669.946012][T27342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4867'. [ 670.078570][T27347] 8021q: adding VLAN 0 to HW filter on device bond14 [ 670.089767][ T6281] wlan0: Trigger new scan to find an IBSS to join [ 670.129873][T27352] 8021q: adding VLAN 0 to HW filter on device bond14 [ 670.130639][T27352] bond14: (slave gre1): The slave device specified does not support setting the MAC address [ 670.135146][T27352] bond14: (slave gre1): Error -95 calling set_mac_address [ 670.193575][T27347] gretap1: entered promiscuous mode [ 670.277983][T27358] xt_CT: You must specify a L4 protocol and not use inversions on it [ 670.281100][T27347] 8021q: adding VLAN 0 to HW filter on device bond15 [ 670.283619][T27347] bond14: (slave bond15): Enslaving as an active interface with a down link [ 670.292099][T27357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4870'. [ 670.320830][T27357] hsr_slave_0: left promiscuous mode [ 670.335461][T27357] hsr_slave_1: left promiscuous mode [ 670.521417][T27352] bond14 (unregistering): (slave bond15): Releasing active interface [ 670.536852][T27352] bond14 (unregistering): Released all slaves [ 670.990720][T27394] macsec1: entered promiscuous mode [ 671.002492][T27394] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4877'. [ 671.029874][T27394] bond2: entered promiscuous mode [ 671.029890][T27394] bond2: entered allmulticast mode [ 671.100698][T27397] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4878'. [ 671.100784][T27397] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4878'. [ 672.999972][T27350] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 673.127604][ T1119] wlan0: Trigger new scan to find an IBSS to join [ 673.401520][T27423] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4886'. [ 673.953441][T27449] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4895'. [ 673.953466][T27449] tc_dump_action: action bad kind [ 673.994646][T27446] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4894'. [ 674.063097][ T6440] wlan0: Creating new IBSS network, BSSID 16:85:b8:38:6b:5e [ 674.748610][T27489] SET target dimension over the limit! [ 675.376681][T27524] validate_nla: 30 callbacks suppressed [ 675.376703][T27524] netlink: 'syz.0.4917': attribute type 1 has an invalid length. [ 675.439192][T27526] netlink: 'syz.0.4917': attribute type 11 has an invalid length. [ 675.935308][T27510] veth0_to_bridge: entered promiscuous mode [ 675.935629][T27510] macvtap1: entered allmulticast mode [ 675.935648][T27510] veth0_to_bridge: entered allmulticast mode [ 675.957224][T27510] veth0_to_bridge: left allmulticast mode [ 675.957245][T27510] veth0_to_bridge: left promiscuous mode [ 676.133315][T27543] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 17 bytes [ 676.210304][T27552] __nla_validate_parse: 8 callbacks suppressed [ 676.210329][T27552] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4924'. [ 676.416727][T27570] netlink: 'syz.0.4925': attribute type 2 has an invalid length. [ 676.416752][T27570] netlink: 'syz.0.4925': attribute type 1 has an invalid length. [ 676.416764][T27570] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4925'. [ 676.461527][T27582] netlink: 'syz.0.4925': attribute type 2 has an invalid length. [ 676.461552][T27582] netlink: 'syz.0.4925': attribute type 1 has an invalid length. [ 676.461563][T27582] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4925'. [ 676.494719][T27572] syzkaller1: entered promiscuous mode [ 676.494746][T27572] syzkaller1: entered allmulticast mode [ 676.508410][T27578] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4928'. [ 677.091386][T27616] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4934'. [ 677.091422][T27616] netlink: 'syz.3.4934': attribute type 7 has an invalid length. [ 677.091432][T27616] netlink: 'syz.3.4934': attribute type 8 has an invalid length. [ 677.091440][T27616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4934'. [ 677.186837][T27617] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4934'. [ 677.186870][T27617] netlink: 'syz.3.4934': attribute type 7 has an invalid length. [ 677.186881][T27617] netlink: 'syz.3.4934': attribute type 8 has an invalid length. [ 677.186891][T27617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4934'. [ 677.230023][T27624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4933'. [ 677.433052][T27631] ip6erspan0: entered allmulticast mode [ 677.613178][T27635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4938'. [ 678.143789][ T29] audit: type=1804 audit(1794242292.633:26): pid=27655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4944" name="/newroot/374/cgroup.controllers" dev="tmpfs" ino=1942 res=1 errno=0 [ 678.144039][ T29] audit: type=1800 audit(1794242292.633:27): pid=27655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4944" name="cgroup.controllers" dev="tmpfs" ino=1942 res=0 errno=-22 [ 678.435550][T27661] ip6gre1: entered allmulticast mode [ 678.454582][T27666] syzkaller0: Caught tx_queue_len zero misconfig [ 678.581521][T27660] sit0: entered promiscuous mode [ 678.581684][T27660] netlink: 'syz.4.4946': attribute type 1 has an invalid length. [ 679.025819][T27697] xt_NETMAP: bad rangesize 37. [ 679.253048][T27721] sctp: [Deprecated]: syz.4.4958 (pid 27721) Use of int in max_burst socket option. [ 679.253048][T27721] Use struct sctp_assoc_value instead [ 679.392476][T27737] net_ratelimit: 35 callbacks suppressed [ 679.392499][T27737] ip_tables: iptables: counters copy to user failed while replacing table [ 679.397309][T27699] syzkaller0: renamed from gre2 [ 679.798382][T27749] x_tables: duplicate underflow at hook 2 [ 680.046369][T27764] sch_tbf: burst 7 is lower than device bridge0 mtu (1514) ! [ 680.129963][T27769] sctp: [Deprecated]: syz.1.4968 (pid 27769) Use of int in max_burst socket option. [ 680.129963][T27769] Use struct sctp_assoc_value instead [ 680.619882][T27782] sctp: [Deprecated]: syz.3.4971 (pid 27782) Use of int in max_burst socket option. [ 680.619882][T27782] Use struct sctp_assoc_value instead [ 681.021152][T27792] netlink: 'syz.4.4976': attribute type 1 has an invalid length. [ 681.251098][T27807] __nla_validate_parse: 13 callbacks suppressed [ 681.251122][T27807] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4980'. [ 681.290512][T27808] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4980'. [ 681.545828][T27826] ip6t_srh: unknown srh invflags 4000 [ 681.660542][T27826] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4981'. [ 681.660587][T27826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4981'. [ 682.023225][T27853] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4993'. [ 682.028217][T27853] syzkaller0: entered promiscuous mode [ 682.028280][T27853] syzkaller0: entered allmulticast mode [ 682.247310][T27867] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4996'. [ 682.247336][T27867] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4996'. [ 682.335439][T27873] Bluetooth: hci0: unsupported parameter 5135 [ 682.335462][T27873] Bluetooth: hci0: unsupported parameter 8192 [ 682.335474][T27873] Bluetooth: hci0: unsupported parameter 5135 [ 682.335486][T27873] Bluetooth: hci0: unsupported parameter 8192 [ 682.369811][T27875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4998'. [ 682.541952][T27883] tipc: Enabling of bearer rejected, no device for the media [ 682.551656][T27883] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5000'. [ 682.551701][T27883] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5000'. [ 682.583261][T27883] ip6gre2: entered allmulticast mode [ 682.587209][ T6281] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 683.515251][T27927] bridge0: port 3(syz_tun) entered blocking state [ 683.515341][T27927] bridge0: port 3(syz_tun) entered disabled state [ 683.515525][T27927] syz_tun: entered allmulticast mode [ 683.529957][T27927] syz_tun: entered promiscuous mode [ 683.534108][T27927] bridge0: port 3(syz_tun) entered blocking state [ 683.534259][T27927] bridge0: port 3(syz_tun) entered forwarding state [ 683.557862][T27927] bridge0: port 4(ip6gretap0) entered blocking state [ 683.559602][T27927] bridge0: port 4(ip6gretap0) entered disabled state [ 683.559763][T27927] ip6gretap0: entered allmulticast mode [ 683.563104][T27927] ip6gretap0: entered promiscuous mode [ 683.563699][T27927] bridge0: port 4(ip6gretap0) entered blocking state [ 683.563784][T27927] bridge0: port 4(ip6gretap0) entered forwarding state [ 683.705786][T27939] netlink: 'syz.0.5015': attribute type 1 has an invalid length. [ 683.705808][T27939] netlink: 'syz.0.5015': attribute type 2 has an invalid length. [ 683.788771][T27942] ip_tables: iptables: counters copy to user failed while replacing table [ 683.903278][T27947] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 683.941552][T27952] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 684.266737][T27978] block nbd0: reconnected socket [ 684.267679][T27977] bridge_slave_0: default FDB implementation only supports local addresses [ 684.271032][ T5650] block nbd0: Receive control failed (result -32) [ 684.674035][T28010] netlink: 'syz.1.5029': attribute type 1 has an invalid length. [ 684.722363][T28010] bond14: entered promiscuous mode [ 684.723357][T28010] 8021q: adding VLAN 0 to HW filter on device bond14 [ 684.745421][T28004] netlink: 'syz.5.5027': attribute type 1 has an invalid length. [ 684.937347][T28016] netlink: 'syz.1.5029': attribute type 1 has an invalid length. [ 685.105154][T28010] 8021q: adding VLAN 0 to HW filter on device bond14 [ 685.120263][T28010] bond14: (slave ip6tnl5): The slave device specified does not support setting the MAC address [ 685.120290][T28010] bond14: (slave ip6tnl5): Setting fail_over_mac to active for active-backup mode [ 685.161942][T28010] bond14: (slave ip6tnl5): making interface the new active one [ 685.161970][T28010] ip6tnl5: entered promiscuous mode [ 685.215319][T28021] Bluetooth: hci0: unsupported parameter 5135 [ 685.215343][T28021] Bluetooth: hci0: unsupported parameter 8192 [ 685.215354][T28021] Bluetooth: hci0: unsupported parameter 5135 [ 685.215365][T28021] Bluetooth: hci0: unsupported parameter 8192 [ 685.393159][T28010] bond14: (slave ip6tnl5): Enslaving as an active interface with an up link [ 685.774227][T28040] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 685.793937][T28022] can: request_module (can-proto-0) failed. [ 686.886419][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 687.510802][T27995] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 688.509161][T28092] syzkaller0: entered promiscuous mode [ 688.509191][T28092] syzkaller0: entered allmulticast mode [ 688.890208][T28090] __nla_validate_parse: 72 callbacks suppressed [ 688.890231][T28090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5046'. [ 688.939335][ T5650] block nbd6: Receive control failed (result -32) [ 689.045832][T28090] tipc: Resetting bearer [ 689.174250][T28090] tipc: Disabling bearer [ 689.391982][T28117] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 691.928049][T28144] x_tables: duplicate underflow at hook 2 [ 692.308786][T28170] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5062'. [ 692.374335][T28169] can: request_module (can-proto-5) failed. [ 692.845047][T28206] netlink: 312 bytes leftover after parsing attributes in process `syz.4.5068'. [ 692.891867][T28206] openvswitch: netlink: Message has 8 unknown bytes. [ 693.596266][T28228] x_tables: duplicate underflow at hook 2 [ 693.691313][ T2397] block nbd3: Possible stuck request ffff888028419a00: control (read@0,1024B). Runtime 150 seconds [ 693.691382][ T2397] block nbd3: Possible stuck request ffff888028419bc0: control (read@1024,1024B). Runtime 150 seconds [ 693.691405][ T2397] block nbd3: Possible stuck request ffff888028419d80: control (read@2048,2048B). Runtime 150 seconds [ 693.997849][T28255] bond10: option resend_igmp: invalid value (2878) [ 693.997874][T28255] bond10: option resend_igmp: allowed values 0 - 255 [ 694.001827][T28255] bond10 (unregistering): Released all slaves [ 694.022948][T28259] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 694.716957][T28279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5088'. [ 695.092909][T28299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5096'. [ 695.109617][T28308] netlink: 2 bytes leftover after parsing attributes in process `syz.5.5099'. [ 695.109640][T28308] nbd: socks must be embedded in a SOCK_ITEM attr [ 695.109976][T28308] block nbd7: shutting down sockets [ 695.168876][T28299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5096'. [ 695.438172][T28306] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5098'. [ 695.440005][T28306] xt_NFQUEUE: number of total queues is 0 [ 695.966597][T28323] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5101'. [ 696.102779][T28329] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 696.208270][T28336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5104'. [ 696.221847][T28336] netlink: 'syz.4.5104': attribute type 1 has an invalid length. [ 696.246664][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 696.318277][T28336] bond9: entered promiscuous mode [ 696.332010][T28336] 8021q: adding VLAN 0 to HW filter on device bond9 [ 696.454529][T28351] netlink: 5716 bytes leftover after parsing attributes in process `syz.0.5107'. [ 696.454617][T28351] netlink: 5716 bytes leftover after parsing attributes in process `syz.0.5107'. [ 696.462449][T28349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5107'. [ 696.682249][T28377] bond_slave_1: entered promiscuous mode [ 696.728050][T28365] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.728182][T28365] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.728367][T28365] bridge_slave_0: entered allmulticast mode [ 696.730853][T28365] bridge_slave_0: entered promiscuous mode [ 697.072999][T28385] ip6gre1: entered promiscuous mode [ 697.218825][T28391] netlink: 'syz.1.5116': attribute type 1 has an invalid length. [ 697.333624][T28391] 8021q: adding VLAN 0 to HW filter on device bond16 [ 697.410952][T28397] bond16: (slave ip6erspan0): making interface the new active one [ 697.413343][T28397] bond16: (slave ip6erspan0): Enslaving as an active interface with an up link [ 697.751843][T28411] bridge_slave_0: left allmulticast mode [ 697.751870][T28411] bridge_slave_0: left promiscuous mode [ 697.752051][T28411] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.759931][T28411] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 697.770219][T28415] team0: Device xfrm0 failed to enter team mode [ 697.770235][T28415] team0: Device xfrm0 failed to enter team mode [ 697.999996][T28426] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 698.000028][T28426] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 698.008647][T28426] tipc: Resetting bearer [ 698.011783][T28426] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 698.013919][T28426] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 698.027904][T28426] 8021q: adding VLAN 0 to HW filter on device bond1 [ 698.030123][T28426] 8021q: adding VLAN 0 to HW filter on device bond2 [ 698.058543][T28426] 8021q: adding VLAN 0 to HW filter on device bond5 [ 698.092508][T28426] 8021q: adding VLAN 0 to HW filter on device bond8 [ 698.152925][ T78] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 698.168731][ T78] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 698.173983][ T8560] bond5: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 698.197180][ T8560] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 698.197224][ T8560] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 698.197255][ T8560] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 698.275863][T28435] netlink: 'syz.3.5130': attribute type 1 has an invalid length. [ 698.302436][T28435] bond5: entered promiscuous mode [ 698.302771][T28435] 8021q: adding VLAN 0 to HW filter on device bond5 [ 698.328586][T28435] 8021q: adding VLAN 0 to HW filter on device bond5 [ 698.328816][T28435] bond5: (slave xfrm1): The slave device specified does not support setting the MAC address [ 698.328828][T28435] bond5: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 698.333331][T28435] bond5: (slave xfrm1): making interface the new active one [ 698.333374][T28435] xfrm1: entered promiscuous mode [ 698.334595][T28435] bond5: (slave xfrm1): Enslaving as an active interface with an up link [ 698.585921][T28448] tipc: Enabled bearer , priority 0 [ 698.587544][T28448] ip_tables: iptables: counters copy to user failed while replacing table [ 698.588184][T28448] syzkaller0: entered promiscuous mode [ 698.588200][T28448] syzkaller0: entered allmulticast mode [ 698.602910][T28448] tipc: Resetting bearer [ 698.634006][T28448] tipc: Disabling bearer [ 698.945963][T28463] bridge0: port 4(ip6gretap0) entered disabled state [ 698.946407][T28463] bridge0: port 3(syz_tun) entered disabled state [ 698.946788][T28463] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.947063][T28463] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.071628][T28473] tipc: Failed to remove unknown binding: 66,0,0/2130706433:1528919332/1528919334 [ 699.071658][T28473] tipc: Failed to remove unknown binding: 66,0,0/2130706433:1528919332/1528919333 [ 699.255634][T28486] syzkaller1: entered promiscuous mode [ 699.456909][T28493] ip_tables: iptables: counters copy to user failed while replacing table [ 699.670265][T28498] netlink: 'syz.1.5145': attribute type 47 has an invalid length. [ 700.049196][T28503] __nla_validate_parse: 8 callbacks suppressed [ 700.049216][T28503] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5147'. [ 700.145262][T28503] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5147'. [ 700.194039][T28508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5148'. [ 700.270256][T28517] openvswitch: netlink: nsh attr 288 is out of range max 3 [ 700.408835][T28530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5153'. [ 700.435715][T28530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5153'. [ 700.717650][T28547] syzkaller1: entered promiscuous mode [ 700.717677][T28547] syzkaller1: entered allmulticast mode [ 700.721509][T28547] x_tables: duplicate underflow at hook 1 [ 700.747815][T28549] x_tables: duplicate underflow at hook 1 [ 700.968252][T28562] Bluetooth: MGMT ver 1.23 [ 701.314289][T28554] tipc: Resetting bearer [ 701.432366][T28555] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 701.553169][T28594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5168'. [ 701.652837][T28599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5169'. [ 701.712846][T28586] syzkaller1: entered promiscuous mode [ 701.712874][T28586] syzkaller1: entered allmulticast mode [ 701.802727][T28608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5172'. [ 701.802990][T28606] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5172'. [ 701.839727][T28612] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5171'. [ 702.006500][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 702.986643][T28649] netlink: 'syz.1.5178': attribute type 1 has an invalid length. [ 703.049396][T28649] 8021q: adding VLAN 0 to HW filter on device bond17 [ 703.064160][T28650] bond17: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 703.087609][T28650] bridge5: entered promiscuous mode [ 703.758339][T28693] bond10: option lp_interval: invalid value (0) [ 703.758395][T28693] bond10: option lp_interval: allowed values 1 - 2147483647 [ 703.779417][T28693] bond10 (unregistering): Released all slaves [ 704.352577][T28729] bridge0: port 1(veth1_virt_wifi) entered blocking state [ 704.352678][T28729] bridge0: port 1(veth1_virt_wifi) entered disabled state [ 704.352855][T28729] veth1_virt_wifi: entered allmulticast mode [ 704.379846][T28729] veth1_virt_wifi: left allmulticast mode [ 704.659264][T28743] netlink: 'syz.5.5201': attribute type 1 has an invalid length. [ 704.972866][T28751] Unsupported ieee802154 address type: 0 [ 705.158792][T28758] __nla_validate_parse: 9 callbacks suppressed [ 705.158813][T28758] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5206'. [ 705.916912][T28790] syzkaller1: entered promiscuous mode [ 705.916940][T28790] syzkaller1: entered allmulticast mode [ 706.286779][T28808] veth0: entered promiscuous mode [ 706.523430][T28820] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5220'. [ 706.543324][T28805] veth0: left promiscuous mode [ 706.627837][T28824] netlink: 'syz.3.5220': attribute type 1 has an invalid length. [ 706.700250][T28831] netlink: 'syz.1.5223': attribute type 2 has an invalid length. [ 706.700272][T28831] netlink: 'syz.1.5223': attribute type 1 has an invalid length. [ 706.700283][T28831] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5223'. [ 706.703786][T28831] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5223'. [ 706.704043][T28834] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5223'. [ 707.047261][T28846] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5225'. [ 707.348535][T28850] nbd: must specify a size in bytes for the device [ 707.704379][T28867] netlink: 'syz.3.5229': attribute type 1 has an invalid length. [ 707.718938][T28859] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5229'. [ 707.884874][T28872] netlink: 'syz.0.5234': attribute type 16 has an invalid length. [ 707.884902][T28872] netlink: 'syz.0.5234': attribute type 6 has an invalid length. [ 707.884914][T28872] netlink: 'syz.0.5234': attribute type 16 has an invalid length. [ 707.884925][T28872] netlink: 'syz.0.5234': attribute type 27 has an invalid length. [ 707.989177][T28876] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5233'. [ 708.049018][T28875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5232'. [ 708.259225][T28889] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5236'. [ 708.358202][ T29] audit: type=1804 audit(1794242322.843:28): pid=28898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5233" name="/newroot/462/cgroup.controllers" dev="tmpfs" ino=2383 res=1 errno=0 [ 708.360262][ T29] audit: type=1800 audit(1794242322.853:29): pid=28898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5233" name="cgroup.controllers" dev="tmpfs" ino=2383 res=0 errno=-22 [ 708.484843][T28901] netlink: 'syz.5.5236': attribute type 10 has an invalid length. [ 708.550716][T28889] 8021q: adding VLAN 0 to HW filter on device bond3 [ 708.556049][T28897] bond3: entered promiscuous mode [ 708.556167][T28897] bond3: entered allmulticast mode [ 708.583703][T28899] dummy0: entered promiscuous mode [ 708.584029][T28899] dummy0: entered allmulticast mode [ 708.584836][T28899] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 708.611784][T28901] bond3: (slave dummy0): Releasing backup interface [ 708.614301][T28901] dummy0: left allmulticast mode [ 708.990230][T28914] netlink: 'syz.4.5240': attribute type 2 has an invalid length. [ 709.671729][T28939] tap0: tun_chr_ioctl cmd 2147767520 [ 709.671965][T28939] tap0: tun_chr_ioctl cmd 1074025675 [ 709.671980][T28939] tap0: persist disabled [ 709.688734][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 709.728194][T28945] netlink: 'syz.0.5245': attribute type 1 has an invalid length. [ 709.728674][T28946] netlink: 'syz.0.5245': attribute type 1 has an invalid length. [ 709.791567][T28945] 8021q: adding VLAN 0 to HW filter on device bond10 [ 709.862574][T28946] 8021q: adding VLAN 0 to HW filter on device bond11 [ 710.039176][T28961] sctp: [Deprecated]: syz.4.5249 (pid 28961) Use of int in max_burst socket option deprecated. [ 710.039176][T28961] Use struct sctp_assoc_value instead [ 710.039440][T28961] syz_tun: entered allmulticast mode [ 710.064474][T28961] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 710.064509][T28961] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 710.064544][T28961] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 710.098758][T28963] netlink: 'syz.0.5250': attribute type 3 has an invalid length. [ 710.423090][T28976] netlink: 'syz.1.5254': attribute type 1 has an invalid length. [ 710.440010][T28978] __nla_validate_parse: 6 callbacks suppressed [ 710.440035][T28978] netlink: 216 bytes leftover after parsing attributes in process `syz.3.5255'. [ 710.445437][T28978] netlink: 1244 bytes leftover after parsing attributes in process `syz.3.5255'. [ 710.491197][T28976] 8021q: adding VLAN 0 to HW filter on device bond18 [ 710.561112][T28982] ip6tnl0: Caught tx_queue_len zero misconfig [ 710.745311][T28992] tipc: Enabled bearer , priority 0 [ 710.805376][T28991] tipc: Disabling bearer [ 710.891939][T28982] bond12: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 710.895250][T28982] bond12 (unregistering): Released all slaves [ 710.918652][T29012] netlink: 'syz.5.5262': attribute type 2 has an invalid length. [ 710.940730][T28956] syz_tun: left allmulticast mode [ 710.975676][T29014] sctp: [Deprecated]: syz.5.5262 (pid 29014) Use of int in max_burst socket option. [ 710.975676][T29014] Use struct sctp_assoc_value instead [ 711.225799][T29024] bond19: option fail_over_mac: invalid value (127) [ 711.239020][T29024] bond19 (unregistering): Released all slaves [ 711.541020][T29033] bond10: option tlb_dynamic_lb: invalid value (16) [ 711.549900][T29033] bond10 (unregistering): Released all slaves [ 711.558100][T29047] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5268'. [ 711.577556][T29051] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 711.616690][T29051] IPv6: NLM_F_REPLACE set, but no existing node found! [ 712.416313][T29088] ip_tables: iptables: counters copy to user failed while replacing table [ 712.473958][T29092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5281'. [ 712.541890][T29098] ip_tables: iptables: counters copy to user failed while replacing table [ 712.575732][T29098] batadv_slave_1: Caught tx_queue_len zero misconfig [ 713.024051][T29127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5286'. [ 713.033919][T29127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5286'. [ 713.146548][T29117] team_slave_1: Caught tx_queue_len zero misconfig [ 713.526341][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 713.702443][T29156] syzkaller0: entered promiscuous mode [ 713.702465][T29156] syzkaller0: entered allmulticast mode [ 713.893446][T29168] macsec2: entered promiscuous mode [ 713.893468][T29168] bridge0: entered promiscuous mode [ 713.893674][T29168] macsec2: entered allmulticast mode [ 713.893687][T29168] bridge0: entered allmulticast mode [ 713.894538][T29168] bridge0: port 5(macsec2) entered blocking state [ 713.894718][T29168] bridge0: port 5(macsec2) entered disabled state [ 713.942638][T29168] bridge0: left allmulticast mode [ 713.942662][T29168] bridge0: left promiscuous mode [ 714.118042][T29176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5295'. [ 714.118066][T29176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5295'. [ 714.122539][T29184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5295'. [ 714.122561][T29184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5295'. [ 714.179114][T29188] x_tables: duplicate underflow at hook 2 [ 714.284427][T29190] netlink: 'syz.4.5297': attribute type 21 has an invalid length. [ 714.763408][T29180] tipc: Resetting bearer [ 715.299493][ T8560] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.299523][ T8560] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.300680][ T8560] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.300707][ T8560] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.301659][ T6280] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.301685][ T6280] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.301717][ T6280] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.301738][ T6280] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.569592][T29206] batman_adv: batadv0: Adding interface: syz_tun [ 715.569610][T29206] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.569637][T29206] batman_adv: batadv0: Interface activated: syz_tun [ 715.570551][T29211] x_tables: duplicate underflow at hook 2 [ 716.048772][T29243] netlink: 'syz.5.5309': attribute type 12 has an invalid length. [ 716.492204][T29263] netlink: 'syz.0.5314': attribute type 5 has an invalid length. [ 716.492437][T29263] __nla_validate_parse: 1 callbacks suppressed [ 716.492449][T29263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5314'. [ 716.527121][T29264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5314'. [ 716.533179][T29263] netlink: 'syz.0.5314': attribute type 5 has an invalid length. [ 716.651633][T29269] netlink: 'syz.1.5315': attribute type 29 has an invalid length. [ 716.833029][T29288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5317'. [ 717.103455][T29292] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5320'. [ 717.244004][T29311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5322'. [ 717.261448][T29311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5322'. [ 717.750506][T29329] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5327'. [ 717.911556][T29336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5329'. [ 717.928071][T29334] syzkaller1: entered promiscuous mode [ 717.928098][T29334] syzkaller1: entered allmulticast mode [ 718.111014][T29341] netlink: 'syz.0.5331': attribute type 1 has an invalid length. [ 718.130961][T29341] netlink: 'syz.0.5331': attribute type 1 has an invalid length. [ 718.131213][T29341] netlink: 'syz.0.5331': attribute type 1 has an invalid length. [ 718.158609][T29341] netlink: 'syz.0.5331': attribute type 1 has an invalid length. [ 718.175211][T29341] netlink: 'syz.0.5331': attribute type 1 has an invalid length. [ 718.395892][T29358] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.5336'. [ 718.396035][T29358] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 718.466772][T29358] 0ªX¹¦Dö»: entered allmulticast mode [ 718.504077][ T29] audit: type=1800 audit(1794242332.993:30): pid=29369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5335" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2466 res=0 errno=-22 [ 719.344282][T29413] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5349'. [ 719.406579][T29412] smc: adding net device macvtap0 with user defined pnetid SYZ0 [ 719.560668][T29419] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 719.563442][T29422] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 719.905385][T29442] SET target dimension over the limit! [ 720.300073][T29468] validate_nla: 28 callbacks suppressed [ 720.300095][T29468] netlink: 'syz.4.5360': attribute type 11 has an invalid length. [ 720.314709][T29471] batadv_slave_1: entered promiscuous mode [ 720.349255][T29472] batadv_slave_1 (unregistering): left promiscuous mode [ 720.978971][T29494] veth4: entered allmulticast mode [ 721.114933][T29515] netlink: 'syz.0.5368': attribute type 1 has an invalid length. [ 721.134960][T29497] ip_tables: iptables: counters copy to user failed while replacing table [ 721.228605][T29515] bond12: entered promiscuous mode [ 721.229249][T29515] 8021q: adding VLAN 0 to HW filter on device bond12 [ 721.360827][T29526] can: request_module (can-proto-0) failed. [ 721.403955][T29515] 8021q: adding VLAN 0 to HW filter on device bond12 [ 721.404182][T29515] bond12: (slave gre1): The slave device specified does not support setting the MAC address [ 721.413509][T29515] bond12: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 721.446703][T29515] bond12: (slave gre1): making interface the new active one [ 721.446730][T29515] gre1: entered promiscuous mode [ 721.448915][T29515] bond12: (slave gre1): Enslaving as an active interface with an up link [ 721.464210][T29531] xt_cluster: node mask cannot exceed total number of nodes [ 721.567094][T29537] __nla_validate_parse: 37 callbacks suppressed [ 721.567118][T29537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5373'. [ 721.993274][T29554] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5375'. [ 722.051194][T29557] netlink: 'syz.3.5376': attribute type 1 has an invalid length. [ 722.082012][T29557] bond3: (slave veth0_to_bond): Releasing active interface [ 722.082042][T29557] veth0_to_bond: left promiscuous mode [ 722.082227][T29557] veth0_to_bond: left allmulticast mode [ 722.104774][T29559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5376'. [ 722.117334][T29565] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20001 [ 722.141183][T29559] bridge5: entered promiscuous mode [ 722.202454][T29569] FAULT_INJECTION: forcing a failure. [ 722.202454][T29569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 722.202555][T29569] CPU: 1 UID: 0 PID: 29569 Comm: syz.4.5378 Not tainted syzkaller #0 PREEMPT(full) [ 722.202577][T29569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 722.202597][T29569] Call Trace: [ 722.202675][T29569] [ 722.202719][T29569] dump_stack_lvl+0xe8/0x150 [ 722.202859][T29569] should_fail_ex+0x3eb/0x540 [ 722.202918][T29569] _copy_from_user+0x2d/0xb0 [ 722.202957][T29569] __sys_sendto+0x2a9/0x5a0 [ 722.203055][T29569] ? __pfx___sys_sendto+0x10/0x10 [ 722.203134][T29569] ? rcu_is_watching+0x16/0xb0 [ 722.203193][T29569] __x64_sys_sendto+0xde/0x100 [ 722.203215][T29569] do_syscall_64+0x166/0x520 [ 722.203304][T29569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.203341][T29569] ? clear_bhb_loop+0x70/0xc0 [ 722.203364][T29569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.203385][T29569] RIP: 0033:0x7f6c1519fb19 [ 722.203429][T29569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.203444][T29569] RSP: 002b:00007f6c16127028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 722.203492][T29569] RAX: ffffffffffffffda RBX: 00007f6c15425fa0 RCX: 00007f6c1519fb19 [ 722.203505][T29569] RDX: 0000000000000003 RSI: 0000200000000000 RDI: 0000000000000003 [ 722.203516][T29569] RBP: 00007f6c16127090 R08: 0000200000000040 R09: 000000000000001c [ 722.203533][T29569] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.203544][T29569] R13: 00007f6c15426038 R14: 00007f6c15425fa0 R15: 00007ffc4734f3f8 [ 722.203575][T29569] [ 722.698243][T29592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5383'. [ 722.831975][T29596] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5384'. [ 723.016695][ T5735] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 723.176690][ T5735] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 723.385736][T29612] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 723.405106][T29613] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 723.436681][ T50] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 723.789798][ T2397] block nbd3: Possible stuck request ffff888028419a00: control (read@0,1024B). Runtime 180 seconds [ 723.789840][ T2397] block nbd3: Possible stuck request ffff888028419bc0: control (read@1024,1024B). Runtime 180 seconds [ 723.789864][ T2397] block nbd3: Possible stuck request ffff888028419d80: control (read@2048,2048B). Runtime 180 seconds [ 723.870115][T29629] FAULT_INJECTION: forcing a failure. [ 723.870115][T29629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 723.870144][T29629] CPU: 0 UID: 0 PID: 29629 Comm: syz.5.5390 Not tainted syzkaller #0 PREEMPT(full) [ 723.870164][T29629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 723.870174][T29629] Call Trace: [ 723.870182][T29629] [ 723.870191][T29629] dump_stack_lvl+0xe8/0x150 [ 723.870232][T29629] should_fail_ex+0x3eb/0x540 [ 723.870263][T29629] _copy_to_user+0x31/0xb0 [ 723.870291][T29629] simple_read_from_buffer+0xe1/0x170 [ 723.870372][T29629] proc_fail_nth_read+0x1bb/0x230 [ 723.870408][T29629] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 723.870430][T29629] ? rw_verify_area+0x24a/0x4c0 [ 723.870465][T29629] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 723.870482][T29629] vfs_read+0x213/0xa80 [ 723.870515][T29629] ? __pfx___mutex_lock+0x10/0x10 [ 723.870598][T29629] ? __pfx_vfs_read+0x10/0x10 [ 723.870623][T29629] ? __fget_files+0x2a/0x420 [ 723.870644][T29629] ? __fget_files+0x3a2/0x420 [ 723.870663][T29629] ? __fget_files+0x2a/0x420 [ 723.870698][T29629] ? fdget+0x1ac/0x250 [ 723.870736][T29629] ksys_read+0x150/0x270 [ 723.870762][T29629] ? __pfx_ksys_read+0x10/0x10 [ 723.870801][T29629] do_syscall_64+0x166/0x520 [ 723.870823][T29629] ? trace_irq_disable+0x3b/0x140 [ 723.870859][T29629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.870878][T29629] ? clear_bhb_loop+0x70/0xc0 [ 723.870905][T29629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.870923][T29629] RIP: 0033:0x7fc220d6034e [ 723.870940][T29629] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 723.870955][T29629] RSP: 002b:00007fc221ca3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 723.870975][T29629] RAX: ffffffffffffffda RBX: 00007fc221ca46c0 RCX: 00007fc220d6034e [ 723.870992][T29629] RDX: 000000000000000f RSI: 00007fc221ca40a0 RDI: 0000000000000004 [ 723.871003][T29629] RBP: 00007fc221ca4090 R08: 0000000000000000 R09: 0000000000000000 [ 723.871014][T29629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.871025][T29629] R13: 00007fc221026038 R14: 00007fc221025fa0 R15: 00007ffd0a649008 [ 723.871058][T29629] [ 724.177592][T29623] syzkaller0: entered promiscuous mode [ 724.177627][T29623] syzkaller0: entered allmulticast mode [ 727.495425][T13404] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 727.495720][T13404] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 727.496255][T29653] syzkaller1: entered promiscuous mode [ 727.496274][T29653] syzkaller1: entered allmulticast mode [ 727.602787][T29662] tipc: Enabling of bearer rejected, no device for the media [ 727.890285][T29703] batadv_slave_1: entered promiscuous mode [ 727.892845][T29698] batadv_slave_1: left promiscuous mode [ 727.909359][T29701] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5405'. [ 727.940078][T29704] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5407'. [ 728.165267][T29715] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5409'. [ 728.247040][ T8996] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 728.380791][T29727] rxe_eth0 speed is unknown, defaulting to 1000 [ 728.395971][T29733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5412'. [ 728.421142][T29733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.708116][T29738] ip_tables: iptables: counters copy to user failed while replacing table [ 728.708442][T29739] ip_tables: iptables: counters copy to user failed while replacing table [ 729.051363][T29758] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 729.218168][T29764] netlink: 'syz.5.5416': attribute type 10 has an invalid length. [ 729.218194][T29764] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5416'. [ 729.395864][T29774] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 729.511415][T29778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5423'. [ 729.511452][T29778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5423'. [ 729.570010][T29778] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5423'. [ 729.641873][T29778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5423'. [ 729.670701][T29787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5425'. [ 729.670731][T29787] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 729.805555][T29790] gre2: entered promiscuous mode [ 729.805581][T29790] gre2: entered allmulticast mode [ 730.192495][T29804] tipc: Enabled bearer , priority 0 [ 730.206798][T29804] syzkaller0: entered promiscuous mode [ 730.206820][T29804] syzkaller0: entered allmulticast mode [ 730.248310][T29804] tipc: Resetting bearer [ 730.262707][T29803] tipc: Resetting bearer [ 730.360196][T29803] tipc: Disabling bearer [ 730.740289][T29837] netlink: 'syz.1.5437': attribute type 1 has an invalid length. [ 730.834461][T29837] 8021q: adding VLAN 0 to HW filter on device bond19 [ 731.169364][T29850] [ 731.171762][T29850] ====================================================== [ 731.178813][T29850] WARNING: possible circular locking dependency detected [ 731.185932][T29850] syzkaller #0 Not tainted [ 731.190358][T29850] ------------------------------------------------------ [ 731.197378][T29850] syz.5.5440/29850 is trying to acquire lock: [ 731.203444][T29850] ffff88807e97a198 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x2f0 [ 731.212463][T29850] [ 731.212463][T29850] but task is already holding lock: [ 731.219838][T29850] ffff88807f709828 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 731.226959][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 731.237017][T29850] [ 731.237017][T29850] which lock already depends on the new lock. [ 731.237017][T29850] [ 731.247438][T29850] [ 731.247438][T29850] the existing dependency chain (in reverse order) is: [ 731.256459][T29850] [ 731.256459][T29850] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 731.264425][T29850] __mutex_lock+0x197/0x15a0 [ 731.269564][T29850] elevator_change+0x1af/0x480 [ 731.274872][T29850] elevator_set_none+0xb5/0x140 [ 731.280264][T29850] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 731.286626][T29850] nbd_start_device+0x189/0xb30 [ 731.292057][T29850] nbd_genl_connect+0x167d/0x1cd0 [ 731.297603][T29850] genl_family_rcv_msg_doit+0x233/0x340 [ 731.303800][T29850] genl_rcv_msg+0x614/0x7a0 [ 731.308839][T29850] netlink_rcv_skb+0x226/0x4a0 [ 731.314139][T29850] genl_rcv+0x28/0x40 [ 731.318659][T29850] netlink_unicast+0x8ef/0xa80 [ 731.324042][T29850] netlink_sendmsg+0x7f0/0xb20 [ 731.329339][T29850] sock_sendmsg_nosec+0x14e/0x190 [ 731.334975][T29850] ____sys_sendmsg+0x54e/0x850 [ 731.340270][T29850] ___sys_sendmsg+0x2a5/0x360 [ 731.345482][T29850] __x64_sys_sendmsg+0x1b1/0x290 [ 731.350958][T29850] do_syscall_64+0x166/0x520 [ 731.356111][T29850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.362529][T29850] [ 731.362529][T29850] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 731.371142][T29850] blk_alloc_queue+0x544/0x690 [ 731.376484][T29850] __blk_mq_alloc_disk+0x194/0x390 [ 731.382131][T29850] nbd_dev_add+0x494/0xb60 [ 731.387085][T29850] nbd_init+0x168/0x1f0 [ 731.391895][T29850] do_one_initcall+0x250/0x870 [ 731.397177][T29850] do_initcall_level+0x10a/0x1a0 [ 731.402749][T29850] do_initcalls+0x59/0xa0 [ 731.407608][T29850] kernel_init_freeable+0x29d/0x3e0 [ 731.413334][T29850] kernel_init+0x22/0x1d0 [ 731.418179][T29850] ret_from_fork+0x514/0xb70 [ 731.423319][T29850] ret_from_fork_asm+0x1a/0x30 [ 731.428597][T29850] [ 731.428597][T29850] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 731.435806][T29850] fs_reclaim_acquire+0x71/0x100 [ 731.441310][T29850] __kmalloc_cache_node_noprof+0x66/0x620 [ 731.447562][T29850] create_worker+0x112/0x7c0 [ 731.452711][T29850] workqueue_prepare_cpu+0xe4/0x170 [ 731.458443][T29850] cpuhp_invoke_callback+0x434/0x810 [ 731.464288][T29850] _cpu_up+0x2ce/0x5b0 [ 731.468888][T29850] cpu_up+0x1d2/0x220 [ 731.473400][T29850] cpuhp_bringup_mask+0xb2/0x1a0 [ 731.478946][T29850] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 731.485290][T29850] bringup_nonboot_cpus+0x17/0x30 [ 731.490831][T29850] smp_init+0x32/0x110 [ 731.495504][T29850] kernel_init_freeable+0x27f/0x3e0 [ 731.501218][T29850] kernel_init+0x22/0x1d0 [ 731.506065][T29850] ret_from_fork+0x514/0xb70 [ 731.511172][T29850] ret_from_fork_asm+0x1a/0x30 [ 731.516445][T29850] [ 731.516445][T29850] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 731.524160][T29850] cpus_read_lock+0x3d/0x160 [ 731.529261][T29850] static_key_slow_inc+0x12/0x30 [ 731.534753][T29850] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 731.540983][T29850] nbd_genl_foreach_sock+0x265/0x450 [ 731.546774][T29850] nbd_genl_reconfigure+0xbbb/0x1040 [ 731.552577][T29850] genl_family_rcv_msg_doit+0x233/0x340 [ 731.558631][T29850] genl_rcv_msg+0x614/0x7a0 [ 731.563642][T29850] netlink_rcv_skb+0x226/0x4a0 [ 731.568919][T29850] genl_rcv+0x28/0x40 [ 731.573411][T29850] netlink_unicast+0x8ef/0xa80 [ 731.578684][T29850] netlink_sendmsg+0x7f0/0xb20 [ 731.583956][T29850] sock_sendmsg_nosec+0x14e/0x190 [ 731.589514][T29850] ____sys_sendmsg+0x54e/0x850 [ 731.594873][T29850] ___sys_sendmsg+0x2a5/0x360 [ 731.600059][T29850] __x64_sys_sendmsg+0x1b1/0x290 [ 731.605506][T29850] do_syscall_64+0x166/0x520 [ 731.610607][T29850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.617011][T29850] [ 731.617011][T29850] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 731.624656][T29850] __mutex_lock+0x197/0x15a0 [ 731.629764][T29850] nbd_queue_rq+0x373/0xff0 [ 731.634784][T29850] blk_mq_dispatch_rq_list+0x499/0x1990 [ 731.640852][T29850] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 731.647774][T29850] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 731.654282][T29850] blk_mq_run_work_fn+0x167/0x2f0 [ 731.659821][T29850] process_scheduled_works+0xc3d/0x1630 [ 731.665895][T29850] worker_thread+0xa47/0xfb0 [ 731.671003][T29850] kthread+0x38b/0x480 [ 731.675583][T29850] ret_from_fork+0x514/0xb70 [ 731.680684][T29850] ret_from_fork_asm+0x1a/0x30 [ 731.685962][T29850] [ 731.685962][T29850] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 731.693165][T29850] __mutex_lock+0x197/0x15a0 [ 731.698284][T29850] nbd_queue_rq+0xc1/0xff0 [ 731.703209][T29850] blk_mq_dispatch_rq_list+0x499/0x1990 [ 731.709268][T29850] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 731.716102][T29850] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 731.722593][T29850] blk_mq_run_work_fn+0x167/0x2f0 [ 731.728162][T29850] process_scheduled_works+0xc3d/0x1630 [ 731.734235][T29850] worker_thread+0xa47/0xfb0 [ 731.739425][T29850] kthread+0x38b/0x480 [ 731.744006][T29850] ret_from_fork+0x514/0xb70 [ 731.749106][T29850] ret_from_fork_asm+0x1a/0x30 [ 731.754404][T29850] [ 731.754404][T29850] -> #0 (set->srcu){.+.+}-{0:0}: [ 731.761515][T29850] __lock_acquire+0x164c/0x2de0 [ 731.766916][T29850] lock_sync+0xb3/0x130 [ 731.771602][T29850] __synchronize_srcu+0xca/0x2f0 [ 731.777076][T29850] elevator_switch+0x1e8/0x7b0 [ 731.782409][T29850] elevator_change+0x2fa/0x480 [ 731.787717][T29850] elevator_set_default+0x375/0x440 [ 731.793553][T29850] blk_register_queue+0x404/0x4f0 [ 731.799095][T29850] __add_disk+0x6b8/0xdb0 [ 731.803958][T29850] add_disk_fwnode+0x100/0x3a0 [ 731.809270][T29850] nbd_dev_add+0x733/0xb60 [ 731.814200][T29850] nbd_genl_connect+0x96c/0x1cd0 [ 731.819650][T29850] genl_family_rcv_msg_doit+0x233/0x340 [ 731.825730][T29850] genl_rcv_msg+0x614/0x7a0 [ 731.830752][T29850] netlink_rcv_skb+0x226/0x4a0 [ 731.836056][T29850] genl_rcv+0x28/0x40 [ 731.840569][T29850] netlink_unicast+0x8ef/0xa80 [ 731.845874][T29850] netlink_sendmsg+0x7f0/0xb20 [ 731.851180][T29850] sock_sendmsg_nosec+0x14e/0x190 [ 731.856731][T29850] ____sys_sendmsg+0x54e/0x850 [ 731.862040][T29850] ___sys_sendmsg+0x2a5/0x360 [ 731.867237][T29850] __x64_sys_sendmsg+0x1b1/0x290 [ 731.872691][T29850] do_syscall_64+0x166/0x520 [ 731.877799][T29850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.884295][T29850] [ 731.884295][T29850] other info that might help us debug this: [ 731.884295][T29850] [ 731.894522][T29850] Chain exists of: [ 731.894522][T29850] set->srcu --> &q->q_usage_counter(io)#49 --> &q->elevator_lock [ 731.894522][T29850] [ 731.908259][T29850] Possible unsafe locking scenario: [ 731.908259][T29850] [ 731.915777][T29850] CPU0 CPU1 [ 731.921142][T29850] ---- ---- [ 731.926548][T29850] lock(&q->elevator_lock); [ 731.931131][T29850] lock(&q->q_usage_counter(io)#49); [ 731.939013][T29850] lock(&q->elevator_lock); [ 731.946110][T29850] sync(set->srcu); [ 731.949991][T29850] [ 731.949991][T29850] *** DEADLOCK *** [ 731.949991][T29850] [ 731.958126][T29850] locks held by syz.5.5440/29850: 6, last CPU#1: [ 731.964548][T29850] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 731.972820][T29850] #1: ffffffff916f79e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 731.981768][T29850] #2: ffff8880831a69c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 731.992117][T29850] #3: ffff88807f7098b0 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4f0 [ 732.001950][T29850] #4: ffff88807f709338 (&q->q_usage_counter(queue)#55){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 732.012818][T29850] #5: ffff88807f709828 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 732.022660][T29850] [ 732.022660][T29850] stack backtrace: [ 732.028866][T29850] CPU: 1 UID: 0 PID: 29850 Comm: syz.5.5440 Not tainted syzkaller #0 PREEMPT(full) [ 732.038229][T29850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 732.048274][T29850] Call Trace: [ 732.051545][T29850] [ 732.054465][T29850] dump_stack_lvl+0xe8/0x150 [ 732.059078][T29850] print_circular_bug+0x2e2/0x300 [ 732.064114][T29850] check_noncircular+0x12f/0x150 [ 732.069045][T29850] __lock_acquire+0x164c/0x2de0 [ 732.073895][T29850] ? lockdep_unlock+0x5c/0xd0 [ 732.078560][T29850] ? __lock_acquire+0x1511/0x2de0 [ 732.083586][T29850] lock_sync+0xb3/0x130 [ 732.087736][T29850] ? __synchronize_srcu+0xb6/0x2f0 [ 732.092870][T29850] ? __synchronize_srcu+0xb6/0x2f0 [ 732.097975][T29850] __synchronize_srcu+0xca/0x2f0 [ 732.102903][T29850] ? __pfx___synchronize_srcu+0x10/0x10 [ 732.108439][T29850] ? do_raw_spin_lock+0x12b/0x2f0 [ 732.113455][T29850] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 732.119321][T29850] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 732.124866][T29850] ? synchronize_srcu+0x20c/0x270 [ 732.129885][T29850] elevator_switch+0x1e8/0x7b0 [ 732.134648][T29850] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 732.140104][T29850] elevator_change+0x2fa/0x480 [ 732.144869][T29850] ? do_raw_spin_unlock+0xf5/0x200 [ 732.149977][T29850] elevator_set_default+0x375/0x440 [ 732.155178][T29850] ? __pfx_elevator_set_default+0x10/0x10 [ 732.160894][T29850] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 732.167906][T29850] ? blk_crypto_sysfs_register+0x11c/0x170 [ 732.173728][T29850] blk_register_queue+0x404/0x4f0 [ 732.178743][T29850] __add_disk+0x6b8/0xdb0 [ 732.183073][T29850] add_disk_fwnode+0x100/0x3a0 [ 732.187856][T29850] nbd_dev_add+0x733/0xb60 [ 732.192264][T29850] ? __pfx_nbd_dev_add+0x10/0x10 [ 732.197199][T29850] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 732.202996][T29850] ? security_capable+0x7e/0x2c0 [ 732.207963][T29850] ? radix_tree_lookup+0x240/0x290 [ 732.213125][T29850] nbd_genl_connect+0x96c/0x1cd0 [ 732.218058][T29850] ? __pfx_nbd_genl_connect+0x10/0x10 [ 732.223421][T29850] ? rcu_is_watching+0x16/0xb0 [ 732.228180][T29850] ? trace_kmalloc+0x2a/0xf0 [ 732.232764][T29850] ? __kmalloc_noprof+0x387/0x710 [ 732.237870][T29850] ? __nla_parse+0x40/0x60 [ 732.242280][T29850] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 732.248635][T29850] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 732.254976][T29850] genl_family_rcv_msg_doit+0x233/0x340 [ 732.260514][T29850] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 732.266573][T29850] ? __lock_acquire+0x747/0x2de0 [ 732.271507][T29850] genl_rcv_msg+0x614/0x7a0 [ 732.276093][T29850] ? __pfx_genl_rcv_msg+0x10/0x10 [ 732.281110][T29850] ? __pfx_nbd_genl_connect+0x10/0x10 [ 732.286561][T29850] netlink_rcv_skb+0x226/0x4a0 [ 732.291319][T29850] ? __pfx_genl_rcv_msg+0x10/0x10 [ 732.296338][T29850] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 732.301622][T29850] ? down_read+0x2b9/0x320 [ 732.306029][T29850] genl_rcv+0x28/0x40 [ 732.310002][T29850] netlink_unicast+0x8ef/0xa80 [ 732.314762][T29850] netlink_sendmsg+0x7f0/0xb20 [ 732.319514][T29850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 732.324783][T29850] ? aa_sock_msg_perm+0x144/0x210 [ 732.329818][T29850] ? apparmor_socket_sendmsg+0x98/0x360 [ 732.335378][T29850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 732.340646][T29850] sock_sendmsg_nosec+0x14e/0x190 [ 732.345664][T29850] ____sys_sendmsg+0x54e/0x850 [ 732.350416][T29850] ? __pfx_____sys_sendmsg+0x10/0x10 [ 732.355691][T29850] ? import_iovec+0x73/0xa0 [ 732.360214][T29850] ___sys_sendmsg+0x2a5/0x360 [ 732.364880][T29850] ? __lock_acquire+0x747/0x2de0 [ 732.369846][T29850] ? __pfx____sys_sendmsg+0x10/0x10 [ 732.375034][T29850] ? futex_wait+0x2a2/0x390 [ 732.379587][T29850] ? __fget_files+0x3a2/0x420 [ 732.384277][T29850] ? __fget_files+0x2a/0x420 [ 732.388874][T29850] __x64_sys_sendmsg+0x1b1/0x290 [ 732.393818][T29850] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 732.399278][T29850] do_syscall_64+0x166/0x520 [ 732.403868][T29850] ? trace_irq_disable+0x3b/0x140 [ 732.408884][T29850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.414975][T29850] ? clear_bhb_loop+0x70/0xc0 [ 732.419648][T29850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.425533][T29850] RIP: 0033:0x7fc220d9fb19 [ 732.429966][T29850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.449566][T29850] RSP: 002b:00007fc221ca4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 732.457979][T29850] RAX: ffffffffffffffda RBX: 00007fc221025fa0 RCX: 00007fc220d9fb19 [ 732.465970][T29850] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 732.473929][T29850] RBP: 00007fc220e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 732.481886][T29850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.489846][T29850] R13: 00007fc221026038 R14: 00007fc221025fa0 R15: 00007ffd0a649008 [ 732.497819][T29850] [ 732.723574][T22411] udevd[22411]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 735.734883][ T5002] udevd[5002]: worker [22331] /devices/virtual/block/nbd3 timeout; kill it [ 735.734971][ T5002] udevd[5002]: seq 23244 '/devices/virtual/block/nbd3' killed [ 738.486295][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!