last executing test programs: 3m43.416393955s ago: executing program 1 (id=2500): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x7800, 0x40, 0xf, 0xfffffffa, {{0x1d, 0x4, 0x2, 0x7, 0x74, 0x67, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@rr={0x7, 0x7, 0xdf, [@private=0xa010102]}, @rr={0x7, 0x7, 0xa5, [@rand_addr=0x64010100]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0x2f, 0x3, 0x6, [{@empty, 0x5bf}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff}, {@empty, 0x2}, {@multicast2, 0x10000}, {@multicast2, 0x3}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0xee, 0x1, 0x3, [{@private=0xa010100, 0x1ff}, {@rand_addr=0x64010102, 0x3}, {@multicast2, 0x1}]}]}}}}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="540100001800010000000000000000001d0100001500030000000000000000008ca5be073cff296e020000001e01060001", @ANYRESOCT], 0x154}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="78000000000101040000000000000000020000002400018014000180080001007f00000108000200e00000020c0002800500010000000000240002801400019d08000100000000000800a930bd197ce48e4d997cac69df0200ac1414bb0c00028005000100000000000800db400000000014000f8008000140000000000800024000000000"], 0x78}}, 0x0) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r9, &(0x7f0000000d80)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0x3, @loopback, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x30}}}], 0x40}}], 0x1, 0x400c404) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r13, @ANYRES32=r12, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r13, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r11}, 0x20) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, r13, 0x40, '\x00', r2, 0xffffffffffffffff, 0x1, 0x5, 0x2}, 0x50) sendmmsg$inet6(r11, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x241) setsockopt$ALG_SET_KEY(r10, 0x117, 0x7, &(0x7f0000000040)="fcffffff", 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="280300002300000126bd7000ffdbdf250000000008001d00050000002c0013006401010000000000000000000000000000000000000000000000000000000000000000000a0000001c00040002004e204e230000ff0200000000000000000000000000010c000f000800000000000000ac00070020010000000000000000000000000000ffffffff0000000000000000000000004e2280014e2200070a00a0a021000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="030000000000000004000000000000000900000000000000001000000000000006000000000000000100000000000000920000000000000001000000000000000200000000000000ffff00000000000004000000000000000700000000000000f81b0000b76b6e00020200010000000008001e00070000009c001100ff020000000000000000000000000001ff020000000000000000000000000001ac1e0101000000000000000000000000fc0000000000000000000000000000016c000000ff3400000a000a00ffffffff000000000000000000000000fc000000000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000001ff020000023500000a000a00e4000600ac1414bb000000000000000000000000ff0100000000000000000000000000014e2200084e2000020a0080802c000000b138cec76a2ab8d28aa4", @ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="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"], 0x328}}, 0x4000) 3m43.15880757s ago: executing program 1 (id=2505): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x6, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061115c000000000006000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x7ff) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@bloom_filter={0x1e, 0x0, 0xdc4c, 0x1, 0x40, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x4}, 0x48) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @private, @empty}, &(0x7f0000000140)=0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, r4, 0x25, 0x8, @void}, 0x10) 3m42.921977811s ago: executing program 1 (id=2507): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYBLOB="cc638982054d618c1cb3362e6211aca2040f828e9fd7974408eea6c9e89183114b9bab9331d14a9915dfbd07cc844498a6d129f85ff9ba5168262ae9254306d8"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 3m42.765738854s ago: executing program 1 (id=2509): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRESOCT], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x404000c) 3m41.160742282s ago: executing program 1 (id=2512): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x1, @remote}}, 0x1e) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) (async) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000540)={0x9, 0x5, {0x10000, @struct={0x6, 0xfffffffb}, 0x0, 0xe08c, 0xffffffff, 0x8b2, 0x6, 0x10000, 0x0, @struct={0x6, 0xf73b}, 0x400000, 0x6, [0x7, 0x10, 0x1, 0x18f, 0x1, 0x80]}, {0xafd, @usage=0x5, 0x0, 0x2, 0x3, 0x427, 0x0, 0x7619ff0, 0x24, @usage=0x100000000, 0x3, 0x3, [0x8, 0x80000000, 0x9, 0x80, 0x7, 0xf]}, {0x3, @usage=0xffffffffffffffff, 0x0, 0x4, 0x80000001, 0x1, 0xfffffffffffffffa, 0x47, 0xd8, @usage=0xa, 0x4, 0x6, [0x8, 0x2c, 0x0, 0x6, 0x6, 0x8]}, {0xd, 0xf}}) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000940)={0x2, 0x7fff, @start={r3, 0x1, "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", "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"}, [0x101, 0x7, 0x6, 0x45, 0x101, 0x2, 0x7fc365be, 0x3, 0x7f, 0x6, 0x8, 0x0, 0x6f, 0x1, 0x391fcb0b, 0xa, 0xd, 0x0, 0x3, 0x2, 0x5, 0x6, 0x5, 0x7ff, 0x835, 0x10001, 0xe0b, 0xd, 0x8, 0x4, 0x0, 0x2, 0x4000000000000, 0x0, 0xb238, 0x7, 0x820, 0x0, 0xbc, 0x9, 0x6, 0xfac, 0xffffffffffffff00, 0x3, 0x5, 0x5, 0x6, 0x9, 0x2, 0x671, 0x0, 0x3, 0xffffffffffffffd6, 0x4, 0xff, 0x7, 0xf, 0x4, 0x0, 0x401, 0xfffffffffffffffc, 0x384f, 0x47, 0x9]}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r1, 0x1) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x25, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r5], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xff, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async, rerun: 32) listen(r4, 0x8) (async, rerun: 32) r7 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000300)=0x8) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 3m40.753647187s ago: executing program 1 (id=2518): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x1020703971be172d}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0x1f, r1}]}, 0x44}}, 0x4) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r1, 0x29, 0x6, 0xf4, 0x2, 0x56, @remote, @remote, 0x7, 0x7800, 0x8}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x11, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000400), 0x8, 0x3c, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000f80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f40)={&(0x7f00000005c0)={0x954, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r1}, {0x194, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}]}}, {{0x8, 0x1, r1}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf21e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x387}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r1}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xba01}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x3, 0x10, 0x2}, {0x9, 0x2a, 0x5, 0x3}, {0x4, 0x8, 0x5, 0xd}, {0x3ff, 0x3, 0x5a, 0x3}, {0x40, 0x1, 0x9, 0x9}, {0xe4, 0x7, 0xe5, 0x5}, {0x3, 0xf7, 0x6, 0xa13a}, {0x3, 0x81, 0x6, 0xd}, {0xfd2, 0x8, 0xf, 0x2}]}}}]}}, {{0x8, 0x1, r1}, {0x140, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8f73}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0xd0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x8001, 0x2e, 0x9d, 0x7ff}, {0x1, 0x80, 0x7, 0x7fffffff}, {0x40, 0x4, 0x10, 0x1000}, {0x9, 0x10, 0x10}]}}}]}}, {{0x8, 0x1, r1}, {0x198, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x440}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r1}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x954}}, 0x4080000) 3m27.122227903s ago: executing program 32 (id=2518): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x1020703971be172d}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0x1f, r1}]}, 0x44}}, 0x4) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r1, 0x29, 0x6, 0xf4, 0x2, 0x56, @remote, @remote, 0x7, 0x7800, 0x8}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x11, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000400), 0x8, 0x3c, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000f80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f40)={&(0x7f00000005c0)={0x954, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r1}, {0x194, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}]}}, {{0x8, 0x1, r1}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf21e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x387}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r1}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xba01}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x3, 0x10, 0x2}, {0x9, 0x2a, 0x5, 0x3}, {0x4, 0x8, 0x5, 0xd}, {0x3ff, 0x3, 0x5a, 0x3}, {0x40, 0x1, 0x9, 0x9}, {0xe4, 0x7, 0xe5, 0x5}, {0x3, 0xf7, 0x6, 0xa13a}, {0x3, 0x81, 0x6, 0xd}, {0xfd2, 0x8, 0xf, 0x2}]}}}]}}, {{0x8, 0x1, r1}, {0x140, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8f73}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0xd0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x8001, 0x2e, 0x9d, 0x7ff}, {0x1, 0x80, 0x7, 0x7fffffff}, {0x40, 0x4, 0x10, 0x1000}, {0x9, 0x10, 0x10}]}}}]}}, {{0x8, 0x1, r1}, {0x198, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x440}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r1}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x954}}, 0x4080000) 2m32.48104208s ago: executing program 0 (id=3124): r0 = socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x3, 0xfffffffe, 0x8000000000000000, 0xfffffffffffffffd, 0x1000000, 0xfff, 0xffffffffffffff02, 0x1}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000001c0)={r1, &(0x7f0000000080)='/dev/net/tun\x00', 0x30200, &(0x7f00000000c0)={@_ha_fsid={[0xc, 0xfffffffe]}, {0x1ff, 0x0, 0x1fd, 0x3}}, 0x1, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x7}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x24, r6, 0x1, 0x70bd27, 0x25dddbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0xa0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x90) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2m31.368150456s ago: executing program 0 (id=3133): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000010000000000fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="4000000010800000280012800e0001006970366772657461700000001400028006000e"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x10, 0x1, 0x7, 0x0, {0x0, 0x9c6, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x2, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB="0000fcff08000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000005000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_SNAP_CREATE(r8, 0x50009401, &(0x7f00000007c0)={{r7}, "3fadf5aa5c61fc00570625b89e80d94088a894df1f64de7aa7615b5e494c5ecd914e94129c8a6f6a893dc9da5ea357a95ba02c683f889b9d936ec94dec98d22074a7befd90ee951efb25a24cf008df010dc36e105dfa0ae8a06cc1b3c8dc07370e3bf6cfb6dfdc80ea21db0ddeb927f135f0ef22f807b37ee5840bf13a2e76dbf3717b7b45d12eff379c7e45bb464062d3bfc398664dd1e6073351a8ca8bc6fe4bb2fecc62e5b768a097fd851595712710ca83fd1cc529241c11cbd7cc8afbbdd342f87f087f59a9f0aa31112e0a46ad38a8f65487ef39032a8eeda2b9b180f44d3508981e8efa7da82824ecfe769c9b1957c6a5bedbb5341cfc7ebeb6decfa712fb6210947e441766a5d50eb4973b71b2564cb02746885a914bd137b632fe2ed515cdedb35f3032a65f93d8f3a20f07f1c1a9dd2c23b2a8b8c6e748fc51f07f559fcaec7e3b23ec12e3889b3a33bbe0a7c615b104eb1f2b8b6c9238ef11c70074c3cb6d32cdef359166f72311e548fa97754d5104fbc3841eed5a358471e35a0e6e0422b23212824da23ceae5f499f14a4a655b0894d182feae3bd81bfee03603c42078625e0a116932f4d48b9a5f1cac20219aa0e9666d3fb7d69b643c72938e582a7ab51a4e324be7db80c01cb9ccb9a6006cabff6bb0af55686b423526ef303bd56a00f4def1c5c069caa09300f5bd46c793dbbc6cb8c5960503ac3fb48fc4ccb09561f73df6743d2fcba3c99399097dbda65008f28e1c261bcfebab0683d3f39f65593d7216869ffff27276f195513ae01aedff0faf6b6295de31030e1e5783b345fbc734fadab05e0e84fe6d1ef79a45ce65e07010929f345032e850fb8d9c70721300eb7631b02430b9c9524fa909a3ebd111479797ecc5406f70b2d9482b87eadc73664cc1e8c8b8d9dc1b3efb3bd743aa4dcfa6f116ef2882b8150d980947f6499eb2cca8a0fa2ce0fa00eefa71d57e726c47aa7d2be6bdb193d16d57a2efd7797c69518f1bc4b4548c2da8847e7b2282689934b756d816ae37f8ac3e3422453ed9fea24c2e9a23b18397faaff3d33bb8d2dbe5241769335566924ca7bc122a7893250d4fc31c1a981d67c45a47c9cc5b8b1b59083f15fb569e8667dc02fcc526aab1e2384e384ad932583e2cc947265592419da47342b8a3f36b3fca59d2ffa8e77cb8d78f4f9355cd9e27761d297220b0fc51f7586e14ed53a57f1959aada4caaf7d6b568ade9e86d5a0251da4d97b99b5a7dc102e7db63b8f8276576f6564a0244eef62ac4b9e37e77a49af209b40e8e1b1f13a831c40aca5b70dec627557ecd39e18979b2295b3e98bdd3aeba4be268c93e383ad9ea3da8fb74b1c5df074b62a2d811754ef7a2f98d69e3a5f3f4d33d00883fe951492638e73c1788a02d5495ebe6d6f341be0b472843f6a4902bda0f5cfd508706b62292b99abed06b359ac2e3441819ebf5cdb5823e6cc956b213df0064c4265e80560bb1f61d84c27ee7aabd6640e3bfd6170f6b3f0ddc6fa7c4925a6137a0ba7a7fff2289790233481a3383075e0d3ee24ba3e8288592edaebb15a0424edc93fbd3095d62f427b38b6a5ea7708f262312de81edaffcd600fbe23f3814fdd1379995eef12df5f040a6d52cb1e11cc1f55952544d4a614690e4555ab1af518c09f5bcf19dcf284e37047c4389f5cf71b7b5c278e8520b23948d36eedecc80bec9e411ac3a265a4420cd4ccddffaee5d6b93b38ff8a47d54b1b01993f93ac4d6b6bd6855d2d6956a90cf673a89c17007a22a254176e277eecb4a7b243bdcfdc51cc4762055c04c3e9ad9c98ddc049e4bb3e7b12280b40c934edea2e16d616ffed69c889f23dae05ca1d02f7c31908089dbb30c83b3367498a744e780df74bd19f96e0d10bba9743021ad81c334a790d2c46cfe16f9d17d4c3eeb1af619a81ec7409448deef90e598bd6642e022ef056af72b193bcdb7a9bdf30f1685b8afb0a52279b164e8c9b2f99c27a594217063351b10cbee2c1ef63d16953817c956555e79984dbd9418a4344539ccd112893fa01f5fc35a1914ec52c158b47895804e3e86a50968f802acb6fee1372dc594342ea7b1526baf8b00a7dcd969a74ba1fdd539ce4bacb75e1a74aafcb35d82ef658890993ce0fa6dc89e1f9f5e82599d6aa2cbacf581b255a99f434a18b505c555afef78020fde296e078a7d4292cb153f7735f190ac96327aec9b994045b97fd6bdf6799616080680d450740d30057079d1d202ebf3bfcabf14c6fcd9d267b568fed704b53553b14d045bfbbcdec1852e9788e6ffb8b1b8a2e882d8aefe3a31c109bd0e49cb1c5c593b4bd0464245e71663ea4d36cb32ea3c6b3cdbb9d3ecf893707c3a891ca4f6a621a161b900f659111db09b0fed77a6202a8531c9bc1e28639340c53c36e619ab91e2014f6c136066d29cf36820bd0d3b9fdd2bb65be924a772516526f617f4d9acb1e0216f42c2656bc73ca04399a57c414eb1051b886762f22e8b2399f618a4ab580056640cd37b6e7d4c8adaaf23bcffa29ce2e878290f21578d24ded4be783d2c7a39f68186831f9401243c35386d8fd4d64a228db973aa0be881895114862b9cb42d397f7d568c7b5ecf69ec9d7110a4b7ae97f275771bfcf84462d637b88b5f422014af647b84c24d250bf69ff0e8de258899e35fd0e27f3a087f6cbe4cf0c624ba1c5faa3098a645ae6ca5fdb8fa0c7a4d77d3c670f217f7d1ea02a683e4b0235c9948a9128cde894a44c51826c7cf2225eea7862cd58aaeb109bff4f25e169f27e2653cf0a42789a32cc6cbb168f825e2725c19cb5dfeb62f36d866cb2faef3b16e0b9acac9ec02c90fc0caee76d3577542e0a5f8817b932acd618fe293d786c9cf71dec6dc8b7c49b7b29a4ceae425d169ee4c749bcd40a7a4ee9b757d5857147769c66796c760f51ce08074761f63a7fe8ab5b52bd1e66dd4c836df49683e7e96c38b8eac78569538e76b8831275011af28e406e625b83ec9d6b43c90b0033a07355c1742c8f27af6b77fd6fcd577f726da04146afcc55c033465a77a6521b854ae22d706d30fe69fb2e6aae78a0769749b356726113c5bb67226d1096f1aaa52e84c9843f403eb91b4c1bb4ae089f6c44eb0a7e99194bf9df6131d82c38c00e674d61eb5bc896763c261dd7437c49e62142646adb37054c0881f07fc393f682859727cb6ab3581612115d2080a68c79d679e0a4603751e6e0566ec8fd78d586b9cf1c3a91c8b81a27382ba67c4a043e7f7d57106a1c7b22fd05d2c2fec3491e5c9541e118f366164b2293b52a90eb3fe9c1138b9fbed560d11ba2d265740d3eac1f0217d67712a067944772efb6e5907fd267ebd389cf08b508c17e1317eb51d83a4538332b092eeec93b4df2c92ebb330447e6fd0ecd04eb530bd02760e6e78ad5d24a96b2102923ca2f47b51b043460d21cde2ef549837b43912479bb740e9f2f2c2e384e0a54854e33775c11eb29cc85f68953c3866c1c86d4c1b8c019ea529c9356a37b7a0b53de6fcfba84c25e44544b89defc509d3210e52a499f2e1fd0c44bfedf361ddfabd411a137787b73beeca6494ad7d1f8408a4f9832b67010f47792be9cf4eb9e4872c2dbbb2fc7bfff2c8c74d57ce95409765e0d007ec82a824e87a989045f378fa82c62554cea6eefe95b21dc7be6d39cb7e59ea465a7dbe9966da25bbc5fc16d80030007dcc83b38fb9719c10923e8b955bd84eb4c43ecbe5c30209398153a2269d77fc0603e7a36af73f20c4da55818961110c374109557a98da45cfc609b1ce29a7dd651e0df92e6288f58fd8f5cac81ceb5dbacf4606d29bcd4639848c80a33c6a3997ad6768cdf8d8e89bc3aa7cfd9174e778fc26e7f9e0a23087b62f1e419e692292832778aa3d34312f94bbd41ae461621d60a0d3061d4a8cacd665bbb9cbf6dcab03667d33746ad02a4f1850218f4a892d22da9f87860d5997980ed445c3efda0c212b50c0ef63bd7e8febaff7a4aef147b3e2efd6107d84d6be3157a274da1895a54f96cf6b952d09e4067c98017f0064bcf7ff617b4b5e5249208e4f9d8663530df8e45da4acde9ada33027cc48f078dd53820a552628e289234b10d50c39deef7ac36a056caa4d0ecb0240052cc633098e9b1f88809cf57253e07aac5b4ba1bea40a666b352d63325d41b6bfc4fff1e3908cee94fe0f066b9de6e0f404ae6cc13d6442c505905e2290fdd0cbb1e9cb84ccbea0d207c0b992eb1960fb270a17a64af562b774f721d5704e44ffea1e03101fcd5d6cee6a0533126f7760e60b21360a7aef5d3ff39e1450e19f4cb129194ebec586ff657efb1cf976d3458040ba7dfbea3ffef1b4992fd5ad64192de7bdcabc7541af5599b741e442996f4a0573e6d9728348fad6d49df925266f419730a76a35bdb8e58888fe7dfc4bdb315f6881cf8e6c9c510f8db72cd28334920b1cb551c405e888d7c2c53bebb2eaa80410409d52ae86da0ba5cbdd3cc17ee20cb8971a0d01e1aef5aeac464aba6c7782132d687e846aaa5d18dc45f098503affa1598a9da0c41d80d9b303cac1b9cfccdcca2ec98885becf182a54574cae78efeab0adebc082f5a938735cc367a83b7259f9fef35e24c4141e5eeaf3bf821bea7e284b929ef06bd1e392608d30ef6dc07ff3efa2b385fc4767848fcef13626c1a825a66794ac21a39be6dc5b1565e05aa3ffb54b95147dff3b35b4c94fea83f7d07cdc7b883a11fa3ffc21b9c75abb471fe032371924e27892f30f25f0ef856bdb7de409e457f1b5a43af9b4c1e5cd1c57670f4d7cf455f82d7a7370053083d431862bc7f6cd71fa791e94613ec22232dd3f6a5dd2fc2450b0b1803b560dd9cc7f4e7f8ac3b66f176798e157540f106b671d8086f3cb348f93ff040fdad26c7ddde29d6e8639109f81aae53afa70b6703070e7d067eb81f72e7cf32b970aba48aa304c292ebeae91583b75653c58e847df657407e13d3d32b7f375acc8947e7e7be8950e8bdec1b996724f55a01acdcda92232a20dc42dcf0440d4274cf5df6fa40070de47a184f2a2f57b70b2f5e49382e599e93c9a3c8fc63ce4bd26d74fbbdf60ae661dace53782164f25c466f49b9e2b724f22fd3143cfa04a76a9a168be572fbd8fa4078ee7aba5627696e6faa691e5e8c357145b9fc9f51c88f1831ee66b162c963ce273510526f146b595713e523d705bb6f8820b1a5ecc088a5cb9d00d89a4ac0d2885dba294f419aa90034da348b0f2c3be8d33b560be07c6a5a64102d1534e3fd943cd7e01fb4feb0c21c4ff9d60fa0ad748ae46ae8d786f8c8bd3258244edb8f0c344cc6a58b6164f0eca893792faa008ba546d356836d41e6590eef97285f99022ebdefe4e30194016919bd4571979263bda95dc72d7b5eb1a7f1733cfd3661b44f782181ba5e10cc2ac29c2da0953f6709d2d075cc81f3be5cf4420c15a6c224364f322f04c556249a9b5de63fc9ae1c0f3866d0a0ea7d05172c3d9ce014f9edf24e6303d7b561761d8a246d26105904ef67c3b7453bccda8a2dc384d7d6f88c7e776a65031eee1ddb2d62061c1aabad1ae86c9e04131398d51bb2ea8f895d8f2c2073c1883533593c9c03fc0cdd0ef9118dea1caf509200beecb9752955ac564316eaf158ffd83c1fdb8121ec03295c17147f171f0706ee0635b2b5567c77cd1c1ccdb1fbc3a91cf59029fe017d9ed4184064ca5beb3f01b8e1908c256b11f2011ed4e8ccc45f489ccae7f8066412e2fc6dae30e190275bde4843932dd5299b"}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r8, r7}, 0xc) 2m28.99272187s ago: executing program 0 (id=3137): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001e0001000000000000000000070000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n'], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x5) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bdfeffffffdf251000000008000300", @ANYRES32=r5, @ANYBLOB='\n\x00'], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) 2m27.987197353s ago: executing program 0 (id=3149): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r1 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r1, &(0x7f0000000740)=[{{&(0x7f0000000700)={0x2, 0x4e21, @local}, 0x10, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x89, 0x4, "ec26"}]}}}], 0x18}}], 0x2, 0x0) (async) writev(r0, &(0x7f0000000440)=[{&(0x7f00000003c0)="69ee2e2df802911079ebd2af07b9fbb50d28d1b8f9bf4e1a719da7d6e43759dcc48729e7ee871ce5a610c6c655bcbea32bab726ad5c0ef76f6deab39cb316720eb36c48889898f186258ac", 0x4b}], 0x1) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x1b, &(0x7f00000002c0)="5d1574d6db0b71bb3d5517ef10732ed1a6790caf4e23c84236dc8a6b9898393c8e3bbe03284c98771e60487c7d6c8f2559884b692cf243aedc4c6d5992e48b6a2978101c1bf7daf0d10fe083a03b6e6421c8e95ad49cc6f1ce09acd32ad0397b1df9e8337a93303db206fa7e2a1569ac95f2cbdd26efc76e1c614974c54a8142e8c0ec2a1ab620420e8e8b8677b25f51", 0x90) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x6b}}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a7}, 0x94) (async) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x48, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x18}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x408}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x408}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) (async, rerun: 32) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r8, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) (async, rerun: 32) setsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, &(0x7f0000000380)=0x6, 0x4) (async, rerun: 64) write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2b, 'hugetlb'}, {0x2b, 'hugetlb'}]}, 0x12) (rerun: 64) 2m27.666828891s ago: executing program 0 (id=3153): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$int_in(r3, 0x5452, &(0x7f00000002c0)=0x100000000) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xf, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x18, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}, [@generic="574046d6"]}, 0x18}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) close(0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) r9 = socket$kcm(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x79f, 0xa0a6, 0x10000, 0xca0a, r6, 0xff, '\x00', r4, 0xffffffffffffffff, 0x4, 0x5, 0x2, 0x9}, 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r10) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)={0x2c, r11, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) close(r9) socket$kcm(0x10, 0x2, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x439, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}, @IFLA_MTU={0x8, 0x4, 0x101}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4) 2m27.349781969s ago: executing program 0 (id=3157): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002600010026bdf000fddbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x404085c}, 0x20000000) 2m12.221729726s ago: executing program 33 (id=3157): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002600010026bdf000fddbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x404085c}, 0x20000000) 3.281283474s ago: executing program 6 (id=3898): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r0) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r1, &(0x7f0000000080)=""/253, 0xfd) read(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYRESOCT], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xa}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'wg1\x00', &(0x7f0000000680)=@ethtool_drvinfo={0x3, "4c8c7347e32aa9e1919c70c199bc62daad66ce3db4830992be0a07d0e2edda49", "43ef0626e0c081542132d0ce4926e3c71697d7b2861b69fd144fbdd555d2b463", "48fc56f4f7189546b945e630bca6536abb8675503d0db872c33a48925fe26d22", "caf0c036527a0de8195ff3b19db6bee4baa2f54d3422c3f42344f6ba6e042706", "b5e2c9e1b009a67f0335ead0bda0c05ce1595fe59060e5efc038ddc648d30394", "356b668d9c9fd670b74d5817", 0xa51d, 0x612780, 0x4, 0x2, 0x7}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbffffff000200000007"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x940}, 0x41) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x2a, &(0x7f0000000100)=r4, 0x4) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x800) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf250401"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000eb63000018fccfd57063cb3600006b"], 0x48) 2.997524237s ago: executing program 6 (id=3903): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfb, 0x4440}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x35, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x5e, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x88a8bfad, 0x60e1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_EXT_MASK={0x8, 0x1d, 0x6}]}, 0x48}}, 0x2) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x18, 0x3a, 0x0, @empty, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x3, '\x00', @mcast2}}}}}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0xc, [@struct={0xc, 0x9, 0x0, 0x4, 0x1, 0x66c, [{0xf, 0x2, 0x40000}, {0xe, 0x3, 0xd}, {0x4, 0x0, 0x8}, {0xf, 0x0, 0x3}, {0x1, 0x0, 0x1000}, {0x3, 0x2000001, 0x3ff}, {0xb, 0x3, 0x200}, {0xf, 0x4, 0x8000}, {0x4, 0x0, 0x400}]}]}, {0x0, [0x2e, 0x2e, 0x0, 0x0, 0x0, 0x61, 0x5f, 0x0, 0x30, 0x2e]}}, 0x0, 0x9c}, 0x28) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000480)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200), &(0x7f0000000280)=0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="09fe000500"}) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0x80}]}, 0x10) r8 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r8, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r6, 0x10, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x21) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0xc, &(0x7f00000000c0), 0xfff1}, 0x90) 2.402907752s ago: executing program 2 (id=3911): socket$nl_route(0x10, 0x3, 0x0) 2.231305709s ago: executing program 2 (id=3915): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) unshare(0x20020400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x9) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001ec0)="1400000016001963d25a80648c56915a17aa2bfe", 0x14}], 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x9}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x6000) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24018800}, 0x24000810) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x880) 2.015720006s ago: executing program 3 (id=3916): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x6, 0x680, 0x0, 0xf42c}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r1, @in6={{0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x461}}, 0x4, 0xefa, 0x1, 0x25e9, 0x12, 0x6}, 0x9c) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)={r1, 0x32, "d3da491866fee276ac91e95b6baf437d64639a74c697d0bf1b642c141dc33805c0ba5f4d03005fde743e437658e3671ed69f"}, &(0x7f0000000180)=0x3a) (async) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) (async) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f00000001c0)={{0x1, 0x3, 0x400, 0x401, 0xf}, [{0x4a, 0x9ee, 0x45, 0xef}, {0xaed, 0x2, 0xc, 0x28}, {0xfb9, 0x5, 0x9, 0x91}, {0x7f00, 0xb05, 0x5, 0x12}, {0x1, 0xfffffffffffeffff, 0x7, 0x7}]}) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000280)={r2, 0x9, 0x1ff}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r2, 0x9}, 0x8) r4 = socket$inet6(0xa, 0x80000, 0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000300)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000340)=0x14) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={r5, @in6={{0xa, 0x4e23, 0x9, @mcast1, 0x100}}}, 0x84) (async, rerun: 64) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000440)={r5, 0x6, 0x0, 0x100, 0x4ec}, &(0x7f0000000480)=0x18) (async, rerun: 64) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000004c0)=0x1, 0x4) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000500)={r5, 0x3}, 0x8) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000540)={'syzkaller0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}) (async, rerun: 32) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000000580)={0x0, 0x6, 0x80}) (rerun: 32) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f00000005c0), &(0x7f0000000600)=0x30) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000640)=0x6, 0x4) (rerun: 64) ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, &(0x7f0000000780)={r0, &(0x7f0000000680)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, &(0x7f00000006c0)={@_ha_fsid={[0x101, 0x2]}, {0x4, 0xfb, 0x4, 0x9e6}}, 0xfffffff2, &(0x7f0000000700)={@_ha_fsid}, &(0x7f0000000740)=0x63d3}) bind$vsock_stream(r7, &(0x7f00000007c0)={0x28, 0x0, 0xffffffff, @local}, 0x10) (async) bind$l2tp(r7, &(0x7f0000000800)={0x2, 0x0, @empty, 0x4}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000840)={r5, 0x400, 0x200}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), r7) sendmsg$IPVS_CMD_GET_DAEMON(r8, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x74, r9, 0x2, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x28}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x38e1}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfa1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) (async) ioctl(r8, 0x1, &(0x7f0000000a00)="3816") setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000a40)={r5, 0x9, 0xbe, "5c937be587448921babdd2048c96536d5a0dbb2147ff7d2d101c469594dceaaf079577ba817d9d86c9de31eeefbd6387ad9691c4c289fd5a1a4e6f06b2e804aebfb72abea1f52729bc3ce853d823a7bec3f6e31348deb1138eca081b7577ded216a72ffe792ecce41a32a11ff618b47deec7bb4c79f9ae8bbdc51becb038d685e24d288c603f00b6d4df8e2f9d01aab7afb84729d0ce17af43f5851901e906e3e7a6bcd714e7f61bdddced607323192106904c80ce9bcb6f76ba982cf032"}, 0xc6) 1.963188701s ago: executing program 4 (id=3918): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x80000) getsockname(r0, &(0x7f0000000180)=@nl=@proc, &(0x7f0000000240)=0x80) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x21}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r3, &(0x7f0000000240)={0x1a, 0x302, 0x0, 0x6, 0x0, 0x0, @broadcast}, 0x10) accept4$llc(r3, 0x0, 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000040)=0x5, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103000200000000000002002000010040010b000000080002000a010101"], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0xc044) 1.887800993s ago: executing program 6 (id=3919): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x5c) (async) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000006c0)=0x9, 0x4) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r1, 0xb15, 0x70ad2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20014041}, 0x4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x9c, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x6}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x14, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x40, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xc}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x9}]}, 0x9c}, 0x1, 0x0, 0x0, 0x55}, 0x0) syz_emit_ethernet(0x44f, &(0x7f0000000080)={@remote, @random="467b5543f090", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x419, 0x3a, 0xff, @remote, @mcast2, {[@hopopts={0x32, 0x17, '\x00', [@enc_lim={0x4, 0x1, 0x40}, @generic={0x10, 0xb4, "8dc045beb6cac56655901ff60d34ec64ab10634431e1b6290c96a08ea75a7ee341ec324e2a69857cfb2891a103e7e55e64cecb3c3515412a43ed7e1cc3df01cab4535872129307c0389a3ca1262b648dbc02ead5d0bd7c4137fad2dbe43b6f09c16b82e1ec24a126abfe910212cc68287bf316f9fd869805128f512985be1de07d7388cced240768d9e02cee78e099779bf9d65d9c95ffcff01055df828e9e60a3336e8fb90528af162fc33b1760ecb8fbdb74c8"}]}, @hopopts={0x89, 0x23, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @generic={0x2, 0x10f, "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"}, @jumbo={0xc2, 0x4, 0x1ff}]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19, 0xa, "8cd86ff706598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2602"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x19, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d9309625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577ed7fcd7d6428139e6fccd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc97800"}, {0x0, 0x1d, "06aa85616177c61bc943afcb846197fdffffffffffffffd5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a6258eba238d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6be1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d000000"}]}}}}}}, 0x0) 1.788678562s ago: executing program 2 (id=3920): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x22}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x6}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x4, 0xbd0c}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="f2b300000000ef4fe3fa7efc7e054e9c4c1928bdb82668c4970a9954ae675e48532daa34f2f40000bc2869b5e57cb52ede08070f0000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x204000, 0x0}, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r4, 0x24, 0x0, @val=@target_btf_id=r5}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x22}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x6}, &(0x7f00000001c0)=0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x4, 0xbd0c}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="f2b300000000ef4fe3fa7efc7e054e9c4c1928bdb82668c4970a9954ae675e48532daa34f2f40000bc2869b5e57cb52ede08070f0000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x204000}, 0x8) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r4, 0x24, 0x0, @val=@target_btf_id=r5}, 0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 1.745255693s ago: executing program 3 (id=3921): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01052cbd7000fedbdf251d00000008001d000400000008001e00300b000008000100d3"], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0xcf, 0x5, 0x9}, {0x6}]}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r4 = socket$inet(0x2, 0x2, 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, &(0x7f00000000c0)) bind$inet(r4, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r6 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000080), 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=""/176, 0xb0, 0x0, &(0x7f00000000c0)=""/213, 0xd5}}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r9) sendmsg$IEEE802154_START_REQ(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, r11, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x4008104) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe18}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x7}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0xb4}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0xffffff6f, 0x0, 0x0, 0x0}, 0x94) 1.62037046s ago: executing program 4 (id=3923): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4803}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='l', 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000084007708000000000000000009000000300000000000000084000000010000000300ff7f0002000003000000070000000900000006000000fffffffff5e6c1963971bc898006159a953f33052d678b162543b19c5e0e814c5b02b737882789d30b24db2547060d298ddedcce1f5ce6ed3e1f2f99547ba9e441b9ac6357da9c576634ad3bbd954421bcecba5aa44eb4e45f82f0a302fc040000003a747ed50b169cfb1725634c1aaa7cab5334668ae92373a10a60bbcd7a35", @ANYRES32=0x0], 0x48, 0x2000}, 0x6) r2 = socket$kcm(0x10, 0x7, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e6576650000200002801412070020010000000000000000000000000000080001000100000008000a00", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0xd8, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @meta={{0x9}, @void}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x6f, 0x7, 0x1, 0x0, "db0423fbc47d3b3b066ed831104dedf4f67e35c3ca0915ebda1bf304c1e201a8ac9aaf99111c8522e109558d5a67c8eddf1cc17db5008aec9fefcb72746afb6a4b40f6838bd0e9bb6102e8aeb46344ef68f664ee47f68dd1e87c9700a1a7e64058216fff8912be03253fab"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x100}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f00000000c0)={0x3, 'geneve1\x00', {0x7fffffff}, 0x2}) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) 1.522099842s ago: executing program 2 (id=3924): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.315598507s ago: executing program 5 (id=3925): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) (async) recvmsg(r1, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4082, 0xff2}], 0x1}, 0x10100) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e0114"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x7d, &(0x7f0000000080), 0x8) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write(r4, &(0x7f0000000240)="94", 0x1) (async) vmsplice(r5, &(0x7f0000000100)=[{&(0x7f0000000400)='\r', 0x1}], 0x1, 0x4) tee(r3, r2, 0x2, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000040)={0x9}, 0x4) 1.312615063s ago: executing program 3 (id=3926): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r1, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0xc008}, 0x4008010) (async) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r1, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0xc008}, 0x4008010) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800e00010069703665727370616e0000002800028014000700ff0200000000000000000000000106000200000000000600030040000000c8d592d7b81202fdaef38a8585adc5fb7e311c751e8d10602ed5f3e9c3482315e487424e96cf7581d6243c7f9ba3aa9bfcc8d2100637dfd1c77cafd31623f46ee36ef58c97298a63b763d1c45990915bdddf14057c9c5382ddc567be7f38ef320b"], 0x5c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb3}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1.24879198s ago: executing program 5 (id=3927): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x54, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004845}, 0x2c001) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x54, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004845}, 0x2c001) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c000) (async) 1.206656656s ago: executing program 2 (id=3928): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711294000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0xa, 0x2, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="3800000055000100000000000100000007000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="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"], 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r5) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r7, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r6}, 0x20) (async) connect$unix(r5, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (rerun: 64) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x2, 0xfffffffffffffffd, 0x9, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0x56d92c8a, 0x0, 0xfffffffffffffffc, 0x10000, 0x10}, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000023b7007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) setsockopt$inet6_int(r8, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) (async) sendmmsg$inet6(r8, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) (async) recvmmsg(r8, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12141, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(r5, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) 1.047892056s ago: executing program 4 (id=3929): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000071117500000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) 1.046841418s ago: executing program 3 (id=3930): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xe4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd"], 0xcfa4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x2c04c090) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 962.706252ms ago: executing program 2 (id=3931): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e25, @local}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000000080000080"], 0x26}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r4 = socket$inet(0x2, 0x801, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r4, 0x1) sendto$inet(r1, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 852.683385ms ago: executing program 6 (id=3932): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000f80)=@broute={'broute\x00', 0x20, 0x6, 0x90, [0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x2000000005c0], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000004000000ffffffff00"/144]}, 0x108) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 768.498159ms ago: executing program 5 (id=3933): r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000040)={'c', ' *:* ', 'r\x00'}, 0x8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x5f, "c13c44d1dded5a2f7db3bc040cff562bb62356ea534be4f3c29db1c646264634772179e869e05fbbc25863b79fab9e7d0425f02702b9c2ef2b76340cd48ccf3a4c685154cd42fa79bf78fd314ec6b5905fbba254243d1bbfc5150100bae2f0"}, &(0x7f0000000100)=0x67) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000140)={r2, 0x8}, 0x8) (async) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x1, {{0x2, 0x4e22, @empty}}}, 0x88) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f00000002c0)={0xf9e2, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3d}}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) write(r1, &(0x7f0000000400)="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", 0x1000) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000001400)=0x6) (async) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000001440)=0x81, 0x4) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f00000014c0), &(0x7f0000001500)=0x4) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001540), 0x200200, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001580)={'syz_tun\x00', 0x10}) (async) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f00000015c0)={0x0, r3}, 0x8) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r7, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x28, r8, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5e}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc050}, 0x4004) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001740)=0x8) (async) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000001780)=0x8200, 0x4) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r6, 0x4008f50a, &(0x7f00000017c0)={0x3, 0x23c0}) (async) r11 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001800)='io.weight\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f0000001840)=0xd, 0x12) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000001880), r9) (async) write$cgroup_devices(r0, &(0x7f00000018c0)={'a', ' *:* ', 'rwm\x00'}, 0xa) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$XFS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000001900)) 767.724373ms ago: executing program 4 (id=3934): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x1fc}}, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff8500000030000000180100002020642500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="e8fa395e7d5dd64601ed4a3fac2fcc614937846cb227ad4ba7bc52bb7d445477e63fe215afd2c765070000000000001e9146ccc6c1f04f396b9b5677232b504ea80d965fd0d7f0bf32288c32c5a70388a34bca0736d2c2b14a4aeb9648d93a258a2c86a1", @ANYRES64=0x0], 0x20) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)="27031c", 0x3}], 0x1}, 0x2400800c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21d62}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffe01}}]}]}]}, 0x50}}, 0x20084084) 639.055094ms ago: executing program 6 (id=3935): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x40000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10061}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x308}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x50}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r4, &(0x7f0000000180), 0x0}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20010000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSETELEM={0xe8, 0xe, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xa4, 0x3, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x9c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x110}, 0x1, 0x0, 0x0, 0x48041}, 0x20000804) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0108000000000000000005008875b7bc0240000000020900010073797a3100000000140000001100010000000000000000000000061b"], 0x50}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv4_delroute={0x0, 0x19, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x80, 0x14, 0x8, 0xfe, 0x4, 0xfd, 0xb}, [@RTA_FLOW={0x0, 0xb, 0x5}]}, 0x174}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) 624.569987ms ago: executing program 5 (id=3936): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x44, r1, 0x1, 0x70bd29, 0xfffffffd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1000056}}}}, [@NL80211_ATTR_TX_RATES={0x19, 0x10d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xfde1, 0x0, 0x3, 0x3, 0xf33e, 0x9]}}, @NL80211_TXRATE_HE={0x0, 0x5, {[0x2, 0x9, 0xe2e, 0x4, 0x0, 0x7, 0x1, 0x3b]}}, @NL80211_TXRATE_LEGACY={0x0, 0x1, [0x64]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x4000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) 440.176583ms ago: executing program 4 (id=3937): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200)=0xffffffffffffffff, 0x12) listen(r2, 0x1) sendfile(r2, r1, 0x0, 0xbdc4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 431.447176ms ago: executing program 3 (id=3938): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffeb1, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x58}, 0x1, 0x0, 0x0, 0x2800c005}, 0x4) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@mcast2, @dev={0xfe, 0x80, '\x00', 0x1e}, @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x80000, r1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1}) 249.651021ms ago: executing program 5 (id=3939): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x25, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x25, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) 188.724586ms ago: executing program 6 (id=3940): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x209, 0x0, 0x4, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}]}, 0x30}}, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x840) 188.019453ms ago: executing program 3 (id=3941): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @jmp={0x5, 0x1, 0x10, 0x7, 0xa, 0xfffffffffffffffe}, @exit]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="12c3f3900a1487888800db27801ce461cd69c5aa0eebd0e719d338085784c0f9453d9127db7ef0041747", 0x2a}, {&(0x7f0000000300)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51", 0x17}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0x4c, r6, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x5}, {0x7, 0x13}, {0x5, 0x3}, {0x3, 0x4}, {0x5, 0x7}]}]}]}]}]}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f00000011c0)={&(0x7f0000001100), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x28, r6, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x39}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1010}, 0x4000800) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) splice(r3, &(0x7f0000001080)=0x1, r4, &(0x7f00000010c0), 0x1ff, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x200003, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xfffb, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x240440d0}, 0x24008004) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) accept4$tipc(r0, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10, 0x80000) 108.938925ms ago: executing program 4 (id=3942): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xf1c1, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "629fe25e06f600", "2fd672a2d0ffff00", "ace06e88"}, 0x28) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@ccm_128={{0x303}, "63a970f9c96b9919", "68c9fa3999daf8c4c237c8b534397b2d", "f8cb0071", "a664d6946aab5f1e"}, 0x28) (async) r2 = socket(0x23, 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x2804) syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r2) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x5, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x4000810) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0x8) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) (async) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="02"], 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f00000001c0)=r4, 0x4) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 5 (id=3943): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x10040) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10000, 0xffffff87}]}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x8001, 0x400056}]}}}}}}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000080c0)=[{{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000001d80)=""/51, 0x33}, {&(0x7f0000001dc0)=""/207, 0xcf}, {&(0x7f0000003040)=""/110, 0x6e}, {&(0x7f00000030c0)=""/66, 0x42}, {&(0x7f0000003140)=""/4096, 0x1000}], 0x5}, 0x1}, {{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000004480)=""/4096, 0x1000}], 0x1}, 0xc82}], 0x2, 0x40000001, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) kernel console output (not intermixed with test programs): ngth. [ 295.020377][T13861] __nla_validate_parse: 7 callbacks suppressed [ 295.020398][T13861] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2215'. [ 295.054664][T13858] syzkaller0: entered promiscuous mode [ 295.069371][T13858] syzkaller0: entered allmulticast mode [ 295.099003][T13861] bond0: ARP target 8.4.0.0 is already present [ 295.115571][T13866] netlink: 'syz.3.2216': attribute type 1 has an invalid length. [ 295.124429][T13866] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2216'. [ 295.134295][T13861] bond0: option arp_ip_target: invalid value (1032) [ 295.324995][T13873] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2218'. [ 295.344287][T13873] tipc: Invalid UDP bearer configuration [ 295.344356][T13873] tipc: Enabling of bearer rejected, failed to enable media [ 295.407106][T13876] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2219'. [ 295.452493][T13876] 0·: renamed from hsr0 (while UP) [ 295.488378][T13876] 0·: entered allmulticast mode [ 295.499839][T13886] netlink: 'syz.1.2221': attribute type 2 has an invalid length. [ 295.516229][T13876] hsr_slave_0: entered allmulticast mode [ 295.529202][T13886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2221'. [ 295.534750][T13876] hsr_slave_1: entered allmulticast mode [ 295.540043][T13884] netlink: 'syz.0.2222': attribute type 9 has an invalid length. [ 295.560948][T13876] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 295.573823][T13889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2222'. [ 295.756010][T13903] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 295.837917][T13907] xt_l2tp: v2 sid > 0xffff: 1114112 [ 296.005075][T13915] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 296.022273][T13915] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 296.167553][T13922] netlink: 'syz.3.2232': attribute type 10 has an invalid length. [ 296.192824][T13922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.210648][T13922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.223044][T13925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.243702][T13922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.253309][T13922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.265455][T13927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2234'. [ 296.340079][T13927] bridge0: left allmulticast mode [ 296.412201][ T5972] bridge0: left promiscuous mode [ 296.420550][T13931] netem: unknown loss type 8 [ 296.445437][T13931] netem: change failed [ 296.523596][T13938] ip6t_srh: unknown srh match flags 5F28 [ 296.633844][T13945] ipvlan3: entered allmulticast mode [ 296.639881][T13945] batadv_slave_1: entered allmulticast mode [ 296.650534][T13945] batman_adv: batadv0: Adding interface: ipvlan3 [ 296.658226][T13945] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.725713][T13945] batman_adv: batadv0: Interface activated: ipvlan3 [ 297.017477][T13959] xt_TPROXY: Can be used only with -p tcp or -p udp [ 297.432356][T13978] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2252'. [ 297.483676][T13986] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2254'. [ 297.530593][T13986] netlink: 'syz.2.2254': attribute type 1 has an invalid length. [ 297.555137][T13986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2254'. [ 297.591382][T13988] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 297.599266][T13988] IPv6: NLM_F_CREATE should be set when creating new route [ 298.138031][T14023] netlink: 'syz.3.2264': attribute type 3 has an invalid length. [ 298.194609][T14023] netlink: 'syz.3.2264': attribute type 2 has an invalid length. [ 298.409708][T14030] macsec0: entered promiscuous mode [ 298.433062][T14030] macsec0: entered allmulticast mode [ 298.450846][T14030] veth1_macvtap: entered promiscuous mode [ 298.467125][T14030] veth1_macvtap: entered allmulticast mode [ 298.482833][T14030] macsec0: left promiscuous mode [ 298.504616][T14030] macsec0: left allmulticast mode [ 298.536527][T14030] veth1_macvtap: left allmulticast mode [ 299.062566][ T5758] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 299.119569][T14066] team0: Port device batadv1 removed [ 299.140090][T14066] bond3: (slave geneve3): Releasing active interface [ 299.273764][T14075] bond0 (unregistering): Released all slaves [ 299.321170][ T137] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 299.350853][ T137] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 299.369349][ T137] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 299.397490][ T137] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 299.712476][T14099] netlink: 'syz.2.2285': attribute type 4 has an invalid length. [ 299.824541][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 300.086900][T14112] __nla_validate_parse: 13 callbacks suppressed [ 300.086923][T14112] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2289'. [ 300.148897][T14115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2290'. [ 300.164665][T14116] netlink: 'syz.2.2291': attribute type 9 has an invalid length. [ 300.695745][T14140] netlink: 'syz.0.2297': attribute type 4 has an invalid length. [ 300.845779][T14140] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 301.378161][T14175] netlink: 'syz.2.2304': attribute type 10 has an invalid length. [ 301.436464][T14177] netem: change failed [ 301.567257][T14172] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2303'. [ 301.911255][T14203] bond8: (slave 26±ÿª¨úrBº“): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 301.959610][T14203] bond8: (slave 26±ÿª¨úrBº“): making interface the new active one [ 301.970564][T14203] bond8: (slave 26±ÿª¨úrBº“): Enslaving as an active interface with an up link [ 301.996382][T14203] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 302.438228][T14224] netlink: 'syz.4.2313': attribute type 2 has an invalid length. [ 302.467145][T14224] netlink: 'syz.4.2313': attribute type 2 has an invalid length. [ 302.627378][T14233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2314'. [ 302.700377][T14235] dvmrp0: left allmulticast mode [ 302.713543][T14235] syz_tun: left allmulticast mode [ 302.770206][T14237] tipc: New replicast peer: 255.255.255.255 [ 302.803330][T14237] tipc: Enabled bearer , priority 10 [ 303.054684][T14250] xt_hashlimit: size too large, truncated to 1048576 [ 303.070554][T14248] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2321'. [ 303.868909][T14287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2328'. [ 303.949311][T14287] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2328'. [ 303.982826][T14290] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2327'. [ 304.005923][T14287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2328'. [ 304.006887][T14290] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2327'. [ 304.395002][T14303] IPVS: set_ctl: invalid protocol: 60 100.1.1.1:20002 [ 304.414871][T14312] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 304.735122][T14326] bond6: entered allmulticast mode [ 305.101901][T14346] __nla_validate_parse: 2 callbacks suppressed [ 305.101922][T14346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2341'. [ 305.184366][T14346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2341'. [ 305.576703][T14363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2344'. [ 305.799832][T14374] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 305.807196][T14374] IPv6: NLM_F_CREATE should be set when creating new route [ 305.814557][T14374] IPv6: NLM_F_CREATE should be set when creating new route [ 306.044125][T14382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2354'. [ 306.139969][T14389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2356'. [ 306.190463][T14389] vlan0 (unregistering): left allmulticast mode [ 306.197972][T14389] bridge0 (unregistering): left allmulticast mode [ 317.343798][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.352905][ T1315] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 337.821781][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 362.084678][T14417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2358'. [ 362.113783][T14418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2358'. [ 362.205689][T14427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2363'. [ 362.398317][T14438] openvswitch: netlink: Missing key (keys=40, expected=80) [ 362.558739][T14447] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 363.075946][T14457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.103881][T14417] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.117472][T14417] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.197558][T14460] netlink: 'syz.3.2370': attribute type 2 has an invalid length. [ 363.210857][T14460] IPVS: Unknown mcast interface: vcan0 [ 363.429785][T14417] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.440342][T14417] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.613595][T14417] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.633491][T14417] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.741315][T14417] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.759628][T14417] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.148192][ T135] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.176985][ T135] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.194002][T14504] netlink: 'syz.4.2383': attribute type 1 has an invalid length. [ 364.231903][T14506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.259217][T13187] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.272835][T13187] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.310715][T14504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.403273][T14507] bond0: (slave veth7): Enslaving as an active interface with a down link [ 364.484825][ T1171] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.514866][ T1171] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.603430][ T1171] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.619750][ T1171] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.841341][T14529] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2391'. [ 365.353265][T14549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2399'. [ 365.386195][T14549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2399'. [ 365.566654][T14562] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2401'. [ 365.662686][T14564] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2401'. [ 365.833549][T14577] netlink: 'syz.2.2405': attribute type 1 has an invalid length. [ 365.966501][T14586] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2407'. [ 366.267776][T14603] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2413'. [ 367.246105][T14643] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 367.679422][T14671] netlink: 'syz.3.2436': attribute type 1 has an invalid length. [ 367.799626][T14671] 8021q: adding VLAN 0 to HW filter on device bond12 [ 367.817041][T14675] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 368.000566][T14693] bond0: option miimon: invalid value (18446744071829782528) [ 368.067450][T14693] bond0: option miimon: allowed values 0 - 2147483647 [ 368.356127][T14711] __nla_validate_parse: 67 callbacks suppressed [ 368.356149][T14711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2446'. [ 368.584704][T14722] netlink: 'syz.3.2450': attribute type 1 has an invalid length. [ 368.646441][T14727] netlink: 'syz.3.2450': attribute type 2 has an invalid length. [ 368.777768][T14722] 8021q: adding VLAN 0 to HW filter on device bond13 [ 368.799545][T14719] netlink: 'syz.1.2448': attribute type 5 has an invalid length. [ 368.808424][T14736] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 368.860167][T14727] bond13: (slave geneve2): making interface the new active one [ 368.871604][T14727] bond13: (slave geneve2): Enslaving as an active interface with an up link [ 368.930790][T14736] pimreg3: entered allmulticast mode [ 368.945237][ T135] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 368.962708][ T135] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 369.035132][ T135] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 369.058234][ T135] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 369.170071][T14752] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2458'. [ 369.215635][T14752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2458'. [ 369.228940][T14755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2460'. [ 369.314309][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2461'. [ 369.337240][T14762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2462'. [ 369.671126][T14783] netlink: 'syz.0.2469': attribute type 1 has an invalid length. [ 369.695123][T14784] netlink: 'syz.0.2469': attribute type 1 has an invalid length. [ 369.710391][T14787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2470'. [ 369.795031][T14783] 8021q: adding VLAN 0 to HW filter on device bond9 [ 369.850935][T14797] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2473'. [ 370.111630][T14817] netlink: 'syz.4.2478': attribute type 1 has an invalid length. [ 370.234579][T14817] 8021q: adding VLAN 0 to HW filter on device bond7 [ 370.260044][T14830] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2478'. [ 370.340846][T14817] bond7: entered promiscuous mode [ 370.347027][T14817] bond7: entered allmulticast mode [ 370.968195][T14854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2486'. [ 371.597959][T14886] netlink: 'syz.0.2496': attribute type 11 has an invalid length. [ 371.889527][T14901] bond9 (unregistering): Released all slaves [ 371.997476][T14908] xt_hashlimit: size too large, truncated to 1048576 [ 372.150427][T14912] bridge_slave_0 (unregistering): left allmulticast mode [ 372.181737][T14912] bridge_slave_0 (unregistering): left promiscuous mode [ 372.205948][T14912] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.260386][T14917] netlink: 'syz.3.2503': attribute type 16 has an invalid length. [ 372.758442][T14937] netlink: 'syz.1.2512': attribute type 5 has an invalid length. [ 372.815414][T14937] geneve3: entered promiscuous mode [ 372.831881][T14937] geneve3: entered allmulticast mode [ 372.899256][T13189] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 372.919304][T13189] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 372.964856][T13189] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 373.000736][T13189] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 373.187255][T14955] macvtap1: entered promiscuous mode [ 373.223509][T14955] vlan0: entered promiscuous mode [ 373.262953][T14955] macvtap1: entered allmulticast mode [ 373.297268][T14955] vlan0: entered allmulticast mode [ 373.318269][T14955] veth0_vlan: entered allmulticast mode [ 374.383696][T14982] sctp: [Deprecated]: syz.0.2522 (pid 14982) Use of int in max_burst socket option. [ 374.383696][T14982] Use struct sctp_assoc_value instead [ 374.437241][T14988] __nla_validate_parse: 14 callbacks suppressed [ 374.437261][T14988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2523'. [ 374.453401][T14987] netlink: 'syz.2.2523': attribute type 2 has an invalid length. [ 374.852561][T15005] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2531'. [ 375.153474][T15016] netlink: 'syz.3.2535': attribute type 1 has an invalid length. [ 375.195814][T15019] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 375.386037][T15024] syzkaller1: entered promiscuous mode [ 375.395651][T15024] syzkaller1: entered allmulticast mode [ 375.827125][T15050] bond14: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 375.846227][T15050] bond14 (unregistering): Released all slaves [ 376.639776][T15098] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2558'. [ 376.666801][T15099] ipt_REJECT: TCP_RESET invalid for non-tcp [ 376.833053][T15105] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2561'. [ 378.442597][T15111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2563'. [ 378.463158][T15111] gtp1: entered promiscuous mode [ 378.469658][T15112] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2564'. [ 378.479332][T15111] gtp1: entered allmulticast mode [ 378.577974][T15115] batadv_slave_1: entered promiscuous mode [ 378.676423][T15119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2566'. [ 378.785196][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.794248][ T1315] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 378.933876][T15135] openvswitch: netlink: Flow key attr not present in new flow. [ 378.976246][T15135] netlink: 'syz.2.2571': attribute type 1 has an invalid length. [ 378.991519][T15135] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2571'. [ 379.011681][T15135] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2571'. [ 379.036431][T15135] netlink: 658 bytes leftover after parsing attributes in process `syz.2.2571'. [ 379.209559][T15144] netlink: 'syz.3.2576': attribute type 11 has an invalid length. [ 379.553044][T15165] __nla_validate_parse: 2 callbacks suppressed [ 379.553067][T15165] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2583'. [ 379.591117][T15164] netlink: 'syz.2.2583': attribute type 1 has an invalid length. [ 379.611829][T15164] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2583'. [ 379.637497][T15165] netlink: 'syz.2.2583': attribute type 1 has an invalid length. [ 379.670042][T15169] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2584'. [ 379.683472][T15165] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2583'. [ 379.889239][T15178] netem: change failed [ 380.018425][T15186] bridge0: port 1(veth1_to_bridge) entered blocking state [ 380.029266][T15186] bridge0: port 1(veth1_to_bridge) entered disabled state [ 380.054550][T15186] veth1_to_bridge: entered allmulticast mode [ 380.095876][T15186] veth1_to_bridge: entered promiscuous mode [ 380.124109][T15186] bridge0: port 1(veth1_to_bridge) entered blocking state [ 380.131476][T15186] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 380.187052][T15193] nbd: must specify a size in bytes for the device [ 380.278786][T15195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.342625][T15200] veth0: entered promiscuous mode [ 380.439570][T15200] veth0: left promiscuous mode [ 380.457355][T15210] netlink: 'syz.3.2598': attribute type 2 has an invalid length. [ 380.480040][T15210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2598'. [ 380.720143][T15222] gretap1: left allmulticast mode [ 380.740654][T15222] bridge1: left allmulticast mode [ 380.788012][T15222] veth3: left allmulticast mode [ 380.794530][T15222] vlan2: left allmulticast mode [ 380.814588][T15222] gretap0: left allmulticast mode [ 380.822312][T15222] macvtap1: left allmulticast mode [ 380.835407][T15222] veth1_vlan: left allmulticast mode [ 380.846795][T15222] ipvlan3: left allmulticast mode [ 380.852032][T15222] batadv_slave_1: left allmulticast mode [ 380.938187][T15234] netlink: 'syz.3.2602': attribute type 21 has an invalid length. [ 380.970657][T15236] IPv6: NLM_F_CREATE should be specified when creating new route [ 380.989833][T15236] netlink: 'syz.4.2603': attribute type 1 has an invalid length. [ 381.280164][T15253] netlink: 'syz.0.2608': attribute type 1 has an invalid length. [ 381.292696][T15253] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2608'. [ 381.312083][T15253] netlink: 'syz.0.2608': attribute type 1 has an invalid length. [ 381.346915][T15253] netlink: 'syz.0.2608': attribute type 8 has an invalid length. [ 381.384560][T15262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2608'. [ 381.393749][T15253] netlink: 606 bytes leftover after parsing attributes in process `syz.0.2608'. [ 381.393779][T15253] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2608'. [ 381.647134][T15275] netlink: 'syz.2.2611': attribute type 1 has an invalid length. [ 381.845973][T15283] pimreg: entered allmulticast mode [ 381.867746][T15280] tipc: Enabled bearer , priority 0 [ 381.875774][T15283] pimreg: left allmulticast mode [ 381.959140][T15280] syzkaller0: entered promiscuous mode [ 381.964939][T15280] syzkaller0: entered allmulticast mode [ 381.972176][T15280] tipc: Resetting bearer [ 381.990411][T15288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2619'. [ 382.155515][T15298] netlink: 'syz.2.2621': attribute type 3 has an invalid length. [ 382.349906][T15309] xt_hashlimit: invalid rate [ 382.685733][T15278] tipc: Resetting bearer [ 384.759107][T15278] tipc: Disabling bearer [ 384.776586][T15352] veth1_to_bridge: left allmulticast mode [ 384.791902][T15352] veth1_to_bridge: left promiscuous mode [ 384.805733][T15352] bridge0: port 1(veth1_to_bridge) entered disabled state [ 385.218277][T15368] __nla_validate_parse: 4 callbacks suppressed [ 385.218295][T15368] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2644'. [ 385.250100][T15366] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2643'. [ 385.298229][T15366] validate_nla: 3 callbacks suppressed [ 385.298249][T15366] netlink: 'syz.2.2643': attribute type 3 has an invalid length. [ 385.347004][T15366] netlink: 'syz.2.2643': attribute type 1 has an invalid length. [ 385.362197][T15366] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2643'. [ 385.433278][T15376] sock: sock_timestamping_bind_phc: sock not bind to device [ 385.627053][T15381] xt_TPROXY: Can be used only with -p tcp or -p udp [ 385.724991][T15390] netlink: 'syz.0.2650': attribute type 1 has an invalid length. [ 386.161121][T15407] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2653'. [ 386.313087][T15409] netlink: 'syz.4.2654': attribute type 23 has an invalid length. [ 386.373546][T15411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2655'. [ 386.452605][T15415] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2656'. [ 386.470893][T15415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2656'. [ 386.601125][T15418] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2657'. [ 387.526699][T15472] netlink: 'syz.2.2674': attribute type 1 has an invalid length. [ 387.611028][T15476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.863810][T15488] openvswitch: netlink: IP tunnel dst address not specified [ 387.881362][T15488] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2678'. [ 387.917552][T15488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2678'. [ 387.937781][T15488] netlink: 'syz.4.2678': attribute type 30 has an invalid length. [ 387.968738][T15494] netlink: 'syz.4.2678': attribute type 30 has an invalid length. [ 388.691306][ T5642] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 388.705269][ T5642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 388.715114][ T5642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 388.724991][ T5642] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 388.734331][ T5642] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 388.762953][ T5637] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 388.771998][ T5637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 388.780222][ T5637] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 388.797153][ T5637] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 388.811079][ T5637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 389.635619][T15530] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 389.643272][T15530] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 389.681378][T15568] A link change request failed with some changes committed already. Interface ip6tnl1 may have been left with an inconsistent configuration, please check. [ 390.317718][T15601] __nla_validate_parse: 12 callbacks suppressed [ 390.317742][T15601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2710'. [ 390.461810][T15608] netlink: 'syz.4.2710': attribute type 1 has an invalid length. [ 390.776936][T15622] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2713'. [ 391.093123][T15640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2719'. [ 391.256140][T15647] netlink: 'syz.3.2720': attribute type 1 has an invalid length. [ 391.336871][T15653] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2722'. [ 391.368125][T15650] IPVS: sed: FWM 3 0x00000003 - no destination available [ 391.674421][T15662] nbd: must specify at least one socket [ 391.750467][T15672] tipc: Failed to remove unknown binding: 66,0,0/663183792:1930395045/1930395046 [ 391.781925][T15672] tipc: Failed to remove unknown binding: 66,0,0/663183792:1930395045/1930395046 [ 391.918460][T15527] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.926061][T15527] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.933904][T15527] bridge_slave_0: entered allmulticast mode [ 391.942455][T15527] bridge_slave_0: entered promiscuous mode [ 391.952407][T15527] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.959791][T15527] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.968947][T15527] bridge_slave_1: entered allmulticast mode [ 391.977297][T15527] bridge_slave_1: entered promiscuous mode [ 392.030061][T15527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.063236][T15527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.198138][T15527] team0: Port device team_slave_0 added [ 392.257416][ T30] audit: type=1804 audit(1779749316.501:7): pid=15686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2734" name="/newroot/551/cgroup.controllers" dev="tmpfs" ino=2834 res=1 errno=0 [ 392.281328][T15527] team0: Port device team_slave_1 added [ 392.309187][ T30] audit: type=1800 audit(1779749316.501:8): pid=15686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2734" name="cgroup.controllers" dev="tmpfs" ino=2834 res=0 errno=0 [ 392.418925][T15527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.450207][T15527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.483989][T15527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.547916][T15694] netlink: 'syz.2.2736': attribute type 1 has an invalid length. [ 392.557467][T15694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2736'. [ 392.574163][T15527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.581803][T15694] netlink: 'syz.2.2736': attribute type 1 has an invalid length. [ 392.610478][T15527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.678930][T15527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.070159][T15527] hsr_slave_0: entered promiscuous mode [ 393.107808][T15527] hsr_slave_1: entered promiscuous mode [ 393.131201][T15527] debugfs: 'hsr0' already exists in 'hsr' [ 393.151167][T15527] Cannot create hsr debugfs directory [ 394.149329][T15759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2752'. [ 394.506184][T15527] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 394.569346][T15527] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 394.597872][T15527] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 394.650129][T15527] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 394.668969][T15527] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 394.696856][T15527] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 394.712761][T15527] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 394.738916][T15527] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 394.837067][T15770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2753'. [ 395.164458][T15783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.228768][T15787] netlink: 71 bytes leftover after parsing attributes in process `syz.0.2758'. [ 395.296228][T15527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.366887][T15527] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.417648][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.424932][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.522674][T13187] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.529946][T13187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.585557][T15837] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 396.990296][T15851] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2771'. [ 397.314036][T15527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.334702][T15864] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2775'. [ 397.419975][T15861] syzkaller1: entered promiscuous mode [ 397.432825][T15861] syzkaller1: entered allmulticast mode [ 397.967141][T15885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2779'. [ 398.013189][T15885] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2779'. [ 398.231350][T15527] veth0_vlan: entered promiscuous mode [ 398.274067][T15527] veth1_vlan: entered promiscuous mode [ 398.394459][T15527] veth0_macvtap: entered promiscuous mode [ 398.434529][T15527] veth1_macvtap: entered promiscuous mode [ 398.440562][T15896] netlink: 'syz.4.2784': attribute type 23 has an invalid length. [ 398.466584][T15894] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2783'. [ 398.502709][T15894] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2783'. [ 398.515292][T15527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.553102][T15527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.616953][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.655555][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.690274][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.710036][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.201253][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.231582][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.293988][T15918] netlink: 'syz.3.2788': attribute type 9 has an invalid length. [ 399.316141][T15916] netlink: 'syz.3.2788': attribute type 6 has an invalid length. [ 399.326130][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.342619][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.352478][T15916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.482445][T15921] netlink: 'syz.4.2784': attribute type 23 has an invalid length. [ 400.057172][T15946] xt_TCPMSS: Only works on TCP SYN packets [ 400.126854][T15953] x_tables: duplicate underflow at hook 1 [ 400.291049][T15958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2798'. [ 400.388300][T15962] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 400.518680][T15963] vlan2: entered promiscuous mode [ 400.538423][T15963] bridge0: entered promiscuous mode [ 400.677365][T15968] ±ÿª¨úrBº“: renamed from lo (while UP) [ 400.746223][T15972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2803'. [ 400.821361][T15972] tipc: Enabled bearer , priority 10 [ 400.852326][T15977] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2804'. [ 400.910873][T15985] lo speed is unknown, defaulting to 1000 [ 400.937324][T15985] lo speed is unknown, defaulting to 1000 [ 401.010182][T15986] »»»»»»: renamed from lo (while UP) [ 401.095712][T15985] »»»»»» speed is unknown, defaulting to 1000 [ 401.144950][T15985] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 401.160041][T15985] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 401.177640][T15985] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 401.194611][T15985] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 401.237522][T15985] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 401.287634][T15990] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 401.339669][T15985] »»»»»» speed is unknown, defaulting to 1000 [ 401.376231][T15985] »»»»»» speed is unknown, defaulting to 1000 [ 401.399472][T15985] »»»»»» speed is unknown, defaulting to 1000 [ 401.442179][T15985] »»»»»» speed is unknown, defaulting to 1000 [ 401.484529][T15985] »»»»»» speed is unknown, defaulting to 1000 [ 401.526716][T15985] »»»»»» speed is unknown, defaulting to 1000 [ 401.569105][T16005] openvswitch: netlink: Key 26 has unexpected len 0 expected 16 [ 402.065976][T16023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2814'. [ 402.397049][ T5637] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 402.416925][ T5637] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 402.428047][ T5637] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 402.442856][ T5637] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 402.455685][ T5637] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 402.846502][T16041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.028770][T16055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2819'. [ 403.142309][T16057] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 403.368555][T16064] netlink: 'syz.5.2822': attribute type 2 has an invalid length. [ 403.412004][T16064] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2822'. [ 403.501045][ T5758] »»»»»» speed is unknown, defaulting to 1000 [ 403.750928][T16031] »»»»»» speed is unknown, defaulting to 1000 [ 403.881950][T16080] sctp: [Deprecated]: syz.5.2826 (pid 16080) Use of int in maxseg socket option. [ 403.881950][T16080] Use struct sctp_assoc_value instead [ 404.152346][T16089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2829'. [ 404.161682][T16089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2829'. [ 404.209592][T16089] netdevsim netdevsim2 : renamed from netdevsim0 [ 404.312526][T16093] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2828'. [ 404.355978][T16093] xt_l2tp: invalid flags combination: 8 [ 404.471774][T16098] tipc: Failed to remove unknown binding: 66,1,1/0:2319130301/2319130303 [ 404.546160][ T5637] Bluetooth: hci6: command tx timeout [ 404.705752][T16031] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.718828][T16031] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.726593][T16031] bridge_slave_0: entered allmulticast mode [ 404.739413][T16031] bridge_slave_0: entered promiscuous mode [ 404.750541][T16031] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.758205][T16031] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.765624][T16031] bridge_slave_1: entered allmulticast mode [ 404.773711][T16031] bridge_slave_1: entered promiscuous mode [ 404.792496][T16108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2832'. [ 404.807574][T16108] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2832'. [ 404.809630][T16105] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 404.818240][T16108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2832'. [ 404.852772][T16108] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2832'. [ 404.872737][T16105] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 404.927529][T16031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.961383][T16031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.153247][T16031] team0: Port device team_slave_0 added [ 405.159537][T16124] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 405.188903][T16031] team0: Port device team_slave_1 added [ 405.316571][T16031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.335205][T16031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.394454][T16031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.433533][T16031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.462056][T16031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.533099][T16031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.610423][T16139] x_tables: duplicate underflow at hook 3 [ 405.722268][T16141] netlink: 'syz.3.2841': attribute type 9 has an invalid length. [ 405.768975][T16031] hsr_slave_0: entered promiscuous mode [ 405.783653][T16031] hsr_slave_1: entered promiscuous mode [ 405.790667][T16031] debugfs: 'hsr0' already exists in 'hsr' [ 405.797151][T16031] Cannot create hsr debugfs directory [ 406.473453][T16168] IPVS: set_ctl: invalid protocol: 189 0.0.0.0:0 [ 406.615041][T16172] netlink: 'syz.4.2854': attribute type 10 has an invalid length. [ 406.632901][ T5637] Bluetooth: hci6: command tx timeout [ 406.710684][T16031] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.743278][T16031] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.773905][T16170] IPVS: Unknown mcast interface: vcan0 [ 406.980613][T16031] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.997931][T16186] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 407.021188][T16031] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.279845][T16031] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.314822][T16031] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.359828][T16200] team0: Cannot enslave team device to itself [ 407.475720][T16031] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.522846][T16031] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.094579][T16230] __nla_validate_parse: 4 callbacks suppressed [ 408.094601][T16230] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2870'. [ 408.160779][T16031] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 408.197902][T16031] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 408.289843][T16031] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 408.313922][T16031] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 408.328114][T16031] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 408.366957][T16031] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 408.393595][T16031] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 408.414031][T16031] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 408.575215][T16247] vlan3: entered promiscuous mode [ 408.580501][T16247] geneve1: entered promiscuous mode [ 408.586640][T16247] vlan3: entered allmulticast mode [ 408.592935][T16247] geneve1: entered allmulticast mode [ 408.701933][ T5642] Bluetooth: hci6: command tx timeout [ 408.799140][T16249] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 408.835559][T16031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.846149][T16258] netlink: 'syz.2.2877': attribute type 1 has an invalid length. [ 408.951211][T16031] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.024607][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.031869][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.094875][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.102644][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.795343][T16290] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2887'. [ 409.849314][T16290] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 409.861960][T16290] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 409.889448][T16290] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2887'. [ 409.941647][T16295] tipc: Started in network mode [ 409.966877][T16295] tipc: Node identity 32c6b6200f49, cluster identity 4711 [ 410.000541][T16295] tipc: Enabled bearer , priority 0 [ 410.046780][T16298] syzkaller0: entered promiscuous mode [ 410.082696][T16298] syzkaller0: entered allmulticast mode [ 410.090506][T16299] xt_limit: Overflow, try lower: 604147548/4200216962 [ 410.117720][T16299] xt_limit: Overflow, try lower: 604147548/4200216962 [ 410.434866][T16311] syzkaller1: entered promiscuous mode [ 410.447536][T16311] syzkaller1: entered allmulticast mode [ 410.669744][T16325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2896'. [ 410.739510][T16031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.783380][ T5642] Bluetooth: hci6: command 0x0419 tx timeout [ 410.820238][T16294] tipc: Resetting bearer [ 410.864176][T16325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2896'. [ 410.888130][T16294] tipc: Disabling bearer [ 410.999927][T16334] netlink: 'syz.2.2898': attribute type 15 has an invalid length. [ 411.057790][T16031] veth0_vlan: entered promiscuous mode [ 411.088706][T16031] veth1_vlan: entered promiscuous mode [ 411.219247][T16031] veth0_macvtap: entered promiscuous mode [ 411.266130][T16031] veth1_macvtap: entered promiscuous mode [ 411.321348][T16031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.366866][T16031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.407436][T13188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.447857][T13188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.476191][T13188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.489696][T16345] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2902'. [ 411.503873][T16347] tipc: Enabled bearer , priority 14 [ 411.518757][T13188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.529601][T16345] openvswitch: netlink: Flow actions attr not present in new flow. [ 412.090690][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.139722][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.296013][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.332837][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.599691][T16383] syzkaller1: entered promiscuous mode [ 412.626370][T16383] syzkaller1: entered allmulticast mode [ 412.828710][T16397] Cannot find set identified by id 0 to match [ 412.862199][ T5637] Bluetooth: hci6: command 0x0419 tx timeout [ 412.984502][T16399] ipvlan1: entered allmulticast mode [ 413.035954][T16399] batadv_slave_1: entered allmulticast mode [ 413.090014][T16399] batman_adv: batadv0: Adding interface: ipvlan1 [ 413.112673][T16399] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.170801][T16399] batman_adv: batadv0: Interface activated: ipvlan1 [ 413.588677][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 413.604857][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 413.614162][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 413.624845][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 413.634385][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 413.766099][T16445] netlink: 'syz.2.2924': attribute type 12 has an invalid length. [ 414.008110][T16452] netlink: 284 bytes leftover after parsing attributes in process `syz.5.2926'. [ 414.518906][T16414] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.533124][T16414] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 414.668392][T16471] syz_tun: entered allmulticast mode [ 414.793716][T16472] pim6reg: entered allmulticast mode [ 415.197963][T16414] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.209519][T16414] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 415.241190][T16494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2936'. [ 415.272204][T16493] netlink: 65011 bytes leftover after parsing attributes in process `syz.2.2936'. [ 415.417328][T16414] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.437757][T16414] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 415.484202][T16502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2938'. [ 415.509419][T16499] syzkaller0: entered promiscuous mode [ 415.527562][T16499] syzkaller0: entered allmulticast mode [ 415.592363][T16414] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.639086][T16414] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 415.663054][ T5642] Bluetooth: hci4: command tx timeout [ 415.842407][T16499] tipc: Enabled bearer , priority 0 [ 415.912668][T16522] x_tables: duplicate underflow at hook 2 [ 415.923674][T16498] tipc: Resetting bearer [ 415.965437][T16498] tipc: Disabling bearer [ 415.971755][T16525] x_tables: duplicate underflow at hook 2 [ 415.994770][T16437] »»»»»» speed is unknown, defaulting to 1000 [ 416.284083][T13189] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.433933][T16413] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.443983][T16413] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.497995][T16544] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2951'. [ 416.535590][T16544] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2951'. [ 416.560223][T13189] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.697726][T16553] netlink: 'syz.4.2954': attribute type 3 has an invalid length. [ 416.717664][T16553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2954'. [ 416.729363][T16414] bridge_slave_1: left allmulticast mode [ 416.746531][T16414] bridge_slave_1: left promiscuous mode [ 416.762578][T16414] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.001117][T16573] netlink: 'syz.2.2957': attribute type 62 has an invalid length. [ 417.118220][T16580] netlink: 5272 bytes leftover after parsing attributes in process `syz.2.2958'. [ 417.441388][T16414] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 417.530209][T16414] bond1 (unregistering): (slave vti0): Releasing backup interface [ 417.538379][T16414] vti0 (unregistering): left promiscuous mode [ 417.637550][T16414] bond9 (unregistering): (slave gretap2): Releasing active interface [ 417.668404][T16414] bond13 (unregistering): (slave geneve2): Releasing active interface [ 417.741688][ T5642] Bluetooth: hci4: command tx timeout [ 417.877274][T16414] bond10 (unregistering): (slave bridge4): Releasing backup interface [ 417.885936][T16414] bridge4 (unregistering): left promiscuous mode [ 417.892502][T16414] bridge4 (unregistering): left allmulticast mode [ 418.834996][T16414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.847978][T16414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.861039][T16414] bond0 (unregistering): Released all slaves [ 418.878674][T16414] bond1 (unregistering): Released all slaves [ 418.899642][T16414] bond2 (unregistering): (slave veth3): Releasing active interface [ 418.912384][T16414] bond2 (unregistering): Released all slaves [ 418.932737][T16414] bond3 (unregistering): Released all slaves [ 418.950639][T16414] bond4 (unregistering): (slave veth5): Releasing active interface [ 418.960897][T16414] bond4 (unregistering): Released all slaves [ 418.984528][T16414] bond5 (unregistering): Released all slaves [ 419.001140][T16414] bond6 (unregistering): Released all slaves [ 419.018685][T16414] bond7 (unregistering): Released all slaves [ 419.043006][T16414] bond8 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 419.054734][T16414] bond8 (unregistering): Released all slaves [ 419.071066][T16414] bond9 (unregistering): Released all slaves [ 419.092690][T16414] bond10 (unregistering): Released all slaves [ 419.110147][T16414] bond11 (unregistering): Released all slaves [ 419.134558][T16414] bond12 (unregistering): Released all slaves [ 419.151989][T16414] bond13 (unregistering): Released all slaves [ 419.195414][T16553] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2954'. [ 419.225798][T16581] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 419.336139][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 419.506192][T16414] tipc: Left network mode [ 419.799291][T16610] xt_hashlimit: size too large, truncated to 1048576 [ 419.824072][ T5642] Bluetooth: hci4: command tx timeout [ 420.162374][T16414] IPVS: stopping master sync thread 11856 ... [ 420.349774][T16639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2967'. [ 420.387850][T16639] netlink: 'syz.2.2967': attribute type 5 has an invalid length. [ 420.416037][T16639] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2967'. [ 420.837194][T16437] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.875021][T16437] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.896117][T16437] bridge_slave_0: entered allmulticast mode [ 420.916001][T16437] bridge_slave_0: entered promiscuous mode [ 420.937824][T16437] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.965681][T16437] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.982163][T16437] bridge_slave_1: entered allmulticast mode [ 421.009502][T16437] bridge_slave_1: entered promiscuous mode [ 421.384689][T16437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.426937][T16669] netlink: 'syz.4.2972': attribute type 4 has an invalid length. [ 421.470775][T16669] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2972'. [ 421.508712][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 421.535070][T16437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.777337][T16437] team0: Port device team_slave_0 added [ 421.825876][T16437] team0: Port device team_slave_1 added [ 421.904772][ T5642] Bluetooth: hci4: command tx timeout [ 422.076589][T16437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.101232][T16437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.159542][T16437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.210744][T16437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.237932][T16437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.324480][T16437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.525933][T16691] syzkaller0: entered promiscuous mode [ 422.557411][T16691] syzkaller0: entered allmulticast mode [ 422.615864][T16715] pimreg: entered allmulticast mode [ 422.816754][T16740] netlink: 'syz.0.2983': attribute type 2 has an invalid length. [ 422.829964][T16740] netlink: 'syz.0.2983': attribute type 1 has an invalid length. [ 425.160492][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 425.211333][T16437] hsr_slave_0: entered promiscuous mode [ 425.230206][T16437] hsr_slave_1: entered promiscuous mode [ 425.241362][T16437] debugfs: 'hsr0' already exists in 'hsr' [ 425.247412][T16437] Cannot create hsr debugfs directory [ 425.510406][T16756] netlink: 'syz.2.2987': attribute type 2 has an invalid length. [ 425.549716][T16756] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2987'. [ 425.600384][T16761] netlink: 'syz.2.2987': attribute type 2 has an invalid length. [ 425.627305][ T30] audit: type=1804 audit(1779749349.871:9): pid=16758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2988" name="/newroot/19/cgroup.controllers" dev="tmpfs" ino=115 res=1 errno=0 [ 425.647781][T16761] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2987'. [ 425.654433][T16762] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2989'. [ 425.672629][ T30] audit: type=1800 audit(1779749349.871:10): pid=16758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2988" name="cgroup.controllers" dev="tmpfs" ino=115 res=0 errno=0 [ 426.397230][T16414] hsr_slave_0: left promiscuous mode [ 426.426139][T16791] ieee802154 phy1 wpan1: encryption failed: -22 [ 426.436326][T16414] hsr_slave_1: left promiscuous mode [ 426.442244][T16790] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2996'. [ 426.442442][T16790] netlink: Conntrack attr has 4 unknown bytes [ 426.620746][T16801] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2999'. [ 426.653710][T16414] veth1_macvtap: left promiscuous mode [ 426.664630][T16414] veth1_vlan: left promiscuous mode [ 426.670101][T16414] veth0_vlan: left promiscuous mode [ 427.197247][T16414] team0 (unregistering): Port device team_slave_1 removed [ 427.217127][T16414] team0 (unregistering): Port device team_slave_0 removed [ 427.392546][T16786] lo: MTU too low for tipc bearer [ 427.398135][T16786] tipc: Enabling of bearer rejected, failed to enable media [ 427.447643][T16805] bond1: entered promiscuous mode [ 427.455803][T16805] bond1: entered allmulticast mode [ 427.481120][T16809] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2997'. [ 427.496472][T16809] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2997'. [ 427.566682][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 427.804991][T16834] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3006'. [ 427.920108][T16437] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.134352][T16850] xt_HMARK: spi-set and port-set can't be combined [ 428.397946][T16437] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.484114][T16856] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20002 [ 428.485126][T16414] IPVS: stop unused estimator thread 0... [ 428.643906][T16877] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20001 [ 428.678348][T16437] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.153071][T16437] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.178440][T16890] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3016'. [ 429.212422][T16898] xt_TCPMSS: Only works on TCP SYN packets [ 429.251794][T16890] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3016'. [ 429.692552][T16898] tipc: Enabling of bearer rejected, failed to enable media [ 429.735452][T16905] syzkaller1: entered promiscuous mode [ 429.760841][T16905] syzkaller1: entered allmulticast mode [ 430.322244][T16951] netlink: 'syz.0.3028': attribute type 8 has an invalid length. [ 430.334614][T16945] tipc: Resetting bearer [ 430.409503][T16945] tipc: Disabling bearer [ 430.563903][T16964] __nla_validate_parse: 3 callbacks suppressed [ 430.563928][T16964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3029'. [ 430.688620][T16437] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 430.692386][T16951] netlink: 'syz.0.3028': attribute type 8 has an invalid length. [ 430.757139][T16437] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 430.796564][T16437] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 430.835902][T16437] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 430.857811][T16437] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 430.866617][T16951] netlink: 'syz.0.3028': attribute type 8 has an invalid length. [ 430.876101][T16972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3031'. [ 430.893070][T16437] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 430.911045][T16437] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 430.929792][T16437] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 430.970667][T16951] netlink: 'syz.0.3028': attribute type 8 has an invalid length. [ 431.032090][T16951] netlink: 'syz.0.3028': attribute type 8 has an invalid length. [ 431.104043][T16951] netlink: 'syz.0.3028': attribute type 8 has an invalid length. [ 431.187628][T16992] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3033'. [ 431.246982][T16994] siw: device registration error -23 [ 431.298773][T16994] »»»»»»: renamed from lo (while UP) [ 431.498994][T16437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.547680][T17005] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 431.589134][T16437] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.628170][T16413] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.635495][T16413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.686254][T16414] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.693547][T16414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.580757][T17046] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3042'. [ 432.738148][T17045] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3041'. [ 433.072756][T16437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.144931][T17070] syzkaller0: entered promiscuous mode [ 433.163484][T17070] syzkaller0: entered allmulticast mode [ 433.336577][T16437] veth0_vlan: entered promiscuous mode [ 433.386755][T16437] veth1_vlan: entered promiscuous mode [ 433.541329][T16437] veth0_macvtap: entered promiscuous mode [ 433.591971][T16437] veth1_macvtap: entered promiscuous mode [ 433.646998][T16437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.713173][T16437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.774476][T16408] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.813435][T16408] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.870488][T16408] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.965230][T17092] Unsupported ieee802154 address type: 0 [ 434.000068][T16408] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.108555][T17092] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3051'. [ 434.140415][T17099] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 434.140415][T17099] Please contact the netfilter-devel mailing list or update your nftables rules. [ 434.398803][T16408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.432965][T16408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.603064][T17113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.734964][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.759132][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.166493][T17138] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2917'. [ 435.565832][T17154] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3066'. [ 435.796832][ T5637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 435.816854][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 435.826531][ T5637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 435.838841][ T5637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 435.852623][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 437.227912][T17167] »»»»»» speed is unknown, defaulting to 1000 [ 437.516620][T17167] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.524114][T17167] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.531720][T17167] bridge_slave_0: entered allmulticast mode [ 437.539937][T17167] bridge_slave_0: entered promiscuous mode [ 437.548484][T17167] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.556048][T17167] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.563684][T17167] bridge_slave_1: entered allmulticast mode [ 437.571072][T17167] bridge_slave_1: entered promiscuous mode [ 437.604792][T17167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.618250][T17167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.652293][T17167] team0: Port device team_slave_0 added [ 437.660435][T17167] team0: Port device team_slave_1 added [ 437.693425][T17167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.700423][T17167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.727936][T17167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.741076][T17167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.749323][T17167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.775973][T17167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.828385][T17167] hsr_slave_0: entered promiscuous mode [ 437.835157][T17167] hsr_slave_1: entered promiscuous mode [ 437.841625][T17167] debugfs: 'hsr0' already exists in 'hsr' [ 437.847411][T17167] Cannot create hsr debugfs directory [ 437.902475][ T5637] Bluetooth: hci3: command tx timeout [ 438.020399][T17167] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.035277][T17167] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.120175][T17167] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.131634][T17167] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.214060][T17167] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.226474][T17167] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.319740][T17167] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.331870][T17167] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.481867][T17151] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 438.678568][T17167] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 438.705303][T17167] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 438.749727][T17167] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 438.787584][T17167] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 438.813641][T17167] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 438.882135][T17167] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 438.907135][T17167] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 438.926961][T17236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3075'. [ 438.953085][T17167] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 439.030808][T17236] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3075'. [ 439.358610][T17268] syzkaller1: entered promiscuous mode [ 439.378583][T17268] syzkaller1: entered allmulticast mode [ 439.437898][T17167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.531734][T17167] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.549930][T17276] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3083'. [ 439.580303][T17276] netlink: 21 bytes leftover after parsing attributes in process `syz.3.3083'. [ 439.607890][T17276] netlink: 21 bytes leftover after parsing attributes in process `syz.3.3083'. [ 439.756627][T16401] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.763899][T16401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.807188][T16401] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.814481][T16401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.983021][ T5637] Bluetooth: hci3: command tx timeout [ 440.135514][T17303] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3089'. [ 440.226882][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.237514][ T1315] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 440.639707][T17326] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3096'. [ 440.658619][T17328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3097'. [ 440.672436][T17328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3097'. [ 440.707356][T17332] netlink: 'syz.2.3099': attribute type 10 has an invalid length. [ 440.746312][T17332] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 440.786593][T17332] team0: Port device netdevsim1 added [ 440.825185][T17333] netlink: 'syz.2.3099': attribute type 10 has an invalid length. [ 440.992903][T17333] team0: Port device netdevsim1 removed [ 441.035730][T17346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3103'. [ 441.126423][T17349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.153047][T17343] netlink: 'syz.3.3102': attribute type 32 has an invalid length. [ 441.282287][T17343] bond1: option coupled_control: invalid value (192) [ 441.293158][T17343] bond1 (unregistering): Released all slaves [ 441.557628][T17167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.630663][T17372] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 441.654369][T17372] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 441.704955][T17375] erspan0: entered allmulticast mode [ 441.961103][T17391] netlink: 'syz.0.3114': attribute type 1 has an invalid length. [ 442.064876][ T5637] Bluetooth: hci3: command tx timeout [ 442.254837][T17167] veth0_vlan: entered promiscuous mode [ 442.271385][T17167] veth1_vlan: entered promiscuous mode [ 442.327573][T17167] veth0_macvtap: entered promiscuous mode [ 442.339369][T17167] veth1_macvtap: entered promiscuous mode [ 442.375905][T17167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.400350][T17167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.446244][T17187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.488153][T17187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.507397][T17419] netlink: 'syz.0.3121': attribute type 7 has an invalid length. [ 442.516031][T17187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.533372][T17419] netlink: 'syz.0.3121': attribute type 8 has an invalid length. [ 442.546311][T17187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.561987][T17422] netlink: 'syz.0.3121': attribute type 7 has an invalid length. [ 442.588901][T17422] netlink: 'syz.0.3121': attribute type 8 has an invalid length. [ 442.795430][T17187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.833890][T17187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.939604][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.964334][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.233764][T17448] netlink: 'syz.4.3063': attribute type 10 has an invalid length. [ 443.281119][T17448] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 443.295411][T17448] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 444.142720][ T5637] Bluetooth: hci3: command tx timeout [ 444.328956][T17476] xt_addrtype: ipv6 does not support BROADCAST matching [ 445.996028][T17440] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 446.617077][T17503] netlink: 'syz.3.3143': attribute type 4 has an invalid length. [ 446.874756][ T5642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 446.888810][ T5642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 446.899732][ T5642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 446.910063][ T5642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 446.921651][ T5642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 447.786327][T16401] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.867832][T16401] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.047033][T16401] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.059886][T16401] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.085365][T17564] IPv6: NLM_F_CREATE should be specified when creating new route [ 448.225884][T16401] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.247441][T16401] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.267129][T17569] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 448.426986][T16401] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.449197][T16401] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.521201][T17576] __nla_validate_parse: 12 callbacks suppressed [ 448.521231][T17576] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3161'. [ 448.541814][T17576] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3161'. [ 448.556271][T17576] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3161'. [ 448.601651][T17575] veth3: entered allmulticast mode [ 448.620392][T17584] netlink: 'syz.3.3163': attribute type 16 has an invalid length. [ 448.643500][T17584] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3163'. [ 448.836252][T17187] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.872834][T17589] veth0: entered promiscuous mode [ 448.955412][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.971070][T17587] veth0: left promiscuous mode [ 449.023846][ T5637] Bluetooth: hci2: command tx timeout [ 449.092748][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.256807][T17187] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.467945][T16401] pimreg3: left allmulticast mode [ 450.407137][T16401] bond1 (unregistering): Released all slaves [ 450.425462][T16401] bond2 (unregistering): Released all slaves [ 450.443347][T16401] bond3 (unregistering): Released all slaves [ 450.468589][T16401] bond4 (unregistering): Released all slaves [ 450.487511][T16401] bond5 (unregistering): Released all slaves [ 450.505886][T16401] bond6 (unregistering): Released all slaves [ 450.523695][T16401] bond7 (unregistering): Released all slaves [ 450.545869][T16401] bond0 (unregistering): Released all slaves [ 450.575584][T16401] bond8 (unregistering): Released all slaves [ 450.593636][T17509] »»»»»» speed is unknown, defaulting to 1000 [ 450.676450][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 451.048000][T17633] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3173'. [ 451.111876][ T5637] Bluetooth: hci2: command tx timeout [ 451.204848][T16401] tipc: Disabling bearer [ 451.230371][T16401] tipc: Left network mode [ 451.493351][T17652] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 451.825130][T17674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3178'. [ 451.852782][T17671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.945988][T17675] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3178'. [ 452.063682][T17674] veth0_macvtap: left promiscuous mode [ 452.266785][T17509] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.284069][T17509] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.293889][T17509] bridge_slave_0: entered allmulticast mode [ 452.302304][T17509] bridge_slave_0: entered promiscuous mode [ 452.522918][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 452.530637][T17509] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.538757][T17509] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.548882][T17509] bridge_slave_1: entered allmulticast mode [ 452.566619][T17509] bridge_slave_1: entered promiscuous mode [ 452.636860][T17704] netlink: 'syz.5.3184': attribute type 12 has an invalid length. [ 452.666502][T17704] netlink: 190972 bytes leftover after parsing attributes in process `syz.5.3184'. [ 452.872170][T17509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.928981][T17719] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3187'. [ 452.939684][T17509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.181932][ T5637] Bluetooth: hci2: command tx timeout [ 453.363415][T17509] team0: Port device team_slave_0 added [ 453.381970][T17509] team0: Port device team_slave_1 added [ 453.615992][T17509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.631544][T17509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.719115][T17509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.756222][T17509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.781143][T17509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.832434][T17509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.271729][ T5637] Bluetooth: hci2: command tx timeout [ 456.939894][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 456.988988][T17509] hsr_slave_0: entered promiscuous mode [ 456.996136][T17509] hsr_slave_1: entered promiscuous mode [ 457.003683][T17509] debugfs: 'hsr0' already exists in 'hsr' [ 457.009562][T17509] Cannot create hsr debugfs directory [ 457.218796][T17792] netlink: 'syz.4.3199': attribute type 29 has an invalid length. [ 457.233282][T17792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3199'. [ 457.353879][T17786] netlink: 'syz.3.3198': attribute type 1 has an invalid length. [ 457.979608][T16401] batman_adv: batadv0: Interface deactivated: ipvlan1 [ 458.016212][T16401] batman_adv: batadv0: Removing interface: ipvlan1 [ 458.056282][T16401] veth1_vlan: left promiscuous mode [ 458.062734][T16401] veth0_vlan: left promiscuous mode [ 458.684799][ T1171] smc: removing ib device syz0 [ 458.776415][T16957] syz0: Port: 1 Link DOWN [ 458.793003][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 458.948834][T17509] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.985383][T17847] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3212'. [ 459.006407][T17847] xt_l2tp: v2 doesn't support IP mode [ 459.270165][ T1171] smbdirect: ib_dev[syz0] removed [ 459.284232][T17509] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.309389][ T30] audit: type=1804 audit(1779749383.541:11): pid=17854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3214" name="/newroot/44/cgroup.controllers" dev="tmpfs" ino=245 res=1 errno=0 [ 459.378438][ T30] audit: type=1800 audit(1779749383.541:12): pid=17854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3214" name="cgroup.controllers" dev="tmpfs" ino=245 res=0 errno=0 [ 459.622819][T17866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3216'. [ 459.709418][T17871] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3218'. [ 459.843490][T17509] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.071076][T17866] syzkaller0: entered promiscuous mode [ 460.092324][T17866] syzkaller0: entered allmulticast mode [ 460.334066][T17509] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.003353][T17915] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3225'. [ 461.112990][T17917] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3226'. [ 461.141216][T17917] netlink: 'syz.3.3226': attribute type 1 has an invalid length. [ 461.267193][T17928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3226'. [ 461.380897][T17933] xt_cgroup: path and classid specified [ 461.666443][T17509] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 461.689518][T17944] netlink: 'syz.3.3231': attribute type 11 has an invalid length. [ 461.716723][T17944] netlink: 'syz.3.3231': attribute type 11 has an invalid length. [ 461.736287][T17509] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 461.741577][T17944] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3231'. [ 461.769220][T17947] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3232'. [ 461.797697][T17509] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 461.811747][T17947] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3232'. [ 461.846453][T17509] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 461.896347][T17509] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 461.948103][T17509] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 461.986641][T17509] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 462.021235][T17509] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 462.329931][ T30] audit: type=1804 audit(1779749386.571:13): pid=17968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3234" name="/newroot/49/cgroup.controllers" dev="tmpfs" ino=274 res=1 errno=0 [ 462.441679][ T30] audit: type=1800 audit(1779749386.571:14): pid=17968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3234" name="cgroup.controllers" dev="tmpfs" ino=274 res=0 errno=0 [ 462.519310][T17509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.625256][T17509] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.664046][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.671321][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.745945][T16410] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.753230][T16410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.883341][T17983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3237'. [ 462.954815][T17983] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3237'. [ 463.394322][T18004] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3241'. [ 463.573015][ T5642] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 463.598481][ T5642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 463.609685][ T5642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 463.627960][ T5642] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 463.638444][ T5642] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 464.250422][T18039] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3247'. [ 464.271886][T18039] openvswitch: netlink: Unknown nsh attribute 0 [ 464.299043][T18039] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3247'. [ 464.408622][T18039] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3247'. [ 464.697788][T16401] IPVS: stop unused estimator thread 0... [ 464.972863][T18062] netlink: 'syz.3.3251': attribute type 12 has an invalid length. [ 465.076321][T17509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.161027][T18073] Cannot find del_set index 4 as target [ 465.216453][T18005] »»»»»» speed is unknown, defaulting to 1000 [ 465.260139][T18071] netlink: set zone limit has 4 unknown bytes [ 465.370468][T17509] veth0_vlan: entered promiscuous mode [ 465.451227][T17509] veth1_vlan: entered promiscuous mode [ 465.548160][T18088] syzkaller0: entered promiscuous mode [ 465.553910][T18088] syzkaller0: entered allmulticast mode [ 465.746018][ T5637] Bluetooth: hci1: command tx timeout [ 465.756056][T17509] veth0_macvtap: entered promiscuous mode [ 465.776305][T17509] veth1_macvtap: entered promiscuous mode [ 465.807351][T17509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.834105][T17509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.870835][T16401] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.887486][T18103] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3259'. [ 465.907541][T16401] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.964484][T16401] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.005384][T16401] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.309904][T18117] sctp: [Deprecated]: syz.4.3261 (pid 18117) Use of struct sctp_assoc_value in delayed_ack socket option. [ 466.309904][T18117] Use struct sctp_sack_info instead [ 467.837103][ T5637] Bluetooth: hci1: command tx timeout [ 469.103280][T17187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.114402][T17187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.212949][T18005] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.244041][T18005] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.262882][T18005] bridge_slave_0: entered allmulticast mode [ 469.283344][T18005] bridge_slave_0: entered promiscuous mode [ 469.313361][T18005] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.331803][T18005] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.339772][T18005] bridge_slave_1: entered allmulticast mode [ 469.359799][T18005] bridge_slave_1: entered promiscuous mode [ 469.581220][T16415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.607595][T16415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.624082][T18005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.676313][T18005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.870985][T18005] team0: Port device team_slave_0 added [ 469.889040][T18005] team0: Port device team_slave_1 added [ 469.901916][ T5637] Bluetooth: hci1: command tx timeout [ 470.090563][T18005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.131996][T18005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.191593][T18005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.235369][T18005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.244096][T18206] netlink: 'syz.3.3272': attribute type 1 has an invalid length. [ 470.252997][T18005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.330051][T18005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.446490][T18206] bond2: entered promiscuous mode [ 470.458461][T18206] 8021q: adding VLAN 0 to HW filter on device bond2 [ 470.507796][T18211] 8021q: adding VLAN 0 to HW filter on device bond2 [ 470.530240][T18211] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 470.554394][T18211] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 470.592122][T18211] bond2: (slave vti0): making interface the new active one [ 470.606582][T18211] vti0: entered promiscuous mode [ 470.620399][T18211] bond2: (slave vti0): Enslaving as an active interface with an up link [ 470.894282][T18005] hsr_slave_0: entered promiscuous mode [ 470.909519][T18005] hsr_slave_1: entered promiscuous mode [ 470.945132][T18005] debugfs: 'hsr0' already exists in 'hsr' [ 470.957513][T18005] Cannot create hsr debugfs directory [ 471.203490][T18238] netlink: 'syz.3.3278': attribute type 1 has an invalid length. [ 471.222211][T18238] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3278'. [ 471.242013][T18237] netlink: 'syz.4.3277': attribute type 1 has an invalid length. [ 471.792848][T18262] netlink: 'syz.5.3282': attribute type 4 has an invalid length. [ 471.982004][ T5637] Bluetooth: hci1: command tx timeout [ 472.026238][T18268] netlink: zone id is out of range [ 472.036977][T18268] netlink: zone id is out of range [ 472.042223][T18268] netlink: zone id is out of range [ 472.047466][T18268] netlink: zone id is out of range [ 472.052710][T18268] netlink: zone id is out of range [ 472.057952][T18268] netlink: zone id is out of range [ 472.067481][T18268] netlink: zone id is out of range [ 472.079914][T18268] netlink: set zone limit has 4 unknown bytes [ 472.239991][T18005] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 472.299216][T18005] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 472.370040][T18005] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 472.435793][T18005] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 472.473072][T18005] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 472.511107][T18005] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 472.526906][T18005] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 472.575315][T18005] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 472.890035][T18313] netlink: 'syz.2.3293': attribute type 3 has an invalid length. [ 472.916842][T18313] netlink: 'syz.2.3293': attribute type 1 has an invalid length. [ 472.949579][T18313] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3293'. [ 472.986433][T18005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.028449][T18316] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3292'. [ 473.089928][T18005] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.143724][T13190] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.151064][T13190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.209556][T18323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3295'. [ 473.297261][T17187] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.304611][T17187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.325890][T18327] openvswitch: netlink: Duplicate or invalid key (type 0). [ 473.345978][T18327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.615506][T18333] Cannot find add_set index 0 as target [ 474.469538][T18387] netlink: 'syz.3.3308': attribute type 16 has an invalid length. [ 474.533566][T18389] netlink: 'syz.5.3311': attribute type 3 has an invalid length. [ 474.564002][T18389] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3311'. [ 475.120063][T18005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.400520][T18419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3315'. [ 475.930757][T18005] veth0_vlan: entered promiscuous mode [ 475.991090][T18005] veth1_vlan: entered promiscuous mode [ 476.096857][T18449] netlink: 'syz.3.3321': attribute type 11 has an invalid length. [ 476.142799][T18005] veth0_macvtap: entered promiscuous mode [ 476.156152][T18449] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3321'. [ 476.174453][T18455] netlink: 'syz.5.3322': attribute type 21 has an invalid length. [ 476.191095][T18455] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3322'. [ 476.193364][T18005] veth1_macvtap: entered promiscuous mode [ 476.250095][T18455] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3322'. [ 476.371339][T18461] atomic_op ffff8880476ab198 conn xmit_atomic 0000000000000000 [ 476.387495][T18005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.484141][T18005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.534710][T16411] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.557725][T16411] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.600333][T16411] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.635555][T16411] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.929473][T13190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.960809][ T30] audit: type=1804 audit(1779749401.201:15): pid=18482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3329" name="/newroot/134/cgroup.controllers" dev="tmpfs" ino=703 res=1 errno=0 [ 476.987054][T13190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.074613][ T30] audit: type=1800 audit(1779749401.201:16): pid=18482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3329" name="cgroup.controllers" dev="tmpfs" ino=703 res=0 errno=0 [ 477.168978][T16415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.202882][T16415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.409475][T18501] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3333'. [ 477.667916][T18506] net_ratelimit: 3 callbacks suppressed [ 477.667938][T18506] openvswitch: netlink: VLAN attribute unexpected. [ 477.962657][T18517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3336'. [ 478.242647][T18535] netlink: 576 bytes leftover after parsing attributes in process `syz.2.3338'. [ 478.496115][T18553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.578663][T18557] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3345'. [ 478.767291][T18564] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3348'. [ 479.402219][T18594] netlink: 'syz.2.3356': attribute type 7 has an invalid length. [ 479.441736][T18594] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3356'. [ 479.514882][T18597] netlink: 'syz.4.3357': attribute type 16 has an invalid length. [ 479.549819][T18597] netlink: 'syz.4.3357': attribute type 17 has an invalid length. [ 479.586562][T18601] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3358'. [ 479.721319][T18607] sctp: [Deprecated]: syz.2.3360 (pid 18607) Use of int in max_burst socket option. [ 479.721319][T18607] Use struct sctp_assoc_value instead [ 479.950401][T18597] veth3: left allmulticast mode [ 479.967355][T18597] veth0_macvtap: entered promiscuous mode [ 480.007218][T18597] 8021q: adding VLAN 0 to HW filter on device bond1 [ 480.336053][T18622] netlink: 'syz.5.3361': attribute type 10 has an invalid length. [ 480.436054][T18628] ieee802154 phy1 wpan1: encryption failed: -22 [ 480.457183][T18622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 480.494542][T18622] team0: Port device netdevsim1 added [ 480.737548][T18643] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3368'. [ 480.753142][T18641] Unsupported ieee802154 address type: 0 [ 480.900480][T18654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3371'. [ 481.122051][T18666] netlink: 'syz.6.3374': attribute type 1 has an invalid length. [ 481.429072][T18681] __nla_validate_parse: 1 callbacks suppressed [ 481.429094][T18681] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3377'. [ 481.494206][T18679] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 481.569428][T18681] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3377'. [ 481.946524][T18713] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3384'. [ 482.078738][T18713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.160148][T18730] netlink: 'syz.3.3389': attribute type 16 has an invalid length. [ 482.170710][T18713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.198267][T18730] netlink: 'syz.3.3389': attribute type 17 has an invalid length. [ 482.239213][T18713] bond0 (unregistering): Released all slaves [ 482.461024][T18740] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3392'. [ 482.485287][T18740] xt_policy: neither incoming nor outgoing policy selected [ 482.525333][T18730] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.557091][T18730] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.858781][T18730] 8021q: adding VLAN 0 to HW filter on device bond1 [ 482.869988][T18730] bond2: left promiscuous mode [ 482.878405][T18730] vti0: left promiscuous mode [ 482.891250][T18730] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 483.166979][T18760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3398'. [ 483.225777][T18760] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3398'. [ 483.342946][T18773] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3400'. [ 483.365364][T18771] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.3399'. [ 483.931127][T18804] ipt_ECN: cannot use operation on non-tcp rule [ 483.983507][T16955] IPVS: starting estimator thread 0... [ 484.037723][T18809] IPVS: sed: FWM 3 0x00000003 - no destination available [ 484.101595][T18810] IPVS: using max 26 ests per chain, 62400 per kthread [ 484.863512][T18843] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3415'. [ 485.296064][T18864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3420'. [ 485.339621][T18864] netlink: 'syz.4.3420': attribute type 1 has an invalid length. [ 485.366989][T18862] syzkaller0: entered promiscuous mode [ 485.386632][T18862] syzkaller0: entered allmulticast mode [ 485.405416][T18868] netlink: 'syz.3.3421': attribute type 7 has an invalid length. [ 485.714513][T18864] veth7: entered promiscuous mode [ 486.344451][T18918] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 486.389786][T18918] netlink: 'syz.3.3432': attribute type 1 has an invalid length. [ 486.426891][T18918] netlink: 'syz.3.3432': attribute type 1 has an invalid length. [ 486.710567][T18940] __nla_validate_parse: 4 callbacks suppressed [ 486.710586][T18940] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3438'. [ 486.782950][T18940] vlan2: entered allmulticast mode [ 486.794601][T18940] erspan0: entered allmulticast mode [ 486.809955][T18949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3437'. [ 487.064196][T18962] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3443'. [ 487.104916][T18962] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.112751][T18962] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.582883][T18986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3449'. [ 487.615044][T18986] openvswitch: netlink: Flow actions attr not present in new flow. [ 487.695615][T18989] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 487.708156][T18989] bond3 (unregistering): Released all slaves [ 487.951103][T18997] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3452'. [ 488.132277][T19007] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3456'. [ 488.280985][T19018] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3462'. [ 488.548430][T19034] x_tables: unsorted entry at hook 3 [ 488.630100][T19036] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3466'. [ 488.667020][T19036] nbd: socks must be embedded in a SOCK_ITEM attr [ 489.070133][T19061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3474'. [ 489.250331][T19074] netlink: 1024 bytes leftover after parsing attributes in process `syz.3.3478'. [ 489.354338][T19083] veth1_to_bond: entered allmulticast mode [ 489.363840][T19082] veth1_to_bond: left allmulticast mode [ 489.725206][ T1171] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.753704][ T1171] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.795199][ T1171] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.825200][ T1171] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.500997][T19132] xt_policy: neither incoming nor outgoing policy selected [ 490.603618][T19139] ip6erspan0: entered allmulticast mode [ 490.644711][T19139] C: renamed from lo (while UP) [ 490.658530][T19139] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 490.693899][T19142] syzkaller0: entered promiscuous mode [ 490.699971][T19142] syzkaller0: entered allmulticast mode [ 490.814978][T19156] gre1: entered promiscuous mode [ 491.611054][T19182] netlink: 'syz.2.3511': attribute type 4 has an invalid length. [ 491.729292][T19188] __nla_validate_parse: 9 callbacks suppressed [ 491.729313][T19188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3511'. [ 493.412583][T19212] IPv6: NLM_F_REPLACE set, but no existing node found! [ 493.444379][T16958] IPVS: starting estimator thread 0... [ 493.466556][T19213] netlink: 'syz.3.3520': attribute type 29 has an invalid length. [ 493.562419][T19214] IPVS: using max 29 ests per chain, 69600 per kthread [ 493.567466][T19218] netlink: 'syz.5.3522': attribute type 1 has an invalid length. [ 493.599137][T19218] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3522'. [ 493.655582][T19218] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3522'. [ 493.695058][T19218] netlink: 'syz.5.3522': attribute type 1 has an invalid length. [ 493.739491][T19218] netlink: 'syz.5.3522': attribute type 8 has an invalid length. [ 493.757561][T19225] netlink: 'syz.2.3524': attribute type 10 has an invalid length. [ 493.789457][T19218] netlink: 606 bytes leftover after parsing attributes in process `syz.5.3522'. [ 493.824897][T19225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.861646][T19225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.893506][T19225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.926994][T19225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.151109][T19241] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3530'. [ 494.176669][T19243] atomic_op ffff888036516998 conn xmit_atomic 0000000000000000 [ 494.420029][T19265] tipc: Started in network mode [ 494.425891][T19265] tipc: Node identity ac14140f, cluster identity 4711 [ 494.442613][T19265] tipc: New replicast peer: 255.255.255.255 [ 494.464197][T19265] tipc: Enabled bearer , priority 10 [ 494.472858][T19266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3536'. [ 494.497706][T19265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3536'. [ 494.535442][T19268] syzkaller1: entered promiscuous mode [ 494.545293][T19268] syzkaller1: entered allmulticast mode [ 494.611022][T19268] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3538'. [ 494.775454][T19281] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3542'. [ 495.328078][T19312] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3551'. [ 495.573360][ T5758] tipc: Node number set to 2886997007 [ 495.717666][T19327] ipt_ECN: cannot use operation on non-tcp rule [ 495.797556][ T5974] IPVS: starting estimator thread 0... [ 495.805437][T19300] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 495.812860][T19302] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 495.921525][T19330] IPVS: using max 27 ests per chain, 64800 per kthread [ 496.037402][T19344] netlink: 'syz.5.3559': attribute type 1 has an invalid length. [ 496.669777][T19374] tipc: Enabled bearer , priority 10 [ 496.676521][T19377] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 496.699916][T19377] bond0: (slave lo): Error: Device can not be enslaved while up [ 496.906794][T19389] __nla_validate_parse: 7 callbacks suppressed [ 496.906814][T19389] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3575'. [ 496.915036][T19386] openvswitch: netlink: Unknown key attributes 2 [ 497.003175][T19397] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3577'. [ 497.013481][T19397] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3577'. [ 497.425937][T19424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3583'. [ 497.435589][T19425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3583'. [ 497.668397][T19432] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3585'. [ 497.693655][T19432] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3585'. [ 499.998996][T19397] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 500.204638][T19466] netlink: 'syz.6.3591': attribute type 1 has an invalid length. [ 500.286547][T19479] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3591'. [ 500.671741][T19501] syzkaller0: entered promiscuous mode [ 500.680704][T19501] syzkaller0: entered allmulticast mode [ 500.777394][T19505] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3604'. [ 500.799026][T19505] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3604'. [ 500.842227][T19509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.556340][T19544] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 501.673660][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.004685][T19556] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3616'. [ 503.217455][T19627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 503.285916][T19634] syz_tun: entered allmulticast mode [ 503.312608][T19634] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3639'. [ 503.326313][T19632] syz_tun: left allmulticast mode [ 503.553880][T19653] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 503.726948][T19667] netlink: 'syz.3.3644': attribute type 9 has an invalid length. [ 503.959977][T19677] Cannot find del_set index 4 as target [ 504.078853][T19685] syzkaller1: entered promiscuous mode [ 504.098462][T19685] syzkaller1: entered allmulticast mode [ 504.418310][T19706] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 504.478597][T19715] netlink: 'syz.4.3659': attribute type 1 has an invalid length. [ 504.882791][T19737] netlink: 'syz.6.3666': attribute type 1 has an invalid length. [ 504.903007][T19737] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3666'. [ 504.956112][T19737] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3666'. [ 505.380821][T19760] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3673'. [ 505.406279][T19760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3673'. [ 505.440448][T19762] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3674'. [ 505.488881][T19760] hsr_slave_1 (unregistering): left promiscuous mode [ 506.100230][T19792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3684'. [ 506.120091][T19792] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3684'. [ 506.159143][T19795] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3685'. [ 506.244530][T19792] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 506.268363][T16955] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 534.463461][ T5637] Bluetooth: hci6: command 0x0419 tx timeout [ 539.581619][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 563.105479][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.181789][ T5637] Bluetooth: hci3: command 0x0406 tx timeout [ 570.301748][ T5642] Bluetooth: hci2: command 0x0406 tx timeout [ 572.422013][T19813] xt_l2tp: v2 sid > 0xffff: 1114112 [ 572.477665][T19827] __nla_validate_parse: 2 callbacks suppressed [ 572.477696][T19827] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3688'. [ 572.571323][T19827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.660042][T19827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.714491][T19827] bond0 (unregistering): Released all slaves [ 572.722146][T19844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 572.735127][T19845] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3695'. [ 572.790768][T19845] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3695'. [ 572.845530][T19845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.889127][T19845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.904380][T19845] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 572.916530][T19845] bond0 (unregistering): Released all slaves [ 573.093781][T19859] netlink: 'syz.6.3699': attribute type 1 has an invalid length. [ 573.199885][T19859] bond0: (slave geneve2): making interface the new active one [ 573.223107][T19859] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 573.237469][T19864] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3699'. [ 573.259970][T16410] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 573.275709][T16410] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 573.297148][T19864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.323492][T16410] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 573.333552][T16410] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 573.910919][T19890] xt_hashlimit: invalid rate [ 574.138859][T19907] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3712'. [ 574.150738][T19904] syzkaller1: entered promiscuous mode [ 574.164500][T19904] syzkaller1: entered allmulticast mode [ 574.296017][T19903] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3713'. [ 574.307429][T19917] netlink: 'syz.2.3711': attribute type 1 has an invalid length. [ 574.317535][T19917] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3711'. [ 574.327784][T19917] netlink: 'syz.2.3711': attribute type 1 has an invalid length. [ 574.338385][T19917] netlink: 'syz.2.3711': attribute type 8 has an invalid length. [ 574.363368][T19917] netlink: 582 bytes leftover after parsing attributes in process `syz.2.3711'. [ 574.377868][T19918] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3717'. [ 574.574136][T19925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3720'. [ 574.591687][T19924] syzkaller0: entered promiscuous mode [ 574.598035][T19928] Bluetooth: MGMT ver 1.23 [ 574.613267][T19924] syzkaller0: entered allmulticast mode [ 574.648751][T19930] netlink: 'syz.6.3722': attribute type 1 has an invalid length. [ 575.365991][T19967] sctp: [Deprecated]: syz.4.3730 (pid 19967) Use of int in max_burst socket option deprecated. [ 575.365991][T19967] Use struct sctp_assoc_value instead [ 575.924023][T19980] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.990024][T20001] netlink: 'syz.3.3737': attribute type 2 has an invalid length. [ 576.000419][T19990] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 576.008195][T19990] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 576.077700][T19999] ip6gre1: entered allmulticast mode [ 576.097253][T19999] team0: Device ip6gre1 is of different type [ 576.194753][T20006] sctp: [Deprecated]: syz.6.3741 (pid 20006) Use of int in max_burst socket option. [ 576.194753][T20006] Use struct sctp_assoc_value instead [ 576.313421][T19980] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.571657][T19980] team0: Port device netdevsim1 removed [ 576.606876][T19980] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.708992][T20028] can: request_module (can-proto-0) failed. [ 576.854056][T19980] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.977577][T20044] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 576.985792][T20044] syzkaller1: linktype set to 823 [ 577.097392][T20048] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 577.191843][ T1171] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.299405][ T1171] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.371540][ T1171] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.418332][ T36] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.598651][T20079] __nla_validate_parse: 11 callbacks suppressed [ 577.598673][T20079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3762'. [ 577.664129][T20082] netlink: 'syz.3.3763': attribute type 4 has an invalid length. [ 577.677903][T20079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.353544][T20105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.793826][T20128] bond3: entered allmulticast mode [ 578.803029][T20134] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3770'. [ 578.914889][T20140] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3770'. [ 579.094194][T20140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.132257][T20153] sch_fq: defrate 0 ignored. [ 579.224316][T20162] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3776'. [ 580.039259][T20211] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3790'. [ 580.119744][T20216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3792'. [ 580.129163][T20217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3792'. [ 580.161612][T20217] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3792'. [ 580.778634][T20239] bond4: option all_slaves_active: invalid value (222) [ 580.792114][T20239] bond4 (unregistering): Released all slaves [ 580.978073][T20242] syzkaller0: entered promiscuous mode [ 580.987278][T20254] netlink: 'syz.4.3800': attribute type 2 has an invalid length. [ 581.007951][T20242] syzkaller0: entered allmulticast mode [ 581.018098][T20254] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3800'. [ 581.107629][T20242] tipc: Started in network mode [ 581.126229][T20242] tipc: Node identity 32eb89b82942, cluster identity 4711 [ 581.149056][T20242] tipc: Enabled bearer , priority 0 [ 581.173186][T20240] tipc: Resetting bearer [ 581.185785][T20265] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3803'. [ 581.215170][T20265] netlink: 'syz.3.3803': attribute type 3 has an invalid length. [ 581.237431][T20265] netlink: 'syz.3.3803': attribute type 2 has an invalid length. [ 581.337547][T20240] tipc: Disabling bearer [ 581.392914][T20269] netlink: 'syz.6.3804': attribute type 11 has an invalid length. [ 581.423347][T20269] netlink: 'syz.6.3804': attribute type 11 has an invalid length. [ 581.727004][T20282] netlink: 'syz.4.3808': attribute type 1 has an invalid length. [ 581.864298][T20292] veth0_to_bond: entered allmulticast mode [ 582.082595][T20301] netlink: 'syz.3.3814': attribute type 28 has an invalid length. [ 582.119540][T20301] netlink: 'syz.3.3814': attribute type 3 has an invalid length. [ 582.276895][T20313] xt_hashlimit: size too large, truncated to 1048576 [ 582.629019][T20331] __nla_validate_parse: 9 callbacks suppressed [ 582.629042][T20331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3821'. [ 582.647472][T20331] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3821'. [ 582.994094][T20348] netlink: 'syz.6.3827': attribute type 178 has an invalid length. [ 583.125225][T20362] xt_hashlimit: size too large, truncated to 1048576 [ 583.160445][T20364] xt_nfacct: accounting object `syz1' does not exist [ 583.202029][ T30] audit: type=1804 audit(1779749507.441:17): pid=20365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3830" name="/newroot/173/cgroup.controllers" dev="tmpfs" ino=897 res=1 errno=0 [ 583.296554][T20370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3832'. [ 583.297090][ T30] audit: type=1800 audit(1779749507.491:18): pid=20365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3830" name="cgroup.controllers" dev="tmpfs" ino=897 res=0 errno=0 [ 583.353300][T20374] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3833'. [ 583.617748][T20384] bridge_slave_0: left allmulticast mode [ 583.634079][T20391] openvswitch: netlink: Key type 8710 is out of range max 32 [ 583.645642][T20384] bridge_slave_0: left promiscuous mode [ 583.659260][T20384] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.687942][T20384] bridge_slave_1: left allmulticast mode [ 583.695240][T20384] bridge_slave_1: left promiscuous mode [ 583.710294][T20384] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.738252][T20384] team0: Port device team_slave_0 removed [ 583.779267][T20384] team0: Port device team_slave_1 removed [ 583.810339][T20384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.845334][T20384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.868564][T20384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.887054][T20384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.906946][T20401] netlink: 'syz.2.3838': attribute type 29 has an invalid length. [ 583.917812][T20384] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 583.972800][T20401] syzkaller0: entered promiscuous mode [ 583.994070][T20401] syzkaller0: entered allmulticast mode [ 584.423347][T20426] netlink: 71 bytes leftover after parsing attributes in process `syz.6.3844'. [ 584.441137][T20427] 8021q: VLANs not supported on ip_vti0 [ 584.461512][ T5637] Bluetooth: hci1: command tx timeout [ 584.547007][T20434] netlink: 'syz.2.3845': attribute type 1 has an invalid length. [ 584.594212][T20437] netlink: 'syz.4.3846': attribute type 4 has an invalid length. [ 585.200583][T20463] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3850'. [ 585.250086][T20463] syzkaller0: entered promiscuous mode [ 585.272506][T20463] syzkaller0: entered allmulticast mode [ 585.383650][T20474] openvswitch: netlink: Key type 347 is out of range max 32 [ 585.419808][T20470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3852'. [ 585.501248][T20474] team0: Mode changed to "loadbalance" [ 585.644092][T20490] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode [ 585.696526][T20490] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3857'. [ 585.777076][T20496] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3860'. [ 585.799416][T20497] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3857'. [ 585.858392][T20496] ip6erspan0: entered allmulticast mode [ 585.925471][T20501] bridge_slave_0: left allmulticast mode [ 585.931280][T20501] bridge_slave_0: left promiscuous mode [ 585.969071][T20501] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.015235][T20501] bridge_slave_1: left allmulticast mode [ 586.033923][T20501] bridge_slave_1: left promiscuous mode [ 586.048965][T20501] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.098544][T20501] bond0: (slave bond_slave_0): Releasing backup interface [ 586.120751][T20501] bond0: (slave bond_slave_1): Releasing backup interface [ 586.170835][T20501] team0: Port device team_slave_0 removed [ 586.210470][T20501] team0: Port device team_slave_1 removed [ 586.281218][T20501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.294807][T20501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.312083][T20501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.323731][T20501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.338208][T20501] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 586.362674][T20502] ip6gre1: entered allmulticast mode [ 586.376979][T20502] team0: Port device ip6gre1 added [ 586.408375][T20520] geneve2: entered promiscuous mode [ 586.666506][T20535] netlink: 'syz.5.3870': attribute type 1 has an invalid length. [ 586.866682][T20535] 8021q: adding VLAN 0 to HW filter on device bond2 [ 587.031772][T20549] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 587.515922][T20572] tipc: Enabled bearer , priority 0 [ 587.660821][T20572] syzkaller0: entered promiscuous mode [ 587.670153][T20572] syzkaller0: entered allmulticast mode [ 587.679926][T20572] tipc: Resetting bearer [ 587.847382][T20571] tipc: Resetting bearer [ 587.897478][T20583] __nla_validate_parse: 7 callbacks suppressed [ 587.897499][T20583] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3884'. [ 589.106819][ T5642] Bluetooth: hci1: command 0x0405 tx timeout [ 591.252229][T20571] tipc: Disabling bearer [ 591.319851][T16958] tipc: Node number set to 1032828448 [ 591.534253][T20621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3891'. [ 591.580607][T20621] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3891'. [ 591.625986][T20626] netlink: 'syz.3.3895': attribute type 49 has an invalid length. [ 591.834783][T20626] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 591.864705][T20626] ip6gretap0: entered promiscuous mode [ 591.886050][T20626] ip6gretap0: entered allmulticast mode [ 592.180573][T20655] xt_l2tp: unknown flags: 10 [ 592.920064][T20692] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3912'. [ 592.954410][T20692] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3912'. [ 592.993851][T20697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3913'. [ 593.010857][ T30] audit: type=1800 audit(1779749517.251:19): pid=20691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3913" name="memory.events" dev="tmpfs" ino=980 res=0 errno=0 [ 593.195546][T20703] sctp: [Deprecated]: syz.3.3916 (pid 20703) Use of struct sctp_assoc_value in delayed_ack socket option. [ 593.195546][T20703] Use struct sctp_sack_info instead [ 593.366675][T20709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3918'. [ 593.632611][T20727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3923'. [ 593.657155][T20727] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3923'. [ 593.803515][T20738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 593.948720][T20743] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3926'. [ 594.204150][T20761] syz_tun: entered allmulticast mode [ 594.242003][T20760] syz_tun: left allmulticast mode [ 594.417085][T20772] team0: entered promiscuous mode [ 594.436180][T20772] team_slave_0: entered promiscuous mode [ 594.452450][T20772] team_slave_1: entered promiscuous mode [ 594.656769][T20781] 8021q: adding VLAN 0 to HW filter on device bond2 [ 594.667565][T20781] bridge0: port 1(bond2) entered blocking state [ 594.674320][T20781] bridge0: port 1(bond2) entered disabled state [ 594.681116][T20781] bond2: entered allmulticast mode [ 594.696289][T20781] bond2: entered promiscuous mode [ 594.714850][T20781] bridge0: port 1(bond2) entered blocking state [ 594.721430][T20781] bridge0: port 1(bond2) entered forwarding state [ 594.729290][T20782] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3936'. [ 594.781287][T20781] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3935'. [ 594.813943][T16411] bridge0: port 1(bond2) entered disabled state [ 595.104639][ T31] INFO: task syz.0.3157:17557 blocked for more than 143 seconds. [ 595.144681][ T31] Not tainted syzkaller #0 [ 595.165547][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 595.214938][ T31] task:syz.0.3157 state:D stack:26568 pid:17557 tgid:17555 ppid:16031 task_flags:0x400040 flags:0x00080002 [ 595.253813][ T31] Call Trace: [ 595.264579][ T31] [ 595.270993][ T31] __schedule+0x1821/0x5740 [ 595.281543][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 595.290370][ T31] ? __pfx___schedule+0x10/0x10 [ 595.295648][ T31] ? schedule+0x90/0x360 [ 595.300106][ T31] schedule+0x164/0x360 [ 595.304525][ T31] schedule_preempt_disabled+0x13/0x30 [ 595.311318][ T31] __mutex_lock+0x7f7/0x1550 [ 595.316549][ T31] ? __mutex_lock+0x608/0x1550 [ 595.321715][ T31] ? nfsd_nl_threads_get_doit+0x1c0/0x790 [ 595.327651][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 595.334198][ T31] ? __nlmsg_put+0xef/0x1b0 [ 595.339166][ T31] ? genlmsg_put+0x137/0x2e0 [ 595.345510][ T31] nfsd_nl_threads_get_doit+0x1c0/0x790 [ 595.351197][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 595.357731][ T31] ? __nla_parse+0x40/0x60 [ 595.362343][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 595.365503][T20822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.378013][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 595.384590][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 595.390333][ T31] ? __asan_memcpy+0x40/0x70 [ 595.395214][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 595.401625][ T31] genl_rcv_msg+0x61c/0x7a0 [ 595.406235][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 595.412674][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 595.418937][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 595.425480][ T31] netlink_rcv_skb+0x232/0x4b0 [ 595.430356][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 595.435670][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 595.441066][ T31] ? down_read+0x270/0x2e0 [ 595.445754][ T31] ? genl_rcv+0xd/0x40 [ 595.449917][ T31] genl_rcv+0x28/0x40 [ 595.454180][ T31] netlink_unicast+0x75c/0x8e0 [ 595.459063][ T31] netlink_sendmsg+0x813/0xb40 [ 595.464084][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 595.469472][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 595.474819][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 595.480228][ T31] ____sys_sendmsg+0x972/0x9f0 [ 595.485219][ T31] ? __might_fault+0xaf/0x130 [ 595.489999][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 595.523120][ T31] ? import_iovec+0x73/0xa0 [ 595.541592][ T31] ___sys_sendmsg+0x2a5/0x360 [ 595.562481][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 595.574389][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 595.580728][T20818] bond3: option packets_per_slave: invalid value (18446744073709551615) [ 595.594928][ T31] ? futex_wake+0x4ac/0x580 [ 595.601506][T20818] bond3: option packets_per_slave: allowed values 0 - 65535 [ 595.612217][ T31] ? __fget_files+0x2a/0x420 [ 595.624999][ T31] ? __fget_files+0x3a0/0x420 [ 595.635739][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 595.649428][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 595.661853][ T31] ? rcu_is_watching+0x15/0xb0 [ 595.667341][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.674309][ T31] do_syscall_64+0x15f/0xf80 [ 595.679043][ T31] ? trace_irq_disable+0x3b/0x140 [ 595.684280][ T31] ? clear_bhb_loop+0x40/0x90 [ 595.689066][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.695274][ T31] RIP: 0033:0x7f68fd99ce59 [ 595.699880][ T31] RSP: 002b:00007f68fe944028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 595.708670][ T31] RAX: ffffffffffffffda RBX: 00007f68fdc15fa0 RCX: 00007f68fd99ce59 [ 595.716882][ T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 595.726449][ T31] RBP: 00007f68fda32d6f R08: 0000000000000000 R09: 0000000000000000 [ 595.735007][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.743464][ T5642] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 595.753228][ T31] R13: 00007f68fdc16038 R14: 00007f68fdc15fa0 R15: 00007ffc5e1e1198 [ 595.761635][ T31] [ 595.766369][T20818] bond3 (unregistering): Released all slaves [ 595.773691][ T31] [ 595.773691][ T31] Showing all locks held in the system: [ 595.783532][ T31] 1 lock held by khungtaskd/31: [ 595.788606][ T31] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 595.827743][ T31] 2 locks held by dhcpcd/5289: [ 595.832865][ T31] #0: ffff88807b9ce6e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 595.844101][ T31] #1: ffffffff8fdd13c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 595.853890][ T31] 2 locks held by getty/5385: [ 595.858730][ T31] #0: ffff8880328d80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 595.871680][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 595.882354][ T31] 2 locks held by syz.1.2518/14962: [ 595.887707][ T31] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 595.897544][ T31] #1: ffffffff8ec8b220 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 595.908427][ T31] 3 locks held by kworker/u8:23/16410: [ 595.914018][ T31] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 595.926406][ T31] #1: ffffc90004c4fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 595.939023][ T31] #2: ffffffff8fdd13c0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 595.948172][ T31] 2 locks held by syz.0.3157/17557: [ 595.953910][ T31] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 595.962386][ T31] #1: ffffffff8ec8b220 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 595.972655][ T31] 3 locks held by syz.6.3944/20818: [ 595.978087][ T31] #0: ffffffff90310e80 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 595.988583][ T31] #1: ffffffff8fdd13c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 595.998979][ T31] #2: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 596.011307][ T31] [ 596.014671][ T31] ============================================= [ 596.014671][ T31] [ 596.023751][ T31] NMI backtrace for cpu 0 [ 596.023779][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 596.023809][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 596.023822][ T31] Call Trace: [ 596.023841][ T31] [ 596.023851][ T31] dump_stack_lvl+0xe8/0x150 [ 596.023882][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 596.023910][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 596.023936][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 596.023966][ T31] sys_info+0x135/0x170 [ 596.023989][ T31] watchdog+0xfd3/0x1030 [ 596.024030][ T31] ? watchdog+0x1c9/0x1030 [ 596.024069][ T31] kthread+0x389/0x470 [ 596.024098][ T31] ? __pfx_watchdog+0x10/0x10 [ 596.024126][ T31] ? __pfx_kthread+0x10/0x10 [ 596.024161][ T31] ret_from_fork+0x514/0xb70 [ 596.024188][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 596.024211][ T31] ? __switch_to+0xc79/0x1410 [ 596.024245][ T31] ? __pfx_kthread+0x10/0x10 [ 596.024274][ T31] ret_from_fork_asm+0x1a/0x30 [ 596.024318][ T31] [ 596.024326][ T31] Sending NMI from CPU 0 to CPUs 1: [ 596.138534][ C1] NMI backtrace for cpu 1 [ 596.138552][ C1] CPU: 1 UID: 0 PID: 5289 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 596.138574][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 596.138586][ C1] RIP: 0010:debug_check_no_obj_freed+0x1f1/0x550 [ 596.138618][ C1] Code: 0f 84 44 03 00 00 49 89 ee 49 c1 ee 03 41 80 3c 16 00 74 12 48 89 ef e8 9d 0d 74 fd 48 ba 00 00 00 00 00 fc ff df 48 8b 45 00 <48> 89 04 24 4c 8d 7d 18 4c 89 f8 48 c1 e8 03 80 3c 10 00 74 12 4c [ 596.138635][ C1] RSP: 0018:ffffc900030cfcd0 EFLAGS: 00000046 [ 596.138652][ C1] RAX: ffff888026520ce8 RBX: 0000000000000001 RCX: 0000000000000001 [ 596.138665][ C1] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900030cfc40 [ 596.138678][ C1] RBP: ffff888027719000 R08: 0000000000000003 R09: 0000000000000004 [ 596.138690][ C1] R10: dffffc0000000000 R11: fffff52000619f88 R12: ffff888081215bc0 [ 596.138704][ C1] R13: ffff888081215b00 R14: 1ffff11004ee3200 R15: ffff88804e811880 [ 596.138719][ C1] FS: 00007f6ddaf7a780(0000) GS:ffff888125387000(0000) knlGS:0000000000000000 [ 596.138735][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 596.138748][ C1] CR2: 00007ffe00ac4098 CR3: 000000007a720000 CR4: 00000000003526f0 [ 596.138765][ C1] Call Trace: [ 596.138771][ C1] [ 596.138785][ C1] ? do_sys_openat2+0x14c/0x200 [ 596.138808][ C1] kmem_cache_free+0xfd/0x650 [ 596.138835][ C1] ? fd_install+0x94/0x3d0 [ 596.138859][ C1] do_sys_openat2+0x14c/0x200 [ 596.138882][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 596.138905][ C1] ? fput_close_sync+0x11f/0x240 [ 596.138927][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 596.138954][ C1] __x64_sys_openat+0x138/0x170 [ 596.138977][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.138996][ C1] do_syscall_64+0x15f/0xf80 [ 596.139014][ C1] ? clear_bhb_loop+0x40/0x90 [ 596.139035][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.139053][ C1] RIP: 0033:0x7f6ddb004407 [ 596.139081][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 596.139097][ C1] RSP: 002b:00007ffe00acc440 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 596.139115][ C1] RAX: ffffffffffffffda RBX: 00007f6ddaf7a780 RCX: 00007f6ddb004407 [ 596.139128][ C1] RDX: 0000000000080000 RSI: 00007ffe00acc5b0 RDI: ffffffffffffff9c [ 596.139141][ C1] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 596.139151][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f6ddaf6a000 [ 596.139163][ C1] R13: 00007f6ddaf6a000 R14: 0000000000000001 R15: 00007ffe00ae0b90 [ 596.139185][ C1] [ 596.414140][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 596.421149][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 596.430299][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 596.440411][ T31] Call Trace: [ 596.443729][ T31] [ 596.446701][ T31] vpanic+0x56c/0xa60 [ 596.450780][ T31] ? __pfx___schedule+0x10/0x10 [ 596.455696][ T31] ? __pfx_vpanic+0x10/0x10 [ 596.460257][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 596.466483][ T31] panic+0xc5/0xd0 [ 596.470434][ T31] ? __pfx_panic+0x10/0x10 [ 596.474922][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 596.480365][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 596.486779][ T31] watchdog+0x102c/0x1030 [ 596.491324][ T31] ? watchdog+0x1c9/0x1030 [ 596.495817][ T31] kthread+0x389/0x470 [ 596.499939][ T31] ? __pfx_watchdog+0x10/0x10 [ 596.504658][ T31] ? __pfx_kthread+0x10/0x10 [ 596.509291][ T31] ret_from_fork+0x514/0xb70 [ 596.513927][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 596.519075][ T31] ? __switch_to+0xc79/0x1410 [ 596.523882][ T31] ? __pfx_kthread+0x10/0x10 [ 596.528510][ T31] ret_from_fork_asm+0x1a/0x30 [ 596.533324][ T31] [ 596.537287][ T31] Kernel Offset: disabled [ 596.541636][ T31] Rebooting in 86400 seconds..