last executing test programs: 5m5.284351482s ago: executing program 0 (id=1283): r0 = socket(0x840000000002, 0x3, 0x100) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) close(0x3) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000800000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x400c880) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f0000000240)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x6, 0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x15, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) openat$cgroup_ro(r3, &(0x7f0000000140)='cgroup.controllers\x00', 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000004c0)=0x40000004, 0xfffffe5b) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001140), 0x0, 0x40080) write(r4, &(0x7f0000000740)="3d3e2639c9b250d37f8a0370f0c2123a1cb94bc821c6efb0ff3203261952a7869fd109ee35629ca860f8a6ad86b939e51e43195a35c7457eb40a2529807cf627cd283d8aac16d5152705aa2142799bdcfbcc522e78af6b01ab33e9475bc29270cbce8717a3a10cd99546b4352da58be24e8a21f7ea6fc4c96a6a2a8f8bd0f73c2e55468d97fb28dc0b62e85b8e8d53e3f62da90a7ff5da479f4e3e1d1b195d2e0fcf84bad8d8e3685bf57cff0dbffbb134cbf935515b5c6d443dd85be981e32d268bfa44a9ddebced5bcc5170d6f44ea8f0137a3fccdb430fd32c50dd19b9bfcdb3a734069ba8bf6", 0xe8) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) sendmsg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "03"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r6, &(0x7f0000000700)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @loopback}}, 0x80, &(0x7f0000002740)=[{&(0x7f0000001640)="f3b6c793abbe562d87ab5a4361186984bf811ec753cf9572c8545b891bcff204c3807a", 0x23}], 0x1}, 0x20000000) 5m4.747908313s ago: executing program 0 (id=1286): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61122400000000006113340000000000bf10000000000000150002000000f0ff3d030100000000008701000000000000bc26000000000000bf67000000000000560300000ee600f0670200000f00000014030000e433fe1fbf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c785fb77dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25f40c87bf25b750bbaa"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100033062cbd7000000000007f00000100000000000000000000000000000000000000000000000000000000000000050000fffd00000000", @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000230300000000000000000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a000000000000000100000000000000000000000001000000000000020000e6230000000000000048000200656362286369706865"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, 0x0, 0x0, 0xff80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x17, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000066090100000003e71600000006000000180100002020702500000000002020207b9af8ff000000007e9000000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000d80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000dc0)={0x0, 0x39, &(0x7f0000000e00)={&(0x7f0000000e40)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000ec0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0xa, 0x0, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340020ff00000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2c41040000000000140012800b00010062"], 0x34}}, 0x4040) (async) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000006a00010000000000000000000000000000000000080001000200000008000e"], 0x28}}, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="14040000100001002cbd7000fedbdf25070000000200000008000000", @ANYRES32=r8, @ANYBLOB="f4031a80f0032d"], 0x414}], 0x1}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) (async) pread64(r0, &(0x7f0000000600)=""/155, 0x9b, 0x7) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2c, 0x25dfdbfc, {0xa, 0x14, 0x14, 0xc3, 0x0, 0x0, 0xfe, 0x6, 0x800}}, 0x1c}}, 0x20024090) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$kcm(0x11, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000001080)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, 0x0, 0x0) (async) sendmsg$kcm(r10, &(0x7f0000001100)={&(0x7f0000001140)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001200)="27030200590214120600002fb96dbcf706e105", 0x13}], 0x1}, 0x0) (async) bind$unix(r2, 0x0, 0x0) 5m2.753132425s ago: executing program 0 (id=1301): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_lsm={0x10, 0x3, &(0x7f00000010c0)=ANY=[@ANYRES64=0x0], &(0x7f0000001100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1a, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000920000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f00)={{r3, 0xffffffffffffffff}, &(0x7f0000000f40), &(0x7f0000000f80)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000fc0)={r4}, 0x4) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000002, 0x13, r3, 0xe3036000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x6, &(0x7f0000000780)=ANY=[@ANYRES32=r0], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r7, 0x0, 0x22, 0x0, &(0x7f0000000880)="63eced8e46dc3f0100000000000080cb995a2c686579f16ab705dc92182fac817849", 0x0, 0xcfac, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r2) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020a07020700000029bd7000f9dbdf2505001a00ffffff440000000000000000000000fe8800000000000000000000bf61b4a3260014ca"], 0x38}}, 0x4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="20040000", @ANYRES16=r8, @ANYBLOB="050000000007feffffff220000000a0001007770616e30000000"], 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r10, &(0x7f0000000c80)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r10, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000cc0)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r11, 0x1, 0x43, &(0x7f0000000d00)={0x0, 0x2710}, 0x10) writev(r11, &(0x7f0000000d40), 0x0) sendmmsg$inet(r11, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000e80)="90", 0x1}], 0x1, &(0x7f0000001180)=ANY=[@ANYRES8=0x0, @ANYRES16=r7, @ANYRESHEX=r1, @ANYRES8=r10, @ANYRES32=r2, @ANYRESHEX], 0x160}}], 0x2, 0x4000000) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000008c0)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @private0}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000c00)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=""/43, 0x2b, 0x1, 0x0}, &(0x7f0000000c40)=0x40) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001200010026bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="106401008b28010008001c00", @ANYRES32, @ANYBLOB="37faa4e6867f32e87cce1e5b1ad2197bba7ee17d4e106ee56212fde0ebc3dcde951cfbd6dbd7a993d2d8b852a348a462ea36516e9c5bf6ca05eea547a81d6eb0fa0c76fc0bc901d8e20667a31b704973de2fa887c2b8af708f158145d27435ad7348b797e57ebda497a77ef11ec28b27d8c53f587ffbaffba5f94ec19513997458590e952ba9dc7df5b2e49cc2b0ec3d3b5b00766e85d8061b26ef2e175b42b967c892445952509ee7f42cf8703f63c5898130a14d1dc460c1dea38bcf"], 0x28}, 0x1, 0x0, 0x0, 0x2004d808}, 0x20040044) 5m2.591343541s ago: executing program 0 (id=1306): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000005c0)={'syzkaller1\x00', 0x5001}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000005c0)={'syzkaller1\x00', 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$ethtool(0x0, r2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r3], 0x31c}, 0x1, 0x0, 0x0, 0x4050}, 0x4800) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f00000003c0)=r4, 0x4) (async) bpf$LINK_DETACH(0x22, &(0x7f00000003c0)=r4, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x80, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) socket$inet(0x2, 0x1, 0x0) (async) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) (async) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000300)={0x2, 0x0, @local}, 0x10) (async) bind$inet(r6, &(0x7f0000000300)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) (async) connect$inet(r6, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r4, 0x0, 0x0}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000100)={0x1, [0x0]}) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000100)={0x1, [0x0]}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000200)=0x2001, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x1, 0x0) (async) r9 = socket(0x10, 0x1, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000180)=@delchain={0x3c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r10}]}}]}, 0x3c}}, 0x4040004) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r9) 5m1.997138709s ago: executing program 0 (id=1311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xcc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100), 0x0, 0x64, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x95, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)=""/193, 0x17b, 0xc1, 0x1, 0x7}, 0x28) (async) socketpair(0x28, 0x1, 0x7, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$packet(r4, &(0x7f00000007c0)="45b996d32b72d3a7090d0a46598c549043ce3470d6054227bc9e7e6cc344e4c82fea177c5af48690df2ff570b5bafc40f09d5cf5ab9c0e9ef0abb69582460eaf5f81316b04d8d0a5a04366099423227582ae258da8ba8e58ab1c8b6538367a238e9202867da375cb2dbb1a3313d141f2fe82d488d386c627d64311184f3374c5743ca07ded1b262fd6ee2dbcb63fc7808cfeff121340ef33d443510683f9cd40b8f7b7032fb4", 0xa6, 0x40000c1, &(0x7f0000000880)={0x11, 0xf8, r2, 0x1, 0xd2}, 0x14) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) close(0x3) (async) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000008c0)={0x0, 0x10, &(0x7f0000000900)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000940)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000980)={r8, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000a40)=0x84) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000100)) (async) sendmmsg$inet_sctp(r6, &(0x7f0000000a80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r5, 0x84, 0x81, &(0x7f0000000b00)="1a00000002000000", 0x8) r9 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000b40)={r8, 0x5f3f}, &(0x7f0000000b80)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@arena={0x21, 0x0, 0x0, 0x2d, 0x20000, r1, 0x0, '\x00', r2, r3, 0x2, 0x0, 0x4}, 0x50) (async) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="e80000000109010400000000000000000100002abc0002002c0001"], 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x8008) 5m0.967873542s ago: executing program 0 (id=1324): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4004}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x29, 0x1, 0x70bd27, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2204c85c}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r5) getsockname$packet(r5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0xd) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendto$packet(r2, &(0x7f00000007c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000800)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) (async) sendto$packet(r2, &(0x7f00000007c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000800)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 4m45.947956663s ago: executing program 32 (id=1324): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4004}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x29, 0x1, 0x70bd27, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2204c85c}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r5) getsockname$packet(r5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0xd) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendto$packet(r2, &(0x7f00000007c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000800)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) (async) sendto$packet(r2, &(0x7f00000007c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000800)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 2m37.815046732s ago: executing program 5 (id=2740): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x2e8}}, 0x4008004) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000400)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000500), &(0x7f0000000540)=@tcp6=r0}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={0x2, 0xffffffffffffffff}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000800)={0x1, 0x1000, "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"}, &(0x7f0000001840)=0x1008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000001880)={r5, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0xcb02, 0x100}, 0x90) sendmmsg$inet6(r0, &(0x7f0000000580), 0x400, 0x0) 2m37.602305271s ago: executing program 5 (id=2744): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}]}, 0x2c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x3e, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x7}, {0xfff3, 0xffff}, {0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x4, 0x2}}, @TCA_FW_MASK={0x0, 0x5, 0xfff}]}}]}, 0x40}}, 0x0) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x2700, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x4e21, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0x30000, 0xb00}, @sack={0x5, 0x6, [0xc]}]}}}}}}, 0x4a) 2m37.356346904s ago: executing program 5 (id=2747): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x9, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000380)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6800009f001000ffff25bd7000fbdbdf25000000", @ANYRES32=0x0, @ANYBLOB="4200000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r5, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r7, 0xf504, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e24, 0x80000000, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0x1}) r8 = socket$kcm(0x29, 0x2, 0x0) close(r8) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000400)={&(0x7f0000000440)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r8, 0x1, 0xd, &(0x7f0000000480), 0xfe11) close(r8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x1000000, @empty}, 0x1c) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000580)={&(0x7f0000000500)=""/99, 0x63}) ioctl$F2FS_IOC_GET_PIN_FILE(r9, 0x8004f50e, &(0x7f00000004c0)) 2m36.497918081s ago: executing program 5 (id=2756): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000bc0)=r1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x4c02}) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000240)=""/44, 0x2c}, {&(0x7f0000000c40)=""/4096, 0x1000}], 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000001c40)=0x730) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000001c80)={'syzkaller1\x00', @link_local}) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000c00)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendfile(r7, r8, 0x0, 0x6) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f00000002c0)={0x20000004}) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 2m35.979838562s ago: executing program 5 (id=2760): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x18) r1 = socket(0xa, 0x3, 0xff) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x1536ef9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e24, @private=0xa010104}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000001c0)={r5, 0x9}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d40)={0xd, 0x10, 0x0, 0x0, 0x9}, 0x94) setsockopt$inet6_int(r1, 0x29, 0x4d, &(0x7f0000000200)=0x7, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x2c, 0x1, @empty, @mcast2, {[@hopopts={0xff}]}}}}}, 0x0) recvmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/17, 0x11}, 0x2}], 0x1, 0x10102, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_mreqn(r0, 0x0, 0x27, 0x0, 0x0) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x18) (async) socket(0xa, 0x3, 0xff) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r3, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x1536ef9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e24, @private=0xa010104}}}, &(0x7f0000000180)=0x84) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000001c0)={r5, 0x9}, 0x8) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d40)={0xd, 0x10, 0x0, 0x0, 0x9}, 0x94) (async) setsockopt$inet6_int(r1, 0x29, 0x4d, &(0x7f0000000200)=0x7, 0x4) (async) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x2c, 0x1, @empty, @mcast2, {[@hopopts={0xff}]}}}}}, 0x0) (async) recvmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/17, 0x11}, 0x2}], 0x1, 0x10102, 0x0) (async) 2m35.016710912s ago: executing program 5 (id=2777): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x29, 0x1, 0x0, 0x0, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x1}]}, 0x1c}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xd4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0xf, 0x101c, &(0x7f0000001ac0)=""/4124, 0x40f00, 0x4d}, 0x94) 2m19.995866215s ago: executing program 33 (id=2777): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x29, 0x1, 0x0, 0x0, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x1}]}, 0x1c}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xd4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0xf, 0x101c, &(0x7f0000001ac0)=""/4124, 0x40f00, 0x4d}, 0x94) 2m16.293750935s ago: executing program 2 (id=2895): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x52e, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xa}}}, 0x24}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0x5}, {0xb, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r5) (async) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000fddbdf254f00000008000300", @ANYRES32=r10, @ANYBLOB="24007a800c000300d216076c58f0d01c233e4f91502b85562614de01006855c5c9850657e9bba8e4e7b91f51b5"], 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x10c, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0x2, 0xf}, {0x8, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x2}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m15.875938223s ago: executing program 2 (id=2897): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000800000000000000000000000850000004f00000085000000070000009500000000000000"], &(0x7f0000000680)='GPL\x00'}, 0x5d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000180)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) 2m15.860822473s ago: executing program 2 (id=2898): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x102, 0x4}}, 0x10) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000140)={&(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x0) (async) ppoll(&(0x7f00000001c0)=[{r2, 0x3000}], 0x1, &(0x7f0000000200), 0x0, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001e0021002bbd7000000000000a0000000501000000000000140001"], 0x30}}, 0x0) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r4, 0x1, 0x24, 0x0, &(0x7f0000000000)) (async) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000100)) 2m15.740303747s ago: executing program 2 (id=2900): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) pipe(&(0x7f0000000080)) socket$nl_rdma(0x10, 0x3, 0x14) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0xa, 0x3) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000008c0)=""/4095, 0xfff}, {&(0x7f00000018c0)=""/245, 0xf5}], 0x2}}], 0x1, 0x2000, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="8000e86503000013", 0x8}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000029000000040000003a00000000000000100000000000000029000000", @ANYRES32=r0], 0x30}, 0x4004000) 2m15.474254397s ago: executing program 2 (id=2903): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x40, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010034b0000008178e3c5000020000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800c00220013670000000000000c002300e908000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20004014}, 0x4) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040029bd7000fbdbdf25190000000c0099000200000038000000060069097576fee22064ee6de1eda6a7bb276d007f00e80f05001d0001000000"], 0x40}, 0x1, 0x0, 0x0, 0xa0}, 0x20004021) 2m14.99972333s ago: executing program 2 (id=2904): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRESDEC=r0], 0x3c}}, 0x40000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000029000500000000000000000007000000"], 0x14}}, 0x0) (async) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x478, 0x0, 0x0, 0x148, 0x0, 0x148, 0x3e0, 0x240, 0x240, 0x3e0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e1c, 0x4e20, 0x8, 0x2, 0x5f4a, 0x100, 0xa22}}}, {{@ip={@multicast1, @multicast1=0xe000003f, 0xff000000, 0xffffff00, 'hsr0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x2, 0x0, 0x60}, 0x0, 0x260, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x7, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x0, 'syz1\x00', 0x5}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x6768, 0xe, [0x5, 0x31, 0x23, 0x33, 0x12, 0x26, 0x8, 0x32, 0x12, 0x1c, 0x27, 0x31, 0x8, 0x3e, 0x31, 0x17], 0x1, 0xfffffffe}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r5}) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1m59.894361752s ago: executing program 34 (id=2904): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRESDEC=r0], 0x3c}}, 0x40000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000029000500000000000000000007000000"], 0x14}}, 0x0) (async) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x478, 0x0, 0x0, 0x148, 0x0, 0x148, 0x3e0, 0x240, 0x240, 0x3e0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e1c, 0x4e20, 0x8, 0x2, 0x5f4a, 0x100, 0xa22}}}, {{@ip={@multicast1, @multicast1=0xe000003f, 0xff000000, 0xffffff00, 'hsr0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x2, 0x0, 0x60}, 0x0, 0x260, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x7, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x0, 'syz1\x00', 0x5}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x6768, 0xe, [0x5, 0x31, 0x23, 0x33, 0x12, 0x26, 0x8, 0x32, 0x12, 0x1c, 0x27, 0x31, 0x8, 0x3e, 0x31, 0x17], 0x1, 0xfffffffe}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r5}) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 4.443697163s ago: executing program 3 (id=4025): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f00000002c0)='./file0\x00'}, 0x18) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x49f, '\x00', r2, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@arena={0x21, 0x0, 0x0, 0x39, 0x20400, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x6}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xd, 0xfb, 0x90a3, 0x0, 0x20010, 0xffffffffffffffff, 0x5, '\x00', r2, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1c, 0x8, &(0x7f0000000040)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0x2}, @exit, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x0, 0x0, 0x4, 0x7, 0x1}], &(0x7f0000000080)='GPL\x00', 0x7fffffff, 0x95, &(0x7f0000000180)=""/149, 0x41100, 0x1, '\x00', r2, @fallback=0x3, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0xb, 0x1000, 0x7}, 0x10, 0x0, r4, 0x2, &(0x7f0000000740)=[r5, r6, 0xffffffffffffffff, r7, r8, r9], &(0x7f0000000780)=[{0x1, 0x5, 0x3, 0x9}, {0x1, 0x4, 0x7, 0x7}], 0x10, 0x8}, 0x94) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000880)={@rand_addr, @initdev, 0x0}, &(0x7f00000008c0)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newqdisc={0x21c, 0x24, 0x800, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xffff, 0xb}, {0x6, 0x9}, {0xfff1, 0x7}}, [@TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x7f, 0x1, 0x4, 0x0, 0x7265, 0x7, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x1, 0x6, 0x4, 0x6, 0x0, 0x5, 0x8, 0x4}}, {0xc, 0x2, [0x400, 0x46e7, 0x6, 0x8000]}}, {{0x1c, 0x1, {0x4c, 0x1, 0x100, 0x6, 0x2, 0x5, 0x2, 0x4}}, {0xc, 0x2, [0x1, 0x80d, 0xa5, 0x7]}}, {{0x1c, 0x1, {0x80, 0x5, 0xb081, 0x7, 0x1, 0x1, 0x8, 0x9}}, {0x16, 0x2, [0x401, 0x5, 0x3, 0x8001, 0x7f, 0x7, 0x8, 0x1, 0x6c]}}, {{0x1c, 0x1, {0x0, 0x1, 0x1, 0x9, 0x0, 0x9, 0x8, 0x7}}, {0x12, 0x2, [0xffff, 0x1ff, 0x8000, 0x3, 0x7f, 0x1000, 0xd4a3]}}, {{0x1c, 0x1, {0x3, 0x62, 0x5, 0x5, 0x2, 0x3, 0x40, 0x8}}, {0x14, 0x2, [0x2, 0x3, 0x2, 0x2, 0x4, 0x7f, 0xa, 0x8]}}]}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x9, 0x1}}}, @TCA_STAB={0xd8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb, 0x5, 0x8, 0x0, 0x2, 0x0, 0x6, 0x3}}, {0xa, 0x2, [0x0, 0x2, 0x7]}}, {{0x1c, 0x1, {0xf4, 0x8, 0x101, 0x682, 0x3, 0x9dfa, 0x4, 0x4}}, {0xc, 0x2, [0xbc01, 0x0, 0x2, 0x6]}}, {{0x1c, 0x1, {0x3, 0x5f, 0x0, 0xfffffff7, 0x2, 0x2, 0x64b, 0x2}}, {0x8, 0x2, [0x7, 0x0]}}, {{0x1c, 0x1, {0xc, 0x40, 0x800, 0x0, 0x0, 0xffff, 0x9, 0x7}}, {0x12, 0x2, [0x6, 0x0, 0x9575, 0xb, 0x8000, 0x7fff, 0x28fe]}}, {{0x1c, 0x1, {0x5, 0x8, 0x1, 0x7, 0x1, 0x4, 0x9, 0x7}}, {0x12, 0x2, [0x0, 0x9, 0x4, 0x6, 0x2, 0xa4a8, 0x15]}}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x1}, 0x340400c4) 3.24870827s ago: executing program 6 (id=4032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'hsr0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="01154e0001000011221e445588fbca0100011606f2bde7b0661c1ee3", 0x1c, 0x0, &(0x7f0000000280)={0x11, 0x0, r2, 0x0, 0x0, 0x0}, 0x14) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000000)={0x2, 0xb, 0xa4a}, 0xc) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000080)={0x10000000}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000140)={0xa0000001}) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x810) 2.855932189s ago: executing program 6 (id=4034): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x6, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000200000000000000000850000009e000000c3004000000000"], &(0x7f0000000280)='GPL\x00', 0x8, 0xeb, &(0x7f00000002c0)=""/235, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="680000000206050000000000000000000000fffd0e0003006269746d61703a697000000005000400000000000900020073797a310000000020000780050003001f0000000c00018008000140ffffffff080006400000021c05000500020000000500010006"], 0x68}}, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000004c0)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r1, 0x0, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000010001000000000000000000850000007500000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x16}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000006c0)={0x2, &(0x7f0000000700)=[{0x40, 0x0, 0x9}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001140)={r2, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000e80)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000ec0), &(0x7f0000000f00)=[0x0, 0x0], 0x0, 0xf2, &(0x7f0000000f40)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000f80), &(0x7f0000000fc0), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000bc0)={0x1c, 0xd, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x8000) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r8, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001300)=0x14) sendmsg$nl_route(r10, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r11, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r11, @ANYBLOB="fdff0100ac1414aa"], 0x20}}, 0x0) (async) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f00000003c0)={@mcast1, r6}, 0x14) (async) sendmsg$inet(r4, &(0x7f0000001580)={&(0x7f0000000a40)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000cc0)="4eeee94db98c1005eec7e982eb92aa011587215be988dedc0d519f1603aba5eb0f672ec8a3d027a20bd340059bf5da0cd95b62c9a85b3904bba696bddeb7e4597e7e26ac42b64d1140b07f575e22667780b081b88ee06d01148ace067644dcbe2bb02fcbd1e3c6a45d32dca21e542942f4f4c67eaafeeb04f6bd5d403487d464cb2a5a2f33154d0ea364023f0a2850caafa59b007b421e800f1f608479f94a504cb4f6c47bd6f488c4abd5a7d1cf4d521383c7546cc6701cd4", 0xb9}, {&(0x7f0000000d80)="d87ef46ac052ca2a06b84bfe174663ac98e31809783902de12a0e14e6c4042b15fd8b815e2eaefb936a24dba4f07ff2ff0130d059e3b425668e4d1c71aba245797f468b89cf12fa55fec0e2784524357a84c57aadb4bb5e8854961f58d1d2b9b384deda672b4f379fac17b498da7885c34f89e3cfba6a94df0103ad9b8cb115ed7b07aa60c5682fa8730173724fe1531b43e332cb4a8887f9a8bc2b7f9ffe7fcfe22", 0xa2}], 0x2, &(0x7f00000014c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @multicast2, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x70}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r5, 0x5, 0x14, 0x0, &(0x7f0000000900)="259a5388a8f338000d2f15000000000000075500", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000016c0)={r4, &(0x7f00000015c0)='+*--\x00', 0x2000, &(0x7f0000001600)={@_ha_fsid={[0x9, 0x12]}, {0x9, 0x8000, 0x4, 0x401}}, 0x4, &(0x7f0000001640)={@_ha_fsid}, &(0x7f0000001680)=0x5}) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x3, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180200000000000000000000000000002d580600103c0000180100002020702500000000002020207b1af8ff00000000bf64ea68a054f0e2690cfc981084ffffb702000008000000b70300000200000084e90000170064466e2162b2cf8f29e9"], &(0x7f0000000b80)='GPL\x00', 0x5f9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r12}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r13, 0x0, 0x0, 0x0, &(0x7f0000000b40), 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r14 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r14, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x100, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x4}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0xffffffffffffff6a}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x4}}]}, 0x100}, 0x1, 0x0, 0x0, 0x1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.797450335s ago: executing program 3 (id=4037): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x10) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0xfff, 0x5, 0x5eaf, 0x37, 0x9, 0x8, 0x3, {0x0, @in6={{0xa, 0x4e20, 0x1ff, @private0, 0x40}}, 0xb, 0x7, 0xe1, 0x3, 0x7}}, &(0x7f0000000200)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={r0, 0x3, 0x30}, &(0x7f0000000280)=0xc) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003ac0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x3c, r3, 0x7, 0x1000002, 0x1, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x3c}}, 0x40800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) accept(r4, &(0x7f00000006c0)=@x25, &(0x7f0000000740)=0x80) sendto$inet6(r5, &(0x7f0000000400)="c2", 0x1, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000480)=[{{&(0x7f00000004c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000540)="e3", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000580)={0x7, 0x7, 0xc, 0x9, 0x0, 0xc, 0x4, 0x6, 0x8, 0x2, 0xa1, 0x4, 0x3, 0x80}, 0xe) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 2.26222686s ago: executing program 6 (id=4041): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000000)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @private=0xa010100, @empty}}}], 0x20}}], 0x1, 0x4004004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r0, 0xfffff000) 2.041400308s ago: executing program 1 (id=4045): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000240)=0x3, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0xfffe, 0x0, @mcast1={0xff, 0x4}}, 0x1c) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="a0"], 0xffd8}}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1) write$cgroup_int(r2, &(0x7f0000001640), 0xfffffdef) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)={0x28, r4, 0x1, 0x400000, 0x25dfdbfd, {{0x8}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x400c0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095706fa63923ac71d07d80a7b0c096637bbb57d85327adcc323d751885acb398a16abfc1640f3a0fbc054187a31ec83c84ddf08a5adfd5c8ace77123782cae96766184153a898ebde8c0e1005867174e266cebcfa4a8abfbdb99ac4ab3b9c19dc48b3952dace3ed03fe09e33d8505b1624d6dabea2bd1d88af65fa6583"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) ioctl$OCFS2_IOC_MOVE_EXT(r7, 0x40406f06, &(0x7f0000000140)={0x4, 0x7fffffffffffffff, 0x1e914, 0x5f, 0x3}) 1.760202161s ago: executing program 3 (id=4046): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4412c, 0x13}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4040) 1.732402122s ago: executing program 7 (id=4047): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000002000000732ac0fa1e65340018020500090000010000000000000000180200000a0000010000000000000000bfa20000000000c0ffffffb703000040000000b7040000000000008500fe06450000008500000000000000e680c28f1fb66fec3c195e9873052231d3a4d8de67bc3391d9be031f20bddaf7780d0ba4b99ad46efef666d2f42586e992e75ab4a1aeb79b7f07444ada204ead54cc33fde0770aa6449e26ec78af1ee1ec3b43cab866cb90024bf31aef63990802617888d2a3c2240e025203cd2f98021be25b4e4edc499f107b687c2b4e2c3df15b0acfc2d96f9d1a99990b67735b06e78f5348a8301a1c9e"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1d, 0x5, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000680)=r0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000000000000000000000000000000000000000023"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@enum={0x3, 0x2, 0x0, 0x6, 0x4, [{0x7, 0x8}, {0x6, 0x4}]}]}, {0x0, [0x2e, 0x0, 0x30, 0x2e, 0x30]}}, &(0x7f0000000800)=""/159, 0x3b, 0x9f, 0x0, 0x2}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0xc, &(0x7f0000000980)=ANY=[], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000a40)=r2, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x1f, 0xd, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000850000007d00000018110000", @ANYRES32=r4, @ANYRESOCT=r1], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket(0x2a, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000a80)={0x7, 0x7, 0x4}, &(0x7f0000000ac0)=0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000b00)={'geneve0\x00'}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000b40)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000b80)="110000001000"/22, 0x16) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'virt_wifi0\x00', 0x0}) r10 = gettid() r11 = socket(0x2, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r9, @ANYBLOB="089805000750050008001300", @ANYRES32=r10], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) 1.515751531s ago: executing program 3 (id=4048): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000740)="10000000000000000000000900f6", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r3) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x2c, r4, 0x701, 0x0, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}]}, 0x2c}}, 0x40) (async, rerun: 32) r6 = socket$inet6(0xa, 0x80002, 0x0) (rerun: 32) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000340)=0x5dde, 0x4) (async) sendmmsg$inet6(r6, &(0x7f0000000380)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x4, @mcast2}, 0x1c, 0x0}}], 0xd, 0x4000800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x150, 0x24, 0x601, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0xfffffffffffffe43}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x7, 0x3, 0x7, 0xf, 0x1f, 0x1, 0x2}}, @TCA_RED_MAX_P={0x8, 0x3, 0x2}]}}]}, 0x150}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000c00000000010000000100000506000000010000000200000000000000005f"], 0x0, 0x58, 0x0, 0xa}, 0x28) (async) ioctl$sock_inet_SIOCSIFNETMASK(r8, 0x891c, &(0x7f00000000c0)={'wg0\x00', {0x2, 0x4e22, @empty}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000390400000000fcdbdf25000003e4", @ANYRES32=0x0, @ANYBLOB="00080000c31006003c0012800e0001006970366772ad720cd4ee49edda261af38f86eb6574617000000028000280060011004e22000014000700ff020000000000000000"], 0x5c}}, 0x0) 1.475315355s ago: executing program 4 (id=4049): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000052c0)=@newtfilter={0x74, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x34, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0xc}}, @TCA_U32_SEL={0x24, 0x5, {0x1, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xe3d, 0x5, 0x97a, 0x7}]}}, @TCA_U32_POLICE={0x4}]}}, @filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x2}]}}]}, 0x74}}, 0x24040084) 1.255798441s ago: executing program 4 (id=4050): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x100, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="be041abb136887a6269c104980de0aed4ca7342e4137f0f8f0b0f151cbd9030e1879151ce94c0cb5db62416e55", 0x2d}], 0x1, &(0x7f0000000540)=[@hopopts={{0x40, 0x29, 0x36, {0x67, 0x5, '\x00', [@ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0x79}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @mcast2}, @generic={0x4e}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xffffff7f}}, @hopopts_2292={{0x68, 0x29, 0x36, {0xc, 0x9, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xd, 0x3f, "0f3b0a043ae4f222cd2b0fbb4044a9bd1a4653d80382c310c46337fe3a08908461f17b054a638de3036df750a8943bb45a163271db305e138a7e71775e951e"}]}}}, @tclass={{0x14, 0x29, 0x43, 0xfff}}, @rthdr={{0xa8, 0x29, 0x39, {0x2c, 0x12, 0x1, 0x0, 0x0, [@empty, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private2, @private1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @local}, r1}}}, @hoplimit_2292={{0x14}}], 0x1d8}}], 0x2, 0x20000004) shutdown(r0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x76}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x1, 0x8, &(0x7f0000000c00)=""/102394, &(0x7f0000019c00)=0x18ffa) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x807}, &(0x7f0000000200)=0x90) 1.249149247s ago: executing program 7 (id=4051): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000008000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000000000000100000008000100010000002400048005000300050000000500030080ff0000050003000100000005000300090000000800020002"], 0x48}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.143814581s ago: executing program 6 (id=4052): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) 1.01672503s ago: executing program 3 (id=4053): bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @broadcast, @empty}, &(0x7f0000000100)=0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r0, 0x0}, 0x50) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000)=0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xa, 0x1011, &(0x7f0000000840)=""/4113, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 1.016049484s ago: executing program 4 (id=4054): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd0, &(0x7f00000000c0), 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x0) socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x200000, @mcast2}, 0x1c) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0xe}, 0x1c) 1.015904513s ago: executing program 1 (id=4055): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0xa, 0x2, 0x3, 0x2, 0x0, 0x70bd29, 0x25dfdbff}, 0x10}}, 0x20048004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x2, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff01010000260000000019e1b6950000000000000018100000", @ANYRES32, @ANYBLOB="100000000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x1, 0x138, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff75, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4720}, 0x37) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000180)={'wlan1\x00', @link_local}) 966.453218ms ago: executing program 6 (id=4056): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080)=0x10001, 0x4) recvfrom(r0, 0x0, 0x0, 0x40010000, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000180)={&(0x7f00000002c0)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x52, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0x10d7, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0xfffffffffffffd10}, {0x4, 0x6, "cf908e4229cef19e929eca7cbee2023dbe49a17287dde768b5fa3ca767f6f13f9cda20f02b48d9d14be259c3b84f6dc8bbfb013c5d4dce55bc18ff7cbae8fba0960aa6b0a25dfc66ca37b699818f1cef29fe753ba9a0820af28fc3538606b004e5c950f1bbd6"}, {0xfffffffffffffd68}, {0xc}}}]}]}, 0xf8}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x38, 0x9, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x38}}, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000200)=0x5, 0x4) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000440)={0x2, 0xfffe, @multicast1}, 0x10, &(0x7f0000000480)=[{&(0x7f00000004c0)="be38", 0x2}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b0014000000000000000000000007"], 0x38}, 0x0) listen(r2, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f00000012c0)=0xe) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) syz_emit_ethernet(0x76, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x7, '\x00', {0x6, 0x6, '\tkS', 0x86, 0x33, 0xff, @empty, @loopback, [@fragment={0x29, 0x0, 0x6, 0x0, 0x0, 0x5, 0x68}], "93f79649efef1d8c"}}}}}}}, 0x0) accept4(r2, 0x0, 0x0, 0x80000) 924.877918ms ago: executing program 3 (id=4057): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x98, &(0x7f0000000240)=""/152, 0x41000, 0xa}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000002080)=@raw={'raw\x00', 0x4001, 0x3, 0x300, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x268, 0x206, 0x240, 0x268, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc8, 0xf0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@addrtype={{0x30}, {0xb07, 0x19, 0x20, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x110, 0x178, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bridge_slave_1\x00', {0x21, 0xfffffffe, 0x0, 0xc, 0x0, 0x531aeecb, 0xc07, 0x0, 0x18}, {0xfff}}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@broadcast, [0xff, 0xffffff00], 0x4e22, 0x2b, 0x2, 0x4e20, 0x8, 0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x3, 0x3, 0xd, '\x00', 'syz0\x00', {0x54}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000000c0)={0x1, 0x9, 0x20, 0x7fff, 0xffffffffffffff8b}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x2, 0x0, 0xfffffffe, 0x2, r4}, &(0x7f0000000400)=0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f00000004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000008362365d7f39b2cf9d2179a9a5f72faf9f9dc05d9f85f2c88518b6da8b472f7bd8a529ef75a54b787b41d3a090faa3eab9f613861e77d37aa2d7e8595017f55548e9ea3461f0aa1a5515e09cd567321c96b4e0d3c6a6049557361bf58224468ae813b2f37a504916f1be612aef02d05b50be4a736fdf6f8430f6d8eb5a0525c3df814342de0ba42644f1d5cc57751da47f208e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x2, 0x3, &(0x7f0000000cc0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x1}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000002840)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000002d00)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) write$cgroup_pid(r2, &(0x7f0000000300), 0xffffff98) splice(r1, 0x0, r0, 0x0, 0x100000006, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) bind$can_raw(r7, &(0x7f0000000380)={0x1d, r8}, 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f000000af80)={0x1, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f000000b000)=@bpf_lsm={0x1d, 0x3, &(0x7f000000b0c0)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, 0x0, 0x1, 0x0, &(0x7f000000b140)=[{0x0, 0x5, 0xd, 0x9}], 0x10, 0x3}, 0x94) 876.234556ms ago: executing program 4 (id=4058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000040900010073797a3100000000300004802c0001800a0001006c696d69740000001c0002800c000240000000000000000e0c00014000000000000000070900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000040900010073797a3100000000300004802c0001800a0001006c696d69740000001c0002800c000240000000000000000e0c00014000000000000000070900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x4c010) recvmmsg(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/122, 0x7a}, {&(0x7f0000000a00)=""/4107, 0x100b}, {&(0x7f0000001a40)=""/80, 0x50}], 0x4}, 0x401}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x38000000}, {{0x0, 0x0, 0x0}, 0x4}], 0x4, 0x40000102, 0x0) 855.483682ms ago: executing program 7 (id=4059): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_generic(r0, 0x0, 0x20000800) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x161042, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000340)={0xa0000004}) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000440)={0x42, 0x1}, 0x10) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000540)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000580)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r5, &(0x7f00000005c0)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000600)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="f6", 0x1}], 0x1, &(0x7f0000000700)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x49, 0x4bc, 0x2}}], 0x20, 0x40801}, 0x50) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000740)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000780), 0x8) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000480)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f00000004c0)={0x42, 0x1}, 0x10) bind$tipc(r3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000380)={0x40000013}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="54000000000000973df99fa5e66551b131199d86f6757dd179632ef6f8bb90d79fc50ce2cb08a1c5cbb928db3ea3d330224f25ee72688cb39a7a68c9062d173b1bcd564d475628ea22713a3043102070136a24d088fd3aa2533c8e69707bf3d491dbd19f5618b1899d5e841de9fea1f5440762122221f2daa4a81e06a221e5358cdb4a2fa46c50f99203966b991b30f5a83da15835", @ANYRES32=0x0, @ANYBLOB="441001000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="18a00300100000000a000100aaaaaaaaaa240000"], 0x54}, 0x1, 0x0, 0x0, 0x80c4}, 0x0) 787.079909ms ago: executing program 1 (id=4060): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x100) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x40000) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) pselect6(0x40, &(0x7f0000000140)={0x4, 0x9, 0x7, 0x3, 0x1, 0x0, 0x4, 0x80000000}, &(0x7f0000000180)={0x6, 0x3ff, 0xc599, 0x3ff, 0xfffffffffffffff7, 0x10001, 0x9, 0x1}, &(0x7f00000001c0)={0x7, 0x9, 0x100000000, 0x7, 0x1, 0x3ee4, 0x3, 0x5}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x1]}, 0x8}) close(r6) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 675.915018ms ago: executing program 4 (id=4061): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xe84a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x24}}, 0x24000000) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x44, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4004841}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x19}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0xa, 0x7, 0x1, 0x0, "0100696a47b8"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x19, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xa, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0xb, 0x0, 0x0, 0xffffffffffffffff}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80005}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xe84a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x24}}, 0x24000000) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x44, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080) (async) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4004841}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x19}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0xa, 0x7, 0x1, 0x0, "0100696a47b8"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x4) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x19, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xa, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0xb, 0x0, 0x0, 0xffffffffffffffff}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80005}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24}, 0x94) (async) 642.765502ms ago: executing program 1 (id=4062): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x6, 0x5, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4}, @ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000600)='GPL\x00', 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000060000000180ac6cb63ed68a7a9932d832fd81ebcc607213bdeb"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000001c0), &(0x7f0000000200)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x28, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000", @ANYBLOB, @ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r1, &(0x7f0000000380), 0x0}, 0x20) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0x0, 0x44) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0xf03a0005) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x34, r5, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0xa}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000220000757920500397e6d3b9dc5fcea7700000000000000080018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0xd, r2}, 0x94) 491.781555ms ago: executing program 1 (id=4063): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6(0xa, 0x3, 0xff) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r3}, 0x8) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)=@base={0x10, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r5, &(0x7f00000008c0), &(0x7f0000000900)=@udp, 0x1}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x5, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f00000001c0)=0x2, &(0x7f0000000200)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r6, &(0x7f0000000280)}, 0x20) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000012c0)={'syzkaller1\x00', @link_local}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000280)=0x474c, 0x4) bind$inet(r8, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r8, &(0x7f0000000340), 0x800001d, 0x0) setsockopt$inet_int(r8, 0x0, 0xc, &(0x7f0000000380)=0xfffffffc, 0x4) recvmmsg(r8, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/33, 0x11}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)="6a3f9ab8d42d2ffd50", 0x9}], 0x1}, 0x4000) write$tun(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 470.993354ms ago: executing program 4 (id=4064): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0x0) sendto$inet6(r3, &(0x7f0000000000)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a1f070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160005000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)=0x0) readv(r0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000400)=""/252, 0xfc}], 0x2) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) 396.461683ms ago: executing program 7 (id=4065): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000021000000000000000000850000002200000085000000d000000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x9, 0x7330bb4594ec9930}, 0xc) pipe(&(0x7f0000000440)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, &(0x7f0000000500), &(0x7f0000000540)=r2}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) r5 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000d00)={{0x14, 0x3ea}, [], {0x14, 0x3f4}}, 0x28}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x56, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x18, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x7fff, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r4, r6, r7, r8, r9], &(0x7f0000000a00), 0x10, 0x8}, 0x94) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={&(0x7f0000000000)="64e36a0afcd0598e4094b7dba32fedc7e3a4131ee027bb45ace88161ddf1ee7f93f5a372f3bd9ffaacc5f9e9d852a32f17abf0cee93b", &(0x7f0000000040)=""/192, &(0x7f0000000100)="c48651850ad1aa0d6879a1452060dc23117c15e5dc7377521cef43319e0463d121d9a6cb162d664f94d2d58f1d6db8fbc7469eb7a8526261c87af05ee686b75cf53bb2019fbbdd10c39a698b5bc90103e380fabd9badb762c1c5f024565d5fff800c15f8760912a1ee48b49e5e9f8eb4aec754973bcbdb0e981ed384268da7ccf4fb4dd4da6017884429fd0ed6cd3e078b9d36aad1c97f27f6c338ff9926ff31066e7c56f71f9960bf2669e1814c05dfcda13a2341e993484118cea24a8921b07d13ff704b95107a", &(0x7f0000000200)="c03799a9c72447e9b5c8e1ad56b2f80b14adace9f8bf8e04adb5c4b45312333b1591b4bd8fb911559e6584b005c508c446c6bd4e57f72153c97e0ca6e4069e4b5574485dfe0293e5e84967c91f0c8bab7fb3", 0x5, r10, 0x4}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x0, 0xcc0, 0x0, &(0x7f0000000c00)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 358.045526ms ago: executing program 7 (id=4066): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000003c0), &(0x7f0000000580)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r3, 0x5, 0xe, 0x0, &(0x7f00000007c0)="43227504001100b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) connect$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000fc0)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x49, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x2, 0x0, 0xfffc, 0x0, 0x0, 0x2f, 0x40, @empty, @multicast2}}}}}}, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(r4, 0x4030582b, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0x101, 0x9}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 215.05409ms ago: executing program 7 (id=4067): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@getchain={0x6c, 0x66, 0x4, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xffff}, {0xffe0, 0xffe0}, {0xffe0, 0xc}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0xff6e}, {0x8, 0xb, 0x27f1a}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x7f}, {0x8, 0xb, 0xfffffbff}, {0x8, 0xb, 0x40}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x8000003}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008055}, 0x200040c5) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e4b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80180002"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x4076cbba9945d516, &(0x7f0000000480)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000004) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000640)={0x0, 0xffffffffffffff0c, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB="00007b192da4c70a680000000300200000000000", @ANYRES8=r2, @ANYBLOB="252420040092ad0000380012800e00010069703665726070616e000000240002004e21000014000600fe8000000000000000000000000000bbea9c24745ad8d7fea5db2ca82eec5c716e4a96d47977396c5233136009612bd41fa7fcaec8aa0daf87fd53c16c3f66503af9cd2983fcd67fef31aa81939b0856a50e48cf5555b9d8bd4b155ec043fa7b5dd2e0fd31979a87d9000ff023abd22c0e76d9"], 0x58}, 0x1, 0x0, 0x0, 0x4040014}, 0x880) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000740)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="04010000", @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf25150000002000018014000200766c616e30000000000000000000000008000300020000002000018014000200776c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000300000000001400020076657468305f6d6163767461700000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="5c0001801400020062617461647630000000000000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="280001801400020076657468305f766972745f776966690008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB], 0x104}, 0x1, 0x0, 0x0, 0x40805}, 0x4001) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000940)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000980)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r8, 0x3c2d6000) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x2, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x25) syz_80211_join_ibss(&(0x7f0000000b80)='wlan0\x00', 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000bc0), &(0x7f0000000c00)=ANY=[@ANYRES32], 0x42) getsockopt$inet_tcp_int(r8, 0x6, 0x1, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x3, 0x7, &(0x7f0000000e00)=ANY=[@ANYBLOB="7911a800000000005501020000000000b70000000000000095000000000000008500000089000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 107.921741ms ago: executing program 1 (id=4068): syz_emit_ethernet(0x146, &(0x7f0000000240)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x110, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x20}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x21b7, "020000000400000126000400"}, {0x18, 0x1, '\x00\x00\x00\x00\x00\x00'}, {0x18, 0x13, "7c5fedeead5d05b87f9a168ce9fa5053c7dba3f0bfbdedf001ccf4f4c7e10fdfa608dbd75df7cd7eeab451ca0a9ee0f0146904f6d1d709ba386b75cb6cb259f3cf09c554b9ca2ceafb4e1735936011a5fb6caedf2de4d3d66ef12adef12a2e51ee8dbcc44a35c94addd32e245f8bb0ef39b811d2b15fbba865ede9c4b62806d93140e62eec2ca5a8c75f5cc4f8ed50c13bb26c028a5c"}]}}}}}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000004, 0x42072, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140)={0xfffc, 0xc}, 0x8) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) (rerun: 32) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000200)=0x10) (async) getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000000640)=""/4172, &(0x7f00000016c0)=0x104c) 0s ago: executing program 6 (id=4069): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)="8e", 0x1}], 0x1, 0x8001, 0x80) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x48010) close(r1) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) (async) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="02", 0x1}, {0x0}], 0x2}, 0x48000) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f00000004c0)={0x2, 0x4e23, @remote}, 0x10) (async) sendfile(r1, r0, 0x0, 0xf03a0005) kernel console output (not intermixed with test programs): 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 384.934580][T18122] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 384.966572][T18122] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 384.997605][T18350] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 385.039637][T18241] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.039792][T18241] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.039947][T18241] bridge_slave_0: entered allmulticast mode [ 385.043263][T18241] bridge_slave_0: entered promiscuous mode [ 385.047845][T18364] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2891'. [ 385.080998][T18122] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 385.109257][T18122] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 385.110315][T18241] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.110472][T18241] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.110611][T18241] bridge_slave_1: entered allmulticast mode [ 385.116874][T18241] bridge_slave_1: entered promiscuous mode [ 385.371303][T18122] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 385.479137][T18122] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 385.523377][T18241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.550671][T18241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.575642][ T5643] Bluetooth: hci4: command tx timeout [ 385.690057][T18241] team0: Port device team_slave_0 added [ 385.695001][T18241] team0: Port device team_slave_1 added [ 385.714451][T18398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2895'. [ 385.720129][T18396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2895'. [ 385.720150][T18396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2895'. [ 385.902617][T18396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2895'. [ 385.906217][T18241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.906233][T18241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.907481][T18241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.924909][T18241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.924926][T18241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.924948][T18241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.159742][T18415] ip_tables: iptables: counters copy to user failed while replacing table [ 386.177593][T18241] hsr_slave_0: entered promiscuous mode [ 386.180556][T18241] hsr_slave_1: entered promiscuous mode [ 386.183445][T18241] debugfs: 'hsr0' already exists in 'hsr' [ 386.183465][T18241] Cannot create hsr debugfs directory [ 386.213079][T11187] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.214499][T11182] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.214539][T11182] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.214571][T11182] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.375082][ T5643] Bluetooth: hci3: command tx timeout [ 386.548780][T18122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.605742][T18122] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.811180][T11182] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.811288][T11182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.915800][T11182] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.915906][T11182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.008551][T18241] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 387.024037][T18241] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 387.117184][T18241] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 387.128624][T18241] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 387.140728][T18241] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 387.147675][T18241] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 387.151105][T18241] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 387.167779][T18241] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 387.185926][T18433] netlink: 'syz.3.2902': attribute type 1 has an invalid length. [ 387.381839][T18241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.419380][T18241] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.440361][T11187] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.440470][T11187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.478468][T11187] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.478573][T11187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.606522][T18464] netlink: 'syz.1.2905': attribute type 1 has an invalid length. [ 387.653265][ T5643] Bluetooth: hci4: command tx timeout [ 388.321487][T18464] ovs-dp0: entered promiscuous mode [ 388.459344][ T5643] Bluetooth: hci3: command tx timeout [ 388.507014][T18122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.877495][T18517] ip_tables: iptables: counters copy to user failed while replacing table [ 389.020688][T18241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.447541][T18122] veth0_vlan: entered promiscuous mode [ 389.479908][T18122] veth1_vlan: entered promiscuous mode [ 389.671315][T18122] veth0_macvtap: entered promiscuous mode [ 389.697688][T18122] veth1_macvtap: entered promiscuous mode [ 389.817307][T18122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.865005][T18122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.924154][T11183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.924356][T11183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.924400][T11183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.924433][T11183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.265125][T11187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.265147][T11187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.330575][T11188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.330596][T11188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.370569][T18241] veth0_vlan: entered promiscuous mode [ 390.412761][T18241] veth1_vlan: entered promiscuous mode [ 390.495168][T18241] veth0_macvtap: entered promiscuous mode [ 390.515766][T18241] veth1_macvtap: entered promiscuous mode [ 390.535280][ T5643] Bluetooth: hci3: command tx timeout [ 390.567916][T18241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.593927][T18241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.642521][T11182] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.643747][T11188] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.643798][T11188] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.643828][T11188] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.867532][T11185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.867552][T11185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.989835][T11184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.989855][T11184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.472824][T18611] __nla_validate_parse: 1 callbacks suppressed [ 391.472843][T18611] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2928'. [ 391.669512][T18621] can: request_module (can-proto-0) failed. [ 391.977645][T18616] batman_adv: batadv0: Adding interface: veth0 [ 391.977665][T18616] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.977695][T18616] batman_adv: batadv0: Interface activated: veth0 [ 392.800987][T18644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2935'. [ 393.028635][T18661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2941'. [ 393.357614][T18676] ip6gre1: entered promiscuous mode [ 393.357638][T18676] ip6gre1: entered allmulticast mode [ 393.908307][T18708] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 394.109863][T18719] netlink: 'syz.1.2952': attribute type 2 has an invalid length. [ 394.110411][T18719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 394.142409][T18723] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 394.347956][T18725] 8021q: adding VLAN 0 to HW filter on device bond1 [ 394.354608][T18725] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 394.359201][ T9226] bond_slave_0: entered promiscuous mode [ 394.359235][ T9226] bond_slave_1: entered promiscuous mode [ 394.610790][T18748] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2959'. [ 396.682232][T18766] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2961'. [ 397.230941][T18769] atomic_op ffff888049f0a1e0 conn xmit_atomic 0000000000000000 [ 397.277512][T18771] ip_vti0: left promiscuous mode [ 397.396676][T18771] ip6gre1: left promiscuous mode [ 397.397191][T18771] bond3: left promiscuous mode [ 397.398631][T18771] vlan2: left promiscuous mode [ 397.398649][T18771] bond0: left promiscuous mode [ 397.398660][T18771] bond_slave_0: left promiscuous mode [ 397.398870][T18771] bond_slave_1: left promiscuous mode [ 397.404605][T18771] bond4: entered allmulticast mode [ 397.404646][T18771] bond4: entered promiscuous mode [ 397.404849][T18771] macvlan2: left promiscuous mode [ 397.404862][T18771] bond4: left promiscuous mode [ 397.405399][T18771] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 397.410625][T18771] bridge7: left promiscuous mode [ 397.411176][T18771] bond5: left promiscuous mode [ 397.411196][T18771] bridge8: left promiscuous mode [ 397.421504][T18771] bond10: left promiscuous mode [ 397.423653][T10174] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 397.427867][T10174] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 397.429883][T18771] ip6gre2: left promiscuous mode [ 397.430309][T18771] bond11: left promiscuous mode [ 397.439274][T10174] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 397.442960][T10174] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 397.453633][T10174] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 397.537079][T18771] bond12: left promiscuous mode [ 397.537102][T18771] veth5: left promiscuous mode [ 397.540207][T18771] bridge0: left promiscuous mode [ 397.559944][T18771] bond14: left promiscuous mode [ 397.603509][T11187] bond12: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 397.603595][T11187] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 397.607492][T11187] bond12: active interface up! [ 397.631151][T10173] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 397.764437][T10173] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 397.886912][T18802] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2968'. [ 397.967230][T18803] bond14: entered allmulticast mode [ 397.967685][T18806] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 398.101910][T18807] bond14: left allmulticast mode [ 398.115927][T18815] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2974'. [ 398.137810][T18815] batadv0: entered promiscuous mode [ 398.139591][T18815] macsec1: entered promiscuous mode [ 398.139841][T18815] macsec1: entered allmulticast mode [ 398.139856][T18815] batadv0: entered allmulticast mode [ 398.141237][T18815] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 398.164770][T18815] batadv0: left allmulticast mode [ 398.164992][T18815] batadv0: left promiscuous mode [ 398.264610][T18820] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2974'. [ 398.376612][T18830] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2977'. [ 398.456650][T10173] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 398.621393][T18842] netlink: 'syz.6.2978': attribute type 8 has an invalid length. [ 398.635516][T18842] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2978'. [ 398.679200][T18842] veth3: entered allmulticast mode [ 398.700309][T18845] syzkaller0: entered promiscuous mode [ 398.700330][T18845] syzkaller0: entered allmulticast mode [ 398.954583][T18862] TC_ACT_REPEAT abuse ? [ 399.170706][T18868] netlink: 'syz.6.2985': attribute type 2 has an invalid length. [ 399.267300][T18872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2987'. [ 399.507188][T18882] macvlan2: entered promiscuous mode [ 399.507211][T18882] macvlan2: entered allmulticast mode [ 399.507453][T18882] geneve1: entered promiscuous mode [ 399.507469][T18882] geneve1: entered allmulticast mode [ 399.511842][T18882] team0: Port device macvlan2 added [ 399.683559][T18884] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.684058][T18884] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.765792][T18888] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2993'. [ 399.785229][T18888] syzkaller1: entered allmulticast mode [ 399.828040][T18893] netlink: 'syz.3.2994': attribute type 1 has an invalid length. [ 399.887178][T18896] netlink: 'syz.3.2994': attribute type 5 has an invalid length. [ 399.888343][T18893] 8021q: adding VLAN 0 to HW filter on device bond1 [ 399.900595][T18898] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2995'. [ 399.906253][T18898] Cannot find map_set index 0 as target [ 399.977647][T18902] openvswitch: netlink: Key type 124 is out of range max 32 [ 399.979569][T18902] openvswitch: netlink: Key type 124 is out of range max 32 [ 400.008516][T18893] gretap1: entered promiscuous mode [ 400.026398][T18893] bond1: (slave gretap1): making interface the new active one [ 400.049236][T18893] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 400.083567][T18905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2997'. [ 400.094138][T18908] netlink: 'syz.6.2998': attribute type 12 has an invalid length. [ 400.094158][T18908] netlink: 'syz.6.2998': attribute type 11 has an invalid length. [ 400.095359][T18893] 8021q: adding VLAN 0 to HW filter on device bond2 [ 400.101513][T18893] bond1: (slave bond2): Enslaving as an active interface with a down link [ 400.195120][T18905] veth3: entered allmulticast mode [ 400.225690][T18913] netlink: 'syz.6.3000': attribute type 1 has an invalid length. [ 400.281652][T18913] 8021q: adding VLAN 0 to HW filter on device bond2 [ 400.322549][T18916] bond2: (slave veth5): Enslaving as an active interface with a down link [ 400.455587][T18920] netlink: 'syz.4.3001': attribute type 1 has an invalid length. [ 400.493950][T18920] ipvlan1: entered promiscuous mode [ 400.493991][T18920] ipvlan1: entered allmulticast mode [ 400.494003][T18920] veth0_vlan: entered allmulticast mode [ 400.520878][ T5643] Bluetooth: hci3: unexpected cc 0x1003 length: 10 > 9 [ 401.678718][T18964] Dead loop on virtual device ip6_vti0 (net 1120), fix it urgently! [ 401.703347][T18964] __nla_validate_parse: 7 callbacks suppressed [ 401.703367][T18964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3013'. [ 401.727507][T18964] 8021q: adding VLAN 0 to HW filter on device bond3 [ 401.731259][T18964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3013'. [ 401.735616][T18964] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3013'. [ 402.222957][T18967] pimreg0: tun_chr_ioctl cmd 1074025677 [ 402.223075][T18967] pimreg0: linktype set to 768 [ 402.265357][T18984] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3018'. [ 402.265379][T18984] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3018'. [ 402.335481][ T4948] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 402.342763][ T4948] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 402.357899][ T4948] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 402.366727][ T4948] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 402.367374][ T4948] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 402.369874][T18991] netlink: 276 bytes leftover after parsing attributes in process `syz.4.3019'. [ 402.370630][T18991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3019'. [ 402.462458][T18987] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 402.484589][T18984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3018'. [ 402.619281][T19000] xt_LOG: level 16 >= 8 [ 402.628768][T18998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3020'. [ 402.628791][T18998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3020'. [ 402.647106][T19000] bond3: option tlb_dynamic_lb: invalid value (255) [ 402.666098][T19000] bond3 (unregistering): Released all slaves [ 403.011896][T19019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.170466][T18985] rxe_eth0 speed is unknown, defaulting to 1000 [ 403.245253][T19032] ip_tables: iptables: counters copy to user failed while replacing table [ 403.277455][T19033] netlink: 'syz.1.3026': attribute type 1 has an invalid length. [ 404.334166][T19079] Bluetooth: MGMT ver 1.23 [ 404.358036][T18985] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.358212][T18985] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.358641][T18985] bridge_slave_0: entered allmulticast mode [ 404.361882][T18985] bridge_slave_0: entered promiscuous mode [ 404.373004][T18985] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.374691][T18985] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.375089][T18985] bridge_slave_1: entered allmulticast mode [ 404.378440][T18985] bridge_slave_1: entered promiscuous mode [ 404.452405][ T5643] Bluetooth: hci7: command tx timeout [ 404.480924][T18985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.496629][T18985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.548648][T18985] team0: Port device team_slave_0 added [ 404.551579][T18985] team0: Port device team_slave_1 added [ 404.743793][T19085] syz_tun: entered promiscuous mode [ 404.792935][T18985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.792953][T18985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.792976][T18985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.796981][T18985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.796998][T18985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.797022][T18985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.935126][T18985] hsr_slave_0: entered promiscuous mode [ 404.939526][T18985] hsr_slave_1: entered promiscuous mode [ 404.947201][T18985] debugfs: 'hsr0' already exists in 'hsr' [ 404.947225][T18985] Cannot create hsr debugfs directory [ 405.424666][T19122] netlink: 'syz.6.3049': attribute type 3 has an invalid length. [ 405.505438][T18985] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 405.510229][T18985] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 405.511453][T18985] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 405.530985][T18985] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 405.554131][T18985] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 405.556735][T18985] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 405.557566][T18985] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 405.559760][T18985] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 405.598659][T19139] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 405.599641][T19139] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 405.837533][T19155] ip_tables: iptables: counters copy to user failed while replacing table [ 405.860247][T18985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.905687][T18985] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.915954][T11182] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.916072][T11182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.931889][ T6747] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.932059][ T6747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.227432][T19169] syzkaller1: entered promiscuous mode [ 406.227457][T19169] syzkaller1: entered allmulticast mode [ 406.532015][ T5643] Bluetooth: hci7: command tx timeout [ 406.726376][T18985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.800044][T19199] Cannot find add_set index 0 as target [ 407.037664][T19211] __nla_validate_parse: 74 callbacks suppressed [ 407.037683][T19211] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3064'. [ 407.460765][T19212] bond14: entered allmulticast mode [ 407.461168][T19212] bond14: left allmulticast mode [ 407.751569][T18985] veth0_vlan: entered promiscuous mode [ 407.758548][T19231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3067'. [ 407.780152][T18985] veth1_vlan: entered promiscuous mode [ 407.784198][T19232] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3066'. [ 407.858469][T18985] veth0_macvtap: entered promiscuous mode [ 407.871101][T18985] veth1_macvtap: entered promiscuous mode [ 407.894152][T18985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.898798][T18985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.966564][T11187] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.967488][T11187] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.967532][T11187] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.967563][T11187] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.969270][T19236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3069'. [ 408.047146][T19239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3070'. [ 408.065319][T19236] 8021q: adding VLAN 0 to HW filter on device bond4 [ 408.086023][T19246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3069'. [ 408.089008][T19240] bond4: entered allmulticast mode [ 408.107746][T19250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.197846][T19250] vlan2: entered promiscuous mode [ 408.197868][T19250] bond0: entered promiscuous mode [ 408.197881][T19250] bond_slave_0: entered promiscuous mode [ 408.198088][T19250] bond_slave_1: entered promiscuous mode [ 408.439067][T11186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.439089][T11186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.498608][T19258] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3073'. [ 408.526695][T11187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.526716][T11187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.529772][T19258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3073'. [ 408.544906][T19258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3073'. [ 408.565203][T19258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3073'. [ 408.612236][ T5643] Bluetooth: hci7: command tx timeout [ 409.296509][T11182] IPVS: starting estimator thread 0... [ 409.313626][T19284] sctp: [Deprecated]: syz.3.3078 (pid 19284) Use of struct sctp_assoc_value in delayed_ack socket option. [ 409.313626][T19284] Use struct sctp_sack_info instead [ 409.313744][T19284] sctp: [Deprecated]: syz.3.3078 (pid 19284) Use of struct sctp_assoc_value in delayed_ack socket option. [ 409.313744][T19284] Use struct sctp_sack_info instead [ 409.339934][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 409.382241][T19285] IPVS: using max 32 ests per chain, 76800 per kthread [ 409.655462][T19292] ip6t_srh: unknown srh invflags BA61 [ 409.767915][T19298] netlink: 'syz.3.3082': attribute type 3 has an invalid length. [ 409.899901][T19310] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 410.129103][T19315] ip_tables: iptables: counters copy to user failed while replacing table [ 410.289043][T19328] vlan3: entered allmulticast mode [ 410.289066][T19328] dummy0: entered allmulticast mode [ 410.438592][T19334] x_tables: duplicate underflow at hook 1 [ 410.695242][ T5643] Bluetooth: hci7: command tx timeout [ 411.024811][T19367] netlink: 'syz.4.3098': attribute type 1 has an invalid length. [ 411.124940][T19367] 8021q: adding VLAN 0 to HW filter on device bond1 [ 411.175958][T19374] IPv6: Can't replace route, no match found [ 411.238949][T19370] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 411.310832][ T4948] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 411.320303][ T4948] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 411.321907][ T4948] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 411.342868][ T4948] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 411.343506][ T4948] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 411.423289][T19367] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 411.462761][T11186] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 411.577078][ T6747] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 411.750070][T19390] macsec1: entered promiscuous mode [ 412.061659][T19410] __nla_validate_parse: 11 callbacks suppressed [ 412.061680][T19410] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3108'. [ 412.160002][T19377] rxe_eth0 speed is unknown, defaulting to 1000 [ 412.388594][T19389] ip_tables: iptables: counters copy to user failed while replacing table [ 412.535366][T19426] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3112'. [ 412.627437][T19428] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3113'. [ 412.653191][T19428] vlan2: entered promiscuous mode [ 412.659690][T19428] netlink: 'syz.3.3113': attribute type 1 has an invalid length. [ 412.659711][T19428] netlink: 'syz.3.3113': attribute type 2 has an invalid length. [ 412.659723][T19428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3113'. [ 413.125591][T19459] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2499 [ 413.274241][T19462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3121'. [ 413.296719][T19462] 8021q: adding VLAN 0 to HW filter on device bond5 [ 413.413532][ T5643] Bluetooth: hci8: command tx timeout [ 413.452635][T19377] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.454403][T19377] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.454857][T19377] bridge_slave_0: entered allmulticast mode [ 413.458152][T19377] bridge_slave_0: entered promiscuous mode [ 413.464611][T19377] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.464991][T19377] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.465120][T19377] bridge_slave_1: entered allmulticast mode [ 413.466811][T19377] bridge_slave_1: entered promiscuous mode [ 413.501050][T19377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.539779][T19377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.576976][T19377] team0: Port device team_slave_0 added [ 413.580205][T19377] team0: Port device team_slave_1 added [ 413.624085][T19377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.624102][T19377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.624125][T19377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.626511][T19377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.626526][T19377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.626548][T19377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.808301][T19476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3124'. [ 413.811604][T19475] ip_tables: iptables: counters copy to user failed while replacing table [ 413.868655][T19377] hsr_slave_0: entered promiscuous mode [ 413.869954][T19377] hsr_slave_1: entered promiscuous mode [ 413.870700][T19377] debugfs: 'hsr0' already exists in 'hsr' [ 413.870720][T19377] Cannot create hsr debugfs directory [ 413.885535][T19482] batman_adv: batadv0: Adding interface: veth0 [ 413.885550][T19482] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.885576][T19482] batman_adv: batadv0: Interface activated: veth0 [ 414.238854][T19377] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.238890][T19377] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.299817][T19492] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3128'. [ 414.452209][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 414.505642][T19377] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.505676][T19377] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.691049][T19377] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.691083][T19377] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.788563][T19377] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.788586][T19377] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.841189][T19518] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3134'. [ 414.991701][T19526] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3135'. [ 415.030994][T19377] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 415.042293][T19377] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 415.043174][T19377] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 415.046667][T19377] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 415.047555][T19377] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 415.089020][T19377] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 415.091662][T19377] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 415.115865][T19377] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 415.132266][T19526] ip6gretap1: entered allmulticast mode [ 415.134418][T19526] batman_adv: batadv0: Adding interface: ip6gretap1 [ 415.134432][T19526] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.134459][T19526] batman_adv: batadv0: Interface activated: ip6gretap1 [ 415.317318][T19377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.328299][T19538] netlink: 'syz.6.3137': attribute type 9 has an invalid length. [ 415.328656][T19538] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3137'. [ 415.376017][T19377] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.398351][T11187] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.398463][T11187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.419259][T19538] syzkaller1: entered promiscuous mode [ 415.419282][T19538] syzkaller1: entered allmulticast mode [ 415.492779][ T5643] Bluetooth: hci8: command tx timeout [ 415.520317][T11188] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.520420][T11188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.104865][T19572] netlink: 'syz.4.3145': attribute type 3 has an invalid length. [ 416.139557][T19576] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 416.139710][T19576] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 416.574037][T19589] syzkaller0: entered promiscuous mode [ 416.574062][T19589] syzkaller0: entered allmulticast mode [ 416.730812][T19599] netlink: 'syz.6.3152': attribute type 2 has an invalid length. [ 416.845732][T19609] netlink: 'syz.3.3154': attribute type 23 has an invalid length. [ 416.845753][T19609] netlink: 'syz.3.3154': attribute type 21 has an invalid length. [ 416.845767][T19609] IPv6: NLM_F_CREATE should be specified when creating new route [ 416.876166][T19609] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 417.193693][T19621] netlink: 'syz.3.3157': attribute type 1 has an invalid length. [ 417.193715][T19621] __nla_validate_parse: 4 callbacks suppressed [ 417.193726][T19621] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3157'. [ 417.574171][ T5643] Bluetooth: hci8: command tx timeout [ 419.204449][T19377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.230027][T19632] syzkaller0: entered promiscuous mode [ 419.230051][T19632] syzkaller0: entered allmulticast mode [ 419.269534][T19638] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3160'. [ 419.455091][T19377] veth0_vlan: entered promiscuous mode [ 419.496105][T19377] veth1_vlan: entered promiscuous mode [ 419.500137][T19642] netlink: 'syz.3.3161': attribute type 1 has an invalid length. [ 419.599923][T19642] 8021q: adding VLAN 0 to HW filter on device bond6 [ 419.618228][T19644] rxe_eth0 speed is unknown, defaulting to 1000 [ 419.665951][ T5643] Bluetooth: hci8: command tx timeout [ 420.509386][T19377] veth0_macvtap: entered promiscuous mode [ 420.600562][T19377] veth1_macvtap: entered promiscuous mode [ 420.680906][T19678] netlink: 'syz.4.3171': attribute type 1 has an invalid length. [ 420.691287][T19681] sctp: [Deprecated]: syz.6.3170 (pid 19681) Use of int in max_burst socket option. [ 420.691287][T19681] Use struct sctp_assoc_value instead [ 420.727778][T19678] bond2: entered promiscuous mode [ 420.728195][T19678] 8021q: adding VLAN 0 to HW filter on device bond2 [ 420.734318][T19673] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3169'. [ 420.871695][T19678] veth5: entered promiscuous mode [ 420.874785][T19678] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 420.876816][T19377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.931631][T19377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.973268][T11182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.973792][T11186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.973827][T11186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.973858][T11186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.223702][T11182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.223723][T11182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.323306][T11182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.323327][T11182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.473136][T19709] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 421.542619][T19712] netlink: 'syz.3.3177': attribute type 29 has an invalid length. [ 421.841783][T19721] nft_compat: unsupported protocol 12 [ 422.454963][T19743] tipc: Enabling of bearer rejected, failed to enable media [ 422.519184][T19742] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input9 [ 422.561431][T19751] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3188'. [ 422.687851][T19752] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 422.689432][T19752] x_tables: duplicate underflow at hook 3 [ 422.703046][T19759] netlink: 'syz.3.3190': attribute type 1 has an invalid length. [ 422.763534][T19759] 8021q: adding VLAN 0 to HW filter on device bond7 [ 422.801785][T19762] bond7: (slave veth5): Enslaving as an active interface with a down link [ 422.849208][T19759] bond7: (slave dummy0): making interface the new active one [ 422.850083][T19759] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 422.875006][T19765] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3194'. [ 422.898245][T19759] netlink: 'syz.3.3190': attribute type 1 has an invalid length. [ 422.905580][T19765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3194'. [ 422.933350][T19762] bond7: (slave veth7): Enslaving as an active interface with a down link [ 422.959025][T19774] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 422.959364][T19774] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3193'. [ 423.165542][T11183] bond7: (slave dummy0): link status definitely down, disabling slave [ 423.190010][T11183] bond7: now running without any active interface! [ 423.313840][T19793] IPVS: length: 155 != 8 [ 423.425660][T19799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3202'. [ 423.585179][T19808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3205'. [ 423.608608][T19808] bridge2: entered promiscuous mode [ 423.703225][T19809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3205'. [ 423.729418][T19809] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3205'. [ 423.794304][T19818] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 423.840308][T19811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3207'. [ 423.986205][T19827] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 424.034434][T19829] netlink: 'syz.6.3210': attribute type 21 has an invalid length. [ 424.034461][T19829] netlink: 'syz.6.3210': attribute type 20 has an invalid length. [ 424.381826][T19846] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3214'. [ 424.658301][T19866] netlink: 'syz.7.3221': attribute type 1 has an invalid length. [ 424.687274][T19853] bridge2: entered promiscuous mode [ 424.687299][T19853] bridge2: entered allmulticast mode [ 424.774667][T19866] bond1: entered promiscuous mode [ 424.775114][T19866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 424.868597][T19853] 8021q: adding VLAN 0 to HW filter on device bond3 [ 424.997393][T19866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 424.998021][T19866] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 424.998042][T19866] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 425.019643][T19866] bond1: (slave gre1): making interface the new active one [ 425.019669][T19866] gre1: entered promiscuous mode [ 425.029204][T19866] bond1: (slave gre1): Enslaving as an active interface with an up link [ 425.178690][T19894] batadv_slave_1: entered promiscuous mode [ 425.179055][T19893] batadv_slave_1: left promiscuous mode [ 425.354060][T19904] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 425.491810][T19912] netlink: 'syz.4.3228': attribute type 1 has an invalid length. [ 426.546403][T19949] netlink: 'syz.6.3237': attribute type 62 has an invalid length. [ 426.875821][T19966] sock: sock_set_timeout: `syz.1.3241' (pid 19966) tries to set negative timeout [ 427.658067][T20009] __nla_validate_parse: 12 callbacks suppressed [ 427.658087][T20009] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3254'. [ 427.687742][T20015] sctp: [Deprecated]: syz.7.3253 (pid 20015) Use of int in maxseg socket option. [ 427.687742][T20015] Use struct sctp_assoc_value instead [ 427.886511][T20021] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 427.942923][T20021] ipip0: entered promiscuous mode [ 428.005437][T20026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3258'. [ 428.005473][T20026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3258'. [ 428.357278][T20043] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 428.555345][T20055] netlink: 868 bytes leftover after parsing attributes in process `syz.1.3264'. [ 428.646304][T20044] lo: entered promiscuous mode [ 428.673628][T20044] tunl0: entered promiscuous mode [ 428.677023][T20044] gre0: entered promiscuous mode [ 428.885032][T20044] gretap0: entered promiscuous mode [ 428.903876][T20062] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3266'. [ 429.013317][ T4948] Bluetooth: hci3: command 0x0c1a tx timeout [ 429.015324][ T5643] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 429.065457][T20044] erspan0: entered promiscuous mode [ 429.215646][T20044] ip_vti0: entered promiscuous mode [ 429.219002][T20044] ip6_vti0: entered promiscuous mode [ 429.219211][T20044] sit0: entered promiscuous mode [ 429.252502][T20044] ip6tnl0: entered promiscuous mode [ 429.258521][T20044] ip6gre0: entered promiscuous mode [ 429.296065][T20044] syz_tun: entered promiscuous mode [ 429.350805][T20076] netlink: 'syz.4.3268': attribute type 9 has an invalid length. [ 429.434316][T20044] ip6gretap0: entered promiscuous mode [ 429.441784][T20044] bridge0: entered promiscuous mode [ 429.458233][T20044] vcan0: entered promiscuous mode [ 429.471014][T20044] bond0: entered promiscuous mode [ 429.471033][T20044] bond_slave_0: entered promiscuous mode [ 429.471251][T20044] bond_slave_1: entered promiscuous mode [ 429.495875][T20044] team0: entered promiscuous mode [ 429.495895][T20044] team_slave_0: entered promiscuous mode [ 429.496079][T20044] team_slave_1: entered promiscuous mode [ 429.526084][T20044] dummy0: entered promiscuous mode [ 429.618614][T20044] nlmon0: entered promiscuous mode [ 429.621455][T20044] batadv0: entered promiscuous mode [ 429.641017][T20044] vxcan0: entered promiscuous mode [ 429.649799][T20044] vxcan1: entered promiscuous mode [ 429.658201][T20044] batman_adv: batadv0: Interface deactivated: veth0 [ 429.658316][T20044] veth0: entered promiscuous mode [ 429.682104][T20044] veth1: entered promiscuous mode [ 429.690218][T20086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3271'. [ 429.815014][T20044] wg0: entered promiscuous mode [ 429.823202][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 429.823485][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 429.897142][T20044] wg1: entered promiscuous mode [ 429.916619][T20044] wg2: entered promiscuous mode [ 429.921883][T20044] veth0_to_bridge: entered promiscuous mode [ 429.937519][T20044] veth1_to_bridge: entered promiscuous mode [ 429.952299][T20044] veth0_to_bond: entered promiscuous mode [ 429.960384][T20044] veth1_to_bond: entered promiscuous mode [ 429.967242][T20044] veth0_to_team: entered promiscuous mode [ 429.986240][T20044] veth1_to_team: entered promiscuous mode [ 429.989061][T20044] veth0_to_batadv: entered promiscuous mode [ 429.996595][T20044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.997955][T20044] batadv_slave_0: entered promiscuous mode [ 430.008787][T20044] veth1_to_batadv: entered promiscuous mode [ 430.022908][T20044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.024473][T20044] batadv_slave_1: entered promiscuous mode [ 430.035000][T20044] xfrm0: entered promiscuous mode [ 430.047131][T20044] veth0_to_hsr: entered promiscuous mode [ 430.051318][T20044] veth1_to_hsr: entered promiscuous mode [ 430.061633][T20044] hsr0: entered promiscuous mode [ 430.067911][T20044] veth1_virt_wifi: entered promiscuous mode [ 430.073523][T20044] veth0_virt_wifi: entered promiscuous mode [ 430.078284][T20044] virt_wifi0: entered promiscuous mode [ 430.090428][T20044] vlan0: entered promiscuous mode [ 430.095495][T20044] vlan1: entered promiscuous mode [ 430.105470][T20044] macvlan0: entered promiscuous mode [ 430.110348][T20044] macvlan1: entered promiscuous mode [ 430.126858][T20044] ipvlan0: entered promiscuous mode [ 430.128795][T20044] ipvlan1: entered promiscuous mode [ 430.144106][T20044] macvtap0: entered promiscuous mode [ 430.146935][T20044] macsec0: entered promiscuous mode [ 430.149898][T20044] geneve0: entered promiscuous mode [ 430.166431][T20044] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 430.177113][T20044] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 430.190257][T20044] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 430.200140][T20044] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 430.204989][T20044] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 430.205156][T20044] mac80211_hwsim hwsim28 wlan1: entered promiscuous mode [ 430.205504][T20044] vxlan0: entered promiscuous mode [ 430.208817][T20044] ipvlan2: entered promiscuous mode [ 430.212174][T20044] bridge1: entered promiscuous mode [ 430.212408][T20044] geneve1: left allmulticast mode [ 430.244751][T20044] bond1: entered promiscuous mode [ 430.255517][T20044] bond2: entered promiscuous mode [ 430.255893][T20044] veth2: entered promiscuous mode [ 430.256231][T20044] veth3: entered promiscuous mode [ 430.258213][T20044] bond3: entered promiscuous mode [ 430.258552][T20044] bond4: entered promiscuous mode [ 430.259294][T20044] bond5: entered promiscuous mode [ 430.261258][T20044] bond6: entered promiscuous mode [ 430.264199][T20044] bond7: entered promiscuous mode [ 430.266837][T20044] veth4: entered promiscuous mode [ 430.282537][T20044] veth5: entered promiscuous mode [ 430.283285][T20044] veth6: entered promiscuous mode [ 430.287651][T20044] veth7: entered promiscuous mode [ 430.295906][T20044] ip6tnl1: entered promiscuous mode [ 430.303549][T11183] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.303580][T11183] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.303627][T11183] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.303651][T11183] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.303683][T11183] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.303705][T11183] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.322499][T11183] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.322529][T11183] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.475863][T20084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3271'. [ 430.677371][T20110] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3274'. [ 430.801488][T20114] gretap2: entered allmulticast mode [ 431.178079][T20128] netlink: 'syz.4.3278': attribute type 21 has an invalid length. [ 431.365016][T20140] netlink: 'syz.6.3280': attribute type 1 has an invalid length. [ 431.368470][T20142] sctp: Trying to GSO but underlying device doesn't support it. [ 431.538647][T20140] 8021q: adding VLAN 0 to HW filter on device bond4 [ 431.553682][T20140] netlink: 'syz.6.3280': attribute type 1 has an invalid length. [ 431.585138][T20152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3282'. [ 431.609066][T20143] bond4: (slave geneve2): making interface the new active one [ 431.609136][T20154] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3283'. [ 431.629175][T20143] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 431.629742][T20140] netlink: 'syz.6.3280': attribute type 1 has an invalid length. [ 431.630009][T20140] netlink: 'syz.6.3280': attribute type 1 has an invalid length. [ 431.631879][T20140] netlink: 'syz.6.3280': attribute type 1 has an invalid length. [ 431.641181][T20140] netlink: 'syz.6.3280': attribute type 1 has an invalid length. [ 431.691440][T20140] netlink: 'syz.6.3280': attribute type 1 has an invalid length. [ 431.691719][T20140] netlink: 'syz.6.3280': attribute type 1 has an invalid length. [ 431.714173][T20162] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 431.743299][ T194] Dead loop on virtual device lo (net 1136), fix it urgently! [ 431.786958][T20154] bond7: (slave dummy0): Releasing active interface [ 432.047833][T20167] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 432.430246][T20190] ip_tables: iptables: counters copy to user failed while replacing table [ 432.452985][ T10] Dead loop on virtual device lo (net 1136), fix it urgently! [ 432.653482][T20201] 8021q: adding VLAN 0 to HW filter on device bond2 [ 432.766401][T20202] 8021q: adding VLAN 0 to HW filter on device bond5 [ 432.767584][T11188] Dead loop on virtual device lo (net 1136), fix it urgently! [ 432.809503][T20219] tipc: Failed to remove unknown binding: 66,0,0/0:2179933068/2179933069 [ 432.811150][T20219] tipc: Failed to remove unknown binding: 66,0,0/0:2179933068/2179933069 [ 432.878611][T20202] bond5: (slave geneve3): making interface the new active one [ 432.891263][T20202] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 432.968054][T20222] __nla_validate_parse: 2 callbacks suppressed [ 432.968072][T20222] netlink: 67 bytes leftover after parsing attributes in process `syz.4.3303'. [ 433.075553][T20222] 8021q: adding VLAN 0 to HW filter on device bond3 [ 433.105177][T11187] bond1: (slave dummy0): link status up again after 0 ms [ 433.122621][T11188] bond1: (slave dummy0): link status up again after 0 ms [ 433.145073][T11188] bond1: (slave dummy0): link status up again after 0 ms [ 433.168286][T11188] bond1: (slave dummy0): link status up again after 0 ms [ 433.182502][ T51] bond1: (slave dummy0): link status up again after 0 ms [ 433.194815][T20236] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3306'. [ 433.206129][T11182] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 433.206232][T11182] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 433.238996][T11182] bond2: active interface up! [ 433.263117][T11188] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 433.296665][T20238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3308'. [ 433.300584][T11188] bond1: active interface up! [ 433.329480][T20241] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3309'. [ 433.373813][T20248] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20003 [ 433.472003][T20253] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20003 [ 433.504772][T20255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3314'. [ 434.039688][T20286] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3321'. [ 434.906920][T20305] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3324'. [ 434.907497][T20305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3324'. [ 434.907511][T20305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3324'. [ 435.082099][T20315] xt_CT: No such helper "snmp_trap" [ 436.919796][T20298] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.926373][T20279] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 437.056072][ T51] net_ratelimit: 33 callbacks suppressed [ 437.056094][ T51] bond1: (slave dummy0): failed to get link speed/duplex [ 437.129502][T20319] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3329'. [ 437.163441][T11188] bond1: (slave dummy0): failed to get link speed/duplex [ 437.203368][T20328] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 437.273933][T11186] bond1: (slave dummy0): failed to get link speed/duplex [ 437.306284][T20340] ip_tables: iptables: counters copy to user failed while replacing table [ 437.404955][T20348] validate_nla: 62 callbacks suppressed [ 437.404975][T20348] netlink: 'syz.4.3333': attribute type 6 has an invalid length. [ 437.457936][T20340] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.458538][T20340] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.582588][T20340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.589447][T20340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.810137][T20353] veth0: mtu less than device minimum [ 437.902651][ C0] Dead loop on virtual device lo (net 1136), fix it urgently! [ 437.909088][T11186] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.946392][T11186] bond1: (slave dummy0): failed to get link speed/duplex [ 437.964210][T11186] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.964299][T11186] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.964330][T11186] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.054329][T11186] bond1: (slave dummy0): failed to get link speed/duplex [ 438.165929][ T51] bond1: (slave dummy0): failed to get link speed/duplex [ 438.282691][T11185] bond1: (slave dummy0): failed to get link speed/duplex [ 438.361776][T20414] __nla_validate_parse: 2 callbacks suppressed [ 438.361805][T20414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3350'. [ 438.770285][T20434] x_tables: unsorted entry at hook 2 [ 439.010176][T20442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3355'. [ 439.061833][T20452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3353'. [ 439.589354][T20477] block nbd7: NBD_DISCONNECT [ 439.707829][ T30] audit: type=1804 audit(1792950962.394:13): pid=20485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3363" name="/newroot/101/cgroup.controllers" dev="tmpfs" ino=546 res=1 errno=0 [ 439.707880][ T30] audit: type=1800 audit(1792950962.394:14): pid=20485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3363" name="cgroup.controllers" dev="tmpfs" ino=546 res=0 errno=-22 [ 439.707922][ T30] audit: type=1800 audit(1792950962.394:15): pid=20484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3363" name="cgroup.controllers" dev="tmpfs" ino=546 res=0 errno=-22 [ 439.800260][T20483] bond1: entered promiscuous mode [ 439.800721][T20483] bond1: entered allmulticast mode [ 439.801327][T20483] 8021q: adding VLAN 0 to HW filter on device bond1 [ 439.862093][T20491] syzkaller0: entered promiscuous mode [ 439.862116][T20491] syzkaller0: entered allmulticast mode [ 439.879646][T20483] tap0: tun_chr_ioctl cmd 2152240185 [ 440.192229][T20516] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3367'. [ 440.705946][T20528] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3369'. [ 440.734316][T20528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3369'. [ 440.734530][T20528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3369'. [ 440.734738][T20528] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3369'. [ 440.920607][T20536] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3372'. [ 441.100734][T20545] netlink: 'syz.1.3376': attribute type 14 has an invalid length. [ 441.100755][T20545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3376'. [ 441.104941][T20545] bond0: option xmit_hash_policy: invalid value (239) [ 441.448273][T20560] netlink: 'syz.7.3382': attribute type 1 has an invalid length. [ 441.479684][T20560] bond3: entered promiscuous mode [ 441.479725][T20560] bond3: entered allmulticast mode [ 441.480510][T20560] 8021q: adding VLAN 0 to HW filter on device bond3 [ 441.490626][T20560] erspan1: entered allmulticast mode [ 441.495208][T20560] bond3: (slave erspan1): making interface the new active one [ 441.495228][T20560] erspan1: entered promiscuous mode [ 441.509016][T20560] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 441.566510][ T5983] IPVS: starting estimator thread 0... [ 441.663422][T20567] IPVS: using max 36 ests per chain, 86400 per kthread [ 442.127450][T20590] syzkaller0: entered promiscuous mode [ 442.127471][T20590] syzkaller0: entered allmulticast mode [ 442.152523][T11185] net_ratelimit: 32 callbacks suppressed [ 442.152545][T11185] bond1: (slave dummy0): failed to get link speed/duplex [ 442.265971][ T51] bond1: (slave dummy0): failed to get link speed/duplex [ 442.374236][T20606] vlan3: entered promiscuous mode [ 442.374258][T20606] hsr0: entered promiscuous mode [ 442.374496][T20606] vlan3: entered allmulticast mode [ 442.374509][T20606] hsr0: entered allmulticast mode [ 442.374520][T20606] hsr_slave_0: entered allmulticast mode [ 442.374540][T20606] hsr_slave_1: entered allmulticast mode [ 442.380527][T20600] hsr0: entered promiscuous mode [ 442.389815][T20600] hsr_slave_0: left promiscuous mode [ 442.407937][T20600] hsr_slave_1: left promiscuous mode [ 442.438656][T20600] hsr0 (unregistering): left promiscuous mode [ 442.536104][ T51] bond1: (slave dummy0): failed to get link speed/duplex [ 442.644527][ T5988] bond1: (slave dummy0): failed to get link speed/duplex [ 442.753563][T11185] bond1: (slave dummy0): failed to get link speed/duplex [ 442.881131][T20625] ip_tables: iptables: counters copy to user failed while replacing table [ 443.039972][T20639] netlink: 'syz.1.3399': attribute type 11 has an invalid length. [ 443.102107][T11185] bond1: (slave dummy0): failed to get link speed/duplex [ 443.205139][T20626] syzkaller1: entered promiscuous mode [ 443.205161][T20626] syzkaller1: entered allmulticast mode [ 443.353457][ T6736] bond1: (slave dummy0): failed to get link speed/duplex [ 443.426964][T20648] netlink: 'syz.6.3402': attribute type 1 has an invalid length. [ 443.472229][T11183] bond1: (slave dummy0): failed to get link speed/duplex [ 443.496085][T20650] ip_tables: iptables: counters copy to user failed while replacing table [ 443.633768][T20650] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.634113][T20650] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.917094][T20650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.931065][T20650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.145583][T11185] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.145672][T11185] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.145734][T11185] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.145771][T11185] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.357355][T20688] __nla_validate_parse: 37 callbacks suppressed [ 444.357406][T20688] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3410'. [ 444.398503][ T30] audit: type=1800 audit(1792950967.084:16): pid=20688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3410" name="blkio.bfq.time_recursive" dev="tmpfs" ino=584 res=0 errno=-22 [ 444.445040][T20692] netlink: 'syz.3.3411': attribute type 1 has an invalid length. [ 444.560375][T20692] bond8: entered promiscuous mode [ 444.560461][T20692] bond8: entered allmulticast mode [ 444.560857][T20692] 8021q: adding VLAN 0 to HW filter on device bond8 [ 444.589881][T20698] erspan1: entered allmulticast mode [ 444.598328][T20698] bond8: (slave erspan1): making interface the new active one [ 444.598351][T20698] erspan1: entered promiscuous mode [ 444.600676][T20698] bond8: (slave erspan1): Enslaving as an active interface with an up link [ 444.877777][T20721] x_tables: duplicate entry at hook 1 [ 444.914613][T20721] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3418'. [ 445.273759][T20744] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 445.273916][T20744] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 445.302735][T20744] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 445.302877][T20744] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 445.302987][T20744] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 445.303094][T20744] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 445.303204][T20744] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 445.303311][T20744] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 445.303417][T20744] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 445.303524][T20744] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 445.310286][T20735] syzkaller0: entered promiscuous mode [ 445.310312][T20735] syzkaller0: entered allmulticast mode [ 445.699134][ T6736] IPVS: starting estimator thread 0... [ 445.782455][T20756] IPVS: using max 29 ests per chain, 69600 per kthread [ 448.153960][T20751] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 448.154491][T20755] net_ratelimit: 2 callbacks suppressed [ 448.154507][T20755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 448.156451][T20754] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 448.199996][T20772] syzkaller0: left promiscuous mode [ 448.200056][T20772] syzkaller0: left allmulticast mode [ 448.401587][T20787] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3428'. [ 448.405615][T20786] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3427'. [ 448.405767][T20789] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3427'. [ 448.407270][T20787] bridge0: port 3(bond0) entered blocking state [ 448.408752][T20787] bridge0: port 3(bond0) entered disabled state [ 448.409204][T20787] bond0: entered allmulticast mode [ 448.409221][T20787] bond_slave_0: entered allmulticast mode [ 448.409236][T20787] bond_slave_1: entered allmulticast mode [ 448.416030][T20787] bond0: left allmulticast mode [ 448.416049][T20787] bond_slave_0: left allmulticast mode [ 448.416065][T20787] bond_slave_1: left allmulticast mode [ 448.527935][T20796] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3429'. [ 449.616818][T20846] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3439'. [ 449.701166][T20849] tipc: Started in network mode [ 449.701198][T20849] tipc: Node identity ac14140f, cluster identity 4711 [ 449.718675][T20849] tipc: New replicast peer: 255.255.255.255 [ 449.726136][T20849] tipc: Enabled bearer , priority 10 [ 449.795957][T20853] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3445'. [ 449.797629][T20853] netlink: 'syz.6.3445': attribute type 1 has an invalid length. [ 449.819059][T20853] bond6: entered promiscuous mode [ 449.819524][T20853] 8021q: adding VLAN 0 to HW filter on device bond6 [ 449.839022][T20853] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3445'. [ 449.861007][T20853] 8021q: adding VLAN 0 to HW filter on device bond6 [ 449.861427][T20853] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 449.861447][T20853] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 449.889336][T20853] bond6: (slave ip6gre2): making interface the new active one [ 449.889360][T20853] ip6gre2: entered promiscuous mode [ 449.904629][T20853] bond6: (slave ip6gre2): Enslaving as an active interface with an up link [ 449.931159][T20856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3446'. [ 450.121090][T20862] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3447'. [ 450.121128][T20862] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3447'. [ 450.230163][T20864] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3448'. [ 450.243486][T20864] netlink: 2328 bytes leftover after parsing attributes in process `syz.6.3448'. [ 450.345938][T20870] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3451'. [ 450.354780][T20871] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3451'. [ 450.431324][T20870] team0: Port device team_slave_1 removed [ 450.469317][T20868] netlink: 'syz.3.3450': attribute type 4 has an invalid length. [ 450.833348][T10175] tipc: Node number set to 2886997007 [ 450.834199][T20891] netlink: 'syz.4.3456': attribute type 30 has an invalid length. [ 450.867801][T20895] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 450.901524][T20891] vxlan0: entered promiscuous mode [ 450.901546][T20891] vxlan0: entered allmulticast mode [ 450.923846][T11185] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.923892][T11185] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.923925][T11185] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.923957][T11185] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.027161][T20891] netlink: 'syz.4.3456': attribute type 30 has an invalid length. [ 451.111825][T20892] syzkaller0: entered promiscuous mode [ 451.111852][T20892] syzkaller0: entered allmulticast mode [ 451.130246][T20891] vxlan1: entered promiscuous mode [ 451.130268][T20891] vxlan1: entered allmulticast mode [ 451.385124][T20916] xt_NFQUEUE: number of total queues is 0 [ 455.024384][T20923] geneve3: entered promiscuous mode [ 455.191200][T20956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.191352][T20956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.191487][T20956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.191632][T20956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.200925][T20956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.201108][T20956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.201247][T20956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.201381][T20956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.201509][T20956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.201645][T20956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.217361][T20957] __nla_validate_parse: 5 callbacks suppressed [ 455.217382][T20957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3467'. [ 455.287350][T20952] IPv6: NLM_F_CREATE should be specified when creating new route [ 455.330575][T20961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3467'. [ 455.563736][T20972] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3472'. [ 455.569224][T20969] syzkaller1: entered promiscuous mode [ 455.569260][T20969] syzkaller1: entered allmulticast mode [ 455.591179][T20972] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3472'. [ 455.984801][T20991] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3476'. [ 455.984888][T20991] IPv6: Can't replace route, no match found [ 456.020648][T20993] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3478'. [ 456.043986][T20996] netlink: 'syz.1.3477': attribute type 1 has an invalid length. [ 456.101099][T20997] xt_cgroup: path and classid specified [ 456.227422][T21005] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3481'. [ 456.279401][T21007] tipc: Enabling of bearer rejected, failed to enable media [ 456.918513][T21038] mac80211_hwsim hwsim27 wlan0: left promiscuous mode [ 457.017440][T21052] netlink: 'syz.1.3495': attribute type 1 has an invalid length. [ 457.020079][T21052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3495'. [ 457.351714][T21061] xt_CT: You must specify a L4 protocol and not use inversions on it [ 458.114762][T21086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3502'. [ 458.114789][T21086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3502'. [ 458.114812][T21086] netlink: 'syz.4.3502': attribute type 14 has an invalid length. [ 458.114825][T21086] netlink: 'syz.4.3502': attribute type 13 has an invalid length. [ 458.212357][ T4948] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 458.247110][T21084] bond6 (unregistering): Released all slaves [ 458.877862][T11187] bond0: (slave bond_slave_0): interface is now down [ 458.877885][T11187] bond0: (slave bond_slave_1): interface is now down [ 458.911385][T21105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.973978][ T6741] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.975963][ T163] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.976001][ T163] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.976032][ T163] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.565219][T21149] netlink: 'syz.6.3518': attribute type 1 has an invalid length. [ 459.993868][T21158] xt_CT: No such helper "netbios-ns" [ 460.218707][T21178] syzkaller0: entered promiscuous mode [ 460.218728][T21178] syzkaller0: entered allmulticast mode [ 460.233727][T21182] netlink: 'syz.4.3530': attribute type 1 has an invalid length. [ 460.301880][T21182] 8021q: adding VLAN 0 to HW filter on device bond6 [ 460.770626][T21218] netlink: 'syz.6.3533': attribute type 14 has an invalid length. [ 460.770646][T21218] __nla_validate_parse: 9 callbacks suppressed [ 460.770657][T21218] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3533'. [ 460.866879][T21221] §: renamed from erspan0 [ 460.949783][T21228] netlink: 'syz.3.3536': attribute type 3 has an invalid length. [ 460.949807][T21228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3536'. [ 460.949825][T21228] netlink: 'syz.3.3536': attribute type 3 has an invalid length. [ 460.949838][T21228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3536'. [ 460.992753][T21228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3536'. [ 461.061532][T21233] netlink: 'syz.6.3537': attribute type 3 has an invalid length. [ 461.142649][T21236] syzkaller0: entered promiscuous mode [ 461.142685][T21236] syzkaller0: entered allmulticast mode [ 461.149121][T21235] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3538'. [ 461.149161][T21235] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3538'. [ 461.271264][T21245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3539'. [ 461.351078][T21245] netlink: 75 bytes leftover after parsing attributes in process `syz.4.3539'. [ 461.422965][ T6736] bond0: (slave bond_slave_0): interface is now down [ 461.422986][ T6736] bond0: (slave bond_slave_1): interface is now down [ 461.424034][T21245] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.428985][T21245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.519016][T21245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.521913][T21245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.535191][T21245] veth1_vlan: left promiscuous mode [ 461.536254][T21245] veth0_vlan: left promiscuous mode [ 461.537862][T21245] veth0_vlan: entered promiscuous mode [ 461.539968][T21245] veth1_vlan: entered promiscuous mode [ 461.545786][T21245] veth1_macvtap: left promiscuous mode [ 461.546818][T21245] veth0_macvtap: left promiscuous mode [ 461.547812][T21245] veth0_macvtap: entered promiscuous mode [ 461.548832][T21245] veth1_macvtap: entered promiscuous mode [ 461.567867][T21245] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 461.571444][T21245] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 461.579421][T21245] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 461.589020][T21245] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 461.618734][ T6736] net_ratelimit: 56 callbacks suppressed [ 461.618756][ T6736] bond1: (slave dummy0): link status up again after 0 ms [ 461.620820][T21245] 8021q: adding VLAN 0 to HW filter on device bond1 [ 461.630641][T21245] 8021q: adding VLAN 0 to HW filter on device bond2 [ 461.632633][ T138] bond1: (slave dummy0): link status up again after 0 ms [ 461.635443][T21245] 8021q: adding VLAN 0 to HW filter on device bond3 [ 461.638230][T21245] 8021q: adding VLAN 0 to HW filter on device bond4 [ 461.641061][T21245] 8021q: adding VLAN 0 to HW filter on device bond5 [ 461.644962][T21245] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check. [ 461.653583][T21208] bond1: (slave dummy0): link status up again after 0 ms [ 461.663876][T21207] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.664016][T21207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.666492][T21207] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.666616][T21207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.674026][ T6736] bond1: (slave dummy0): link status up again after 0 ms [ 461.692275][T21208] bond1: (slave dummy0): link status up again after 0 ms [ 461.715216][ T6748] bond1: (slave dummy0): link status up again after 0 ms [ 461.733868][ T6748] bond1: (slave dummy0): link status up again after 0 ms [ 461.753259][T21210] bond1: (slave dummy0): link status up again after 0 ms [ 461.780195][ T6736] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.780226][ T8855] bond1: (slave dummy0): link status up again after 0 ms [ 461.780246][ T6736] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.780280][ T6736] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.780301][ T6736] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.781385][T21250] syzkaller1: entered allmulticast mode [ 462.286919][T21289] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3549'. [ 462.287373][T21289] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3549'. [ 463.949983][T21228] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 463.973769][T21212] bond0: (slave bond_slave_0): interface is now down [ 463.973813][T21212] bond0: (slave bond_slave_1): interface is now down [ 464.002726][T21212] bond0: now running without any active interface! [ 464.244033][T21304] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 464.246593][T21304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 464.535766][T21325] netlink: 'syz.4.3556': attribute type 2 has an invalid length. [ 465.308420][T21356] netlink: 'syz.7.3557': attribute type 1 has an invalid length. [ 465.811262][T21370] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.811671][T21370] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.833665][T21370] bond_slave_0: left promiscuous mode [ 465.833699][T21370] bond_slave_1: left promiscuous mode [ 465.885235][T21370] batman_adv: batadv0: Interface deactivated: veth0 [ 466.032312][T21370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.051560][T21370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.199982][T21370] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 466.237043][T21370] ip6gre1: left promiscuous mode [ 466.237066][T21370] ip6gre1: left allmulticast mode [ 466.240423][T21370] veth3: left allmulticast mode [ 466.268628][T21370] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 466.269156][T21370] ip6gretap1: left allmulticast mode [ 466.271387][T21370] bridge2: left promiscuous mode [ 466.271406][T21370] bridge2: left allmulticast mode [ 466.366294][T21370] vlan3: left promiscuous mode [ 466.366319][T21370] hsr0: left promiscuous mode [ 466.366531][T21370] vlan3: left allmulticast mode [ 466.366543][T21370] hsr0: left allmulticast mode [ 466.366555][T21370] hsr_slave_0: left allmulticast mode [ 466.366569][T21370] hsr_slave_1: left allmulticast mode [ 466.371012][T21370] bond6: left promiscuous mode [ 466.371034][T21370] ip6gre2: left promiscuous mode [ 466.443896][ T138] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.443930][ T138] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.444875][ T138] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.444901][ T138] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.444933][ T138] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.444955][ T138] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.444992][ T138] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.445014][ T138] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.639144][T21386] netlink: 'syz.1.3569': attribute type 1 has an invalid length. [ 466.670418][T21386] 8021q: adding VLAN 0 to HW filter on device bond2 [ 466.671196][T21386] netlink: 'syz.1.3569': attribute type 1 has an invalid length. [ 466.671449][T21386] netlink: 'syz.1.3569': attribute type 1 has an invalid length. [ 466.671636][T21386] netlink: 'syz.1.3569': attribute type 1 has an invalid length. [ 466.671832][T21386] netlink: 'syz.1.3569': attribute type 1 has an invalid length. [ 466.678817][T21386] netlink: 'syz.1.3569': attribute type 1 has an invalid length. [ 466.679034][T21386] netlink: 'syz.1.3569': attribute type 1 has an invalid length. [ 466.687422][T21212] net_ratelimit: 43 callbacks suppressed [ 466.687441][T21212] bond1: (slave dummy0): failed to get link speed/duplex [ 466.755529][T21386] netlink: 'syz.1.3569': attribute type 1 has an invalid length. [ 466.896641][T21383] bond2: (slave geneve2): making interface the new active one [ 466.910282][T21383] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 466.911547][T21386] netlink: 'syz.1.3569': attribute type 1 has an invalid length. [ 466.979483][T21386] netlink: 'syz.1.3569': attribute type 1 has an invalid length. [ 467.054709][T21212] bond1: (slave dummy0): failed to get link speed/duplex [ 467.090239][T21400] __nla_validate_parse: 5 callbacks suppressed [ 467.090261][T21400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3573'. [ 467.203785][T21210] bond1: (slave dummy0): failed to get link speed/duplex [ 467.346400][T21417] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3574'. [ 467.404475][T21417] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3574'. [ 467.445810][T21419] batman_adv: batadv0: Removing interface: veth0 [ 467.489088][T21419] bridge_slave_0: left allmulticast mode [ 467.489114][T21419] bridge_slave_0: left promiscuous mode [ 467.489354][T21419] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.586076][T21419] bridge_slave_1: left allmulticast mode [ 467.586102][T21419] bridge_slave_1: left promiscuous mode [ 467.586372][T21419] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.241790][T21419] bond0: (slave bond_slave_0): Releasing backup interface [ 468.256081][T21419] bond0: (slave bond_slave_1): Releasing backup interface [ 468.259853][T21419] team0: Port device team_slave_0 removed [ 468.260236][T21419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.261136][T21419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.263239][T21419] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 468.264059][T21421] team0: Mode changed to "activebackup" [ 468.430698][T21426] 8021q: adding VLAN 0 to HW filter on device bond3 [ 468.438889][T21426] bridge0: port 3(bond3) entered blocking state [ 468.438994][T21426] bridge0: port 3(bond3) entered disabled state [ 468.439164][T21426] bond3: entered allmulticast mode [ 468.445227][T21426] bond3: entered promiscuous mode [ 468.447535][T21426] bridge0: port 3(bond3) entered blocking state [ 468.447703][T21426] bridge0: port 3(bond3) entered forwarding state [ 468.455074][ T138] bond1: (slave dummy0): failed to get link speed/duplex [ 468.461850][ T138] bridge0: port 3(bond3) entered disabled state [ 468.503248][T21437] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3580'. [ 468.524016][T21435] sit2: entered promiscuous mode [ 468.679635][ T30] audit: type=1800 audit(1792950991.344:17): pid=21447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3582" name="blkio.bfq.time_recursive" dev="tmpfs" ino=860 res=0 errno=-22 [ 468.912144][T21451] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3583'. [ 468.912187][T21451] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3583'. [ 468.964098][T21460] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3586'. [ 468.973345][ T6736] bond1: (slave dummy0): failed to get link speed/duplex [ 468.981754][T21458] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3585'. [ 469.103766][ T138] bond1: (slave dummy0): failed to get link speed/duplex [ 469.214046][T21208] bond1: (slave dummy0): failed to get link speed/duplex [ 469.246719][T21469] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3588'. [ 469.382488][ T138] bond1: (slave dummy0): failed to get link speed/duplex [ 469.383505][T21486] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 469.383526][T21486] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 469.494396][ T6736] bond1: (slave dummy0): failed to get link speed/duplex [ 469.651741][T21494] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3593'. [ 469.757356][T21494] rxe_eth0 speed is unknown, defaulting to 1000 [ 469.773797][T21501] batman_adv: batadv0: Adding interface: veth0 [ 469.773813][T21501] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.773832][T21501] batman_adv: batadv0: Interface activated: veth0 [ 469.908499][T21510] xt_hashlimit: size too large, truncated to 1048576 [ 469.989243][T21501] macsec1: entered promiscuous mode [ 469.991205][T21502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.011701][T21502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.027755][T21502] batman_adv: batadv0: Interface deactivated: veth0 [ 470.027777][T21502] batman_adv: batadv0: Removing interface: veth0 [ 470.226741][T21521] ip6erspan0: entered allmulticast mode [ 470.585401][ T4948] block nbd0: Receive control failed (result -32) [ 471.732802][T21212] net_ratelimit: 11 callbacks suppressed [ 471.732823][T21212] bond1: (slave dummy0): failed to get link speed/duplex [ 471.751634][T21594] x_tables: duplicate underflow at hook 1 [ 471.844537][ T8855] bond1: (slave dummy0): failed to get link speed/duplex [ 471.953333][T21207] bond1: (slave dummy0): failed to get link speed/duplex [ 472.140274][T21612] IPv6: NLM_F_CREATE should be specified when creating new route [ 472.140388][T21612] __nla_validate_parse: 11 callbacks suppressed [ 472.140402][T21612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3616'. [ 472.170874][T21612] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3616'. [ 472.221031][T21614] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 472.221069][T21614] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 472.221131][T21614] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 472.263497][ T8855] bond1: (slave dummy0): failed to get link speed/duplex [ 472.305439][T21619] ip_tables: iptables: counters copy to user failed while replacing table [ 472.379362][T21208] bond1: (slave dummy0): failed to get link speed/duplex [ 472.482592][T21207] bond1: (slave dummy0): failed to get link speed/duplex [ 472.592063][T21208] bond1: (slave dummy0): failed to get link speed/duplex [ 472.600965][T21635] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3623'. [ 472.649189][T21629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3621'. [ 472.862073][T21208] bond1: (slave dummy0): failed to get link speed/duplex [ 472.924008][T21650] validate_nla: 23 callbacks suppressed [ 472.924027][T21650] netlink: 'syz.6.3625': attribute type 10 has an invalid length. [ 472.941510][T21650] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 472.973173][T21210] bond1: (slave dummy0): failed to get link speed/duplex [ 473.285283][T21661] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3630'. [ 473.656650][T21668] syzkaller0: entered promiscuous mode [ 473.656677][T21668] syzkaller0: entered allmulticast mode [ 473.657766][T21673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3632'. [ 473.704422][T21675] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3635'. [ 473.929646][T21683] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3637'. [ 473.929683][T21683] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3637'. [ 474.064012][ T4948] Bluetooth: hci8: Malformed Event: 0x13 [ 476.701731][T21703] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3644'. [ 476.780389][T21712] netlink: 'syz.4.3647': attribute type 1 has an invalid length. [ 476.859031][T21212] net_ratelimit: 10 callbacks suppressed [ 476.859051][T21212] bond1: (slave dummy0): failed to get link speed/duplex [ 476.962198][T21208] bond1: (slave dummy0): failed to get link speed/duplex [ 477.074506][ T138] bond1: (slave dummy0): failed to get link speed/duplex [ 477.113938][T21725] xt_IDLETIMER: timeout value is zero [ 477.203136][T21736] udevd[21736]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 477.203817][T11186] bond1: (slave dummy0): failed to get link speed/duplex [ 477.245484][T21736] udevd[21736]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 477.312737][ T138] bond1: (slave dummy0): failed to get link speed/duplex [ 477.422122][T21208] bond1: (slave dummy0): failed to get link speed/duplex [ 477.532784][T21212] bond1: (slave dummy0): failed to get link speed/duplex [ 477.642146][T21212] bond1: (slave dummy0): failed to get link speed/duplex [ 477.740042][T21751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.752195][T21212] bond1: (slave dummy0): failed to get link speed/duplex [ 477.891648][T21757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.904434][T21757] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.946527][T21760] __nla_validate_parse: 2 callbacks suppressed [ 477.946547][T21760] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3658'. [ 478.142312][T21757] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 478.142336][T21757] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 478.148778][T21757] veth1_vlan: left promiscuous mode [ 478.150216][T21757] veth0_vlan: left promiscuous mode [ 478.151989][T21757] veth0_vlan: entered promiscuous mode [ 478.193526][T21757] veth1_vlan: entered promiscuous mode [ 478.200331][T21757] veth0_macvtap: left promiscuous mode [ 478.201463][T21757] veth0_macvtap: entered promiscuous mode [ 478.227896][T21757] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 478.228970][T21757] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 478.230192][T21757] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 478.231246][T21757] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 478.294890][T21757] 8021q: adding VLAN 0 to HW filter on device bond1 [ 478.297338][T21757] 8021q: adding VLAN 0 to HW filter on device bond2 [ 478.408181][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.408338][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.411179][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.411286][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.575430][T21762] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.577770][T21762] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.671579][T21762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.678675][T21762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.771401][T21762] mac80211_hwsim hwsim35 syzkaller0: left promiscuous mode [ 478.771418][T21762] mac80211_hwsim hwsim35 syzkaller0: left allmulticast mode [ 478.771773][T21762] bond1: left promiscuous mode [ 478.771786][T21762] bond1: left allmulticast mode [ 478.802865][ T8855] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.805612][ T8855] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.823238][T21212] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.826422][T21210] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.826464][T21210] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.826497][T21210] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.826530][T21210] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.826552][T21210] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.826584][T21210] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.826606][T21210] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.826636][T21210] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.826825][T21210] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.978680][T21779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3661'. [ 479.544453][T21818] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3668'. [ 479.588595][T21818] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3668'. [ 479.650329][T21821] netlink: 'syz.7.3673': attribute type 2 has an invalid length. [ 479.689252][T21821] netlink: 'syz.7.3673': attribute type 2 has an invalid length. [ 479.743969][T21821] !: entered promiscuous mode [ 480.113941][T21842] netlink: 'syz.3.3680': attribute type 1 has an invalid length. [ 480.137722][T21846] ip6t_rpfilter: unknown options [ 480.139698][T21852] netlink: 'syz.3.3680': attribute type 1 has an invalid length. [ 480.605522][T21880] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3688'. [ 480.727765][T21880] syzkaller0: left promiscuous mode [ 480.727823][T21880] syzkaller0: left allmulticast mode [ 480.765504][T21870] sctp: [Deprecated]: syz.4.3682 (pid 21870) Use of struct sctp_assoc_value in delayed_ack socket option. [ 480.765504][T21870] Use struct sctp_sack_info instead [ 480.766277][T21870] sctp: [Deprecated]: syz.4.3682 (pid 21870) Use of struct sctp_assoc_value in delayed_ack socket option. [ 480.766277][T21870] Use struct sctp_sack_info instead [ 480.768101][T21887] netlink: 'syz.3.3689': attribute type 1 has an invalid length. [ 480.797248][T21887] 8021q: adding VLAN 0 to HW filter on device bond9 [ 481.437931][T11186] IPVS: starting estimator thread 0... [ 481.522309][T21918] IPVS: using max 32 ests per chain, 76800 per kthread [ 481.609887][T21923] xt_hashlimit: size too large, truncated to 1048576 [ 481.762434][T21929] bridge1: entered promiscuous mode [ 481.932972][T21208] net_ratelimit: 23 callbacks suppressed [ 481.932992][T21208] bond1: (slave dummy0): failed to get link speed/duplex [ 482.050645][T21208] bond1: (slave dummy0): failed to get link speed/duplex [ 482.152679][T21208] bond1: (slave dummy0): failed to get link speed/duplex [ 482.286477][T21207] bond1: (slave dummy0): failed to get link speed/duplex [ 482.306918][T21937] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3699'. [ 482.393582][ T6736] bond1: (slave dummy0): failed to get link speed/duplex [ 482.405597][T21938] x_tables: duplicate underflow at hook 3 [ 482.498066][T21949] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3696'. [ 482.498091][T21949] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3696'. [ 482.508319][T21940] x_tables: duplicate underflow at hook 2 [ 482.541688][T21944] syzkaller1: entered allmulticast mode [ 482.546977][T21210] bond1: (slave dummy0): failed to get link speed/duplex [ 482.652097][ T138] bond1: (slave dummy0): failed to get link speed/duplex [ 482.781095][T21958] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3701'. [ 482.890465][T21968] netlink: 'syz.7.3703': attribute type 10 has an invalid length. [ 482.890487][T21968] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3703'. [ 482.968434][T21969] netlink: 'syz.7.3703': attribute type 10 has an invalid length. [ 482.983890][T21958] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.984166][T21958] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.242440][T21958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.273042][T21958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.513996][T21969] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.514563][T21969] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.597512][T21969] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.597658][T21969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.597982][T21969] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.598112][T21969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.609511][T21969] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 483.622433][T21208] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.622465][T21208] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.622509][T21208] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.622532][T21208] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.622571][T21208] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.622593][T21208] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.622623][T21208] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.622658][T21208] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.713378][T21989] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 484.045186][T22005] __nla_validate_parse: 1 callbacks suppressed [ 484.045207][T22005] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3712'. [ 484.631799][T22030] ip_tables: iptables: counters copy to user failed while replacing table [ 484.655704][T22025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3720'. [ 484.792809][T22032] netlink: 'syz.4.3722': attribute type 1 has an invalid length. [ 484.818929][T22029] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 484.820033][T22029] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 484.948436][T22032] 8021q: adding VLAN 0 to HW filter on device bond8 [ 485.054810][T22030] bond8: (slave gretap1): making interface the new active one [ 485.062224][T22030] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 485.073786][T22041] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3725'. [ 485.111788][T22043] netlink: 'syz.6.3724': attribute type 1 has an invalid length. [ 485.121842][T22043] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3724'. [ 485.248655][T22047] netlink: 'syz.4.3726': attribute type 18 has an invalid length. [ 485.659988][T22064] ebt_limit: overflow, try lower: 4294901760/65535 [ 486.027811][T22077] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3735'. [ 486.046845][T22082] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3735'. [ 486.408792][T22100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3743'. [ 486.408818][T22100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3743'. [ 486.519778][T22109] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3744'. [ 486.536712][T22107] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3745'. [ 486.806509][T22124] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 486.826629][T22124] bond4 (unregistering): Released all slaves [ 487.091722][T22142] geneve4: entered promiscuous mode [ 487.091738][T22142] geneve4: entered allmulticast mode [ 487.105932][T21207] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.106025][T21207] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.106084][T21207] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.106627][T21207] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.191555][T22154] netlink: 'syz.3.3759': attribute type 4 has an invalid length. [ 487.206041][T22154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.248615][T22154] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 487.451459][T22167] netlink: 'syz.4.3761': attribute type 21 has an invalid length. [ 487.480586][T22167] netlink: 'syz.4.3761': attribute type 21 has an invalid length. [ 487.728707][T22184] can: request_module (can-proto-0) failed. [ 488.092423][T22209] tipc: Started in network mode [ 488.092453][T22209] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 488.092703][T22209] tipc: Enabled bearer , priority 0 [ 490.748510][T22189] __nla_validate_parse: 10 callbacks suppressed [ 490.748531][T22189] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3765'. [ 490.819081][T22230] tipc: Enabling of bearer rejected, failed to enable media [ 490.826263][T10172] tipc: Node number set to 43690 [ 491.050152][T22250] ipvlan0: Caught tx_queue_len zero misconfig [ 491.155002][T22258] @ÿ: renamed from veth0_vlan (while UP) [ 491.242510][T22269] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3783'. [ 491.244914][T22269] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 491.245388][T22269] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 491.431657][T22283] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3785'. [ 491.478826][T22281] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3787'. [ 492.093399][T22323] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3793'. [ 492.315347][T22337] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3796'. [ 493.474578][T22383] netlink: 'syz.1.3811': attribute type 16 has an invalid length. [ 493.684279][T22393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3812'. [ 493.727832][T22397] netlink: 2292 bytes leftover after parsing attributes in process `syz.6.3814'. [ 493.727954][T22397] hsr_slave_0: left promiscuous mode [ 493.728871][T22397] hsr_slave_1: left promiscuous mode [ 493.916297][T22407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3817'. [ 494.007278][T22417] x_tables: unsorted underflow at hook 1 [ 494.091473][T22425] x_tables: unsorted underflow at hook 1 [ 494.092514][T22417] gtp0: entered promiscuous mode [ 494.092530][T22417] gtp0: entered allmulticast mode [ 494.124630][T22422] gtp1: entered promiscuous mode [ 494.124724][T22422] gtp1: entered allmulticast mode [ 494.188171][T22423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3817'. [ 495.391277][T22490] netlink: 'syz.3.3831': attribute type 21 has an invalid length. [ 495.471890][T22500] netlink: 'syz.4.3835': attribute type 10 has an invalid length. [ 495.485379][T22500] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 495.487083][T22500] team0: Port device netdevsim1 added [ 495.693860][T22510] netlink: 'syz.7.3836': attribute type 6 has an invalid length. [ 495.845684][T22508] __nla_validate_parse: 4 callbacks suppressed [ 495.845704][T22508] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3837'. [ 495.850204][T22506] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 495.856276][T22505] syzkaller0: entered promiscuous mode [ 495.856297][T22505] syzkaller0: entered allmulticast mode [ 495.935896][T22519] pimreg: entered allmulticast mode [ 495.936107][T22519] pimreg: left allmulticast mode [ 496.146351][T22532] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:0 [ 496.150316][T22528] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3840'. [ 496.151235][T22530] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 496.346994][T22537] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 496.348693][T22535] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.384331][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.468139][T22546] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3846'. [ 496.641491][T22558] netlink: 'syz.4.3847': attribute type 1 has an invalid length. [ 496.705078][T22555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3848'. [ 496.847526][T22562] 8021q: adding VLAN 0 to HW filter on device bond11 [ 496.867211][T22562] bond10: (slave bond11): making interface the new active one [ 496.868361][T22562] bond10: (slave bond11): Enslaving as an active interface with an up link [ 496.892172][T22562] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3847'. [ 496.900732][T22567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.967006][T22558] bond10: (slave gretap2): Enslaving as a backup interface with an up link [ 497.019152][T22562] 8021q: adding VLAN 0 to HW filter on device bond10 [ 497.195227][T22586] bridge_slave_0: left allmulticast mode [ 497.195252][T22586] bridge_slave_0: left promiscuous mode [ 497.195475][T22586] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.940468][T22586] bridge_slave_1: left allmulticast mode [ 497.940494][T22586] bridge_slave_1: left promiscuous mode [ 497.940737][T22586] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.025400][T22586] bond0: (slave bond_slave_0): Releasing backup interface [ 498.041349][T22586] bond0: (slave bond_slave_1): Releasing backup interface [ 498.066220][T22586] team0: Port device team_slave_0 removed [ 498.077607][T22586] team0: Port device team_slave_1 removed [ 498.077965][T22586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.093797][T22586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.106963][T22586] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 498.115867][T22598] vlan0: entered promiscuous mode [ 498.132785][T22598] team0: Port device vlan0 added [ 498.238648][T22620] netlink: 110 bytes leftover after parsing attributes in process `syz.7.3857'. [ 498.279174][T22622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3858'. [ 498.461099][ T4948] Bluetooth: hci6: command 0x0406 tx timeout [ 498.599208][T22643] ip6gre2: entered promiscuous mode [ 498.599223][T22643] ip6gre2: entered allmulticast mode [ 498.759972][T22650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.761893][T22650] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.767696][T22650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.834195][T22650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.836925][T22650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.847004][T22650] veth1_vlan: left promiscuous mode [ 498.848359][T22650] veth0_vlan: left promiscuous mode [ 498.850235][T22650] veth0_vlan: entered promiscuous mode [ 498.851509][T22650] veth1_vlan: entered promiscuous mode [ 498.878891][T22650] veth1_macvtap: left promiscuous mode [ 498.880285][T22650] veth0_macvtap: left promiscuous mode [ 498.881586][T22650] veth0_macvtap: entered promiscuous mode [ 498.884414][T22650] veth1_macvtap: entered promiscuous mode [ 498.894636][T22650] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 498.896498][T22650] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 498.902962][T11186] bond1: (slave dummy0): link status up again after 0 ms [ 498.904612][T22650] 8021q: adding VLAN 0 to HW filter on device bond1 [ 498.909094][T22650] 8021q: adding VLAN 0 to HW filter on device bond2 [ 498.913434][T22650] 8021q: adding VLAN 0 to HW filter on device bond3 [ 498.916062][T22650] 8021q: adding VLAN 0 to HW filter on device bond4 [ 498.919541][T22650] 8021q: adding VLAN 0 to HW filter on device bond5 [ 498.922774][T21208] bond1: (slave dummy0): link status up again after 0 ms [ 498.929839][T22650] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check. [ 498.942647][T11186] bond1: (slave dummy0): link status up again after 0 ms [ 499.003323][T21207] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.003480][T21207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.005658][T21207] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.005764][T21207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.071182][T22661] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 499.071207][T22661] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 499.152479][T11186] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.152513][T11186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.152976][ T6744] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.153001][ T6744] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.175428][T21208] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.175461][T21208] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.175758][ T6744] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.175783][ T6744] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.504769][T21208] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 499.504901][T21208] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 499.532281][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 499.822405][T22672] syzkaller1: entered promiscuous mode [ 499.822421][T22672] syzkaller1: entered allmulticast mode [ 499.912590][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 499.942268][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 500.902256][T21208] net_ratelimit: 26 callbacks suppressed [ 500.902279][T21208] bond1: (slave dummy0): failed to get link speed/duplex [ 501.013743][ T6744] bond1: (slave dummy0): failed to get link speed/duplex [ 501.122154][ T6744] bond1: (slave dummy0): failed to get link speed/duplex [ 501.232209][ T138] bond1: (slave dummy0): failed to get link speed/duplex [ 501.342120][T21208] bond1: (slave dummy0): failed to get link speed/duplex [ 501.351155][T22624] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 501.452312][T21208] bond1: (slave dummy0): failed to get link speed/duplex [ 501.563307][ T138] bond1: (slave dummy0): failed to get link speed/duplex [ 501.672874][ T151] bond1: (slave dummy0): failed to get link speed/duplex [ 501.778146][T22699] bridge2: entered allmulticast mode [ 501.787990][T11186] bond1: (slave dummy0): failed to get link speed/duplex [ 501.881614][T22701] batadv_slave_0: Caught tx_queue_len zero misconfig [ 501.893259][ T6744] bond1: (slave dummy0): failed to get link speed/duplex [ 501.981065][T22715] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3880'. [ 501.981249][T22716] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) ! [ 502.051534][T22722] netlink: 'syz.4.3881': attribute type 10 has an invalid length. [ 502.051557][T22722] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3881'. [ 502.172181][T22728] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3879'. [ 502.181237][T22728] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3879'. [ 502.201490][T22728] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3879'. [ 502.215858][T22728] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3879'. [ 502.218772][T22728] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3879'. [ 502.220756][T22728] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3879'. [ 502.261741][T22728] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3879'. [ 502.265284][T22728] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3879'. [ 503.441831][T22793] ip6gretap2: entered allmulticast mode [ 503.450573][T22793] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 503.451283][T22793] batman_adv: batadv0: Adding interface: ip6gretap2 [ 503.451296][T22793] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.451556][T22793] batman_adv: batadv0: Interface activated: ip6gretap2 [ 503.583020][ T5643] Bluetooth: hci4: command 0x0406 tx timeout [ 503.754125][T22803] syzkaller1: entered promiscuous mode [ 503.754209][T22803] syzkaller1: entered allmulticast mode [ 503.895415][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 504.103219][T22820] sock: sock_timestamping_bind_phc: sock not bind to device [ 504.258471][T22830] bond4: option ad_user_port_key: invalid value (65535) [ 504.258495][T22830] bond4: option ad_user_port_key: allowed values 0 - 1023 [ 504.301421][T22830] bond4 (unregistering): Released all slaves [ 504.599019][T22852] netlink: 'syz.1.3904': attribute type 3 has an invalid length. [ 505.414688][ T4948] Bluetooth: hci4: unexpected cc 0x2003 length: 0 < 9 [ 505.414720][ T4948] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 505.657884][T22898] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 505.968582][T22917] Cannot find set identified by id 0 to match [ 505.986930][ T6736] net_ratelimit: 28 callbacks suppressed [ 505.986951][ T6736] bond1: (slave dummy0): failed to get link speed/duplex [ 506.101365][T22915] tipc: Resetting bearer [ 506.193365][T11186] bond1: (slave dummy0): failed to get link speed/duplex [ 506.284273][T22928] bridge3: entered allmulticast mode [ 506.357943][T22925] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.364160][T11186] bond1: (slave dummy0): failed to get link speed/duplex [ 506.477273][ T6736] bond1: (slave dummy0): failed to get link speed/duplex [ 506.582765][T11186] bond1: (slave dummy0): failed to get link speed/duplex [ 506.655971][T22948] tc_dump_action: action bad kind [ 506.668954][T22953] netlink: 'syz.3.3928': attribute type 17 has an invalid length. [ 506.668986][T22953] ip6_vti0: left promiscuous mode [ 506.701234][T21210] bond1: (slave dummy0): failed to get link speed/duplex [ 506.802640][T21208] bond1: (slave dummy0): failed to get link speed/duplex [ 506.848110][T22966] sctp: [Deprecated]: syz.3.3933 (pid 22966) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.848110][T22966] Use struct sctp_sack_info instead [ 506.881665][T22966] IPVS: length: 201 != 24 [ 506.929866][T22960] xt_CT: No such helper "snmp" [ 506.982626][T22974] __nla_validate_parse: 43 callbacks suppressed [ 506.982648][T22974] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3936'. [ 506.999349][T22974] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3936'. [ 507.004050][T11186] bond1: (slave dummy0): failed to get link speed/duplex [ 507.112415][T21207] bond1: (slave dummy0): failed to get link speed/duplex [ 507.253750][ T151] bond1: (slave dummy0): failed to get link speed/duplex [ 507.275977][T22981] syzkaller0: entered promiscuous mode [ 507.276000][T22981] syzkaller0: entered allmulticast mode [ 508.692979][ T5643] Bluetooth: hci3: command 0x0c1a tx timeout [ 510.245678][T23003] sctp: [Deprecated]: syz.6.3943 (pid 23003) Use of int in max_burst socket option. [ 510.245678][T23003] Use struct sctp_assoc_value instead [ 510.245710][T23003] sctp: [Deprecated]: syz.6.3943 (pid 23003) Use of int in max_burst socket option. [ 510.245710][T23003] Use struct sctp_assoc_value instead [ 510.245732][T23003] sctp: [Deprecated]: syz.6.3943 (pid 23003) Use of int in max_burst socket option. [ 510.245732][T23003] Use struct sctp_assoc_value instead [ 510.245752][T23003] sctp: [Deprecated]: syz.6.3943 (pid 23003) Use of int in max_burst socket option. [ 510.245752][T23003] Use struct sctp_assoc_value instead [ 510.245773][T23003] sctp: [Deprecated]: syz.6.3943 (pid 23003) Use of int in max_burst socket option. [ 510.245773][T23003] Use struct sctp_assoc_value instead [ 510.245794][T23003] sctp: [Deprecated]: syz.6.3943 (pid 23003) Use of int in max_burst socket option. [ 510.245794][T23003] Use struct sctp_assoc_value instead [ 510.245814][T23003] sctp: [Deprecated]: syz.6.3943 (pid 23003) Use of int in max_burst socket option. [ 510.245814][T23003] Use struct sctp_assoc_value instead [ 510.245835][T23003] sctp: [Deprecated]: syz.6.3943 (pid 23003) Use of int in max_burst socket option. [ 510.245835][T23003] Use struct sctp_assoc_value instead [ 510.245854][T23003] sctp: [Deprecated]: syz.6.3943 (pid 23003) Use of int in max_burst socket option. [ 510.245854][T23003] Use struct sctp_assoc_value instead [ 510.245874][T23003] sctp: [Deprecated]: syz.6.3943 (pid 23003) Use of int in max_burst socket option. [ 510.245874][T23003] Use struct sctp_assoc_value instead [ 510.600278][T23024] netlink: 'syz.7.3948': attribute type 1 has an invalid length. [ 510.673613][T23024] 8021q: adding VLAN 0 to HW filter on device bond4 [ 510.720334][T23031] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3949'. [ 510.816234][T23024] bond4: (slave gretap1): making interface the new active one [ 510.819675][T23024] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 511.010002][T23041] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3952'. [ 511.049496][ T138] net_ratelimit: 11 callbacks suppressed [ 511.049516][ T138] bond1: (slave dummy0): failed to get link speed/duplex [ 511.154301][ T138] bond1: (slave dummy0): failed to get link speed/duplex [ 511.322399][ T138] bond1: (slave dummy0): failed to get link speed/duplex [ 511.432190][T21207] bond1: (slave dummy0): failed to get link speed/duplex [ 511.468548][T23074] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3960'. [ 511.505069][T23071] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3961'. [ 511.505091][T23071] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3961'. [ 511.566649][ T151] bond1: (slave dummy0): failed to get link speed/duplex [ 511.620642][T23083] syzkaller0: entered promiscuous mode [ 511.620663][T23083] syzkaller0: entered allmulticast mode [ 511.645556][T23084] netlink: 'syz.7.3962': attribute type 11 has an invalid length. [ 511.666461][T23086] Bluetooth: ISO socket layer initialized [ 511.667894][ T4948] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 511.668221][ T4948] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 511.668547][ T4948] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 511.672655][ T151] bond1: (slave dummy0): failed to get link speed/duplex [ 511.802260][ T4948] Bluetooth: hci3: unexpected event for opcode 0x2060 [ 511.802913][ T4948] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 511.893691][T23095] syz_tun: entered allmulticast mode [ 511.956867][T23094] dvmrp6: entered allmulticast mode [ 511.969716][T23093] syz_tun: left allmulticast mode [ 511.992190][T21208] bond1: (slave dummy0): failed to get link speed/duplex [ 512.262621][ T138] bond1: (slave dummy0): failed to get link speed/duplex [ 512.377897][ T6744] bond1: (slave dummy0): failed to get link speed/duplex [ 512.468153][T23121] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3974'. [ 512.468643][T23121] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3974'. [ 512.500124][T23127] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3978'. [ 512.539708][T23131] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 512.540166][T23124] IPVS: stopping backup sync thread 23131 ... [ 512.562354][T21210] bond1: (slave dummy0): failed to get link speed/duplex [ 512.690908][T23134] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3979'. [ 512.704522][T23140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3981'. [ 512.779460][T23140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3981'. [ 513.262145][T23169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3986'. [ 513.270673][T23173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3986'. [ 513.457153][T23180] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3988'. [ 513.777364][T23198] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3993'. [ 514.221345][T23242] xt_CT: No such helper "netbios-ns" [ 514.700151][T23202] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 516.052390][ T8855] net_ratelimit: 27 callbacks suppressed [ 516.052414][ T8855] bond1: (slave dummy0): failed to get link speed/duplex [ 516.219901][T23350] 8021q: adding VLAN 0 to HW filter on device bond12 [ 516.385047][T23358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.404304][T23358] bond12: (slave bond0): Enslaving as an active interface with an up link [ 516.422573][T11188] bond1: (slave dummy0): failed to get link speed/duplex [ 516.541604][ T6736] bond1: (slave dummy0): failed to get link speed/duplex [ 516.595849][T23370] ip_tables: iptables: counters copy to user failed while replacing table [ 516.641671][T23372] syzkaller1: entered promiscuous mode [ 516.641694][T23372] syzkaller1: entered allmulticast mode [ 516.672222][ T8855] bond1: (slave dummy0): failed to get link speed/duplex [ 517.122179][T11186] bond1: (slave dummy0): failed to get link speed/duplex [ 517.522695][T21210] batman_adv: batadv0: Removing interface: ip6gretap1 [ 518.151107][T21210] bond0 (unregistering): Released all slaves [ 518.166187][T21210] bond1 (unregistering): Released all slaves [ 518.191813][T21210] bond2 (unregistering): Released all slaves [ 518.213726][T21210] bond3 (unregistering): Released all slaves [ 518.230213][T21210] bond4 (unregistering): Released all slaves [ 518.251037][T21210] bond5 (unregistering): Released all slaves [ 518.282788][T21210] bond6 (unregistering): Released all slaves [ 518.308414][T21210] bond7 (unregistering): Released all slaves [ 518.330195][T21210] bond8 (unregistering): Released all slaves [ 518.346671][T21210] bond9 (unregistering): Released all slaves [ 518.360759][T21210] bond10 (unregistering): Released all slaves [ 518.388091][T21210] bond11 (unregistering): Released all slaves [ 518.403495][T21210] bond12 (unregistering): Released all slaves [ 518.411846][T21210] bond13 (unregistering): Released all slaves [ 518.436123][T21210] bond14 (unregistering): Released all slaves [ 518.459646][T21210] bond15 (unregistering): Released all slaves [ 518.475581][T21210] bond16 (unregistering): Released all slaves [ 518.489659][T21210] bond17 (unregistering): Released all slaves [ 518.505304][T23395] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 518.506706][T23395] 0ªX¹¦Dö»: entered allmulticast mode [ 518.529688][T23407] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 518.594324][ T6744] bond1: (slave dummy0): failed to get link speed/duplex [ 518.762470][T23450] __nla_validate_parse: 7 callbacks suppressed [ 518.762490][T23450] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4030'. [ 518.764989][T23450] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4030'. [ 519.014154][ T8855] bond1: (slave dummy0): failed to get link speed/duplex [ 519.133792][ T138] bond1: (slave dummy0): failed to get link speed/duplex [ 519.233170][T23464] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4034'. [ 519.233436][T23464] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4034'. [ 519.243375][ T138] bond1: (slave dummy0): failed to get link speed/duplex [ 519.291018][T23472] syz_tun: entered allmulticast mode [ 519.340852][T23478] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4039'. [ 519.467354][T23491] netlink: 'syz.4.4039': attribute type 3 has an invalid length. [ 519.625595][T23482] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4039'. [ 519.627223][T23468] syz_tun: left allmulticast mode [ 519.872057][ T4948] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 519.872854][ T4948] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 519.872944][ T4948] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 519.873030][ T4948] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 519.873117][ T4948] Bluetooth: hci4: unexpected event for opcode 0x0c6d [ 520.259632][T23509] netlink: 'syz.3.4046': attribute type 9 has an invalid length. [ 520.647916][T23518] netlink: 300 bytes leftover after parsing attributes in process `syz.3.4048'. [ 520.678198][T23518] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4048'. [ 521.094432][ T6736] net_ratelimit: 9 callbacks suppressed [ 521.094452][ T6736] bond1: (slave dummy0): failed to get link speed/duplex [ 521.096141][T23542] xt_CT: You must specify a L4 protocol and not use inversions on it [ 521.110180][T23542] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 521.117818][T23542] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 521.155066][T23546] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4056'. [ 521.155089][T23546] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4056'. [ 521.367840][T11188] bond1: (slave dummy0): failed to get link speed/duplex [ 521.512647][ T8855] bond1: (slave dummy0): failed to get link speed/duplex [ 521.531614][T23565] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 521.693606][ T6736] bond1: (slave dummy0): failed to get link speed/duplex [ 521.802930][T11188] bond1: (slave dummy0): failed to get link speed/duplex [ 521.896507][T21210] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 521.896559][T21210] batman_adv: batadv0: Removing interface: syzkaller0 [ 521.974870][ T32] INFO: task syz.5.2777:17633 blocked for more than 143 seconds. [ 521.974894][ T32] Not tainted syzkaller #0 ** replaying previous printk message ** [ 521.974894][ T32] Not tainted syzkaller #0 [ 521.974903][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 521.974912][ T32] task:syz.5.2777 state:D stack:27720 pid:17633 tgid:17632 ppid:12320 task_flags:0x400140 flags:0x00080002 [ 521.974985][ T32] Call Trace: [ 521.974992][ T32] [ 521.975005][ T32] __schedule+0x17dd/0x5820 [ 521.975215][ T32] ? __pfx___schedule+0x10/0x10 [ 521.975284][ T32] ? schedule+0x90/0x2b0 [ 521.975312][ T32] schedule+0x164/0x2b0 [ 521.975339][ T32] schedule_preempt_disabled+0x13/0x30 [ 521.975363][ T32] __mutex_lock+0x7c4/0x15a0 [ 521.975385][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 521.975407][ T32] ? nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 521.975528][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 521.975544][ T32] ? net_generic+0x1e/0x240 [ 521.975576][ T32] ? net_generic+0x1e/0x240 [ 521.975593][ T32] ? net_generic+0x1e/0x240 [ 521.975607][ T32] ? net_generic+0x1e/0x240 [ 521.975631][ T32] nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 521.975652][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 521.975778][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 521.975818][ T32] ? bpf_lsm_capable+0x9/0x20 [ 521.975857][ T32] ? security_capable+0x7e/0x2c0 [ 521.975978][ T32] genl_rcv_msg+0x614/0x7a0 [ 521.976011][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 521.976036][ T32] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 521.976071][ T32] netlink_rcv_skb+0x226/0x4a0 [ 521.976094][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 521.976122][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 521.976160][ T32] ? down_read+0x2b9/0x320 [ 521.976185][ T32] genl_rcv+0x28/0x40 [ 521.976207][ T32] netlink_unicast+0x8ef/0xa80 [ 521.976246][ T32] netlink_sendmsg+0x7f0/0xb20 [ 521.976275][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.976301][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 521.976447][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 521.976470][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.976491][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 521.976579][ T32] ____sys_sendmsg+0x54e/0x850 [ 521.976640][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 521.976676][ T32] ? import_iovec+0x73/0xa0 [ 521.976766][ T32] ___sys_sendmsg+0x2a5/0x360 [ 521.976964][ T32] ? __lock_acquire+0x747/0x2de0 [ 521.977013][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 521.977043][ T32] ? futex_wait+0x2a2/0x390 [ 521.977105][ T32] ? __fget_files+0x3a2/0x420 [ 521.977143][ T32] ? __fget_files+0x2a/0x420 [ 521.977172][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 521.977193][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 521.977243][ T32] do_syscall_64+0x166/0x520 [ 521.977260][ T32] ? trace_irq_disable+0x3b/0x140 [ 521.977286][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.977328][ T32] ? clear_bhb_loop+0x70/0xc0 [ 521.977350][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.977368][ T32] RIP: 0033:0x7fb2b779f559 [ 521.977386][ T32] RSP: 002b:00007fb2b86e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 521.977406][ T32] RAX: ffffffffffffffda RBX: 00007fb2b7a25fa0 RCX: 00007fb2b779f559 [ 521.977419][ T32] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 521.977431][ T32] RBP: 00007fb2b7836b20 R08: 0000000000000000 R09: 0000000000000000 [ 521.977443][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.977453][ T32] R13: 00007fb2b7a26038 R14: 00007fb2b7a25fa0 R15: 00007ffdd60f29d8 [ 521.977486][ T32] [ 521.977573][ T32] [ 521.977573][ T32] Showing all locks held in the system: [ 521.977584][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 521.977598][ T32] #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 521.977691][ T32] locks held by getty/5390: 2, on CPU#0: [ 521.977702][ T32] #0: ffff88803569f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 521.977821][ T32] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 521.977874][ T32] locks held by syz.0.1324/11592: 2, on CPU#1: [ 521.977886][ T32] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 521.977936][ T32] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 521.977984][ T32] locks held by syz.5.2777/17633: 2, on CPU#1: [ 521.977996][ T32] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 521.978044][ T32] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 521.978088][ T32] locks held by syz-executor/18241: 4, last CPU#1: [ 521.978100][ T32] #0: ffffffff8fe33fd0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x470 [ 521.978165][ T32] #1: ffff88802be83440 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 521.978218][ T32] #2: ffff8880361ac080 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 521.978269][ T32] #3: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 521.978313][ T32] locks held by syz.2.2904/18440: 2, on CPU#0: [ 521.978327][ T32] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 521.978375][ T32] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x104/0x610 [ 521.978439][ T32] locks held by kworker/u8:49/21210: 5, last CPU#0: [ 521.978453][ T32] #0: ffff88801d2de148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 521.978502][ T32] #1: ffffc9001acbfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 521.980464][ T32] #2: ffffffff91268248 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 521.980618][ T32] #3: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xd0/0x760 [ 521.980720][ T32] #4: ffff8880b843bea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 521.980783][ T32] locks held by syz.3.4057/23540: 2, on CPU#0: [ 521.980796][ T32] #0: ffff8880137f9380 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 521.980862][ T32] #1: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: raw_release+0x1bb/0x9f0 [ 521.980989][ T32] locks held by syz.4.4064/23567: 4, on CPU#0: [ 521.981003][ T32] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 521.981053][ T32] #1: ffffffff912daf60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 521.981105][ T32] #2: ffff88804747c140 (&dev->mutex){....}-{4:4}, at: nfc_dev_up+0x3c/0x350 [ 521.981221][ T32] #3: ffff88807f844348 (&ndev->req_lock){+.+.}-{4:4}, at: nci_dev_up+0xa3/0xdc0 [ 521.981299][ T32] locks held by syz.7.4067/23577: 2, on CPU#1: [ 521.981312][ T32] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 521.981363][ T32] #1: ffffffff912daf60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 521.981414][ T32] locks held by syz.7.4067/23582: 1, on CPU#1: [ 521.981427][ T32] #0: ffff88807c2e27e0 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_connect+0xbd/0xdb0 [ 521.981597][ T32] locks held by syz.7.4067/23583: 2, on CPU#1: [ 521.981611][ T32] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 521.981661][ T32] #1: ffffffff912daf60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 521.981713][ T32] locks held by syz.1.4068/23579: 1, last CPU#1: [ 521.981726][ T32] #0: ffff888074777060 (&ima_iint_mutex_key[depth]#2){+.+.}-{4:4}, at: process_measurement+0x7d0/0x1c10 [ 521.981807][ T32] locks held by syz.1.4068/23580: 1, last CPU#1: [ 521.981820][ T32] #0: ffff8880789d0260 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sctp_getsockopt+0x12f/0xb90 [ 521.981904][ T32] locks held by syz.1.4068/23581: 1, on CPU#1: [ 521.991199][ T32] #0: ffff8880789d0260 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sctp_getsockopt+0x12f/0xb90 [ 521.991256][ T32] [ 521.991261][ T32] ============================================= [ 521.991261][ T32] [ 521.991284][ T32] NMI backtrace for cpu 1 [ 521.991301][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 521.991320][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 521.991331][ T32] Call Trace: [ 521.991338][ T32] [ 521.991346][ T32] dump_stack_lvl+0xe8/0x150 [ 521.991389][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 521.991460][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 521.991494][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 521.991522][ T32] sys_info+0x135/0x170 [ 521.991576][ T32] watchdog+0xfd2/0x1030 [ 521.991612][ T32] ? watchdog+0x1c7/0x1030 [ 521.991641][ T32] kthread+0x38b/0x480 [ 521.991660][ T32] ? __pfx_watchdog+0x10/0x10 [ 521.991678][ T32] ? __pfx_kthread+0x10/0x10 [ 521.991697][ T32] ret_from_fork+0x514/0xb70 [ 521.991730][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 521.991749][ T32] ? __switch_to+0xc78/0x1410 [ 521.991778][ T32] ? __pfx_kthread+0x10/0x10 [ 521.991797][ T32] ret_from_fork_asm+0x1a/0x30 [ 521.991832][ T32] [ 521.991839][ T32] Sending NMI from CPU 1 to CPUs 0: [ 521.991869][ C0] NMI backtrace for cpu 0 [ 521.991882][ C0] CPU: 0 UID: 0 PID: 31 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 521.991903][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 521.991915][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 521.992011][ C0] Code: e8 1e 1c 50 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 af 13 c1 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 521.992028][ C0] RSP: 0018:ffffc90000a778b8 EFLAGS: 00000002 [ 521.992051][ C0] RAX: 1ffffffff37b4300 RBX: 00000000000003fd RCX: 0000000000000000 [ 521.992064][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 521.992076][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 521.992090][ C0] R10: dffffc0000000000 R11: ffffffff857849b0 R12: dffffc0000000000 [ 521.992105][ C0] R13: 0000000000000000 R14: ffffffff9bda1b20 R15: 0000000000000000 [ 521.992118][ C0] FS: 0000000000000000(0000) GS:ffff888123a6b000(0000) knlGS:0000000000000000 [ 521.992133][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 521.992145][ C0] CR2: 00007f491b3ecc40 CR3: 000000002b27c000 CR4: 00000000003526f0 [ 521.992160][ C0] Call Trace: [ 521.992166][ C0] [ 521.992175][ C0] wait_for_lsr+0x184/0x2f0 [ 521.992237][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 521.992267][ C0] serial8250_console_write+0xa7e/0x1200 [ 521.992305][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 521.992333][ C0] ? __schedule+0x17f3/0x5820 [ 521.992373][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 521.992418][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 521.992445][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 521.992477][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 521.992537][ C0] nbcon_kthread_func+0x6d9/0x8d0 [ 521.992562][ C0] ? nbcon_kthread_func+0x163/0x8d0 [ 521.992584][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 521.992611][ C0] ? __kthread_parkme+0x71/0x1f0 [ 521.992639][ C0] ? __kthread_parkme+0x199/0x1f0 [ 521.992670][ C0] kthread+0x38b/0x480 [ 521.992688][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 521.992709][ C0] ? __pfx_kthread+0x10/0x10 [ 521.992727][ C0] ret_from_fork+0x514/0xb70 [ 521.992749][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 521.992769][ C0] ? __switch_to+0xc78/0x1410 [ 521.992798][ C0] ? __pfx_kthread+0x10/0x10 [ 521.992817][ C0] ret_from_fork_asm+0x1a/0x30 [ 521.992846][ C0] [ 521.996297][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 523.091110][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 523.100207][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 523.110250][ T32] Call Trace: [ 523.113521][ T32] [ 523.116439][ T32] vpanic+0x56d/0xa60 [ 523.120421][ T32] ? __pfx___schedule+0x10/0x10 [ 523.125265][ T32] ? __pfx_vpanic+0x10/0x10 [ 523.129770][ T32] panic+0xc5/0xd0 [ 523.133481][ T32] ? __pfx_panic+0x10/0x10 [ 523.137893][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 523.143344][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 523.148722][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 523.154894][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 523.161054][ T32] watchdog+0x102b/0x1030 [ 523.165386][ T32] ? watchdog+0x1c7/0x1030 [ 523.169803][ T32] kthread+0x38b/0x480 [ 523.173865][ T32] ? __pfx_watchdog+0x10/0x10 [ 523.178533][ T32] ? __pfx_kthread+0x10/0x10 [ 523.183123][ T32] ret_from_fork+0x514/0xb70 [ 523.187714][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 523.192816][ T32] ? __switch_to+0xc78/0x1410 [ 523.197496][ T32] ? __pfx_kthread+0x10/0x10 [ 523.202073][ T32] ret_from_fork_asm+0x1a/0x30 [ 523.206836][ T32] [ 523.210148][ T32] Kernel Offset: disabled [ 523.214465][ T32] Rebooting in 86400 seconds..