last executing test programs: 14.050382883s ago: executing program 4 (id=1874): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="850000005100000015000000000000839722210000000003"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b2c, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)={@cgroup=r3, r3, 0x2f, 0x0, 0x0, @void, @value}, 0x20) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000180)=[{0x48, 0x0, 0x20, 0x8004}, {0x6, 0x3, 0xfb, 0x1000}]}) write$ppp(r4, &(0x7f0000000200)="7489", 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) 13.366111311s ago: executing program 4 (id=1878): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x44) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) bind$bt_hci(r1, &(0x7f0000000000)={0x27, 0x3, 0x1}, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x56e, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) socket(0x10, 0x80803, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x4000010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x30, 0x0, 0x0, {0x2}}}, 0x74}}, 0x0) 12.291322449s ago: executing program 4 (id=1884): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x3c0) close(r0) r2 = socket$netlink(0x10, 0x3, 0x0) unshare(0x60020c80) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f000000000000000000000000000039d1c723d667ee8b42bce1f54f7559"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xb, &(0x7f0000000980)=@framed={{}, [@map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x181}, @alu={0x4, 0x0, 0x7, 0x5, 0xb, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @alu={0x4, 0x1, 0x5, 0x4, 0xa, 0x6, 0x4}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000800)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x1) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac080001000000000009000200"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 6.389532973s ago: executing program 4 (id=1900): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) socket$packet(0x11, 0xa, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socket$inet6_dccp(0xa, 0x6, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, 0x1040}}, 0x20}}, 0x400c004) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x82, &(0x7f0000000440), &(0x7f0000000480)=0x10) 5.514684061s ago: executing program 1 (id=1907): socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000088d1afc00009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e2f76d240500d7a03b00", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000002c0)={0x5, 0x1, 0x0, 0x0, @vifc_lcl_addr=@multicast1, @local}, 0x10) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f00000008c0)=0x8, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "f5fe9c103abe0b65544e0980519f38f54dd5f87ecc377210bd44fe7e1375550831c5f6dd769f5a1d175f47a8b941c8e568ca41e8da841f4f18f1ea6b206d495119ac37c29f4b384d0a9181566cfc4a1b"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @broadcast}, 0x10, 0x0}], 0x1, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={r6, 0x2}, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, r7, 0xc4, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000013580)}], 0x1, 0x0) r8 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r8, 0x89ef, &(0x7f0000000080)=0x6) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x20, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) 5.414650574s ago: executing program 4 (id=1908): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x102}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x59a}]}]}, 0x28}}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x100000035, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, 0x30}}, 0x4040090) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x4840}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r5, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7a}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20004095) socket$nl_route(0x10, 0x3, 0x0) 5.266682189s ago: executing program 3 (id=1909): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001}}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYRESOCT], 0xffc9) shutdown(r2, 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x5) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='bcache_invalidate\x00', 0xffffffffffffffff, 0x0, 0x89}, 0x18) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x46, &(0x7f0000000000)=0x83, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$inet6(0xa, 0x800, 0x2000000) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x10, 0x6, 0x5c0, 0x1f8, 0xd0, 0x0, 0xd0, 0x1f8, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000300)) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000080)={0x800041}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x2041}, 0x10) bind$tipc(r8, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000380)={0x41}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r10, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x1004) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000d00), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@fallback, 0xffffffffffffffff, 0x19, 0x2e, 0xffffffffffffffff, @void, @void, @void, @value}, 0x20) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc1100001200010200"/56, @ANYRESOCT=r1, @ANYRESDEC=r1], 0x11fc}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000000) 5.121420481s ago: executing program 1 (id=1911): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="1800000042000106000000000000000008de"], 0x18}], 0x1}, 0x0) unshare(0x68040200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r3, 0x0, 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r3, &(0x7f0000000100)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="130000906acc00000001000000000000000000000000002c1262553f157a1aec67bc8e6df9c34c770bae09edb444e3255c7b080000079453fb550820eb1ce8ad61b0e2d722b54d06128001001c816ea4ecf7a7f1537d409981c407ce7b907b49b4819f0905ebb3bcd27dc776e8d7932c118b6a51419d0e7c3133d809050e264a5f052aef6449baa7a6f1db55dffa1f103f9b4a014c73f930e7c88454d33095a88e1c0c5e77ce6f91d78208cb89e0ce3b4720f68408e4", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c8e907ed02a535351511e60a1e55c09251d104a8a632e12e567de1231bb569bd8fc16cb8999046889ca4d1b5d1d35988cecb17dcb2991eb29bbb30b3ed6ffd05f9b3ae059361866ac53de583e29aee2f6ef45066ff46e77e9c9c4f7c8cffcce25c08a95a5c81a4542b8f52177606e51c6009f1df0e3e483d2a93fae8fd899feb38bcc8108d6a7099acdd3d11a28b6ab061956a319185daa4926ac5afb1284c5eb4f69957975b63644eaab4fb32e2e2fbd7f7a190933e16ba10786d9afd94a027de0400bd02620cbd", @ANYRES64=r0, @ANYRES32, @ANYRES32=r0], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="5daa000000000000711014000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0x43, 0xa0, 0x238, 0x98, 0x330, 0x178, 0x178, 0x330, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1f0, 0x238, 0x0, {0x0, 0x7a010000}, [@common=@inet=@hashlimit3={{0x158}, {'bond_slave_0\x00', {0x9, 0x0, 0x57, 0x0, 0x0, 0x1, 0xe1, 0x3}}}, @inet=@rpfilter={{0x28}, {0xbb}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x428) syz_emit_ethernet(0x5a, &(0x7f0000000780)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0xc, 0x2, 0x0, 0x0, 0x0, 0x66, 0x3, 0x0, 0x2f, 0x8, @loopback, @loopback, {[@cipso={0x86, 0x18, 0x8f2912b07d67aa1a, [{0x5, 0x2}, {0x0, 0x2}, {0x5, 0x5, "ac7aee"}, {0x1, 0x9, "472a79ac1921ec"}]}, @end, @end]}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.062052628s ago: executing program 0 (id=1912): socket$qrtr(0x2a, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000440)={&(0x7f0000000200), 0x0, 0x0, 0x0, 0x9, r1}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x284, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x3, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8}]}}]}, @IFLA_VF_PORTS={0x174, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0xc}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "714abbd2547de97cbbf6efb226f19bf9"}, @IFLA_PORT_PROFILE={0xd, 0x2, ':(\x8e^[[Z@\x00'}]}, {0x60, 0x7, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "293a02149f3b75a67093c28fd6f55a23"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e48f01e49713f0c2d839f940d9f088d8"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_ilave_0\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '):\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4d2906d0880fc8acc30fe2020f984967"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a1085e7df341b9dc3d8008a2fe5bdaad"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9c7e472c916020fe41bcc5aa8f56c947"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "80ab8be51421cfa3c9e5cbfe8217e0af"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}]}, {0x3c, 0xc, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x25}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x19, "03dd96197aca85b64424a37dbda7b694"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x7, "eb052fcd3dd4d3e8bbcbf1de857c0e1c"}]}, {0x3c, 0x18, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b2112a97bf9704ee57915340334b8271"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e8635392a70f36f95f4b9b352920ebec"}]}]}, @IFLA_GSO_MAX_SEGS={0x8}, @IFLA_AF_SPEC={0xd4, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}]}, 0x284}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004802c0001800b0001006e756d67656e00001c0002800800014000000000080002400000000008000340000000000500074022000000140200001100010000000000147000000000000a"], 0x8c}}, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000000000000000000000001d3a8500000017000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003100000005003500000000000500330000040000050036000000000008000200", @ANYRES32=r10], 0x34}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000000)=0x8, 0x4) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x41, 0x0, &(0x7f0000000880)) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000140)={{&(0x7f00000000c0)=""/108, 0x6c}, &(0x7f0000000040), 0x48}, 0x20) getsockopt$IP_SET_OP_GET_BYINDEX(r6, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000001c0)=0x28) 5.002106502s ago: executing program 3 (id=1913): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) close(r1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0xffffffffffffffff, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1d}, @in=@rand_addr=0x64010100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in=@local, 0x4d5, 0x3c}, @in6=@private0, {0x454, 0x0, 0x400000000, 0x0, 0x80000000, 0x7fff, 0x9}, {0x80000000000000}, {0x0, 0x0, 0xfffffffd}, 0x0, 0x3503, 0x2}, [@coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0xb}}]}, 0x104}, 0x1, 0x0, 0x0, 0x20040400}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000100)) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000000)=0x1) close(r3) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001", 0x4b}], 0x1) r8 = socket(0x27, 0x2, 0xcbca) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x30}}, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60488d1) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x3, 0x5, 0x8, 0xfffb, 0x8000, 0x8, 0xa, {0x0, @in6={{0xa, 0x4e21, 0x7, @loopback, 0x5}}, 0x5, 0x3, 0x9bd2, 0x200, 0xffff8000}}, &(0x7f00000001c0)=0xb0) socket$alg(0x26, 0x5, 0x0) 4.79272487s ago: executing program 2 (id=1914): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@authinfo={0x12, 0x84, 0x6, {0x81}}], 0x18, 0x10}], 0x1, 0x4004) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x7d, &(0x7f0000000000)={0x0, 0xffff0001}, 0x8) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, &(0x7f0000000200)=0x90) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040), 0x4) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000280)={r4, @in6={{0xa, 0x4624, 0x1dba, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fff}}}, &(0x7f0000000140)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r5, 0x3}, 0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x3c, 0x6, 0x4, 0x30}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x5, {0x7}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'batadv_slave_1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffd]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xffffff00], 'ip6tnl0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @mcast1, @private1, [0x0, 0x0, 0xff], [0xffffff00, 0x0, 0xffffff00], [], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000001800190e00000000000000000ab4"], 0x38}}, 0x0) 4.791123066s ago: executing program 3 (id=1915): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a0000000c000780080012400000000011000300686173683a6e65742c6e657400000000050004"], 0x58}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x5761, 0x0) socket$caif_stream(0x25, 0x1, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)=@getchain={0x4c, 0x66, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0x1}, {0xfff3, 0xa}, {0x6, 0x6}}, [{0x8, 0xb, 0xffffff48}, {0x8, 0xb, 0x400}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x4}, {0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg$sock(r7, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20000}], 0x3}}], 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES16=r9, @ANYRES64=r1, @ANYRES64], 0x44}}, 0x4028001) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x20) r10 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r10, &(0x7f0000000140)={0xa, 0x2, 0xe, @dev={0xfe, 0x80, '\x00', 0xfd}, 0x9}, 0x1c) r11 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000350000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a0104000000000000000001"], 0xdc}}, 0x0) socket$inet(0x2, 0x5, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r10, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400ca6e", @ANYRES16=r13, @ANYBLOB="13012cbd70000000000041000000"], 0x14}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c000680"], 0x34}}, 0x80) 4.635797617s ago: executing program 0 (id=1916): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x15, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14, 0x0, @void, @value}, 0x90) r5 = socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x7fffffff, 0x34}, 0x1c) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='\b\x00', 0x2}], 0x1, 0x1) close(r7) socket$key(0xf, 0x3, 0x2) splice(r6, 0x0, r7, 0x0, 0x10500, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4008010}, 0x20000850) 4.432624641s ago: executing program 2 (id=1917): r0 = socket(0x10, 0x80803, 0x0) bind$llc(r0, 0x0, 0x0) r1 = socket(0x1f, 0x3, 0x3a) getsockopt$nfc_llcp(r1, 0x3a, 0x0, 0x0, 0x20000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000005304000429bd7000ffdbdf252f752511c5bf3b042fd6fc794cf76be4bb6532d7186b6f550e8b682e902a64f186a12983c851e424c3be8a81da7fcd7f17949d2a6d7ef161ef2667e4f417222416665f41667be8800b84ab5ad3e6b92fd743a96ba5ab531da590c1b044000000213c8fea5bce5cc90b7d844ba06a13bd1688cab5ed9534d33419369448e278bb4b28929ba7c8619efb67d54ad1d5b1543a4d517d129099dcf986d652a2ba53c94af6c6639c812d67112976e86544e4265e73716df835c2af05732e4c6b039aa8422017b361d6e25c1460061929ff7c4dcd4b96e5ce9c644f32d2543487ff8e21cf"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x404c050) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r5, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f00000003c0)=0x6, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendto$inet(r3, &(0x7f0000000080)="d087bc64", 0x4, 0x801, 0x0, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000340)=0xffffffff, &(0x7f0000000380)=0x4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000002708000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) 4.405069416s ago: executing program 4 (id=1918): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x2408c004}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a05000000000000000000020000000900020073797a32000000000900010073797a30000000000c000340"], 0x60}}, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r1 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000001c0)=0x3ff, 0x4) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg(0xffffffffffffffff, &(0x7f0000004780), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b0000000000000000000000ff"], 0x50) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000280)=ANY=[], 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x3a) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060000001c0007800800084000000020060004400000000006000540"], 0x64}}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r5, 0x2000000, 0x13, 0x0, &(0x7f00000003c0)="13435cd378c66a90bd307e0add6affff1fc42f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.324138224s ago: executing program 0 (id=1919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x9}, @NFTA_SYNPROXY_MSS={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r2, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/237, 0xed, 0x0, 0x0}, &(0x7f0000000340)=0x40) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x84, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x46, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @random=0x1, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x2, 0x1, 0x4, 0x0, {0x4, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x1, 0x2, 0x7}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x59}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7965}]}, 0x84}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f00000000c0)="6079b13d0b9ed1645b9c3a2e4e128151ae98a2b54bd149057b82c23298c6a92d9e6c6a4c11af85dc52f3525948a56a90ea64489b24e9b534c9937923eb6b5d7f5cac4effa6ea6e8a3d062cad72352596a2dc4730b09010c58056b48fa032b63257bb6f4e67338d59bcc1672015e28f167681014ba118f5c543588de50b6e938d7d5731e46cee459e017da3225b600209a5e91e1db285867f3d106f6ee6269cdc86dd4e3f49644fb59a54cb19b4a4b0b2d46431772e287c98429319b9baf326f62d779dc47bd0c59d87ffbc4f", &(0x7f0000000040)=""/49, &(0x7f00000001c0)="95fc92ad1c3c6150b0d128665173fcf66b080aa5f744a6057a8dd8ceba97d3bd961b0622c4e409f4aa915a59baa64d5e54e990fda9d673bfb4b7a9cf06b8a500367735f5713048f7ed1150c8739fcd9ad895f98eff61c3105709e7c6710c4f6e129028da2664b6126127bad67bd75fee0911b0a5bf4ca0a8445be83bf0ea71fbbdd6b3ecb1c174999545f43d503e12572274a2361eab1fbc63d0421365d3386b4cbff22bd561be86f2544302850e5d1bf0547fe3ac66e29677242e5fb3a5cdc7e9812f6c428411a82ee9d0cedb9267ffff3a1923", &(0x7f00000002c0)="3e10d49c79ae493a41c697272d4e689a801ff85dcf880b04925fe2959659e2a26eedb6ff703963ec953f1b972aa182c2d5621c3af4ff4c3e6e4991520d9448b66ab985125db3cd78be5029af6f4f593abec7cdf8f918cb49017b94b99cb43df03318b98d9decc142eb605a020ee301b5cda30b16adf4209812cb785ee583cd60a608fa7c6e47da3870", 0x3, r3, 0x4}, 0x38) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffffffffd21, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x24084040) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_DELTABLE={0x5c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x20, 0x6, "eb025247793123a5a1113307ee2ace2e62d56e5564ecb01c673add20"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}}, @NFT_MSG_DELTABLE={0x124, 0x2, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xe2, 0x6, "3eed6d63217a14bab3845a6efd03781a760ddb9ccfb23911ee9a83770cc4114e433c282e2301101106f3bd0f47f2c655a6c74ba0952088caf77129bd0d120a2f4cf4d9638db05375ebfd9e310ee2c1fafdebcdfe3882ea09feac2f4e87eb248109119dc5d886ac49a547f2ff28f6f5aa03f8d2e485d7578c651c6799795a8b68007b57759c55881a00154223dbcb2cdff528843e87d43318f0a9d3cc85fa8c2cd3e1ee18e4477587174fe38b56ff5634a6062b8cc39bd9b566fc43fe8668cb2cf7cdb3b0da4fe4baf376c946e02219e1128a7ee0b6b513e1047bcd900f44"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x78, 0x3, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd12}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x200}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffa822}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1ff}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x402, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x2b4}, 0x1, 0x0, 0x0, 0x1}, 0x24000100) sendto$inet6(r2, &(0x7f0000000500)="5bf63e", 0x3, 0x40c0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000c00)={0x15c, r8, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x700000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa3b4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x428}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdf4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20000090}, 0x20040000) 4.146346434s ago: executing program 0 (id=1920): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'team_slave_1\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x8, r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000340)="1e", 0x1, 0x6000001, &(0x7f0000000400)={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) shutdown(r7, 0x1) setsockopt(r7, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f00000000c0)=""/77, &(0x7f0000000200)=0x4d) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r6, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) socket(0x200000000000011, 0x2, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a5108000200104013"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES8, @ANYRESOCT=r4, @ANYBLOB="c546991fe4334330d8b87480ab02f04d350d8d182279dcf414246dd98ade7ca20e099ff7e071d17dedaff38ca344de6f8de538afd36110da9f805c33193f3ed0a1fc96df875fc789c5f3cde1385326bcd8ab5aa0d6986d2325c000e5fb53e8dec39d6c72686c4150c6e666c0bf2e6a07e81f68e3706e5e5a40a6f15be02bba2c67bb9fe8bed70df74ebf5d15d259cccd0b49783d7e0a9582a717b11e96f9cd31949f45b80ee59302eb081112643c407831d9a45509d5e96ae6b4f552a23aeb941eae18ca77ec371f2b52cafe9c241cb39d911466c6f56e46dd8d0654ab6522dbdd80"], 0xa0}}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r10, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="759600", @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf25660000000400b800050018012b00000008002201e90100000800a000030000000800a000f5efffff0800a1000800000008009f00060000007c19b9800c00bb0044280000090009001d0191004c3f3aa6b69b4df1187e365b799d6fd8515d81c5b0a7b611a0897aad4eb063b4e87237177ddabb10f1b43d9c5d5c1e3b17c052b44563180a1771b900168910487ae15be71b55347a89aaf27ac6c1c7077de057b5d35353d9b21bfbe381029f1f7b9be8a8b3dacced01650d29bdbfc9d298d148d7d51579fe30df158d7f282292892a37dd292e12f3ff01b30c98279897fe59b9ebd45c9c8ad9365ea6023fc92264696f6520ec10566fc1111afb814a328793f163b3878940256e2e07e665d2aacf0435cfd90ae5ffd733ccf42281140713818bbc90ebee4984b23ab3274e525500728a7410b3ba31bddea58b4000f4452d7a9586e694900b72f1f99a34158fcd0c3fb3e92e50e76e582db8c9117895e025ebb7b398aa2e9a920000005c007f007206030303030303054b096e03f1b47d7c635d7ca43692dea091c8a9814b2a1e50677d15f89b252cfde9574ce99f7d4e1bc360ba7e40ffb1dfe5a0a74db72709b8c7adc9405b8d51bd47781299535082dc101ab79d030184cf008000250301ae040406c210060005003e01027504010006000602900384af070b00ffffffffffff0e0000001f0000080211000000feff00003a0040ffffffffffff11000000ffffffffffff31000008021100000103f600000b004008021100000000000000080211000000080000080211000001400000000c0040080211000001020000000802110000011800400802110000000c000000080211000001410000080211000000008000000500000802110000003c000000150040ffffffffffff03000000080211000001060000a3012a0026ae0e0010905d36ab767339832bff7cc084326e802c603739257aa5fff393ee2b6b29fa5cbb52007dab3a9fdc8c5d3c5a10a27ad666ca3952be170c45e1c1efa2bdb73ae245c5c7cd2e5ed483ab0a086cdbfa01cec71f49e3d63a5b3ec90b2cb7568060b9c3bf9ccee1d8075bf44d7108599b74851548f240371f1239215e21177c41758d7e92b239356fe317534e2353797ff0753c87b5baba7080a1551e9ad1ac9fc343fed035df458a4a6965d2ee05ed02f80060b7488597a0de95ab6ff04a6a8fe6d8e3c866e48e4e559e3950bfa320aadb82f8ca68c5e50bcdaac15084e453b488f5b8392fe02b50c34dd5836abc5ca8d9cffb284cf5126aacda1cbaf01c9346ef9cf2f841d5713048abaf3a82b4bb3154fb6d9b3cc9778a7d24462a75a26c43f8b1b75bfc387147131edfddddc538955157e2b3947edeb89b006fd5336e6bb39f75ff47a86365f1388ba4205601bbb13994d8dac8679b5ac33aef2c426abd8a1aa4b460877f011121da8a61efb8114266dfd955f8a0e9606caa6367b200dccf1454b2c05a5c5d862fdac8b1902336ef759c3fbaea8e160b143ab49a000c00800004061d01060003000d000f001001ae68040400c0ff000000fe102a0068040a00010075140100aa02682ed59134ebb4c9d5a1e2fb1f2999b8bd0608021100000137cf0007054400f11932ee3d619169112c350be6d3300a4870ffe92bb01c4c40f03a96d4b564cfdbd2fa2a11b5d3322ac62babdbd6d3cb9344a4834b055d7e54dad82abbb7a49c1685ee20b9c03911018c16ffc3030a2b3bb1fe66e79d4ac9b40207b28b245655be930300040f635f04cd6550675304bfc6f7d6791001022a6004263ad9d8dc3c57e4688f7b56c1f2d9844a952d7ec83f79c0ff1d491535ea90db0f8af2963ea99204273e43cfb0fdbce3864e033cef3c5f93e7d5930fb4a87642aa5f577914811e26799cfdbe44285e352603890500ff73ac7cb4e87df25acd55539eb4a6d48670d166e697023952458f57d2ea85cf5a77bb3d15881115fec7f05fda334075434632f0852284daf539585848dae98d55fd03898c093a45eda42588b0cf973cd25c3fd24d3e5990db43add5df1b0b9ff0da226c03fa01dc88bf93c1085e09093e43dbec19c247ffd3dbd476ae38c5c91e2cc69f27298b5680462a8482f11dc46ba6aefb23f9308d6f1a19ac7d37dd6740d820b79b468240a30ae5455f90ab74b333e1a81c5c5890f10ae3360cbfb175a57a6a259507d1f343d10239eca12c9ef93af3f6cdf179e2d93034469fb4cd74cb36014bb1d7ca96fc1f7557f6c4b26baddd15355fc4233020f12ecb2f4eacbac6bdd737529a93f4f8ed5112ed943ec168f26d6502fb8167e7ede94e9f31ac26be02c21e9095396b6727d7c34286b45b703d73db67ae407fff7e1060ec63597aa3498a33e19e54721857cbc2697410f574eca61d5cbd1483b6ed8d5039cd1bd82d0df21387b10e3563d66dbe8bb34d36651c85fda3fc3fd7af5452d7668ba90e66bd97b6c5437effa470f25a65cef28502302e52b527edb9d99cb4016a07687dcbcdacd937d4f796750c64e3603a75230bcf237fb707f80e64f95fa4d9698745ec3a5b6b637810dd63ab06e267fd0315d4a948cf75fd5bd5b30ac9d9b3fdac4bcdf44ccb4cd0ffa343736c06442da0adf49971da248e13227b64aff1adb7b78cf0f77242b327039df0200e77e064393c95d548cace914325763829a1e31d3036bee1c5aca8d2ab7e24cb733752dc21e98551ea97b19f4ae1e1a9d2361bbb9b357997b60fd826f269de3568e9b752d0471ab5dd1d8a72f1d720f8da0707fd99106921695a06d9af6f500b402b05e0a2a248fe73d8aa8aea617af22d40a81082a7ad205a9b85b5113e9fa0b32c0ba701ed5599ad1dd9491e7438fcc83a354e5c478205b9ba5cf06cda5dfe2464d002443bd90a9ff9189165d3da22e244fe6cd965fe2d3b277ab8e380cdf8bb6802e272c588c827742eab77e3b93722b51b2dc722419a4970f90053db1cdd8e4bcad0c218f27bef6fc57c5d6fbe5c1fea3e2194e08615510c21a6ceb72c61aa0e81592b6ac0d19f8f9f0bb7f5a7d3561b3792d9deb7fffbded19f8487f77972154210bb2a71b2d7929e21b484af591113ec2050ec20869d9b6f7c3646015601c8fbce2648138fcc15d4fc56135a0c019738630c9705f2ed30b71d66e9c5710bc89c45be0102d7866b558741975c395adf5db20660a50a1d036ee4f6528952b66fc65c6bf2e421fcc24ac63410bcb0009f906522a536e0cc8fbb2dbc36cc04bf32ae4544d13428231577707323c8eb4f5e32ecda7149cb1d27ab27c6c8a948e06df74ba23e82842adf23ba9093d41fcf22f3acf1d883207eecb8adaa1c54ab9287840eb2c9526fedff97e6ba2c78d0def953334d8de59e552743bc12d37c22408024b344a0b0aa95081419b433b18c058377089e17a51c3c0307b0e91aa1aeb6be193aa7ad8800cf70db2c753791c0522512ef5b891ebd7e24639dc4f8f81b5f55408ccd45869161c229829eb1abb048af80b35a174086d27f3dd89946346984e1fc71a0a26d4dbcbbc1fb43dd22ee13eee5cd7b7de2c7832e3e01066662cf71adbb7e9b8cb28fa2cfa3b8c6d7fc5b89d22b6292e58a9b30d4e83c2f13462599b8f261ad3d5a14fd5601ac05dd2ea60cc6304855aef29d8329ef27dfc32f0817553ed48e236fbca4c8b1958841bbd788897e79f3505fdc1fb09434f82f33874cdbc9f5994672303d5736d621e3181ce6c7d6e15635cf0b2a49f004c1182b9c35aefb976f279785986eb9a990ecf55e663eecfe1942cdecd210c1f89a822b6cf40866e9ce27dfcc906bae7f93a252c363d2ebe05ce948d270c8712e089115200c1df6d5084d050e2c43a0c10d835518059d76d56d545bd79e8369f839ca1255bfc908ab1d1ae8e015728bf4cd401a8a85bb74d65058a2682c8e5b46823a56950456fea1f7ec30ba5a2150f285b5bf73e25dcd0c6abc12502b114bd9fec82efd2484a051aaa57456b105d13f508a1f47bdd21bfff8b22f4744b4746896ca4f3a6ea80bee4a58857809d9b131be3bfd8ae874074535332e8cbf12ada7e8119472464fe5ea6cd8715b9e6977c945b5df3427dc40eb9ad0263ec0f985f20ceee7d74f950c1ab28a5df221a1ba632789037bfb679bd608b9f2b5ac439680723a35d6cc5e8a8f3c9bc6f8cbf5ca528b6ea1fa8ee8b557c251485eb84918589be84ee54be8e09eaaaf5935d107ae2c5b8062f31960514462eeec5a357000b39489a595982a50bb761dfef1e0b39c1e2beb5618d836d2a7c2c33624e41c22740f6eeed1499ef61c84d85871d907bbd07d14fba9ba17465a2a16aaaedebebf15ea7dd11ec923ea9b52f14e74125494e98aa97977ada437fa69eb2b47d6eedd6a8684f4a329b943bca26500ec0206b0b746b9b962285376876c2c2009a747dab797200b6e37a3f2a3d1e7c2d15c62cb737fe46d1d4472b178cff673a23087a6a7dc8cda79ec1a3eed28f4e52395c2a68acf3b94f49e7fdd62c9a528e01c11c99a2756911bd0393b29fa7875977d5ed91ec12d11bd5f4ad87ddf9c78e6a9602ac381bff6eed658de4e9d348286b5ef1f3a3bb40434ac21c936d379bb837ec10b7044871d97a214f7c16bfa7385c9ee1990a08ae70cd3852869fd4309d002a2ab36a056574b213f20a1cea28fc790929bb616623252a3357f5305ccaac93a4a35c362933408c7b0ec4ea82f24d7f17f7fcc983f95d7bb40f957efaec9ecf77b4dceb49dfe3841b550551551cb40b961e3aaaba10f795f9e90931444ce2c7a5d4c32f29d4ebeb827f56d739ce77b2bf73a5f6d5694eecc04b05d5fe438ede2a73bc93baee191a2e4c45c1d444d25a701c6f631fcd4974b071936a0583c2ad80a2b3d551e75029da96e27bb4e1e32b9ce4287d524e0798fd77e705d280535aa2b06c13056a0580c4534445651f8174f202a707861f31eca1643781fc373427f3ae12c28238c53c9b93c7cc0306cdd25392533f9470218ff3deb007a5eb020c95f6e8ccad560b36b5e146505c43cd5c6ccf437a54151e634d696e3f317004811a9eb379e64477d3a84d329025e017cd1e9769144c4864d6819f54f3d948a5a47f13313563dd52e010cfb6f75eea0aa9f949978b90ab5d76f135c12184c76af5ddbd5f3199a72581855ba146c6db6a734362eca46ed4708d5fe821f841e4bc639ea0c25dd3f745d11b69f034ead584b427790c673b5258e36dadf2d47498b2314846c4c7a259ffe518fc3bb9ca1453e3088c271f60f819e561330da54db57c5799486d9a7e193181d827a4f5820f96198759e86a59d74e5cabdbd043bcaf3299ef5c807fc53dbdf3809046c6d04e7090526c5b168bc172ad3a71c0521e91189eeeed34c898b62d2523b67e579eff52e7ea27e30badc92c0fe43dcf4027daae536f18f76f69c2f273f12253318759db63731e327eba399f49e04baa6a3bee2803edc59ba19625c29625fda6049b11a53496182d39d3d4aa9b42a76f9b37ebfa24c4bcb39cf1156d6168fb52bb5a8140642f991ec554bed168e97a8c0e01736f0f16af9905d7bf50eb9c24d2a4fa9f53c46b8b7a5657316309e0b0e8fb1189a50c79045446372ed66448630f57e138a4484f82f18ed8a9fff9ce123d8006acec09c7dbab40e44cd39c64b81a4773c5682bdb4f4f4303ccf601ccedfda33910edc08d33eda35872f17c98e19db4888ef9b2a65ecf903d0eb27e7523fa5c5a92ebf1330631bd0ddbfb4d341cfd7533f1bcb573175a9716a05f2aad0acc40d7e259f598564ae875a349f0533873246fa94fa06616108d8eabafa3e828a44f78cb81df0195d0b4a78f763aedb807bd7109b07ba640f53021b7b5c674d6055bff9d1e3b3b8ed4ca9fef1b507c8907bbdef54866e4182717b21f88aadad73a842b5f025af2e3030519dc8289b61c1ab1ee29307da68fb3e55e4c85e27af118abfd9033c2e79cc0ee23aa2183d997a837e51c23ae56108ff4f19495c7aa1994941f4c3e7205aeb48b360e3b75456f68f46b61102f6ca4801a2554da338486b05c2c202906dcad9d133a59ae016bcd12e878cdc5153999ab28f5a1665f1a9bb6125d4ac041f97b2671fa3ce3cb6ab0edc470ae85f47d6a1592a517c16c7041c23b3ab05955fdd0a1d8a05832374252004e407e0bd14f70b0a4bfb3fff5cc337c3fc392333efce685e5bb3caf30343eff849de95bd43b6cac5c862a2ca0acae0a165e99989f68db099de65eecd97ce32d944b427508631e9a7293cbeeff8e4bd92f868d48b77feb8780dab49379cd2e08b1edf6c285693561cd3ea91672c550765690163d2e4342314a0b20e2abe020f5b3bd92d4d9eb04c6a4b2de35643b3922d013df30f85b09bd810a5f060ec30cc4ef156fa06e1b2464193a077714ffd17d6a67da7036cf05ba67c986407658573baaeb7ff4848256f3f454ad538eb244c834621dda3e199defe247cc15aec229e3974af1930fc4eb09ff1bfa36b1ed9840e4715ca85dd028ab09ef88b436249a894600a2ec24953d23b5a5965a0f154ff5495f2e4e99153d240927b12098e769f804cecd54e99dcc86c2f46dab24543e8b4a2789da9eea6d19ba38817760cdaa234e180b4f1ba6c362204e458999e439340586a5481d5eae070025edbc4238016048d8d62dbecd8069063c8a688ba2716d718d6fc5c41b49fa194ca4e4042acd1df7604091d36f48726301b0f75781e57cf550dbce1058cfdf6683de3eb1fd32e501c56c36250072216f909309d0d5fd80f04e27baa3412e298de5cc812d211a936b93a85816c682eb18b45f68cb676103294b2f42ec115335279e76312d166a8cad5095bc204ea982d176ed93cfb856be02e3897398be7976300d477f7c21468cac55918c04f26032d06eb9bc38bce4e6b57629a9b8d232505e0f43a7c5dc38287e1724337822b05629ba8e004b24ad8c555f8f0f4e64b43e810fe83915d532030bf8ad7e57f9000fcec209fdf7a29fe55dfe61514cfc589c0288707ccbebf48784838276979e0f52b6b415d38885a44133eb1c152a9553762442dbbaacbaa1f60b6ad9440130c7a68033795580a234e36c8108effaae78e668c1fe9a644aaf89c847d5d4212ee332632272ddccfdc6627b8f1e13b60087f2fc24240cd70eeebf6ee700ad23d8a2fb58270c4f568da7712371d0c69b58f7dcf64996fb48ec6d14b0bc2ff93de0e7f7f805d3da6c56494a908c918e0739fc2a9d308cec56cc8d45c36293e78ebd2282b047745c7f5d9eb0f476c5d85b0abcc80c66af20048ff88fd2357abe3c1fc626b50b62c26a1a946c9a8be1525d060292adf5d03cd2651834d746e29ec4396eb34a7b369a26ae2616845890fb5e70a409ef57763012823bd5e5f0da95f68a100e31a8d27f821be13de6b2c21b8bd4b2187a67e4aebaf28db90ff13005a2e71c166a91fdf00eeb45ec1d8535783e7e5a71ef01aada133ad572fb77d01496be10a924ae4b887ead8eb5006d8fe332df25e35840eec505ce6e1f4b51accce146799e2f868cafbf487c603cdebcd4b86dc2bc380d1b006a239b9ed17403a425e3db5adeb730fe8d3e6952659c8a3041fdc04e7bc63485d7af4b4b000cc2b68e895b6bcb204a6dc2445d7d93fb2d3738bcd6a0787cd8918d89e0fa549cceec9eddf5d57c5bcf6a87758311daf18856df8f44fdc52b3c9fe8c49741bd204811a0f698e4198b899ff529231b2850c0000a9008000100109831f007e01ffffffffffff0b0000000100008005000000ffffffffffff05000000040607010c0000086512cadd10b41396ffffffffffff0802110000010563c7e38aa341cdd41a5392cb8219a3b70bb6f35202370fe93f183ae11b6da2e2078c7167c578fff2d116ca103bc64a498411feba83ed774bc2f1f250b146c25636a4596bafc2f13571856e48a43ddfafab647c7774cf3a905a8e6220f37de4eae5f4b9d1000000070080001001160000020e00808c0700ffffffffffffffffffffffff50505050505014f808004441000000000000000005000420010004068f020004d47606020c0005ce0d4804e5b173fcefb5014a04d6bfd008e512c5001e354aa9b65c68812027ffffeeacc6347fed26855c042b7d1b88f1a2ea38a851888645fb399cfe1bd5d0886fb11cf40a4abee1c9eec59d911408b117950bee297e04be2852642bac3dc887fc9995e10e199a35001d446b036ffe0582b4cb40815f303283edd48317d1f4491053cd89708dc465f043a24b9e002e1aae371061f1038ecbec66be3f13472cc182e8d1da690031baa82407dc1f7624cbf1d9d55f82c24caa600307f5a21d3ff33480e39d924f8545b332a73b806c5a25030188022a01073c040007748572060303030303037107ffff0000000341760608ff00003b0dddcda26966993fd7fca3387cb0a4b63419fe5cc71c00688c71e53df73a7a47f4e5d467bee85b72f46093da840dc56addf8ed0c32597919e8e37c549c2f3b6dc7e2c3818550e66f4f54b010ed1c13b51039a71e43b86e1a729b27b59e8473d6519cc5354fe98cb736060eb386654a779fbf35cbe4de7ada8dde590ef1590982f827413c8a2bf1672c2d9350815c55d47756554cd352fcdd04ef6527e920022ad8293ab4b0f499ecc3b9face2ae8471df3d9edac2d75e0fd06d2fd28d1c170576becc7e976174c8cf8cb80b90e8f09bc0c008000bd06080211000001a001910003c93ef852d7affd0b0fa1750ebd52ee566dc4860909b2433ee470c84cbf8659c97ed529c04c807ea1ff56661e091dccfdf6218c430c7b2626db8aa931fe4a37104e9d33dc34078d65c236820f6c6ff06c20188fcdba1932e54a27f6ab97b044dece50f0beee2b68a322d0454cfe75c32e3a5c74a8f70073766bcc54802e2c760eb5a049e2f9a6cafe6a540e99428b6f0ce3886d91d0800dcb56a5fca4a0c78f17620caaad5f49e89da32cf109064cb9e1061b8d094f552460f184719996c07f62d8884296d6ac04857fcbd9727df9dd69127ea6b3ab42745a8a30660499ce5803f554043adfafbb40cd64c5121070fd83f23f3cc730e9a7d2f4b100a79f2f325afb960db7ad58cfbce8ba936b9826235c374a2196e5273542be4248b08e29ac5c9dd474ae808661646fddf6b6199bbfe1bb3a1634dae791e6e891b800faa56e28ebedd1145dfd2d37f0a1901fac4eada2d39c67f64c26e3da30813a009b232ad9a6ad8f9c0e722fd392773106dab9d3b4e7ad48ea6682882de8f451d3b7b7acb8c00a5916125d99b24d68708cfcded02d42ce9fa5a915a6338adc39"], 0x19c4}, 0x1, 0x0, 0x0, 0x10}, 0x20040084) 4.107122165s ago: executing program 3 (id=1921): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000003c0)=0x1003) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000540)='kmem_cache_free\x00', r3}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xb, 0xe}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x1, 0xc25b, 0x6, 0x0, 0xfff, 0xc, 0x1}}, {0x6, 0x2, [0x9]}}]}]}, 0x5c}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r4, 0x1) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=r9], 0xe) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000280)={r10, 0x1, 0x10}, 0xc) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000180)={r10, 0x9a7, 0x2}, 0x8) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) close(r0) 3.37872928s ago: executing program 3 (id=1922): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="511718000000ffff00"/22], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x22, 0x3, 0x1) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f00000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) r4 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x3fffd, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x200000, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r6, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000eb03010000000000000000000000000a14000000266f050300000000000000000500000a14000000f503010000000000000000000000000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x0) ioctl$sock_netdev_private(r1, 0x89ef, &(0x7f00000003c0)="da7b2c180971a99c9cd0340d5d4ed6d2d890f991e878344c0f2bf5c45bfff1996db1ade7780a9c41fae2615297498b36b2c05f8bb83069eb2936de0294d6996221f97d8eb1") r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r9) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r4, @ANYRES16=r10, @ANYBLOB="130526bd7000fddbdf253100000005003400690000000500360000580000994435000500000005003300038d63ea5c6e04f73b70616f31000000"], 0x40}, 0x1, 0x0, 0x0, 0x841}, 0x40004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0)={0x2d, 0x7, 0x7d, 0x8, 0x2, 0x1, 0x3, 0x21, 0x5, 0x0, 0xd, 0x5, 0x9, 0x3a}, 0xe) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) 3.377820049s ago: executing program 2 (id=1923): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x4}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'dummy0\x00', 0x400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000280)={0x14, r2, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000740)=0x7, 0x4) r3 = syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x107, 0x26}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "13ebcb57d7"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x800) r5 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000940)='wg1\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=@getchain={0x54, 0x66, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x9}, {0x10, 0xc}, {0xfff2, 0xffff}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x9000}, {0x8, 0xb, 0x32ba}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0xbab}, {0x8, 0xb, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r7, 0x11, 0x1, &(0x7f0000000ac0), &(0x7f0000000b00)) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc014}, 0x4000041) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000c40)={'wpan4\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f40)={0xffffffffffffffff, 0x0, 0xfef, 0x0, &(0x7f0000000d00)="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", 0x0, 0x7fff, 0x0, 0xef, 0xdf, &(0x7f0000001d40)="44eb6f5511cf270ffc40a4472752de22a6c546ffab8ec1a7e58ab25feeae1afe06fb1f4d7a99e39e02eb4fa7df3c134b2c121c6cedeb9215ea8ce6d60e8406a4d646ce834f14d9d5ed0d8fab54f9a994b2cb033461c9e01d6df642553d4ca9aa9a7bb3679ba604b2233d2ad28e29bf4f8db26fe0a23180707159f4288311360dec943a8deb09c37571cfb03a846d2be53096b8744a00bb1fdce129d5e51f4eea0b7b997fd01acd763903073e2f42edee3c76f1af25e4e33a3f34db20efa084bd5ad24064f724f662b86f5cc72bfe34884bf7af1335c61e3b4fa40fa3872e75532ecc67037d5db67c00f36a6e11c804", &(0x7f0000001e40)="ee490009e2a55bd312f77c279ffb7ce0c3208bda1da46f1e278e2ad3c3fb5ae488ab4b5c4e4d47a6600c75e0181719e5864b01059d54be7ffe2e6b6df06203f517c04bfb554dd6250b8995159300c36379123408441e9adaf3bc3e83c0748f0fee8cb19161a40a6114e1ffeb8534a6986ad41504aefb6612ab0950f1d6732d08730e827e1e72481a47d90712ca138d66bf845fb9122c84300afef61d446c4a1c3f98231d7747c773027814e5636bb2c30753b9ae65f939ce1220dd666cb4814ba01fa719f2f4b6f3a8829c8701742095b81890ae9ce0f0df02e57f98205653", 0x5, 0x0, 0x80000001}, 0x50) write(r7, &(0x7f0000001fc0)="8e3ae9490f37429018b8a73dd56001754618eda8d58e35db1befa8120c631f375a98543b45", 0x25) sendto$netrom(r0, &(0x7f0000002000)="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", 0xff, 0x20000005, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002180)={0x2, 0x0, 0x9, 0x8, 0x10, 0x0, 0x70bd2a, 0x25dfdbfc, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_x_policy={0x8, 0x12, 0x1, 0x2, 0x0, 0x6e6bb2, 0x70000000, {0x6, 0x0, 0x0, 0x5, 0x0, 0x43, 0x0, @in6=@mcast1, @in=@multicast2}}]}, 0x80}}, 0x40) sendmsg$nl_route_sched_retired(r6, &(0x7f0000002a40)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002a00)={&(0x7f00000022c0)=@newtaction={0x6ec, 0x30, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{0x6d4, 0x1, [@m_ipt={0x78, 0x13, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x5, 0x6, '\f'}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0x290, 0x7, 0x0, 0x0, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x113, 0x6, {0x43, 'nat\x00', 0xec, 0x81, "8c0fbb5cd2ab2c1aaec5af7e86847a5bed4e3838675144987e7e7f3aad17d993bb396e35a0be72601e07a10f48d1508fa1012bc16c86ac6ea46cfa4f23ea0d46b7ece5185f1a4b56343cde3120678c6493ec9bd7057cabf1a1d1e9a66e950fc99483c8e459f60e455e66fb6555d508cab9d44cdb7e1278243b7c835414380bf2d3ae0b5976229b600cf5363d8a9ccd528920dd17488148dc2b456fd164a256efc928b0f303432815668de463aae18fcd9086f0550f456f35136c3e8df38d53325d563d922409763fd7bb25414751ef0b344bdf407624c4f17a4c51777e7447bae77541f58ba9c1e697"}}, @TCA_IPT_TARG={0x98, 0x6, {0x7ff, 'raw\x00', 0xa0, 0xc41, "55786f30f5e0bf5b0e3ef79d599f97955e31a0475bc7452a4be65e7274e2a4028e67ba7ba3b490d7b257b2d47924ab930a1364aaf8dd32bafb3ffdad51a971cb678cc1b9ef75356a45e1d2ed1182739e92333ce4ac24f2ed99067dea4eca4ce5cc48de7b05c7c836ccd04937da4d"}}]}, {0xb9, 0x6, "7f76ad1cdae3edd8447bb1417d747575c3da95004079a08b5bbd20d34d39307c994011884305fb2b78fb03ab74bbde365b896ac5de84ee9642880b130ac80753d50cb51c799fae77152a7afcee6b40e3edf8e5a4eaf96fb261c5ffee033e91d9e79e493c807e2fa88c1a5d047421cc3ff7e1255bbd6b4b389889571454a6fb6c88b7602116cfe734db9fc45021fe495cdc0377cd2d221d20597a11c5a263d5ab63c16892ce4a7506199e0ea9023a08dc7205466389"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ipt={0x2b0, 0xe, 0x0, 0x0, {{0x8}, {0x234, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x20000000}, @TCA_IPT_TARG={0xd9, 0x6, {0x7, 'mangle\x00', 0x2, 0x34, "18291da05cf2053e7fd898c090c13d2c0bf33e070f18af489b507485b3201e3ccc976082099282e658d8bbd7b1f15db17f5a9808fed3fd231a0b78d76a9cd5951a297445241ded8ec2dee4a487e6720e6f1edc5b9fc68968551ec0ef3965f77f437f79efdfcb94b0436f924ec1d1f52540c82da63a27691998c6b1f06946a27346856f95e7aa4e0cb06f8f61aeefe5f9b751ddfb5648e6126cde2ca410b2318faef2d7af0e61ce0abf4727979851cd"}}, @TCA_IPT_TARG={0x10e, 0x6, {0xf6b4, 'nat\x00', 0x2, 0xcf5c, "4d6ddf96674e814c65fe52620898c09d5dedf2f5ce56510dbfed9f3e82b15ceb35395ab398f5a29d4c1ec76bccbaf452b4a4d9b7a3842bcba425e824e826f8034f155c9945c140ec40e1d72c42cdcac7eb646ff7db4b5a69e42e415ea44c85a10450e872e4585da4b37b519ae2f2aa11f4672568100e87da13e11d7b269e5309bca06d562e633ba17be26bf4b8425384e00b0d51ceca4f6f941f2f55bd616db8c26b6f15c43fadf414ba5e527ce1f8ffad89d3fa47b1186cc1f9ad000b26e9b172c186c0e3f3571f0ca19ccf92dfcf95b34bc77a72a8ec9787550b7cbd93c5e4ab7532a2"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0xe9d9}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x55, 0x6, "b47a90fcb6c0c893110862280d6c5928302c3867fbe8f560b7c128a71af5b6a24ebef69938b20c319072be513e5e4ec23869a18482303b4b9770b82b9f07f3fa24d38f41ad3caecf0fac0ab191d1ecc11c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0x118, 0x1a, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x100}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}]}, {0xd0, 0x6, "dd66c6af3bdb17a480d32dbc168ce41b4981bf9b29638e370cc06abd8cac95d4a964cded4ec50ef853a8b6faca83d302374e980997955b9680199061830fb990d1fb667e976c31ce7ee6407eb414bd520c1fe22c1fbf3ad8234e591a61fcec0e4fa9db4edca33cf902c6f30ebbb23be0243d22a45df33e3f817fb2b9ca890546cf8e97fde3a276f5b1416329ac8284aff279ee40670369f7902f8913ce620e1349516f49af0e7c62850697989561066b5eeb2ed099e4f79e2fb59089e0b7e66034add60240f1eb8a822c9b43"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x4}]}, 0x6ec}}, 0x80) 3.003999508s ago: executing program 0 (id=1924): r0 = socket$kcm(0x2, 0x3, 0x84) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0)='4', 0x1) tee(r3, r2, 0x3, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000080)}, 0x0) close(r1) sendmsg$inet(r0, &(0x7f0000000d40)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, 0x0, 0x0, &(0x7f00000034c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000003400000004000000000000001c00000000000000000000000888344254ba5626c7a4ceac8de058732a107de52b66ca928661cb13bb77becf1003fe5e97f5c3c9b98f2c9132ce815f4858d3cc66b38eefce6dea744b680cb34816eb"], 0x68}, 0x4000010) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) nanosleep(&(0x7f00000006c0)={0x77359400}, &(0x7f0000000800)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_buf(r8, 0x1, 0x1c, &(0x7f0000000940)=""/4096, &(0x7f00000000c0)=0x1000) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="6000000000060300"], 0x60}}, 0x0) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000040)="140000004e0025000307f4f9002304000a04f55f", 0x14) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xe, &(0x7f0000000580)=ANY=[@ANYRES64=r6], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x5, 0x0, 0x2000000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write(r0, &(0x7f0000000d80)="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", 0xff0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x1f2f, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a40800", 0x0, 0x241, 0x0, 0xaf, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb4206757531"}, 0x50) r11 = socket$inet_udplite(0x2, 0x2, 0x88) r12 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000580)=""/112, 0x70}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000e00)=""/112, 0x70}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x6}, 0x2) sendmsg$inet(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) syz_emit_ethernet(0x82, &(0x7f0000003680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60000058524bffa6c94e3c516d1939d1004c3c01fe800000000000000000000000000026fe8000000000000100000000000000aa3306000000000000072800000000080000000800000000000000000000000000000003000000000000000200000000000000c2040000000600000000dd81aaefd355403a8c284cec742a8d3bd95a459477db5109dbbcbcbb5ef71c644d3be1f14853086bd80c40ac440c6b499b004ac35905f3437d850903154e6501fb7670d10ce2ff8f1ce2a270f1952b7f97bffc5a9021d26ac5c9842e99641365346dd7d51dcfad381cf1d294", @ANYRESDEC=r7, @ANYRES32=0x41424344, @ANYBLOB="00f1"], 0x0) 2.628444654s ago: executing program 2 (id=1925): socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) unshare(0x2040400) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) ppoll(&(0x7f0000000480)=[{r0}, {}, {r2}], 0x3, &(0x7f0000000100)={0x77359400}, 0x0, 0x2000) socket$key(0xf, 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x3) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x4, 0xd1, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r6}, 0xc) write(r4, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r7) sendmsg$IEEE802154_LLSEC_DEL_KEY(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x38, r8, 0x1, 0x70bdad, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x101}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)={0x60, 0x1411, 0x400, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x6) 2.482598208s ago: executing program 3 (id=1926): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r1 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000001c0)=0x3ff, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000280)=ANY=[], 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x3a) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e3"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r4, 0x2000000, 0x13, 0x0, &(0x7f00000003c0)="13435cd378c66a90bd307e0add6affff1fc42f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000002800)=@raw={'raw\x00', 0x9, 0x3, 0x308, 0x140, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xe19, 0xef, 0xd3e, '\x00', {0xffffffffffffffff}}}}, {{@ipv6={@empty, @mcast1, [0xffffffff, 0xffffff00, 0xff000000], [0xff000000, 0x0, 0xffffff00], 'pim6reg1\x00', 'ip6gre0\x00', {0xff}, {}, 0x2b, 0xc0, 0x2, 0x30}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7aaa, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x13, 0x0, 0x2, 0x0, {0xa, 0x4e20, 0x10001, @local, 0x5}}}, 0x32) 2.00188166s ago: executing program 0 (id=1927): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) socket$packet(0x11, 0x3, 0x300) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) write(r0, &(0x7f00000001c0)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba2b2f051829a7f66952e57962614db0d03474a4a4bce636ea8d2b882b2b49ef18e76edbec7302a96e41f206d930eda2769c56e6d5e3d541ce9a21c3ce5cb5f", 0x80) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x360, 0xa, 0x148, 0x360, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x4, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) r4 = socket(0x10, 0x80000, 0x10200000) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r6, 0x110, 0x2, &(0x7f0000000100)=')*\\^%+,!/^\x00', 0xb) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r9 = accept$alg(r8, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000001140)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="30dfc92c0ade791e1bc83fdcec8647750b60a9f0cde89a26babc24a2335a2df616e56a24a2f193140fdc1914600fd99f22b1ab4c08ab9d989fbb1798578f4f5bbf3caab8f3e34f1a997b9a38d502350890a4a4c1b0991be96c4c417b8480648a79b08a8e8f8df99524eb2f37bb662acbcc0cd0269b9539d5531be418e24df43e21a6a840f984cfd6f339129ae53cc0b36da7b91a0c30bcfdd8180edf9b760f7a9f6f8db86d00"/179, 0xb3}], 0x1, 0x0, 0x0, 0x40c1}], 0x1, 0xc004) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newqdisc={0xd4, 0x24, 0xf0b, 0x18004000, 0x0, {0x0, 0x0, 0x0, r7, {0x2, 0x4}, {0x1a, 0xffff}}, [@TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x5, 0x4, 0xbff000, 0x1, 0xbd04, 0x8, 0xfffffef3}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x10, 0x7, 0x8000, 0x9, 0x1, 0x6, 0x0, 0x5}}, {0xe, 0x2, [0x4, 0x3, 0x8, 0x9, 0x9]}}, {{0x1c, 0x1, {0xed, 0xf7, 0xf5fa, 0x81, 0x3, 0x90, 0x0, 0xa}}, {0x18, 0x2, [0x3, 0x8, 0xac3f, 0x5, 0x4c8, 0x5, 0x9, 0x3, 0x8, 0xb1b7]}}, {{0x1c, 0x1, {0xb2, 0x8, 0x9e, 0xbcb7, 0x1, 0x9cd3, 0x2, 0x3}}, {0xa, 0x2, [0x8, 0x1, 0x8000]}}]}]}, 0xd4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41001, 0x0, '\x00', r7, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000000)={0x7, 'syzkaller0\x00', {}, 0x4}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.589186976s ago: executing program 2 (id=1928): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote, 0x19}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="56501366ff47fd29ff39", 0xa}], 0x1, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8000001) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x1f8, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2c8, 0x20a, 0x278, 0x2c8, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:netcontrol_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000140)={0x9, 0x5ea4, 0x1, 0x2ae2, 0x7ff, 0x9, 0x1, 0x40}, 0x20) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000640)='bx', 0x2}], 0x1) sendmsg$nl_xfrm(r1, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8}]}}]}, 0x3c}}, 0x0) pipe(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000fc3f1400e27f0000ffffffff00080000", @ANYRES32, @ANYBLOB, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0100"/19], 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x80500f1cf0ddf4fe}, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r7, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r8, 0x0, 0xffffffff000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) 687.450196ms ago: executing program 1 (id=1929): socket$igmp(0x2, 0x3, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x4d2f02, 0x0) unshare(0x400) epoll_pwait(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x6, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0xbe270dfaa0d54fe2, 0x7800, 0xdb9, 0x2b82, {{0x5, 0x4, 0x2, 0xa, 0x14, 0x66, 0x0, 0x4, 0x4, 0x0, @private=0xa010102, @private=0xa010102}}}}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r0, 0x1, 0x6, @link_local}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x8, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc38, 0x0, 0xffffffffffffffff, 0xffffffffffffffdc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x92, 0x0, &(0x7f0000000240)="a4da57df712462aa0da7152f892444f624ca72c3ae1da8dc3a065519945631d50bc06e2b5ca04b349157652bb6b912ee5ec14ffd1159d51c0440a0009961b0bf80500850f60157c1f9e7eb4150cee1e98d13a7b79bf6bf2cf78e1148411375bbfb3916cc871e0fdfca0f39b57d3c3ad4550661475c2f8fade0bd6adf2e60716dcc9367223c11886db15f61a7d82f3ca6adb7"}, 0x50) r2 = socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 442.357085ms ago: executing program 1 (id=1930): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x9}, @NFTA_SYNPROXY_MSS={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r2, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/237, 0xed, 0x0, 0x0}, &(0x7f0000000340)=0x40) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x84, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x46, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @random=0x1, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x2, 0x1, 0x4, 0x0, {0x4, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x1, 0x2, 0x7}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x59}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7965}]}, 0x84}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f00000000c0)="6079b13d0b9ed1645b9c3a2e4e128151ae98a2b54bd149057b82c23298c6a92d9e6c6a4c11af85dc52f3525948a56a90ea64489b24e9b534c9937923eb6b5d7f5cac4effa6ea6e8a3d062cad72352596a2dc4730b09010c58056b48fa032b63257bb6f4e67338d59bcc1672015e28f167681014ba118f5c543588de50b6e938d7d5731e46cee459e017da3225b600209a5e91e1db285867f3d106f6ee6269cdc86dd4e3f49644fb59a54cb19b4a4b0b2d46431772e287c98429319b9baf326f62d779dc47bd0c59d87ffbc4f", &(0x7f0000000040)=""/49, &(0x7f00000001c0)="95fc92ad1c3c6150b0d128665173fcf66b080aa5f744a6057a8dd8ceba97d3bd961b0622c4e409f4aa915a59baa64d5e54e990fda9d673bfb4b7a9cf06b8a500367735f5713048f7ed1150c8739fcd9ad895f98eff61c3105709e7c6710c4f6e129028da2664b6126127bad67bd75fee0911b0a5bf4ca0a8445be83bf0ea71fbbdd6b3ecb1c174999545f43d503e12572274a2361eab1fbc63d0421365d3386b4cbff22bd561be86f2544302850e5d1bf0547fe3ac66e29677242e5fb3a5cdc7e9812f6c428411a82ee9d0cedb9267ffff3a1923", &(0x7f00000002c0)="3e10d49c79ae493a41c697272d4e689a801ff85dcf880b04925fe2959659e2a26eedb6ff703963ec953f1b972aa182c2d5621c3af4ff4c3e6e4991520d9448b66ab985125db3cd78be5029af6f4f593abec7cdf8f918cb49017b94b99cb43df03318b98d9decc142eb605a020ee301b5cda30b16adf4209812cb785ee583cd60a608fa7c6e47da3870", 0x3, r3, 0x4}, 0x38) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffffffffd21, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x24084040) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_DELTABLE={0x5c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x20, 0x6, "eb025247793123a5a1113307ee2ace2e62d56e5564ecb01c673add20"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}}, @NFT_MSG_DELTABLE={0x124, 0x2, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xe2, 0x6, "3eed6d63217a14bab3845a6efd03781a760ddb9ccfb23911ee9a83770cc4114e433c282e2301101106f3bd0f47f2c655a6c74ba0952088caf77129bd0d120a2f4cf4d9638db05375ebfd9e310ee2c1fafdebcdfe3882ea09feac2f4e87eb248109119dc5d886ac49a547f2ff28f6f5aa03f8d2e485d7578c651c6799795a8b68007b57759c55881a00154223dbcb2cdff528843e87d43318f0a9d3cc85fa8c2cd3e1ee18e4477587174fe38b56ff5634a6062b8cc39bd9b566fc43fe8668cb2cf7cdb3b0da4fe4baf376c946e02219e1128a7ee0b6b513e1047bcd900f44"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x78, 0x3, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd12}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x200}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffa822}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1ff}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x402, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x2b4}, 0x1, 0x0, 0x0, 0x1}, 0x24000100) sendto$inet6(r2, &(0x7f0000000500)="5bf63e", 0x3, 0x40c0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000c00)={0x15c, r8, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x700000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa3b4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x428}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdf4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20000090}, 0x20040000) 441.336949ms ago: executing program 2 (id=1931): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000070000000400"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r6 = socket(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x0, 0x4, 0x1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x80, 0xcb4, 0x800000}}) r7 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="1fe1bc7f", 0x4) sendmmsg$unix(r7, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000200), 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @private=0xa010101}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1=0xe000030a}]}}}]}, 0x40}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) 333.258422ms ago: executing program 1 (id=1932): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x15, 0x5, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x60, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"6957608d766cfff5c3a665bd121a2d89", 0x0, 0x0, {0x4, 0x40000a}, {0x7, 0xc00000}, 0x5, [0x3, 0x3, 0x5, 0x6, 0x0, 0x400, 0xffffffffffff0001, 0x2, 0x8, 0x7, 0x80000000, 0x81, 0x10, 0x80000000, 0xfffffffffffffffb, 0x400000000000001]}) poll(&(0x7f00000001c0), 0x0, 0x9) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000000a0601020000000000000000050000090900020073797a3200001a9a15697e0000050001000700"], 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x8054) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000340)={"03707b1ff88dbba8349af3fc23a1faf4", 0x0, 0x0, {0xbfa, 0x7}, {0x700000000000000, 0x14d}, 0x8000, [0x100, 0x9, 0x6, 0x1, 0x100000000, 0x2, 0x9, 0x673, 0x8001, 0x8, 0x1000, 0x1, 0x8, 0x100, 0x4b4, 0xffffffff]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r7}, 0x10) r8 = socket$inet6(0xa, 0x5, 0x84) getsockopt$bt_hci(r8, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x42, 0x3, 0x1, 0x2, 0x1}, &(0x7f00000002c0)=0x98) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000fc0), 0x4) r10 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r10, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x20041840}, 0x0) 0s ago: executing program 1 (id=1933): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="ee", 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) sendmsg$sock(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="0980c9a65c4a24fb85c44869690c8d1e8ea7e8b1de", @ANYRES16=0x0, @ANYBLOB="010300000000000000001c0000001800018014000200776c616e3100"/38], 0x2c}, 0x1, 0x0, 0x0, 0x4040c01}, 0x8044) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0xb8, 0x7, 0xf, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x20, 0x40, 0x5, 0x9}}) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000001c0)={@loopback, @loopback, 0x0}, &(0x7f0000000200)=0xc) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe4}, {0xffff, 0xffff}, {0x0, 0x13}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'tunl0\x00', &(0x7f00000007c0)={'gretap0\x00', 0x0, 0x7, 0x1, 0x7, 0x7, {{0x17, 0x4, 0x2, 0xb, 0x5c, 0x67, 0x0, 0x6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, {[@rr={0x7, 0x1b, 0x16, [@rand_addr=0x64010102, @remote, @broadcast, @multicast2, @remote, @local]}, @timestamp={0x44, 0x10, 0x79, 0x0, 0xc, [0x7, 0x7fff000, 0x3]}, @timestamp_addr={0x44, 0x1c, 0x72, 0x1, 0x6, [{@rand_addr=0x64010100, 0x5}, {@remote, 0x6}, {@multicast1, 0x2}]}]}}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x900, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x940}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r12}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x40, 0x0, 0x2, 0x8, {{0x1d, 0x4, 0x0, 0x3e, 0x74, 0x66, 0x0, 0x9, 0x4, 0x0, @multicast2, @remote, {[@lsrr={0x83, 0x13, 0x65, [@multicast1, @loopback, @private=0xa010100, @remote]}, @ra={0x94, 0x4, 0x1}, @generic={0x83, 0x5, "28c179"}, @ra={0x94, 0x4, 0x1}, @end, @timestamp_addr={0x44, 0x3c, 0x7e, 0x1, 0x6, [{@local, 0x1000}, {@broadcast, 0xffff}, {@broadcast, 0x8000}, {@empty, 0x5}, {@multicast1, 0x10001}, {@multicast2, 0xd}, {@multicast1, 0x9}]}, @end]}}}}}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000004c0)={@broadcast, @loopback, 0x0}, &(0x7f0000000540)=0xc) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r15, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="010000050000000000000f00000008000300", @ANYRES32=r17, @ANYBLOB="0500330002000000080034"], 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000840)={0x178, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'team0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0xfffffd99, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x40}, 0x40000090) kernel console output (not intermixed with test programs): _tbf: burst 3631 is lower than device lo mtu (65550) ! [ 118.861815][ T6556] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 119.367528][ T6567] netlink: 'syz.3.155': attribute type 10 has an invalid length. [ 119.452100][ T6567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.506555][ T6567] team0: Port device batadv0 added [ 120.006053][ T6578] netlink: 'syz.1.159': attribute type 10 has an invalid length. [ 120.404452][ T6586] netlink: 76 bytes leftover after parsing attributes in process `syz.4.161'. [ 120.458961][ T6576] lo speed is unknown, defaulting to 1000 [ 120.487271][ T6587] netlink: 60 bytes leftover after parsing attributes in process `syz.4.161'. [ 120.501836][ T6586] netlink: 60 bytes leftover after parsing attributes in process `syz.4.161'. [ 120.753108][ T6591] netlink: 32 bytes leftover after parsing attributes in process `syz.1.164'. [ 123.078785][ T6622] netem: incorrect gi model size [ 123.156846][ T6622] netem: change failed [ 123.637156][ T6631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.626671][ T6633] lo speed is unknown, defaulting to 1000 [ 124.784743][ T6652] __nla_validate_parse: 2 callbacks suppressed [ 124.784763][ T6652] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.176'. [ 124.863043][ T6652] netlink: zone id is out of range [ 124.871553][ T6652] netlink: zone id is out of range [ 124.877678][ T6652] netlink: zone id is out of range [ 124.883081][ T6652] netlink: get zone limit has 8 unknown bytes [ 125.545125][ T6668] xt_cgroup: invalid path, errno=-2 [ 125.820938][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'. [ 125.966543][ T6675] netlink: 68 bytes leftover after parsing attributes in process `syz.4.183'. [ 126.016323][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.183'. [ 126.067541][ T6680] netlink: 'syz.2.185': attribute type 4 has an invalid length. [ 126.069997][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.183'. [ 126.079559][ T6680] netlink: 20 bytes leftover after parsing attributes in process `syz.2.185'. [ 126.111238][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.183'. [ 126.162985][ T6684] netlink: 'syz.2.185': attribute type 1 has an invalid length. [ 126.175798][ T6684] netlink: 224 bytes leftover after parsing attributes in process `syz.2.185'. [ 126.398786][ T6687] sch_fq: defrate 511 ignored. [ 126.768029][ T6701] xt_TCPMSS: Only works on TCP SYN packets [ 126.830111][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'. [ 126.886377][ T6707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.189'. [ 127.104194][ T6704] infiniband syz0: set active [ 127.251407][ T6712] x_tables: duplicate underflow at hook 3 [ 127.660628][ T6693] lo speed is unknown, defaulting to 1000 [ 127.667683][ T6715] siw: device registration error -23 [ 129.222374][ T6765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.682469][ T6761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.698633][ T6761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.923949][ T6761] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.932910][ T6761] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.060104][ T6761] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.134020][ T6761] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.646033][ T6780] xt_hashlimit: max too large, truncated to 1048576 [ 130.653364][ T6780] No such timeout policy "syz1" [ 130.894405][ T6768] lo speed is unknown, defaulting to 1000 [ 131.113056][ T6795] __nla_validate_parse: 4 callbacks suppressed [ 131.113080][ T6795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.210'. [ 131.194001][ T5146] Bluetooth: hci0: command 0x0401 tx timeout [ 131.194088][ T5838] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 131.234387][ T6795] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 131.241366][ T6783] lo speed is unknown, defaulting to 1000 [ 131.650032][ T6802] x_tables: duplicate underflow at hook 3 [ 131.756268][ T6787] lo speed is unknown, defaulting to 1000 [ 132.033512][ T6806] netlink: 48 bytes leftover after parsing attributes in process `syz.3.211'. [ 132.169255][ T6806] team0: Device gtp0 is of different type [ 132.814031][ T6814] netlink: 'syz.4.213': attribute type 10 has an invalid length. [ 132.849261][ T6814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.901448][ T6814] team0: Port device batadv0 added [ 132.914286][ T6817] netlink: 'syz.3.214': attribute type 29 has an invalid length. [ 132.939642][ T6817] netlink: 'syz.3.214': attribute type 29 has an invalid length. [ 132.956190][ T6817] netlink: 'syz.3.214': attribute type 29 has an invalid length. [ 132.993857][ T6817] netlink: 'syz.3.214': attribute type 29 has an invalid length. [ 133.200593][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.207402][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.301347][ T6834] syzkaller0: entered promiscuous mode [ 134.328014][ T6834] syzkaller0: entered allmulticast mode [ 134.337403][ T6838] netlink: 20 bytes leftover after parsing attributes in process `syz.1.219'. [ 134.388951][ T6827] infiniband syz1: set down [ 134.420903][ T6827] infiniband syz1: added syzkaller0 [ 134.472816][ T6841] netlink: 'syz.2.221': attribute type 1 has an invalid length. [ 134.474756][ T6827] RDS/IB: syz1: added [ 134.490486][ T6827] smc: adding ib device syz1 with port count 1 [ 134.497371][ T6827] smc: ib device syz1 port 1 has pnetid [ 134.519443][ T6841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.221'. [ 135.716640][ T6849] x_tables: duplicate underflow at hook 3 [ 137.292676][ T6856] pim6reg: entered allmulticast mode [ 137.325750][ T6858] pim6reg: left allmulticast mode [ 137.571099][ T6866] netlink: 'syz.0.226': attribute type 29 has an invalid length. [ 137.580278][ T6866] netlink: 'syz.0.226': attribute type 29 has an invalid length. [ 137.589586][ T6866] netlink: 'syz.0.226': attribute type 29 has an invalid length. [ 137.605139][ T6866] netlink: 'syz.0.226': attribute type 29 has an invalid length. [ 137.675166][ T6869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.700730][ T6869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.734835][ T6869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.767418][ T6869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.916089][ T6875] netlink: 'syz.0.227': attribute type 10 has an invalid length. [ 138.251834][ T6879] netlink: 24 bytes leftover after parsing attributes in process `syz.0.228'. [ 138.343123][ T11] smc: removing ib device syz1 [ 138.543385][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 139.060725][ T6892] syz_tun: entered allmulticast mode [ 139.123218][ T6892] syz_tun: left allmulticast mode [ 139.183300][ T6877] lo speed is unknown, defaulting to 1000 [ 139.413532][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 139.473887][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.233'. [ 139.503629][ T6895] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 139.867666][ T6847] lo speed is unknown, defaulting to 1000 [ 140.131992][ T6908] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 140.149402][ T6908] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 140.178897][ T6908] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 140.709389][ T6915] netlink: 'syz.4.237': attribute type 29 has an invalid length. [ 140.718428][ T6915] netlink: 'syz.4.237': attribute type 29 has an invalid length. [ 140.728335][ T6915] netlink: 'syz.4.237': attribute type 29 has an invalid length. [ 140.783776][ T6915] netlink: 'syz.4.237': attribute type 29 has an invalid length. [ 141.005396][ T6921] netlink: 'syz.0.238': attribute type 10 has an invalid length. [ 141.235016][ T6928] sctp: [Deprecated]: syz.2.240 (pid 6928) Use of int in max_burst socket option deprecated. [ 141.235016][ T6928] Use struct sctp_assoc_value instead [ 142.425865][ T6972] netlink: 'syz.4.249': attribute type 29 has an invalid length. [ 142.462655][ T6972] netlink: 'syz.4.249': attribute type 29 has an invalid length. [ 142.463217][ T6963] IPVS: Scheduler module ip_vs_sip not found [ 142.501266][ T6967] IPVS: length: 24 != 3221225496 [ 142.540531][ T6932] lo speed is unknown, defaulting to 1000 [ 142.547696][ T6972] netlink: 'syz.4.249': attribute type 29 has an invalid length. [ 142.625714][ T6972] netlink: 'syz.4.249': attribute type 29 has an invalid length. [ 142.664703][ T6984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.250'. [ 142.778338][ T6984] netlink: 224 bytes leftover after parsing attributes in process `syz.2.250'. [ 143.438750][ T6973] lo speed is unknown, defaulting to 1000 [ 143.981077][ T7023] validate_nla: 2 callbacks suppressed [ 143.981102][ T7023] netlink: 'syz.0.254': attribute type 10 has an invalid length. [ 144.110591][ T6989] lo speed is unknown, defaulting to 1000 [ 144.142962][ T7026] rdma_rxe: rxe_newlink: failed to add lo [ 144.154645][ T6977] siw: device registration error -23 [ 144.740679][ T7031] lo speed is unknown, defaulting to 1000 [ 145.222649][ T7056] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.232146][ T7056] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.241430][ T7056] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.250411][ T7056] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.393996][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'. [ 145.445806][ T7061] netlink: 'syz.4.261': attribute type 29 has an invalid length. [ 145.462123][ T7060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.260'. [ 145.490144][ T7066] netlink: 'syz.4.261': attribute type 29 has an invalid length. [ 145.507271][ T7068] netlink: 'syz.4.261': attribute type 29 has an invalid length. [ 145.517928][ T7072] netlink: 'syz.4.261': attribute type 29 has an invalid length. [ 146.502456][ T7083] openvswitch: netlink: Message has 8 unknown bytes. [ 146.763307][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.263'. [ 146.785264][ T7088] netlink: 'syz.3.266': attribute type 10 has an invalid length. [ 146.835743][ T7083] netlink: 'syz.4.263': attribute type 12 has an invalid length. [ 147.394587][ T7102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.268'. [ 147.583257][ T7094] netpci0: tun_chr_ioctl cmd 1074025672 [ 147.589187][ T7094] netpci0: ignored: set checksum disabled [ 147.597898][ T7076] lo speed is unknown, defaulting to 1000 [ 148.612380][ T7130] netlink: 24 bytes leftover after parsing attributes in process `syz.3.272'. [ 148.766218][ T7134] netlink: 'syz.2.273': attribute type 29 has an invalid length. [ 148.828071][ T7134] netlink: 'syz.2.273': attribute type 29 has an invalid length. [ 148.871748][ T7140] netlink: 'syz.2.273': attribute type 29 has an invalid length. [ 149.001947][ T7140] netlink: 'syz.2.273': attribute type 29 has an invalid length. [ 149.117744][ T7106] lo speed is unknown, defaulting to 1000 [ 149.944889][ T7161] netlink: 'syz.4.277': attribute type 10 has an invalid length. [ 150.287162][ T7126] lo speed is unknown, defaulting to 1000 [ 150.600778][ T7181] Bluetooth: MGMT ver 1.23 [ 151.208703][ T7197] openvswitch: netlink: Flow actions attr not present in new flow. [ 151.853828][ T7176] lo speed is unknown, defaulting to 1000 [ 152.038078][ T7213] netlink: 28 bytes leftover after parsing attributes in process `syz.2.285'. [ 152.092393][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'. [ 152.605450][ T7223] Driver unsupported XDP return value 0 on prog (id 169) dev N/A, expect packet loss! [ 152.664655][ T7229] netlink: 24 bytes leftover after parsing attributes in process `syz.3.286'. [ 152.703965][ T7229] netlink: 'syz.3.286': attribute type 2 has an invalid length. [ 152.724412][ T7229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.286'. [ 153.124491][ T7240] netlink: 'syz.0.290': attribute type 10 has an invalid length. [ 153.236531][ T7178] lo speed is unknown, defaulting to 1000 [ 153.844197][ T7264] netlink: 'syz.3.294': attribute type 12 has an invalid length. [ 153.863963][ T7264] netlink: 'syz.3.294': attribute type 29 has an invalid length. [ 153.895449][ T7264] netlink: 148 bytes leftover after parsing attributes in process `syz.3.294'. [ 153.902952][ T7267] netlink: 'syz.0.295': attribute type 1 has an invalid length. [ 153.914346][ T7267] netlink: 224 bytes leftover after parsing attributes in process `syz.0.295'. [ 154.056835][ T7268] netlink: 16 bytes leftover after parsing attributes in process `syz.3.294'. [ 154.240340][ T7280] vlan2: entered promiscuous mode [ 154.252840][ T7280] vlan2: entered allmulticast mode [ 154.283428][ T7280] vlan0: entered allmulticast mode [ 154.310045][ T7280] vlan0: entered promiscuous mode [ 154.325028][ T7280] team0: Port device vlan2 added [ 154.755204][ T7290] netlink: 'syz.1.301': attribute type 10 has an invalid length. [ 154.809099][ T7297] netlink: 'syz.1.301': attribute type 10 has an invalid length. [ 154.823896][ T7297] netlink: 2 bytes leftover after parsing attributes in process `syz.1.301'. [ 154.832937][ T7297] team0: entered promiscuous mode [ 154.892532][ T7297] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.920732][ T7303] ebt_among: dst integrity fail: 101 [ 154.931196][ T7297] bridge0: port 1(team0) entered blocking state [ 154.967857][ T7297] bridge0: port 1(team0) entered disabled state [ 154.985298][ T7297] team0: entered allmulticast mode [ 155.016419][ T7302] netlink: 'syz.3.303': attribute type 10 has an invalid length. [ 155.808165][ T7317] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.954520][ T7317] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.071339][ T7317] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.738737][ T7317] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.921097][ T7317] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.951794][ T7328] infiniband syz!: set down [ 156.976934][ T7328] infiniband syz!: added team_slave_0 [ 156.983318][ T7328] syz!: rxe_create_cq: returned err = -12 [ 157.010519][ T7317] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.019055][ T7328] infiniband syz!: Couldn't create ib_mad CQ [ 157.025453][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 157.042194][ T7328] infiniband syz!: Couldn't open port 1 [ 157.216067][ T7317] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.232848][ T7328] RDS/IB: syz!: added [ 157.240219][ T7328] smc: adding ib device syz! with port count 1 [ 157.248483][ T7328] smc: ib device syz! port 1 has pnetid [ 157.298869][ T7317] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.378792][ T7341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.314'. [ 157.480098][ T7344] ip6t_REJECT: ECHOREPLY is not supported [ 157.494562][ T7344] gretap0: left allmulticast mode [ 157.520399][ T7344] gretap0: left promiscuous mode [ 157.531768][ T7344] bridge0: port 3(gretap0) entered disabled state [ 157.587080][ T7348] netlink: 44 bytes leftover after parsing attributes in process `syz.2.316'. [ 157.951379][ T7359] netlink: 20 bytes leftover after parsing attributes in process `syz.2.319'. [ 158.029558][ T7361] netlink: 'syz.2.319': attribute type 1 has an invalid length. [ 158.372259][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.320'. [ 158.404621][ T7370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.420544][ T7370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.448269][ T7370] team0: Port device batadv0 removed [ 158.601587][ T7376] team0: Device gtp0 is of different type [ 159.849186][ T7408] netlink: 24 bytes leftover after parsing attributes in process `syz.2.331'. [ 159.921085][ T7411] netlink: zone id is out of range [ 159.949197][ T7411] netlink: zone id is out of range [ 159.959849][ T7411] netlink: zone id is out of range [ 159.973788][ T7411] netlink: zone id is out of range [ 159.984991][ T7411] netlink: zone id is out of range [ 159.992475][ T7411] netlink: zone id is out of range [ 160.015367][ T7413] netlink: 40 bytes leftover after parsing attributes in process `syz.2.331'. [ 160.027052][ T7411] netlink: zone id is out of range [ 160.032268][ T7411] netlink: zone id is out of range [ 160.039872][ T7411] netlink: zone id is out of range [ 160.046721][ T7411] netlink: zone id is out of range [ 160.234925][ T7407] team0: Port device netdevsim0 removed [ 160.490787][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.333'. [ 160.506382][ T7415] netlink: 'syz.4.333': attribute type 39 has an invalid length. [ 160.987454][ T7422] lo speed is unknown, defaulting to 1000 [ 161.012544][ T7432] ax25_connect(): syz.0.338 uses autobind, please contact jreuter@yaina.de [ 161.497309][ T7442] netlink: 256 bytes leftover after parsing attributes in process `syz.2.339'. [ 161.508567][ T7442] unsupported nlmsg_type 40 [ 161.910749][ T7449] team0: No ports can be present during mode change [ 161.945598][ T7455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.340'. [ 161.957627][ T7449] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 162.014914][ T7455] netlink: 'syz.4.340': attribute type 2 has an invalid length. [ 162.068637][ T7455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.340'. [ 162.385269][ T7468] netlink: 'syz.4.348': attribute type 12 has an invalid length. [ 162.393279][ T7468] netlink: 'syz.4.348': attribute type 29 has an invalid length. [ 162.402221][ T7468] netlink: 148 bytes leftover after parsing attributes in process `syz.4.348'. [ 162.486792][ T7469] netlink: 16 bytes leftover after parsing attributes in process `syz.4.348'. [ 162.749802][ T7479] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 162.832152][ T7483] netlink: 'syz.1.353': attribute type 10 has an invalid length. [ 162.867320][ T7483] team0: left allmulticast mode [ 162.872276][ T7483] team0: left promiscuous mode [ 162.877762][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.352'. [ 162.891816][ T7483] bridge0: port 1(team0) entered disabled state [ 162.909288][ T7484] netlink: 168 bytes leftover after parsing attributes in process `syz.2.351'. [ 162.918840][ T7484] netlink: 440 bytes leftover after parsing attributes in process `syz.2.351'. [ 162.981097][ T7483] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.018318][ T7487] netlink: 'syz.1.353': attribute type 4 has an invalid length. [ 163.027267][ T7487] netlink: 152 bytes leftover after parsing attributes in process `syz.1.353'. [ 163.036998][ T7483] bond0: (slave team0): Enslaving as an active interface with an up link [ 163.199146][ T7485] infiniband syz1: set down [ 163.203887][ T7485] infiniband syz1: added team_slave_0 [ 163.249816][ T7485] RDS/IB: syz1: added [ 163.255331][ T7485] smc: adding ib device syz1 with port count 1 [ 163.263440][ T7485] smc: ib device syz1 port 1 has pnetid [ 163.583910][ T5146] Bluetooth: hci0: command 0x0401 tx timeout [ 163.586422][ T5838] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 164.309172][ T7521] netlink: 24 bytes leftover after parsing attributes in process `syz.3.358'. [ 164.330774][ T7521] netlink: 'syz.3.358': attribute type 2 has an invalid length. [ 164.352942][ T7521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.358'. [ 164.991200][ T7528] netlink: 48 bytes leftover after parsing attributes in process `syz.2.359'. [ 165.003849][ T7528] netlink: 'syz.2.359': attribute type 10 has an invalid length. [ 165.012516][ T7528] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.019949][ T7528] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.048611][ T7528] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.055880][ T7528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.063375][ T7528] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.070612][ T7528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.088091][ T7528] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 165.116729][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.359'. [ 165.127038][ T7531] bridge_slave_1: left allmulticast mode [ 165.132741][ T7531] bridge_slave_1: left promiscuous mode [ 165.165195][ T7531] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.195859][ T7531] bridge_slave_0: left allmulticast mode [ 165.201622][ T7531] bridge_slave_0: left promiscuous mode [ 165.220743][ T7531] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.303798][ T7495] rdma_rxe: rxe_newlink: failed to add lo [ 165.425641][ T7531] bond0: (slave bridge0): Releasing backup interface [ 165.633983][ T7547] netlink: 'syz.0.363': attribute type 1 has an invalid length. [ 165.660371][ T7546] bond0: (slave team0): Releasing backup interface [ 165.702589][ T7546] vlan0: left allmulticast mode [ 165.711195][ T7546] vlan0: left promiscuous mode [ 165.717176][ T7550] netlink: 'syz.3.361': attribute type 4 has an invalid length. [ 165.755575][ T7546] team0: Port device vlan2 removed [ 165.784480][ T7553] ip6t_srh: unknown srh invflags 4000 [ 165.856100][ T7547] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.974854][ T7549] vcan1: entered allmulticast mode [ 166.012878][ T7549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.033285][ T7549] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 166.068485][ T7549] bond1: (slave vcan1): Error -95 calling set_mac_address [ 166.161444][ T7544] lo speed is unknown, defaulting to 1000 [ 166.171289][ T1204] lo speed is unknown, defaulting to 1000 [ 166.187812][ T7556] net_ratelimit: 321 callbacks suppressed [ 166.187833][ T7556] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 166.220794][ T7556] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 166.870061][ T7575] syzkaller0: entered promiscuous mode [ 166.876452][ T7575] syzkaller0: entered allmulticast mode [ 170.736949][ T7606] netlink: 'syz.3.375': attribute type 10 has an invalid length. [ 170.835503][ T7590] lo speed is unknown, defaulting to 1000 [ 171.222646][ T7601] lo speed is unknown, defaulting to 1000 [ 171.321462][ T7621] __nla_validate_parse: 4 callbacks suppressed [ 171.321483][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.381'. [ 171.379395][ T7621] netlink: 32 bytes leftover after parsing attributes in process `syz.3.381'. [ 171.687952][ T5838] Bluetooth: hci4: link tx timeout [ 171.695247][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.710533][ T5838] Bluetooth: hci4: link tx timeout [ 171.716976][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.727137][ T5838] Bluetooth: hci4: link tx timeout [ 171.732415][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.755097][ T7612] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 171.917835][ T7634] netlink: 'syz.4.385': attribute type 12 has an invalid length. [ 171.926478][ T7634] netlink: 'syz.4.385': attribute type 29 has an invalid length. [ 171.934963][ T7634] netlink: 148 bytes leftover after parsing attributes in process `syz.4.385'. [ 172.526266][ T7643] netlink: 24 bytes leftover after parsing attributes in process `syz.4.388'. [ 172.608688][ T7648] netlink: 'syz.0.389': attribute type 1 has an invalid length. [ 172.688697][ T7649] netlink: 40 bytes leftover after parsing attributes in process `syz.4.388'. [ 172.924592][ T7653] netlink: 76 bytes leftover after parsing attributes in process `syz.3.390'. [ 173.013043][ T7654] netlink: 60 bytes leftover after parsing attributes in process `syz.3.390'. [ 173.024001][ T5838] Bluetooth: hci0: command 0x0401 tx timeout [ 173.043335][ T7653] netlink: 60 bytes leftover after parsing attributes in process `syz.3.390'. [ 173.084310][ T7657] x_tables: duplicate entry at hook 1 [ 173.492375][ T7663] erspan1: entered promiscuous mode [ 173.497987][ T7663] erspan1: entered allmulticast mode [ 173.746283][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 174.264878][ T7689] netlink: 'syz.0.393': attribute type 21 has an invalid length. [ 174.272826][ T7689] netlink: 'syz.0.393': attribute type 6 has an invalid length. [ 174.282308][ T7689] netlink: 64 bytes leftover after parsing attributes in process `syz.0.393'. [ 174.341918][ T7693] netlink: 24 bytes leftover after parsing attributes in process `syz.3.395'. [ 174.452789][ T7693] netlink: 'syz.3.395': attribute type 2 has an invalid length. [ 174.851568][ T7676] lo speed is unknown, defaulting to 1000 [ 175.738859][ T7709] lo speed is unknown, defaulting to 1000 [ 175.903817][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 176.166124][ T7721] netlink: 'syz.4.403': attribute type 12 has an invalid length. [ 176.204178][ T7721] netlink: 'syz.4.403': attribute type 29 has an invalid length. [ 176.345845][ T7723] __nla_validate_parse: 7 callbacks suppressed [ 176.345864][ T7723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.403'. [ 176.702451][ T7731] netlink: 24 bytes leftover after parsing attributes in process `syz.0.402'. [ 176.772544][ T7731] netlink: 'syz.0.402': attribute type 2 has an invalid length. [ 176.774893][ T7732] netlink: 16 bytes leftover after parsing attributes in process `syz.1.406'. [ 176.815272][ T7731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.402'. [ 177.117911][ T9] hid-generic 0005:07C0:0058.0001: item fetching failed at offset 0/1 [ 177.199132][ T9] hid-generic 0005:07C0:0058.0001: probe with driver hid-generic failed with error -22 [ 177.731918][ T7748] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 177.872213][ T7760] netlink: 'syz.1.413': attribute type 10 has an invalid length. [ 177.961472][ T7760] veth1_macvtap: left promiscuous mode [ 177.977000][ T7760] team0: Device veth1_macvtap failed to register rx_handler [ 178.024532][ T7759] netlink: 'syz.1.413': attribute type 1 has an invalid length. [ 178.032249][ T7759] netlink: 224 bytes leftover after parsing attributes in process `syz.1.413'. [ 178.327875][ T7768] ebt_among: dst integrity fail: 101 [ 178.364927][ T7769] netlink: 24 bytes leftover after parsing attributes in process `syz.2.410'. [ 178.446003][ T7769] netlink: 'syz.2.410': attribute type 2 has an invalid length. [ 178.493447][ T7769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.410'. [ 179.051881][ T7776] netlink: 24 bytes leftover after parsing attributes in process `syz.0.415'. [ 179.318188][ T7789] netlink: 'syz.4.420': attribute type 12 has an invalid length. [ 179.327467][ T7791] netlink: 16 bytes leftover after parsing attributes in process `syz.2.418'. [ 179.353934][ T7789] netlink: 'syz.4.420': attribute type 29 has an invalid length. [ 179.377618][ T7789] netlink: 148 bytes leftover after parsing attributes in process `syz.4.420'. [ 179.471715][ T7790] : renamed from bridge0 [ 179.525277][ T7790] : entered promiscuous mode [ 179.574252][ T7790] : entered allmulticast mode [ 179.595191][ T7773] lo speed is unknown, defaulting to 1000 [ 179.646091][ T7801] netlink: 'syz.3.422': attribute type 12 has an invalid length. [ 179.664205][ T7801] netlink: 'syz.3.422': attribute type 29 has an invalid length. [ 181.236344][ T7827] validate_nla: 1 callbacks suppressed [ 181.236365][ T7827] netlink: 'syz.0.428': attribute type 2 has an invalid length. [ 181.375136][ T7827] __nla_validate_parse: 5 callbacks suppressed [ 181.375155][ T7827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.428'. [ 181.420260][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.432'. [ 181.772832][ T7843] netlink: 16 bytes leftover after parsing attributes in process `syz.2.434'. [ 181.862365][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 181.964871][ T7844] netlink: 20 bytes leftover after parsing attributes in process `syz.3.433'. [ 182.095066][ T7852] netlink: 16 bytes leftover after parsing attributes in process `syz.0.435'. [ 182.144671][ T7834] lo speed is unknown, defaulting to 1000 [ 183.066247][ T7851] lo speed is unknown, defaulting to 1000 [ 183.688767][ T7851] netlink: 44 bytes leftover after parsing attributes in process `syz.4.436'. [ 183.805503][ T7881] netlink: 40 bytes leftover after parsing attributes in process `syz.2.442'. [ 183.902731][ T7883] netlink: 'syz.3.443': attribute type 12 has an invalid length. [ 183.943828][ T7883] netlink: 'syz.3.443': attribute type 29 has an invalid length. [ 183.971628][ T7883] netlink: 148 bytes leftover after parsing attributes in process `syz.3.443'. [ 184.212133][ T7890] netlink: 16 bytes leftover after parsing attributes in process `syz.3.443'. [ 184.785744][ T7900] netlink: 'syz.4.445': attribute type 2 has an invalid length. [ 184.795994][ T7883] syz.3.443: vmalloc error: size 72003584, failed to allocated page array size 140632, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 184.866365][ T7905] netlink: zone id is out of range [ 184.871852][ T7905] netlink: zone id is out of range [ 184.881253][ T7905] netlink: zone id is out of range [ 184.887050][ T7905] netlink: zone id is out of range [ 184.892570][ T7905] netlink: zone id is out of range [ 184.893958][ T7883] CPU: 0 UID: 0 PID: 7883 Comm: syz.3.443 Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 184.893988][ T7883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 184.894007][ T7883] Call Trace: [ 184.894016][ T7883] [ 184.894025][ T7883] dump_stack_lvl+0x241/0x360 [ 184.894078][ T7883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.894112][ T7883] ? __pfx__printk+0x10/0x10 [ 184.894184][ T7883] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 184.894220][ T7883] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 184.894257][ T7883] warn_alloc+0x278/0x410 [ 184.894285][ T7883] ? __pfx_warn_alloc+0x10/0x10 [ 184.894314][ T7883] ? bpf_check+0x23f/0x1fc90 [ 184.894342][ T7883] ? __get_vm_area_node+0x1c8/0x2d0 [ 184.894375][ T7883] ? __get_vm_area_node+0x25c/0x2d0 [ 184.894415][ T7883] __vmalloc_node_range_noprof+0x62f/0x1380 [ 184.894470][ T7883] ? __phys_addr+0xba/0x170 [ 184.894504][ T7883] ? rcu_is_watching+0x15/0xb0 [ 184.894536][ T7883] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 184.894573][ T7883] ? rcu_is_watching+0x15/0xb0 [ 184.894604][ T7883] ? trace_kmalloc+0x1f/0xd0 [ 184.894632][ T7883] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 184.894661][ T7883] ? __kvmalloc_node_noprof+0x72/0x190 [ 184.894698][ T7883] ? bpf_check+0x23f/0x1fc90 [ 184.894727][ T7883] vzalloc_noprof+0x79/0x90 [ 184.894761][ T7883] ? bpf_check+0x23f/0x1fc90 [ 184.894790][ T7883] bpf_check+0x23f/0x1fc90 [ 184.894821][ T7883] ? __lock_acquire+0x1397/0x2100 [ 184.894884][ T7883] ? __pfx_validate_chain+0x10/0x10 [ 184.894918][ T7883] ? page_ext_put+0x97/0xc0 [ 184.894961][ T7883] ? handle_pte_fault+0x46e4/0x5ed0 [ 184.894986][ T7883] ? handle_pte_fault+0x4776/0x5ed0 [ 184.895012][ T7883] ? __pfx_lock_release+0x10/0x10 [ 184.895046][ T7883] ? mark_lock+0x9a/0x360 [ 184.895076][ T7883] ? __lock_acquire+0x1397/0x2100 [ 184.895104][ T7883] ? cgroup_rstat_updated+0x13b/0xc30 [ 184.895149][ T7883] ? validate_chain+0x11e/0x5920 [ 184.895179][ T7883] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 184.895221][ T7883] ? validate_chain+0x11e/0x5920 [ 184.895254][ T7883] ? count_memcg_event_mm+0x94/0x420 [ 184.895286][ T7883] ? __pfx_lock_release+0x10/0x10 [ 184.895312][ T7883] ? __pfx_validate_chain+0x10/0x10 [ 184.895377][ T7883] ? __pfx_bpf_check+0x10/0x10 [ 184.895405][ T7883] ? count_memcg_event_mm+0x3c2/0x420 [ 184.895437][ T7883] ? count_memcg_event_mm+0x94/0x420 [ 184.895472][ T7883] ? __pfx_count_memcg_event_mm+0x10/0x10 [ 184.895506][ T7883] ? __pfx_lock_release+0x10/0x10 [ 184.895547][ T7883] ? mark_lock+0x9a/0x360 [ 184.895578][ T7883] ? __lock_acquire+0x1397/0x2100 [ 184.895633][ T7883] ? __pfx_lock_acquire+0x10/0x10 [ 184.895660][ T7883] ? ktime_get_with_offset+0x8d/0x2a0 [ 184.895695][ T7883] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 184.895724][ T7883] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 184.895755][ T7883] ? ktime_get_with_offset+0x8d/0x2a0 [ 184.895787][ T7883] ? seqcount_lockdep_reader_access+0x157/0x220 [ 184.895822][ T7883] ? lockdep_hardirqs_on+0x99/0x150 [ 184.895850][ T7883] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 184.895885][ T7883] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 184.895929][ T7883] ? __check_object_size+0x8e/0x730 [ 184.895962][ T7883] ? bpf_obj_name_cpy+0x18a/0x1d0 [ 184.895994][ T7883] bpf_prog_load+0x1667/0x20f0 [ 184.896031][ T7883] ? __pfx_bpf_prog_load+0x10/0x10 [ 184.896054][ T7883] ? __pfx___might_resched+0x10/0x10 [ 184.896106][ T7883] ? __might_fault+0xaa/0x120 [ 184.896155][ T7883] __sys_bpf+0x4ee/0x810 [ 184.896193][ T7883] ? __pfx___sys_bpf+0x10/0x10 [ 184.896242][ T7883] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 184.896270][ T7883] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 184.896299][ T7883] ? do_syscall_64+0x100/0x230 [ 184.896330][ T7883] __x64_sys_bpf+0x7c/0x90 [ 184.896364][ T7883] do_syscall_64+0xf3/0x230 [ 184.896390][ T7883] ? clear_bhb_loop+0x35/0x90 [ 184.896425][ T7883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.896459][ T7883] RIP: 0033:0x7fd401d8cda9 [ 184.896484][ T7883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.896502][ T7883] RSP: 002b:00007fd402c50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 184.896527][ T7883] RAX: ffffffffffffffda RBX: 00007fd401fa5fa0 RCX: 00007fd401d8cda9 [ 184.896544][ T7883] RDX: 0000000000000048 RSI: 000000002000e000 RDI: 0000000000000005 [ 184.896558][ T7883] RBP: 00007fd401e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 184.896572][ T7883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.896586][ T7883] R13: 0000000000000000 R14: 00007fd401fa5fa0 R15: 00007ffc66a3bac8 [ 184.896617][ T7883] [ 184.896628][ T7883] Mem-Info: [ 184.946988][ T7905] netlink: zone id is out of range [ 185.023910][ T7883] active_anon:7321 inactive_anon:0 isolated_anon:0 [ 185.023910][ T7883] active_file:1371 inactive_file:38340 isolated_file:0 [ 185.023910][ T7883] unevictable:784 dirty:411 writeback:0 [ 185.023910][ T7883] slab_reclaimable:9771 slab_unreclaimable:116232 [ 185.023910][ T7883] mapped:28931 shmem:1401 pagetables:789 [ 185.023910][ T7883] sec_pagetables:0 bounce:0 [ 185.023910][ T7883] kernel_misc_reclaimable:0 [ 185.023910][ T7883] free:1319960 free_pcp:1160 free_cma:0 [ 185.060107][ T7905] netlink: zone id is out of range [ 185.141233][ T7883] Node 0 active_anon:22884kB inactive_anon:0kB active_file:5484kB inactive_file:153292kB unevictable:1600kB isolated(anon):0kB isolated(file):0kB mapped:115724kB dirty:1644kB writeback:0kB shmem:4068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11036kB pagetables:3156kB sec_pagetables:0kB all_unreclaimable? no [ 185.149810][ T7905] netlink: zone id is out of range [ 185.209277][ T7883] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 185.215297][ T7905] netlink: zone id is out of range [ 185.283850][ T7883] Node 0 [ 185.301269][ T7905] netlink: zone id is out of range [ 185.372090][ T7883] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 185.530846][ T7883] lowmem_reserve[]: 0 2490 2491 0 0 [ 185.588992][ T7883] Node 0 DMA32 free:1375256kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:22652kB inactive_anon:0kB active_file:5484kB inactive_file:152736kB unevictable:1536kB writepending:1680kB present:3129332kB managed:2550708kB mlocked:0kB bounce:0kB free_pcp:1800kB local_pcp:1020kB free_cma:0kB [ 185.660032][ T7883] lowmem_reserve[]: 0 0 0 0 0 [ 185.682829][ T7883] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:564kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 185.722947][ T7883] lowmem_reserve[]: 0 0 0 0 0 [ 185.730908][ T7883] Node 1 Normal free:3908296kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 185.775412][ T7883] lowmem_reserve[]: 0 0 0 0 0 [ 185.780230][ T7883] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 185.867199][ T7883] Node 0 DMA32: 3*4kB (E) 223*8kB (ME) 251*16kB (UME) 2064*32kB (UME) 611*64kB (UME) 90*128kB (UME) 56*256kB (UM) 31*512kB (UME) 7*1024kB (UM) 8*2048kB (UM) 292*4096kB (UM) = 1372276kB [ 185.888443][ T7919] x_tables: duplicate underflow at hook 1 [ 185.896150][ T7883] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 185.910331][ T7883] Node 1 Normal: 252*4kB (UME) 61*8kB (UME) 45*16kB (UME) 223*32kB (UME) 93*64kB (UME) 30*128kB (UME) 14*256kB (UME) 11*512kB (UME) 5*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3908296kB [ 185.930479][ T7883] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 185.942210][ T7883] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 185.960231][ T7883] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 186.006296][ T7883] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 186.034128][ T7883] 41117 total pagecache pages [ 186.038900][ T7883] 0 pages in swap cache [ 186.043094][ T7883] Free swap = 124996kB [ 186.053874][ T7883] Total swap = 124996kB [ 186.058101][ T7883] 2097051 pages RAM [ 186.061934][ T7883] 0 pages HighMem/MovableOnly [ 186.095258][ T7883] 427588 pages reserved [ 186.108378][ T7883] 0 pages cma reserved [ 186.523209][ T7944] netlink: 'syz.3.453': attribute type 25 has an invalid length. [ 186.561839][ T7944] netlink: 'syz.3.453': attribute type 7 has an invalid length. [ 186.583336][ T7945] __nla_validate_parse: 3 callbacks suppressed [ 186.583359][ T7945] netlink: 24 bytes leftover after parsing attributes in process `syz.0.450'. [ 186.657121][ T7949] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 186.672340][ T7949] macvlan2: entered allmulticast mode [ 186.678494][ T7949] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 186.701875][ T7949] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 187.014346][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.455'. [ 187.177957][ T7965] netlink: 'syz.4.459': attribute type 12 has an invalid length. [ 187.202858][ T7965] netlink: 'syz.4.459': attribute type 29 has an invalid length. [ 187.228884][ T7965] netlink: 148 bytes leftover after parsing attributes in process `syz.4.459'. [ 187.630363][ T7987] netlink: 'syz.1.461': attribute type 1 has an invalid length. [ 187.677764][ T7987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.461'. [ 187.921989][ T7996] netlink: 'syz.4.462': attribute type 29 has an invalid length. [ 187.981033][ T7995] netlink: 28 bytes leftover after parsing attributes in process `syz.3.463'. [ 188.129001][ T5883] lo speed is unknown, defaulting to 1000 [ 188.211455][ T8009] tipc: Started in network mode [ 188.256278][ T8003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.464'. [ 188.263825][ T8009] tipc: Node identity 1, cluster identity 8 [ 188.298897][ T8009] tipc: Node number set to 1 [ 188.843293][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.164531][ T8017] lo speed is unknown, defaulting to 1000 [ 189.684216][ T8023] ebt_among: dst integrity fail: 101 [ 190.372931][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.469'. [ 191.224683][ T8042] tipc: Started in network mode [ 191.242913][ T8042] tipc: Node identity 7261802f8385, cluster identity 4711 [ 191.294642][ T8042] tipc: Enabled bearer , priority 0 [ 191.639147][ T8043] syzkaller0: entered promiscuous mode [ 191.655814][ T8043] syzkaller0: entered allmulticast mode [ 191.673145][ T8043] tipc: Resetting bearer [ 191.702908][ T8036] lo speed is unknown, defaulting to 1000 [ 191.713155][ T8041] sch_fq: defrate 511 ignored. [ 191.743944][ T5146] Bluetooth: hci4: command 0x0405 tx timeout [ 192.100063][ T8053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.474'. [ 192.166925][ T8053] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 192.210878][ T7968] net_ratelimit: 290 callbacks suppressed [ 192.210902][ T7968] Set syz1 is full, maxelem 65536 reached [ 192.223970][ T8053] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 192.240867][ T8053] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 192.253823][ T8053] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 192.338328][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.474'. [ 192.393894][ T5882] tipc: Node number set to 4058284079 [ 192.415151][ T8038] tipc: Resetting bearer [ 192.550862][ T8060] netlink: 20 bytes leftover after parsing attributes in process `syz.0.475'. [ 192.561573][ T8060] netlink: 32 bytes leftover after parsing attributes in process `syz.0.475'. [ 193.084586][ T8068] netlink: 16 bytes leftover after parsing attributes in process `syz.4.476'. [ 194.520675][ T8038] tipc: Disabling bearer [ 194.546331][ T8062] netlink: 'syz.4.476': attribute type 12 has an invalid length. [ 194.573788][ T8062] netlink: 'syz.4.476': attribute type 29 has an invalid length. [ 194.593576][ T8062] netlink: 148 bytes leftover after parsing attributes in process `syz.4.476'. [ 194.639578][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.971852][ T8081] ebt_among: dst integrity fail: 101 [ 194.987078][ T8077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.997046][ T8077] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.998365][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.479'. [ 195.014317][ T8077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.030421][ T8037] lo speed is unknown, defaulting to 1000 [ 195.269801][ T8091] Cannot find del_set index 2416 as target [ 196.334816][ T8111] netlink: 60 bytes leftover after parsing attributes in process `syz.2.488'. [ 196.366616][ T8106] netlink: 60 bytes leftover after parsing attributes in process `syz.2.488'. [ 196.441038][ T8110] netlink: 32 bytes leftover after parsing attributes in process `syz.0.487'. [ 197.023901][ T5146] Bluetooth: hci4: command 0x0405 tx timeout [ 197.136216][ T8114] lo speed is unknown, defaulting to 1000 [ 197.360948][ T8133] netlink: 40 bytes leftover after parsing attributes in process `syz.1.493'. [ 197.463280][ T8122] lo speed is unknown, defaulting to 1000 [ 197.475665][ T8136] macvlan3: entered promiscuous mode [ 197.481030][ T8136] bridge0: entered promiscuous mode [ 197.490410][ T8136] bridge0: port 1(macvlan3) entered blocking state [ 197.504015][ T8136] bridge0: port 1(macvlan3) entered disabled state [ 197.506114][ T8135] netlink: 'syz.3.494': attribute type 1 has an invalid length. [ 197.514373][ T8136] macvlan3: entered allmulticast mode [ 197.533773][ T8136] bridge0: entered allmulticast mode [ 197.546452][ T8136] macvlan3: left allmulticast mode [ 197.551759][ T8136] bridge0: left allmulticast mode [ 197.558428][ T8137] netlink: 3 bytes leftover after parsing attributes in process `syz.3.494'. [ 197.572065][ T8136] bridge0: left promiscuous mode [ 197.643286][ T8135] bond1: entered promiscuous mode [ 197.656803][ T8135] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.676978][ T8137] batadv1: entered promiscuous mode [ 197.682267][ T8137] batadv1: entered allmulticast mode [ 197.707906][ T8137] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 197.716728][ T8135] netlink: 48 bytes leftover after parsing attributes in process `syz.3.494'. [ 197.726393][ T8137] bond1: (slave batadv1): making interface the new active one [ 197.739770][ T8137] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 197.788342][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'. [ 198.039768][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.497'. [ 198.069875][ T8148] netlink: 16 bytes leftover after parsing attributes in process `syz.3.497'. [ 198.132792][ T8148] netlink: 88 bytes leftover after parsing attributes in process `syz.3.497'. [ 198.164138][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'. [ 198.258924][ T8151] netlink: 'syz.1.498': attribute type 27 has an invalid length. [ 198.360776][ T8118] lo speed is unknown, defaulting to 1000 [ 198.405343][ T8155] netlink: 1296 bytes leftover after parsing attributes in process `syz.1.498'. [ 198.415571][ T8155] openvswitch: netlink: Flow key attr not present in new flow. [ 198.756904][ T8161] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 198.853285][ T8162] team0: Port device batadv0 removed [ 198.869868][ T8162] bridge_slave_0: left allmulticast mode [ 198.905178][ T8162] bridge_slave_0: left promiscuous mode [ 198.911256][ T8162] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.938113][ T8162] bridge_slave_1: left allmulticast mode [ 198.948939][ T8162] bridge_slave_1: left promiscuous mode [ 198.960814][ T8162] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.008777][ T8162] bond0: (slave bond_slave_0): Releasing backup interface [ 199.049650][ T8162] bond0: (slave bond_slave_1): Releasing backup interface [ 199.110685][ T8162] infiniband syz0: set down [ 199.132188][ T8162] team0: Port device team_slave_0 removed [ 199.163072][ T8162] team0: Port device team_slave_1 removed [ 199.178970][ T8162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.189245][ T8162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.200734][ T8162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.209478][ T8162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.230847][ T8162] bond1: (slave batadv1): Releasing active interface [ 199.315952][ T8155] lo speed is unknown, defaulting to 1000 [ 199.793632][ T8161] lo speed is unknown, defaulting to 1000 [ 200.076415][ T8170] ebt_among: dst integrity fail: 101 [ 200.659657][ T8180] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 201.562711][ T8194] openvswitch: netlink: Invalid VLAN frame [ 201.720530][ T8194] syzkaller1: entered promiscuous mode [ 201.734219][ T8194] syzkaller1: entered allmulticast mode [ 201.823924][ T5836] Bluetooth: hci0: command 0x0401 tx timeout [ 201.826914][ T8189] Bluetooth: hci1: command 0x0406 tx timeout [ 201.831675][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 201.836100][ T8189] Bluetooth: hci3: command 0x0406 tx timeout [ 201.894638][ T8199] netlink: 'syz.4.507': attribute type 12 has an invalid length. [ 201.902564][ T8199] netlink: 'syz.4.507': attribute type 29 has an invalid length. [ 201.920084][ T8199] netlink: 148 bytes leftover after parsing attributes in process `syz.4.507'. [ 202.149249][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 202.327029][ T8203] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 202.526617][ T8211] ebt_among: dst integrity fail: 101 [ 202.666590][ T8213] __nla_validate_parse: 1 callbacks suppressed [ 202.666613][ T8213] netlink: 44 bytes leftover after parsing attributes in process `syz.0.512'. [ 203.374273][ T8247] netlink: 996 bytes leftover after parsing attributes in process `syz.3.517'. [ 203.770068][ T8213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.783389][ T8213] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.801408][ T8213] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.916917][ T8255] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.144439][ T8255] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.205993][ T8267] lo speed is unknown, defaulting to 1000 [ 204.342305][ T8255] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.358931][ T8277] netlink: 16 bytes leftover after parsing attributes in process `syz.3.524'. [ 204.466900][ T8278] openvswitch: netlink: Flow actions attr not present in new flow. [ 204.481414][ T8255] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.687719][ T8255] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.703957][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 204.728587][ T8255] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.843165][ T8255] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.910588][ T8255] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.289122][ T8300] netlink: 'syz.3.530': attribute type 29 has an invalid length. [ 205.303617][ T8303] netlink: 'syz.3.530': attribute type 29 has an invalid length. [ 205.316667][ T8300] netlink: 'syz.3.530': attribute type 29 has an invalid length. [ 205.327158][ T8300] netlink: 'syz.3.530': attribute type 29 has an invalid length. [ 205.868520][ T8320] bridge0: entered promiscuous mode [ 205.909254][ T8320] macvlan2: entered promiscuous mode [ 205.933193][ T8320] bridge0: port 1(macvlan2) entered blocking state [ 205.959986][ T8320] bridge0: port 1(macvlan2) entered disabled state [ 205.976580][ T8320] macvlan2: entered allmulticast mode [ 205.995318][ T8320] bridge0: entered allmulticast mode [ 206.055382][ T8320] macvlan2: left allmulticast mode [ 206.062858][ T8320] bridge0: left allmulticast mode [ 206.103685][ T8320] bridge0: left promiscuous mode [ 206.400854][ T8309] lo speed is unknown, defaulting to 1000 [ 206.719533][ T8340] openvswitch: netlink: Flow actions attr not present in new flow. [ 207.301205][ T8334] lo speed is unknown, defaulting to 1000 [ 207.677754][ T8368] netlink: 16 bytes leftover after parsing attributes in process `syz.3.544'. [ 207.724087][ T8370] netlink: 'syz.1.545': attribute type 1 has an invalid length. [ 207.747729][ T8370] netlink: 16 bytes leftover after parsing attributes in process `syz.1.545'. [ 208.022595][ T8379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.546'. [ 208.168126][ T8384] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82 [ 208.297808][ T8388] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR' [ 208.315429][ T8337] netlink: 'syz.2.537': attribute type 11 has an invalid length. [ 208.327228][ T8388] CPU: 0 UID: 0 PID: 8388 Comm: syz.0.548 Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 208.327260][ T8388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 208.327280][ T8388] Call Trace: [ 208.327288][ T8388] [ 208.327297][ T8388] dump_stack_lvl+0x241/0x360 [ 208.327337][ T8388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.327368][ T8388] ? __pfx__printk+0x10/0x10 [ 208.327402][ T8388] ? __kmalloc_cache_noprof+0x243/0x390 [ 208.327429][ T8388] ? sysfs_warn_dup+0x51/0xa0 [ 208.327454][ T8388] sysfs_warn_dup+0x8e/0xa0 [ 208.327473][ T8388] sysfs_do_create_link_sd+0xbe/0x110 [ 208.327496][ T8388] device_add_class_symlinks+0x1c5/0x250 [ 208.327521][ T8388] device_add+0x553/0xbf0 [ 208.327549][ T8388] wiphy_register+0x1a58/0x27b0 [ 208.327583][ T8388] ? __pfx_wiphy_register+0x10/0x10 [ 208.327601][ T8388] ? minstrel_ht_alloc+0x72b/0x860 [ 208.327641][ T8388] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 208.327669][ T8388] ieee80211_register_hw+0x354e/0x4240 [ 208.327707][ T8388] ? ieee80211_register_hw+0x1661/0x4240 [ 208.327740][ T8388] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 208.327777][ T8388] ? __asan_memset+0x23/0x50 [ 208.327807][ T8388] ? __hrtimer_init+0x170/0x250 [ 208.327837][ T8388] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 208.327902][ T8388] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 208.327933][ T8388] ? kstrndup+0x5c/0xb0 [ 208.327962][ T8388] ? __asan_memcpy+0x40/0x70 [ 208.327997][ T8388] hwsim_new_radio_nl+0xece/0x2290 [ 208.328041][ T8388] ? __pfx___nla_validate_parse+0x10/0x10 [ 208.328079][ T8388] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 208.328160][ T8388] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 208.328202][ T8388] genl_rcv_msg+0xb14/0xec0 [ 208.328238][ T8388] ? __pfx_genl_rcv_msg+0x10/0x10 [ 208.328324][ T8388] ? __pfx_lock_acquire+0x10/0x10 [ 208.328348][ T8388] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 208.328380][ T8388] ? __pfx___might_resched+0x10/0x10 [ 208.328425][ T8388] netlink_rcv_skb+0x1e3/0x430 [ 208.328455][ T8388] ? __pfx_genl_rcv_msg+0x10/0x10 [ 208.328478][ T8388] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 208.328540][ T8388] genl_rcv+0x28/0x40 [ 208.328558][ T8388] netlink_unicast+0x7f6/0x990 [ 208.328593][ T8388] ? __pfx_netlink_unicast+0x10/0x10 [ 208.328616][ T8388] ? __virt_addr_valid+0x45f/0x530 [ 208.328643][ T8388] ? __phys_addr_symbol+0x2f/0x70 [ 208.328666][ T8388] ? __check_object_size+0x47a/0x730 [ 208.328701][ T8388] netlink_sendmsg+0x8e4/0xcb0 [ 208.328742][ T8388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.328775][ T8388] ? aa_sock_msg_perm+0x91/0x160 [ 208.328812][ T8388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.328838][ T8388] __sock_sendmsg+0x221/0x270 [ 208.328864][ T8388] ____sys_sendmsg+0x52a/0x7e0 [ 208.328902][ T8388] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.328929][ T8388] ? __fget_files+0x2a/0x410 [ 208.328959][ T8388] ? __fget_files+0x2a/0x410 [ 208.328994][ T8388] __sys_sendmsg+0x269/0x350 [ 208.329029][ T8388] ? __pfx___sys_sendmsg+0x10/0x10 [ 208.329108][ T8388] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 208.329133][ T8388] ? do_syscall_64+0x100/0x230 [ 208.329161][ T8388] ? do_syscall_64+0xb6/0x230 [ 208.329187][ T8388] do_syscall_64+0xf3/0x230 [ 208.329211][ T8388] ? clear_bhb_loop+0x35/0x90 [ 208.329241][ T8388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.329265][ T8388] RIP: 0033:0x7f15c038cda9 [ 208.329293][ T8388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.329309][ T8388] RSP: 002b:00007f15c1149038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.329332][ T8388] RAX: ffffffffffffffda RBX: 00007f15c05a5fa0 RCX: 00007f15c038cda9 [ 208.329346][ T8388] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 208.329358][ T8388] RBP: 00007f15c040e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 208.329370][ T8388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.329381][ T8388] R13: 0000000000000000 R14: 00007f15c05a5fa0 R15: 00007fff0f0fab78 [ 208.329413][ T8388] [ 208.418117][ T8384] syzkaller1: entered promiscuous mode [ 208.739317][ T8384] syzkaller1: entered allmulticast mode [ 208.997982][ T8379] lo speed is unknown, defaulting to 1000 [ 209.579994][ T8410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.553'. [ 209.669519][ T8410] bond1: entered promiscuous mode [ 209.686476][ T8410] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.828837][ T8410] ebt_among: src integrity fail: 100 [ 209.991084][ T8415] netlink: 'syz.0.554': attribute type 1 has an invalid length. [ 210.180609][ T8415] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.202734][ T8417] vcan1: entered allmulticast mode [ 210.215670][ T8417] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.223272][ T8417] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 210.245421][ T8417] bond2: (slave vcan1): Error -95 calling set_mac_address [ 210.643719][ T8416] lo speed is unknown, defaulting to 1000 [ 210.665283][ T8424] : left promiscuous mode [ 210.670416][ T8424] : left allmulticast mode [ 210.708320][ T8424] vlan2: left promiscuous mode [ 210.713377][ T8424] vlan2: left allmulticast mode [ 211.631747][ T8432] netlink: 16 bytes leftover after parsing attributes in process `syz.2.559'. [ 211.716251][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.558'. [ 213.123580][ T8453] ip6gretap0: entered promiscuous mode [ 213.151443][ T8453] batadv_slave_0: entered promiscuous mode [ 213.391762][ T8459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.566'. [ 213.604835][ T8451] lo speed is unknown, defaulting to 1000 [ 214.458547][ T8472] lo speed is unknown, defaulting to 1000 [ 214.677983][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 215.070426][ T8492] netlink: 'syz.3.575': attribute type 1 has an invalid length. [ 216.481894][ T8506] x_tables: duplicate entry at hook 1 [ 217.392724][ T8492] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 217.399484][ T8494] vcan1: entered allmulticast mode [ 217.420385][ T8505] netlink: 60 bytes leftover after parsing attributes in process `syz.0.578'. [ 217.674853][ T8473] siw: device registration error -23 [ 217.840976][ T8521] ebt_among: dst integrity fail: 101 [ 218.051249][ T8530] netlink: 'syz.3.586': attribute type 1 has an invalid length. [ 218.064972][ T8532] netlink: 44 bytes leftover after parsing attributes in process `syz.2.587'. [ 218.186635][ T8536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'. [ 218.286282][ T8530] 8021q: adding VLAN 0 to HW filter on device bond2 [ 218.409182][ T8535] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 218.469465][ T8535] bond2: (slave batadv2): making interface the new active one [ 218.490994][ T8535] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 218.510647][ T8536] vlan2: entered promiscuous mode [ 218.517734][ T8536] bond2: entered promiscuous mode [ 218.523084][ T8536] batadv2: entered promiscuous mode [ 218.539285][ T8536] bond2: left promiscuous mode [ 218.545240][ T8536] batadv2: left promiscuous mode [ 218.694125][ T8540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.054960][ T8547] netlink: 44 bytes leftover after parsing attributes in process `syz.2.590'. [ 219.214827][ T8557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.593'. [ 219.654296][ T8547] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.666420][ T8547] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.675625][ T8547] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.684828][ T8547] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.972110][ T8583] netlink: 16 bytes leftover after parsing attributes in process `syz.0.598'. [ 219.987620][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 220.001354][ T8554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.025625][ T8554] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.087130][ T8554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 220.133096][ T8589] netlink: 16 bytes leftover after parsing attributes in process `syz.1.599'. [ 220.209405][ T8590] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.245187][ T8590] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.266525][ T8590] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.293033][ T8590] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.707717][ T8605] ebt_among: dst integrity fail: 101 [ 220.746700][ T8610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.607'. [ 221.120856][ T8623] netlink: 'syz.2.611': attribute type 1 has an invalid length. [ 221.167546][ T8623] 8021q: adding VLAN 0 to HW filter on device bond2 [ 221.263507][ T8623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.319008][ T8627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.611'. [ 221.337388][ T8623] bond2: (slave batadv0): making interface the new active one [ 221.354840][ T8631] ebt_among: dst integrity fail: 101 [ 221.374662][ T8623] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 221.405706][ T8627] vlan2: entered promiscuous mode [ 221.410820][ T8627] bond2: entered promiscuous mode [ 221.433802][ T8627] batadv0: entered promiscuous mode [ 221.441383][ T8627] bond2: left promiscuous mode [ 221.461998][ T8627] batadv0: left promiscuous mode [ 221.620610][ T8634] netlink: 16 bytes leftover after parsing attributes in process `syz.3.615'. [ 222.332712][ T8667] netlink: 16 bytes leftover after parsing attributes in process `syz.2.624'. [ 222.341269][ T8669] netlink: 16 bytes leftover after parsing attributes in process `syz.3.623'. [ 222.698650][ T8686] netlink: 'syz.4.633': attribute type 12 has an invalid length. [ 222.707422][ T8686] netlink: 'syz.4.633': attribute type 29 has an invalid length. [ 222.716040][ T8686] netlink: 148 bytes leftover after parsing attributes in process `syz.4.633'. [ 222.784451][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 222.794516][ T8677] x_tables: duplicate entry at hook 1 [ 223.149195][ T8695] lo speed is unknown, defaulting to 1000 [ 223.742916][ T8716] ebt_among: dst integrity fail: 101 [ 224.446868][ T8731] lo speed is unknown, defaulting to 1000 [ 224.882876][ T8752] netlink: 'syz.3.655': attribute type 1 has an invalid length. [ 225.076117][ T8752] 8021q: adding VLAN 0 to HW filter on device bond3 [ 225.164501][ T8756] vcan1: entered allmulticast mode [ 225.179010][ T8756] 8021q: adding VLAN 0 to HW filter on device bond3 [ 225.194514][ T8756] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 225.212200][ T8756] bond3: (slave vcan1): Error -95 calling set_mac_address [ 225.465011][ T8769] geneve2: entered promiscuous mode [ 225.694121][ T8748] lo speed is unknown, defaulting to 1000 [ 225.920463][ T8780] ebt_among: dst integrity fail: 101 [ 226.116688][ T8788] __nla_validate_parse: 7 callbacks suppressed [ 226.116711][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'. [ 226.374116][ T8790] ieee802154 phy0 wpan0: encryption failed: -22 [ 226.708914][ T8802] netlink: 'syz.1.676': attribute type 8 has an invalid length. [ 227.100952][ T8810] xt_HMARK: spi-set and port-set can't be combined [ 227.276086][ T8817] netlink: 16 bytes leftover after parsing attributes in process `syz.3.681'. [ 227.399107][ T8819] ebt_among: dst integrity fail: 101 [ 227.627548][ T8830] netlink: 'syz.0.685': attribute type 10 has an invalid length. [ 228.391698][ T8833] lo speed is unknown, defaulting to 1000 [ 228.405848][ T8853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.694'. [ 228.529645][ T8855] xt_l2tp: v2 tid > 0xffff: 150994944 [ 228.564124][ T8857] netlink: 16 bytes leftover after parsing attributes in process `syz.3.697'. [ 228.609820][ T8859] netlink: 52 bytes leftover after parsing attributes in process `syz.4.698'. [ 229.004709][ T8872] ip6gretap0: entered promiscuous mode [ 229.011160][ T8872] batadv_slave_0: entered promiscuous mode [ 229.036648][ T8872] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 229.068483][ T8872] Cannot create hsr debugfs directory [ 229.342836][ T8888] x_tables: duplicate entry at hook 1 [ 229.795747][ T8889] x_tables: duplicate underflow at hook 3 [ 229.881260][ T8836] lo speed is unknown, defaulting to 1000 [ 229.970803][ T8909] netlink: 'syz.4.720': attribute type 29 has an invalid length. [ 229.980586][ T8909] netlink: 'syz.4.720': attribute type 29 has an invalid length. [ 229.989847][ T8909] netlink: 'syz.4.720': attribute type 29 has an invalid length. [ 229.999430][ T8909] netlink: 'syz.4.720': attribute type 29 has an invalid length. [ 230.159408][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.719'. [ 230.175894][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.722'. [ 230.200768][ T8916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'. [ 230.291283][ T8887] lo speed is unknown, defaulting to 1000 [ 230.779451][ T8935] netlink: 'syz.4.729': attribute type 12 has an invalid length. [ 230.803877][ T8935] netlink: 'syz.4.729': attribute type 29 has an invalid length. [ 230.823811][ T8935] netlink: 148 bytes leftover after parsing attributes in process `syz.4.729'. [ 230.956719][ T8938] netlink: 16 bytes leftover after parsing attributes in process `syz.4.729'. [ 230.976721][ T8939] netlink: 'syz.1.725': attribute type 2 has an invalid length. [ 231.606825][ T8950] ebt_among: dst integrity fail: 101 [ 232.801352][ T8986] __nla_validate_parse: 2 callbacks suppressed [ 232.801376][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.746'. [ 232.878966][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.746'. [ 232.925019][ T8986] netlink: 32 bytes leftover after parsing attributes in process `syz.2.746'. [ 232.950701][ T8982] lo speed is unknown, defaulting to 1000 [ 233.143272][ T5838] block nbd1: Receive control failed (result -107) [ 233.296162][ T8986] nbd1: detected capacity change from 0 to 256 [ 233.410815][ T8971] block nbd1: Dead connection, failed to find a fallback [ 233.459444][ T8971] block nbd1: shutting down sockets [ 233.483999][ T8971] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 233.513778][ T8971] Buffer I/O error on dev nbd1, logical block 0, async page read [ 233.521922][ T8971] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 233.539569][ T8999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.752'. [ 233.584024][ T8971] Buffer I/O error on dev nbd1, logical block 0, async page read [ 233.591984][ T8971] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 233.649302][ T8971] Buffer I/O error on dev nbd1, logical block 0, async page read [ 233.666927][ T8971] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 233.702249][ T8971] Buffer I/O error on dev nbd1, logical block 0, async page read [ 233.725080][ T8971] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 233.753703][ T8971] Buffer I/O error on dev nbd1, logical block 0, async page read [ 233.797123][ T8971] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 233.832988][ T8971] Buffer I/O error on dev nbd1, logical block 0, async page read [ 233.863901][ T8971] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 233.923876][ T8971] Buffer I/O error on dev nbd1, logical block 0, async page read [ 233.931872][ T8971] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 233.949656][ T8971] Buffer I/O error on dev nbd1, logical block 0, async page read [ 233.976083][ T8971] ldm_validate_partition_table(): Disk read failed. [ 234.014075][ T8971] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 234.023333][ T8971] Buffer I/O error on dev nbd1, logical block 0, async page read [ 234.031582][ T8971] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 234.055306][ T8971] Buffer I/O error on dev nbd1, logical block 0, async page read [ 234.063448][ T8971] Dev nbd1: unable to read RDB block 0 [ 234.094484][ T8971] nbd1: unable to read partition table [ 234.114109][ T9011] tipc: Enabling of bearer rejected, failed to enable media [ 234.194339][ T8971] ldm_validate_partition_table(): Disk read failed. [ 234.235084][ T8971] Dev nbd1: unable to read RDB block 0 [ 234.241106][ T8971] nbd1: unable to read partition table [ 234.543839][ T9021] xt_CT: No such helper "snmp" [ 234.711533][ T9029] netlink: 'syz.3.765': attribute type 1 has an invalid length. [ 234.801025][ T9032] x_tables: duplicate underflow at hook 3 [ 235.046116][ T9005] lo speed is unknown, defaulting to 1000 [ 235.709123][ T9040] x_tables: duplicate underflow at hook 3 [ 235.742248][ T9039] lo speed is unknown, defaulting to 1000 [ 235.872863][ T9047] netlink: 24 bytes leftover after parsing attributes in process `syz.4.771'. [ 235.929475][ T9047] netlink: 'syz.4.771': attribute type 2 has an invalid length. [ 235.949932][ T9047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.771'. [ 236.521510][ T9052] netlink: 'syz.2.773': attribute type 29 has an invalid length. [ 236.586573][ T9053] netlink: 'syz.2.773': attribute type 29 has an invalid length. [ 236.624888][ T9052] netlink: 'syz.2.773': attribute type 29 has an invalid length. [ 236.654151][ T9052] netlink: 'syz.2.773': attribute type 29 has an invalid length. [ 237.439287][ T9077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.785'. [ 237.462497][ T9077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.785'. [ 237.645959][ T9081] ebt_among: dst integrity fail: 101 [ 237.926011][ T9093] ebt_among: dst integrity fail: 101 [ 238.086873][ T9098] netlink: 60 bytes leftover after parsing attributes in process `syz.2.790'. [ 238.096630][ T9094] netlink: 60 bytes leftover after parsing attributes in process `syz.2.790'. [ 238.106323][ T9098] x_tables: duplicate entry at hook 1 [ 238.915912][ T9124] ebt_among: dst integrity fail: 101 [ 239.191125][ T9122] lo speed is unknown, defaulting to 1000 [ 239.676502][ T9148] ebt_among: dst integrity fail: 101 [ 239.747673][ T9150] netlink: 'syz.2.814': attribute type 29 has an invalid length. [ 239.764954][ T9150] netlink: 'syz.2.814': attribute type 29 has an invalid length. [ 239.792872][ T9150] netlink: 'syz.2.814': attribute type 29 has an invalid length. [ 239.810067][ T9150] netlink: 'syz.2.814': attribute type 29 has an invalid length. [ 239.824141][ T9152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.813'. [ 239.907583][ T9154] netlink: 'syz.4.813': attribute type 10 has an invalid length. [ 240.294190][ T9164] netlink: 16 bytes leftover after parsing attributes in process `syz.2.816'. [ 240.431638][ T9168] ebt_among: dst integrity fail: 101 [ 240.531290][ T9172] netlink: 60 bytes leftover after parsing attributes in process `syz.1.820'. [ 240.843471][ T9183] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 241.004727][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.825'. [ 241.072947][ T9193] ebt_among: dst integrity fail: 101 [ 241.154084][ T9194] netlink: 16 bytes leftover after parsing attributes in process `syz.1.827'. [ 241.660889][ T9212] tipc: Enabling of bearer rejected, failed to enable media [ 241.822593][ T9218] netlink: 'syz.4.838': attribute type 29 has an invalid length. [ 241.848838][ T9218] netlink: 'syz.4.838': attribute type 29 has an invalid length. [ 241.878513][ T9218] netlink: 'syz.4.838': attribute type 29 has an invalid length. [ 241.907493][ T9218] netlink: 'syz.4.838': attribute type 29 has an invalid length. [ 242.277362][ T9240] netlink: 'syz.3.848': attribute type 10 has an invalid length. [ 242.846836][ T9236] lo speed is unknown, defaulting to 1000 [ 243.233468][ T9243] x_tables: duplicate underflow at hook 3 [ 243.414407][ T9263] netlink: 16 bytes leftover after parsing attributes in process `syz.3.856'. [ 243.478127][ T9249] lo speed is unknown, defaulting to 1000 [ 243.777485][ T9271] 8021q: adding VLAN 0 to HW filter on device bond4 [ 243.843960][ T9271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.855567][ T9271] bond4: (slave batadv0): making interface the new active one [ 243.885973][ T9273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.858'. [ 243.886231][ T9271] bond4: (slave batadv0): Enslaving as an active interface with an up link [ 243.950391][ T9273] vlan2: entered promiscuous mode [ 243.968646][ T9273] bond4: entered promiscuous mode [ 243.974925][ T9273] batadv0: entered promiscuous mode [ 243.982978][ T9273] bond4: left promiscuous mode [ 243.995477][ T9273] batadv0: left promiscuous mode [ 244.193402][ T9278] netlink: 16 bytes leftover after parsing attributes in process `syz.4.860'. [ 244.202965][ T9252] siw: device registration error -23 [ 244.811720][ T9293] validate_nla: 5 callbacks suppressed [ 244.811742][ T9293] netlink: 'syz.4.866': attribute type 29 has an invalid length. [ 244.866429][ T9293] netlink: 'syz.4.866': attribute type 29 has an invalid length. [ 244.922973][ T9294] netlink: 'syz.4.866': attribute type 29 has an invalid length. [ 245.002774][ T9293] netlink: 'syz.4.866': attribute type 29 has an invalid length. [ 245.310803][ T9302] netlink: 16 bytes leftover after parsing attributes in process `syz.1.868'. [ 245.503602][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.870'. [ 245.535849][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.870'. [ 245.574628][ T9305] netlink: 32 bytes leftover after parsing attributes in process `syz.4.870'. [ 245.674334][ T5838] block nbd2: Receive control failed (result -107) [ 245.723869][ T9305] nbd2: detected capacity change from 0 to 256 [ 245.731707][ T8971] block nbd2: Dead connection, failed to find a fallback [ 245.743963][ T8971] block nbd2: shutting down sockets [ 245.749234][ T8971] blk_print_req_error: 27 callbacks suppressed [ 245.749251][ T8971] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.789239][ T8971] buffer_io_error: 27 callbacks suppressed [ 245.789261][ T8971] Buffer I/O error on dev nbd2, logical block 0, async page read [ 245.810712][ T8971] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.831885][ T8971] Buffer I/O error on dev nbd2, logical block 0, async page read [ 245.847706][ T9314] netlink: 76 bytes leftover after parsing attributes in process `syz.1.872'. [ 245.863918][ T8971] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.873032][ T8971] Buffer I/O error on dev nbd2, logical block 0, async page read [ 245.881505][ T9304] lo speed is unknown, defaulting to 1000 [ 245.895541][ T8971] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.910157][ T8971] Buffer I/O error on dev nbd2, logical block 0, async page read [ 245.933934][ T8971] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.956165][ T9317] netlink: 60 bytes leftover after parsing attributes in process `syz.1.872'. [ 245.978218][ T9314] netlink: 60 bytes leftover after parsing attributes in process `syz.1.872'. [ 245.979851][ T9317] x_tables: duplicate entry at hook 1 [ 245.987271][ T8971] Buffer I/O error on dev nbd2, logical block 0, async page read [ 245.987513][ T8971] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.987543][ T8971] Buffer I/O error on dev nbd2, logical block 0, async page read [ 245.987665][ T8971] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.987693][ T8971] Buffer I/O error on dev nbd2, logical block 0, async page read [ 245.987795][ T8971] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.987823][ T8971] Buffer I/O error on dev nbd2, logical block 0, async page read [ 245.987890][ T8971] ldm_validate_partition_table(): Disk read failed. [ 245.987975][ T8971] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.988001][ T8971] Buffer I/O error on dev nbd2, logical block 0, async page read [ 245.988102][ T8971] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.988130][ T8971] Buffer I/O error on dev nbd2, logical block 0, async page read [ 245.988379][ T8971] Dev nbd2: unable to read RDB block 0 [ 246.234330][ T8971] nbd2: unable to read partition table [ 246.243593][ T8971] ldm_validate_partition_table(): Disk read failed. [ 246.251205][ T8971] Dev nbd2: unable to read RDB block 0 [ 246.264271][ T8971] nbd2: unable to read partition table [ 246.368175][ T9324] netlink: 'syz.3.873': attribute type 2 has an invalid length. [ 247.151149][ T9353] netlink: 'syz.3.890': attribute type 10 has an invalid length. [ 248.797448][ T9420] __nla_validate_parse: 6 callbacks suppressed [ 248.797470][ T9420] netlink: 16 bytes leftover after parsing attributes in process `syz.1.920'. [ 249.311006][ T9440] netlink: 24 bytes leftover after parsing attributes in process `syz.3.922'. [ 249.687203][ T9439] lo speed is unknown, defaulting to 1000 [ 249.921980][ T9460] netlink: 'syz.4.939': attribute type 12 has an invalid length. [ 249.950359][ T9460] netlink: 'syz.4.939': attribute type 29 has an invalid length. [ 250.021020][ T9460] netlink: 148 bytes leftover after parsing attributes in process `syz.4.939'. [ 250.116843][ T9460] netlink: 16 bytes leftover after parsing attributes in process `syz.4.939'. [ 250.235004][ T9468] netlink: 'syz.3.942': attribute type 16 has an invalid length. [ 250.678040][ T9479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.946'. [ 250.780223][ T9482] netlink: 'syz.4.946': attribute type 10 has an invalid length. [ 251.091454][ T9492] netlink: 'syz.4.952': attribute type 12 has an invalid length. [ 251.099518][ T9492] netlink: 'syz.4.952': attribute type 29 has an invalid length. [ 251.134793][ T9492] netlink: 148 bytes leftover after parsing attributes in process `syz.4.952'. [ 251.247479][ T9497] netlink: 16 bytes leftover after parsing attributes in process `syz.4.952'. [ 251.440175][ T9505] ebt_among: dst integrity fail: 101 [ 251.538775][ T9506] netlink: 76 bytes leftover after parsing attributes in process `syz.0.957'. [ 251.625984][ T9510] netlink: 60 bytes leftover after parsing attributes in process `syz.0.957'. [ 251.631121][ T9519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.950'. [ 251.643063][ T9506] x_tables: duplicate entry at hook 1 [ 252.765634][ T9548] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 252.914802][ T9554] netlink: 'syz.4.965': attribute type 2 has an invalid length. [ 253.931768][ T9597] __nla_validate_parse: 7 callbacks suppressed [ 253.931791][ T9597] netlink: 48 bytes leftover after parsing attributes in process `syz.0.989'. [ 254.000851][ T9594] x_tables: duplicate entry at hook 1 [ 254.318584][ T9600] lo speed is unknown, defaulting to 1000 [ 254.835073][ T9611] netlink: 'syz.1.995': attribute type 10 has an invalid length. [ 255.271791][ T9630] netlink: 'syz.4.1004': attribute type 12 has an invalid length. [ 255.293776][ T9630] netlink: 'syz.4.1004': attribute type 29 has an invalid length. [ 255.316212][ T9630] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1004'. [ 255.647871][ T9637] x_tables: duplicate entry at hook 1 [ 255.813231][ T9648] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1008'. [ 256.051201][ T9654] netem: unknown loss type 0 [ 256.059477][ T9654] netem: change failed [ 256.069969][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.361110][ T9666] netlink: 'syz.0.1017': attribute type 64 has an invalid length. [ 256.488567][ T9674] netlink: 'syz.2.1019': attribute type 29 has an invalid length. [ 256.506232][ T9674] netlink: 'syz.2.1019': attribute type 29 has an invalid length. [ 256.527744][ T9674] netlink: 'syz.2.1019': attribute type 29 has an invalid length. [ 256.548287][ T9674] netlink: 'syz.2.1019': attribute type 29 has an invalid length. [ 256.557773][ T9679] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1020'. [ 257.062452][ T9697] ebt_among: dst integrity fail: 101 [ 257.211889][ T9705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.549521][ T9711] netlink: 'syz.1.1034': attribute type 29 has an invalid length. [ 257.567145][ T9716] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1032'. [ 257.581534][ T9711] netlink: 'syz.1.1034': attribute type 29 has an invalid length. [ 257.598621][ T9711] netlink: 'syz.1.1034': attribute type 29 has an invalid length. [ 257.799407][ T9723] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1038'. [ 258.086693][ T9734] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1044'. [ 258.145025][ T9736] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 258.284052][ T9740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.662208][ T9758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1054'. [ 258.928973][ T9766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1058'. [ 260.264071][ T9796] lo speed is unknown, defaulting to 1000 [ 261.128863][ T9851] ebt_among: dst integrity fail: 101 [ 261.306603][ T9850] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1085'. [ 261.415085][ T9854] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1085'. [ 261.444668][ T9850] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1085'. [ 261.445381][ T9864] validate_nla: 2 callbacks suppressed [ 261.445398][ T9864] netlink: 'syz.3.1089': attribute type 1 has an invalid length. [ 261.466988][ T9854] x_tables: duplicate entry at hook 1 [ 261.518464][ T9865] vcan1: entered allmulticast mode [ 261.674044][ T9864] 8021q: adding VLAN 0 to HW filter on device bond5 [ 261.785435][ T9863] lo speed is unknown, defaulting to 1000 [ 261.812861][ T9875] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1092'. [ 262.879855][ T9901] tun0: tun_chr_ioctl cmd 1074025677 [ 262.900091][ T9901] tun0: linktype set to 776 [ 263.110683][ T9914] netlink: 'syz.4.1109': attribute type 12 has an invalid length. [ 263.131906][ T9914] netlink: 'syz.4.1109': attribute type 29 has an invalid length. [ 263.154328][ T9914] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1109'. [ 263.282054][ T9919] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1109'. [ 263.716215][ T9938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1116'. [ 263.766817][ T9921] lo speed is unknown, defaulting to 1000 [ 264.044900][ T9949] netlink: 'syz.4.1119': attribute type 9 has an invalid length. [ 264.265711][ T9959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1123'. [ 264.313880][ T9959] netlink: 'syz.4.1123': attribute type 2 has an invalid length. [ 264.321774][ T9959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1123'. [ 264.571646][ T9966] sch_tbf: burst 3631 is lower than device lo mtu (65550) ! [ 264.572925][ T9967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1125'. [ 264.958937][ T9948] lo speed is unknown, defaulting to 1000 [ 265.364702][ T9986] syzkaller0: tun_chr_ioctl cmd 2147767511 [ 265.458632][ T9951] x_tables: duplicate underflow at hook 3 [ 265.663140][ T9992] netlink: 'syz.3.1136': attribute type 29 has an invalid length. [ 265.704762][ T9992] netlink: 'syz.3.1136': attribute type 29 has an invalid length. [ 265.722968][ T9992] netlink: 'syz.3.1136': attribute type 29 has an invalid length. [ 265.743484][ T9992] netlink: 'syz.3.1136': attribute type 29 has an invalid length. [ 266.488445][T10012] __nla_validate_parse: 5 callbacks suppressed [ 266.488469][T10012] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1144'. [ 267.121717][T10023] netlink: 'syz.2.1149': attribute type 29 has an invalid length. [ 267.137897][T10023] netlink: 'syz.2.1149': attribute type 29 has an invalid length. [ 267.147353][T10023] netlink: 'syz.2.1149': attribute type 29 has an invalid length. [ 267.174878][T10023] netlink: 'syz.2.1149': attribute type 29 has an invalid length. [ 267.300290][T10025] IPVS: persistence engine module ip_vs_pe_ not found [ 267.460418][T10034] netem: incorrect ge model size [ 267.470833][T10034] netem: change failed [ 267.841420][T10030] lo speed is unknown, defaulting to 1000 [ 267.877909][T10050] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1160'. [ 267.918469][T10050] netlink: 'syz.0.1160': attribute type 2 has an invalid length. [ 268.712314][T10074] netlink: 'syz.0.1168': attribute type 10 has an invalid length. [ 268.931720][T10083] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1174'. [ 269.065038][T10090] netlink: 'syz.3.1173': attribute type 1 has an invalid length. [ 269.282228][T10090] 8021q: adding VLAN 0 to HW filter on device bond6 [ 269.322419][T10093] vcan1: entered allmulticast mode [ 269.349825][T10106] x_tables: duplicate entry at hook 1 [ 269.389140][T10093] 8021q: adding VLAN 0 to HW filter on device bond6 [ 269.413068][T10093] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 269.434288][T10093] bond6: (slave vcan1): Error -95 calling set_mac_address [ 269.459858][T10110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.476012][T10085] lo speed is unknown, defaulting to 1000 [ 270.139850][T10129] netem: change failed [ 270.730129][T10140] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1189'. [ 270.931696][T10148] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1195'. [ 271.375640][T10157] x_tables: duplicate entry at hook 1 [ 271.435175][T10146] lo speed is unknown, defaulting to 1000 [ 272.069972][T10171] netlink: 'syz.3.1206': attribute type 10 has an invalid length. [ 272.346696][T10178] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1208'. [ 272.847116][T10186] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1207'. [ 272.934692][T10186] netlink: 'syz.1.1207': attribute type 2 has an invalid length. [ 272.948895][T10192] ebt_among: dst integrity fail: 101 [ 272.993964][T10186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1207'. [ 273.334611][T10196] ebt_among: dst integrity fail: 101 [ 274.270790][T10222] x_tables: duplicate entry at hook 1 [ 274.296459][T10223] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1221'. [ 274.302562][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1219'. [ 274.341124][T10220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1219'. [ 274.374063][T10220] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1219'. [ 274.464977][ T5838] block nbd3: Receive control failed (result -107) [ 274.552363][T10220] nbd3: detected capacity change from 0 to 256 [ 274.594627][T10037] block nbd3: Dead connection, failed to find a fallback [ 274.625035][T10214] lo speed is unknown, defaulting to 1000 [ 274.634088][T10037] block nbd3: shutting down sockets [ 274.642889][T10037] blk_print_req_error: 27 callbacks suppressed [ 274.642909][T10037] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 274.680662][T10037] buffer_io_error: 27 callbacks suppressed [ 274.680683][T10037] Buffer I/O error on dev nbd3, logical block 0, async page read [ 274.696078][T10037] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 274.717186][T10037] Buffer I/O error on dev nbd3, logical block 0, async page read [ 274.735686][T10037] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 274.759582][T10037] Buffer I/O error on dev nbd3, logical block 0, async page read [ 274.778986][T10037] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 274.956224][T10037] Buffer I/O error on dev nbd3, logical block 0, async page read [ 274.984533][T10037] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 275.025727][T10037] Buffer I/O error on dev nbd3, logical block 0, async page read [ 275.045451][T10037] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 275.062240][T10037] Buffer I/O error on dev nbd3, logical block 0, async page read [ 275.096339][T10037] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 275.159953][T10037] Buffer I/O error on dev nbd3, logical block 0, async page read [ 275.174030][T10037] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 275.179646][T10245] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1227'. [ 275.202463][T10037] Buffer I/O error on dev nbd3, logical block 0, async page read [ 275.210778][T10037] ldm_validate_partition_table(): Disk read failed. [ 275.220962][T10037] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 275.244041][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1228'. [ 275.255630][T10037] Buffer I/O error on dev nbd3, logical block 0, async page read [ 275.305184][T10037] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 275.344096][T10037] Buffer I/O error on dev nbd3, logical block 0, async page read [ 275.352583][T10037] Dev nbd3: unable to read RDB block 0 [ 275.385309][T10037] nbd3: unable to read partition table [ 275.390914][T10251] ebt_among: dst integrity fail: 101 [ 275.409463][T10037] ldm_validate_partition_table(): Disk read failed. [ 275.428170][T10037] Dev nbd3: unable to read RDB block 0 [ 275.450879][T10037] nbd3: unable to read partition table [ 276.327433][T10276] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1237'. [ 276.375598][T10280] netlink: 'syz.1.1238': attribute type 10 has an invalid length. [ 276.434936][T10281] x_tables: duplicate entry at hook 1 [ 277.050349][T10315] syz.3.1250[10315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.050462][T10315] syz.3.1250[10315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.079217][T10316] tun0: tun_chr_ioctl cmd 1074025675 [ 277.090559][T10315] syz.3.1250[10315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.108723][T10316] tun0: persist enabled [ 277.160685][T10316] tun0: tun_chr_ioctl cmd 1074025675 [ 277.186623][T10316] tun0: persist enabled [ 277.480821][T10334] __nla_validate_parse: 3 callbacks suppressed [ 277.480843][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1260'. [ 277.582766][T10339] netlink: 428 bytes leftover after parsing attributes in process `syz.3.1262'. [ 277.912519][T10350] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1264'. [ 278.299248][T10367] bridge_slave_0: left allmulticast mode [ 278.311202][T10367] bridge_slave_0: left promiscuous mode [ 278.326542][T10367] : port 1(bridge_slave_0) entered disabled state [ 278.355573][T10367] bridge_slave_1: left allmulticast mode [ 278.361685][T10367] bridge_slave_1: left promiscuous mode [ 278.404522][T10367] : port 2(bridge_slave_1) entered disabled state [ 278.442780][T10367] bond0: (slave bond_slave_0): Releasing backup interface [ 278.476454][T10367] bond0: (slave bond_slave_1): Releasing backup interface [ 278.499029][T10367] team0: Port device team_slave_0 removed [ 278.521189][T10367] team0: Port device team_slave_1 removed [ 278.968077][T10389] netlink: 'syz.1.1278': attribute type 1 has an invalid length. [ 279.083867][T10389] 8021q: adding VLAN 0 to HW filter on device bond2 [ 279.139212][T10393] vcan1: entered allmulticast mode [ 279.246210][T10393] 8021q: adding VLAN 0 to HW filter on device bond2 [ 279.264051][T10393] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 279.289493][T10393] bond2: (slave vcan1): Error -95 calling set_mac_address [ 279.330078][T10386] lo speed is unknown, defaulting to 1000 [ 279.345045][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1284'. [ 279.532782][T10411] netlink: 'syz.0.1286': attribute type 10 has an invalid length. [ 280.168147][T10427] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1290'. [ 280.229969][T10433] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1293'. [ 280.942469][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1301'. [ 280.981895][T10456] netlink: 'syz.2.1301': attribute type 22 has an invalid length. [ 281.014921][T10456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1301'. [ 281.321606][T10450] lo speed is unknown, defaulting to 1000 [ 281.823717][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1309'. [ 281.965424][T10472] lo speed is unknown, defaulting to 1000 [ 282.602606][T10475] x_tables: duplicate underflow at hook 3 [ 282.839193][T10476] siw: device registration error -23 [ 283.022424][T10518] ebt_among: dst integrity fail: 101 [ 283.193061][T10523] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1326'. [ 284.230405][T10554] netlink: 'syz.0.1335': attribute type 2 has an invalid length. [ 284.957005][T10578] netlink: 'syz.2.1343': attribute type 1 has an invalid length. [ 285.144481][T10578] 8021q: adding VLAN 0 to HW filter on device bond3 [ 285.186482][T10581] vcan1: entered allmulticast mode [ 285.233283][T10581] 8021q: adding VLAN 0 to HW filter on device bond3 [ 285.256842][T10581] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 285.271934][T10591] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1341'. [ 285.296335][T10581] bond3: (slave vcan1): Error -95 calling set_mac_address [ 285.362711][T10575] lo speed is unknown, defaulting to 1000 [ 285.404510][T10591] netlink: 'syz.3.1341': attribute type 2 has an invalid length. [ 285.414817][T10591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1341'. [ 285.885676][T10603] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1349'. [ 285.941063][T10603] netlink: 'syz.4.1349': attribute type 2 has an invalid length. [ 285.988442][T10603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1349'. [ 286.038086][T10608] syzkaller1: entered promiscuous mode [ 286.049038][T10608] syzkaller1: entered allmulticast mode [ 286.297266][T10614] syzkaller1: entered promiscuous mode [ 286.302813][T10614] syzkaller1: entered allmulticast mode [ 286.753054][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1361'. [ 286.932260][T10627] syzkaller1: entered promiscuous mode [ 286.938713][T10627] syzkaller1: entered allmulticast mode [ 287.952005][T10663] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1376'. [ 289.341191][T10700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1388'. [ 289.363547][T10700] netlink: 'syz.2.1388': attribute type 2 has an invalid length. [ 289.383791][T10700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1388'. [ 290.120511][T10718] lo speed is unknown, defaulting to 1000 [ 290.608273][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1405'. [ 290.944612][T10751] netlink: 'syz.0.1409': attribute type 10 has an invalid length. [ 291.073192][T10719] siw: device registration error -23 [ 291.095969][T10757] ip6tnl2: entered promiscuous mode [ 291.106135][T10757] ip6tnl2: entered allmulticast mode [ 291.471097][T10772] netlink: 'syz.4.1417': attribute type 1 has an invalid length. [ 291.571533][T10772] 8021q: adding VLAN 0 to HW filter on device bond1 [ 291.625630][T10778] vcan1: entered allmulticast mode [ 291.700604][T10778] 8021q: adding VLAN 0 to HW filter on device bond1 [ 291.717219][T10778] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 291.748532][T10778] bond1: (slave vcan1): Error -95 calling set_mac_address [ 291.820053][T10768] lo speed is unknown, defaulting to 1000 [ 292.114785][T10799] netlink: 'syz.3.1425': attribute type 10 has an invalid length. [ 292.435093][T10809] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1429'. [ 292.870259][T10815] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1433'. [ 294.841221][T10878] ebt_among: dst integrity fail: 101 [ 294.859872][T10880] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1454'. [ 295.360922][T10903] netlink: 'syz.2.1460': attribute type 10 has an invalid length. [ 295.675791][T10913] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1463'. [ 295.811408][T10914] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1464'. [ 295.874200][T10919] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1464'. [ 295.883482][T10914] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1464'. [ 295.894104][T10919] x_tables: duplicate entry at hook 1 [ 295.984039][T10924] syz.4.1467[10924] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.984162][T10924] syz.4.1467[10924] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 296.009735][T10924] syz.4.1467[10924] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 296.023506][T10926] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1470'. [ 296.435871][T10939] lo: entered allmulticast mode [ 296.459361][T10939] lo: left allmulticast mode [ 296.494914][T10940] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1474'. [ 296.504379][T10922] lo speed is unknown, defaulting to 1000 [ 296.685172][T10946] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1476'. [ 296.731622][T10949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1479'. [ 296.788546][T10954] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1478'. [ 297.128733][T10960] ebt_among: dst integrity fail: 101 [ 297.148148][T10964] trusted_key: syz.3.1483 sent an empty control message without MSG_MORE. [ 297.505522][T10966] siw: device registration error -23 [ 299.077395][T11015] ebt_among: dst integrity fail: 101 [ 299.214708][T11017] macvtap1: entered promiscuous mode [ 299.230391][T11017] erspan0: entered promiscuous mode [ 299.248356][T11017] macvtap1: entered allmulticast mode [ 299.255529][T11017] erspan0: entered allmulticast mode [ 299.384808][T11019] erspan0: left allmulticast mode [ 299.394347][T11019] erspan0: left promiscuous mode [ 299.453885][T10999] lo speed is unknown, defaulting to 1000 [ 299.575240][T11007] x_tables: duplicate underflow at hook 3 [ 299.721560][T11023] x_tables: duplicate underflow at hook 3 [ 300.004072][T11004] lo speed is unknown, defaulting to 1000 [ 300.524074][T11036] __nla_validate_parse: 5 callbacks suppressed [ 300.524098][T11036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1504'. [ 300.783012][T11026] lo speed is unknown, defaulting to 1000 [ 300.783872][T11042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1506'. [ 301.289027][T11027] siw: device registration error -23 [ 302.641139][T11071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1516'. [ 303.014307][T11079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1519'. [ 303.133255][T11082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1521'. [ 304.188370][T11098] lo speed is unknown, defaulting to 1000 [ 304.530998][T11123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1536'. [ 304.552624][T11124] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1529'. [ 304.573760][T11124] netlink: 'syz.2.1529': attribute type 2 has an invalid length. [ 304.644329][T11124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1529'. [ 305.105380][T11112] lo speed is unknown, defaulting to 1000 [ 305.284291][T11099] x_tables: duplicate underflow at hook 3 [ 305.492082][T11134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1537'. [ 305.683731][T11134] netlink: 'syz.0.1537': attribute type 2 has an invalid length. [ 305.713863][T11134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1537'. [ 306.064068][T11145] siw: device registration error -23 [ 307.196763][T11177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1549'. [ 307.232568][T11177] netlink: 'syz.0.1549': attribute type 2 has an invalid length. [ 307.253004][T11177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1549'. [ 307.418402][T11185] netlink: 'syz.3.1553': attribute type 1 has an invalid length. [ 307.642215][T11185] 8021q: adding VLAN 0 to HW filter on device bond7 [ 307.729970][T11188] vcan1: entered allmulticast mode [ 307.767811][T11188] 8021q: adding VLAN 0 to HW filter on device bond7 [ 307.784307][T11188] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 307.798786][T11188] bond7: (slave vcan1): Error -95 calling set_mac_address [ 307.822829][T11182] lo speed is unknown, defaulting to 1000 [ 308.315044][T11196] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1555'. [ 308.348245][T11196] netlink: 'syz.0.1555': attribute type 2 has an invalid length. [ 308.388753][T11196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1555'. [ 308.947469][T11215] netlink: 'syz.3.1561': attribute type 10 has an invalid length. [ 309.229445][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1562'. [ 309.515016][T11230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1567'. [ 309.732684][T11241] x_tables: duplicate entry at hook 1 [ 309.784151][T11243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1572'. [ 310.095773][T11258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1574'. [ 310.465627][T11266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1579'. [ 310.568773][T11247] lo speed is unknown, defaulting to 1000 [ 310.932763][T11278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1583'. [ 310.990914][T11259] x_tables: duplicate underflow at hook 3 [ 311.290039][T11255] lo speed is unknown, defaulting to 1000 [ 311.360717][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1585'. [ 311.391033][T11291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1585'. [ 311.417790][T11291] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1585'. [ 311.518056][ T5838] block nbd4: Receive control failed (result -107) [ 311.563792][T11291] nbd4: detected capacity change from 0 to 256 [ 311.599405][T10037] block nbd4: Dead connection, failed to find a fallback [ 311.608131][T10037] block nbd4: shutting down sockets [ 311.613376][T10037] blk_print_req_error: 27 callbacks suppressed [ 311.613389][T10037] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 311.636912][T10037] buffer_io_error: 27 callbacks suppressed [ 311.636934][T10037] Buffer I/O error on dev nbd4, logical block 0, async page read [ 311.652737][T10037] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 311.662230][T10037] Buffer I/O error on dev nbd4, logical block 0, async page read [ 311.675114][T10037] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 311.684478][T10037] Buffer I/O error on dev nbd4, logical block 0, async page read [ 311.692989][T10037] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 311.702567][T10037] Buffer I/O error on dev nbd4, logical block 0, async page read [ 311.718763][T10037] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 311.730678][T10037] Buffer I/O error on dev nbd4, logical block 0, async page read [ 311.749935][T10037] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 311.759684][T10037] Buffer I/O error on dev nbd4, logical block 0, async page read [ 311.768612][T10037] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 311.778127][T10037] Buffer I/O error on dev nbd4, logical block 0, async page read [ 311.787284][T10037] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 311.796607][T10037] Buffer I/O error on dev nbd4, logical block 0, async page read [ 311.807868][T11282] siw: device registration error -23 [ 311.814360][T10037] ldm_validate_partition_table(): Disk read failed. [ 311.821209][T10037] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 311.882461][T10037] Buffer I/O error on dev nbd4, logical block 0, async page read [ 311.911659][T10037] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 311.924086][T10037] Buffer I/O error on dev nbd4, logical block 0, async page read [ 311.948299][T10037] Dev nbd4: unable to read RDB block 0 [ 311.965929][T10037] nbd4: unable to read partition table [ 311.980957][T10037] ldm_validate_partition_table(): Disk read failed. [ 311.989387][T10037] Dev nbd4: unable to read RDB block 0 [ 311.996361][T10037] nbd4: unable to read partition table [ 312.032202][T11288] lo speed is unknown, defaulting to 1000 [ 313.195623][T11311] x_tables: duplicate underflow at hook 3 [ 313.536910][T11302] lo speed is unknown, defaulting to 1000 [ 313.564661][T11317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1594'. [ 313.714304][T11319] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1595'. [ 314.039919][T11333] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1599'. [ 314.157858][T11336] dccp_invalid_packet: P.Data Offset(0) too small [ 314.503268][T11340] tipc: Started in network mode [ 314.515283][T11340] tipc: Node identity 36ee60afb05e, cluster identity 4711 [ 314.523414][T11340] tipc: Enabled bearer , priority 0 [ 314.590325][T11340] syzkaller0: entered promiscuous mode [ 314.603699][T11340] syzkaller0: entered allmulticast mode [ 314.610147][T11340] tipc: Resetting bearer [ 314.650076][T11344] netlink: 'syz.3.1603': attribute type 10 has an invalid length. [ 314.669962][T11339] tipc: Resetting bearer [ 315.523937][ T8240] tipc: Node number set to 2259706031 [ 316.009171][T11360] sctp: [Deprecated]: syz.2.1607 (pid 11360) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.009171][T11360] Use struct sctp_sack_info instead [ 317.278125][T11339] tipc: Disabling bearer [ 317.521923][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.020145][T11368] lo speed is unknown, defaulting to 1000 [ 318.086902][T11386] syzkaller1: entered promiscuous mode [ 318.099548][T11386] syzkaller1: entered allmulticast mode [ 318.490909][T11391] x_tables: duplicate underflow at hook 3 [ 318.516953][T11372] lo speed is unknown, defaulting to 1000 [ 319.049551][T11383] siw: device registration error -23 [ 320.410600][T11422] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 320.420534][T11422] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 320.593185][T11424] vlan2: entered promiscuous mode [ 320.598763][T11424] vlan2: entered allmulticast mode [ 320.882819][T11434] syzkaller0: entered promiscuous mode [ 320.888676][T11434] syzkaller0: entered allmulticast mode [ 321.477241][T11440] xt_bpf: check failed: parse error [ 322.533186][T11458] x_tables: duplicate underflow at hook 3 [ 323.488691][T11450] hsr0: entered promiscuous mode [ 323.494948][T11450] hsr0: left promiscuous mode [ 323.510667][T11454] hsr_slave_0: left promiscuous mode [ 323.518629][T11454] hsr_slave_1: left promiscuous mode [ 323.857974][T11466] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1640'. [ 323.908236][T11466] batadv3: entered promiscuous mode [ 323.913522][T11466] batadv3: entered allmulticast mode [ 323.965523][T11456] lo speed is unknown, defaulting to 1000 [ 324.141408][T11470] tipc: Enabled bearer , priority 0 [ 324.211425][T11471] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1637'. [ 324.231539][T11470] syzkaller0: entered promiscuous mode [ 324.246725][T11470] syzkaller0: entered allmulticast mode [ 324.261043][T11470] tipc: Resetting bearer [ 324.290604][T11471] netlink: 'syz.2.1637': attribute type 2 has an invalid length. [ 324.323766][T11471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1637'. [ 324.379543][T11469] tipc: Resetting bearer [ 327.026089][T11469] tipc: Disabling bearer [ 327.036248][T11463] lo speed is unknown, defaulting to 1000 [ 327.408052][T11480] siw: device registration error -23 [ 327.475710][T11506] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1649'. [ 327.634527][T11510] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1649'. [ 327.650712][T11506] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1649'. [ 327.664697][T11510] x_tables: duplicate entry at hook 1 [ 327.806701][T11513] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1652'. [ 328.937595][T11539] netlink: 'syz.1.1663': attribute type 20 has an invalid length. [ 329.076775][T11543] x_tables: duplicate entry at hook 1 [ 329.256612][T11552] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1666'. [ 329.786636][T11567] nr2: entered allmulticast mode [ 329.808174][T11569] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1673'. [ 329.817538][T11569] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1673'. [ 329.836591][T11569] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1673'. [ 329.864728][T11569] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1673'. [ 329.994117][T11577] x_tables: duplicate underflow at hook 1 [ 330.291852][T11575] lo speed is unknown, defaulting to 1000 [ 330.791037][T11584] lo speed is unknown, defaulting to 1000 [ 330.942343][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1683'. [ 331.166688][T11595] x_tables: duplicate underflow at hook 3 [ 331.352569][T11588] lo speed is unknown, defaulting to 1000 [ 331.440040][T11603] x_tables: duplicate entry at hook 1 [ 331.560652][T11612] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1685'. [ 332.007426][T11594] siw: device registration error -23 [ 332.033996][T11585] siw: device registration error -23 [ 333.818416][T11630] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 335.049231][T11652] IPVS: Scheduler module ip_vs_sip not found [ 335.620689][T11688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1710'. [ 335.645611][T11688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1710'. [ 335.710853][T11687] x_tables: duplicate entry at hook 1 [ 335.874590][T11676] lo speed is unknown, defaulting to 1000 [ 336.012081][T11695] syzkaller0: entered promiscuous mode [ 336.031607][T11695] syzkaller0: entered allmulticast mode [ 337.134255][T11713] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1717'. [ 338.885460][T11725] netlink: 'syz.2.1722': attribute type 1 has an invalid length. [ 338.893280][T11725] netlink: 'syz.2.1722': attribute type 2 has an invalid length. [ 338.943433][T11727] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1720'. [ 338.997673][T11729] set match dimension is over the limit! [ 339.126999][T11729] pim6reg: entered allmulticast mode [ 339.384938][T11733] netlink: 'syz.2.1724': attribute type 27 has an invalid length. [ 339.663971][T11739] x_tables: duplicate entry at hook 1 [ 339.960867][T11748] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1728'. [ 339.984326][T11748] netlink: 'syz.3.1728': attribute type 1 has an invalid length. [ 340.258934][T11752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1729'. [ 340.419145][T11754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1730'. [ 340.490028][T11754] vlan2: entered promiscuous mode [ 340.506378][T11754] syz_tun: entered promiscuous mode [ 340.535037][T11754] syz_tun: left promiscuous mode [ 340.859977][T11765] bridge0: port 1(syz_tun) entered blocking state [ 340.872945][T11765] bridge0: port 1(syz_tun) entered disabled state [ 340.885306][T11765] syz_tun: entered allmulticast mode [ 340.915174][T11765] syz_tun: entered promiscuous mode [ 341.146558][T11777] netlink: 'syz.1.1737': attribute type 27 has an invalid length. [ 341.660175][T11789] x_tables: duplicate entry at hook 1 [ 342.122660][T11798] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1744'. [ 342.399687][T11808] syzkaller0: entered promiscuous mode [ 342.425558][T11808] syzkaller0: entered allmulticast mode [ 342.675908][T11814] xt_CT: No such helper "syz0" [ 345.123419][T11825] netlink: 'syz.2.1751': attribute type 27 has an invalid length. [ 345.380590][T11840] netlink: 'syz.1.1755': attribute type 9 has an invalid length. [ 345.541268][T11847] dummy0: entered promiscuous mode [ 345.584242][T11847] macvtap1: entered promiscuous mode [ 345.598390][T11848] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1758'. [ 345.630848][T11847] dummy0: left promiscuous mode [ 345.915460][T11830] lo speed is unknown, defaulting to 1000 [ 346.801959][T11877] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1764'. [ 346.875702][T11878] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1764'. [ 346.931804][T11877] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1764'. [ 347.024511][T11884] x_tables: duplicate entry at hook 1 [ 347.138121][T11887] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1762'. [ 347.214255][T11887] netlink: 'syz.0.1762': attribute type 2 has an invalid length. [ 347.274645][T11887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1762'. [ 347.486701][T11891] netlink: 'syz.2.1766': attribute type 27 has an invalid length. [ 347.914072][T11906] Bluetooth: MGMT ver 1.23 [ 348.281741][T11920] sctp: [Deprecated]: syz.0.1772 (pid 11920) Use of int in max_burst socket option deprecated. [ 348.281741][T11920] Use struct sctp_assoc_value instead [ 348.464371][T11919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1772'. [ 349.440925][T11945] ebt_among: dst integrity fail: 101 [ 350.005992][T11959] netlink: 'syz.0.1780': attribute type 10 has an invalid length. [ 350.716940][T11985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1788'. [ 351.071763][T11994] vlan1: mtu greater than device maximum [ 351.088251][ T8] IPVS: starting estimator thread 0... [ 351.138968][T11997] netlink: 'syz.3.1792': attribute type 10 has an invalid length. [ 351.157481][T11997] bridge0: port 1(syz_tun) entered blocking state [ 351.164149][T11997] bridge0: port 1(syz_tun) entered listening state [ 351.183411][T11997] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 351.183980][T11995] IPVS: using max 18 ests per chain, 43200 per kthread [ 351.218308][T11997] tipc: Started in network mode [ 351.240561][T11997] tipc: Node identity 7, cluster identity 1 [ 351.247756][T11997] tipc: Node number set to 7 [ 351.508374][T11999] xt_CT: No such helper "snmp" [ 351.576357][T12011] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1797'. [ 351.592976][T12009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1796'. [ 351.781022][T12017] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1800'. [ 351.954120][T12025] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1801'. [ 352.791515][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1808'. [ 352.882562][T12039] lo speed is unknown, defaulting to 1000 [ 352.926976][T12046] vlan2: entered promiscuous mode [ 353.893941][T12069] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1815'. [ 354.074405][T12069] netlink: 'syz.0.1815': attribute type 4 has an invalid length. [ 354.651186][T12075] xt_TCPMSS: Only works on TCP SYN packets [ 354.693315][T12082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1819'. [ 355.013741][T12093] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1821'. [ 355.035920][T12093] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1821'. [ 355.522879][T12110] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1824'. [ 355.617316][T12114] macsec1: entered promiscuous mode [ 355.622749][T12114] syz_tun: entered promiscuous mode [ 355.662345][T12114] syz_tun: left promiscuous mode [ 355.798135][T12117] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 356.425631][T12139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1837'. [ 356.444032][T12139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1837'. [ 356.649195][T12125] lo speed is unknown, defaulting to 1000 [ 356.999391][T12134] lo speed is unknown, defaulting to 1000 [ 357.204163][T12151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1838'. [ 357.239330][T12151] netlink: 'syz.0.1838': attribute type 2 has an invalid length. [ 357.274375][T12151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1838'. [ 359.732463][T12184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1849'. [ 360.416815][T12206] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1856'. [ 360.439046][T12207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1855'. [ 360.735559][T12192] lo speed is unknown, defaulting to 1000 [ 360.867526][T12221] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1857'. [ 360.903324][T12221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1857'. [ 360.931642][T12221] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1857'. [ 360.959171][T12221] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1857'. [ 361.041547][T12208] lo speed is unknown, defaulting to 1000 [ 361.768638][T12248] netlink: 'syz.1.1864': attribute type 39 has an invalid length. [ 361.793879][ T8238] IPVS: starting estimator thread 0... [ 361.906827][T12250] IPVS: using max 18 ests per chain, 43200 per kthread [ 361.946474][T12253] netlink: 'syz.1.1865': attribute type 8 has an invalid length. [ 362.040421][T12197] siw: device registration error -23 [ 362.423519][T12264] netlink: 'syz.0.1868': attribute type 1 has an invalid length. [ 362.448547][T12255] syzkaller0: entered promiscuous mode [ 362.454329][T12255] syzkaller0: entered allmulticast mode [ 362.481856][T12264] netlink: 'syz.0.1868': attribute type 1 has an invalid length. [ 362.617267][T12266] netlink: 'syz.1.1867': attribute type 10 has an invalid length. [ 362.702896][T12266] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1867'. [ 362.724547][T12271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1868'. [ 365.023388][T12266] veth0_vlan: left promiscuous mode [ 365.029039][T12266] veth0_vlan: entered promiscuous mode [ 365.034804][T12266] veth0_vlan: entered allmulticast mode [ 365.042803][T12266] : port 1(veth0_vlan) entered blocking state [ 365.050176][T12266] : port 1(veth0_vlan) entered disabled state [ 365.059391][T12266] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 365.080647][T12271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.089125][T12271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.132250][T12271] team0: Port device batadv0 removed [ 365.283322][T12277] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1869'. [ 365.612115][T12289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1871'. [ 365.697130][T12285] 8021q: adding VLAN 0 to HW filter on device bond4 [ 365.712648][T12285] bond0: (slave bond4): Enslaving as an active interface with a down link [ 365.816815][T12298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1874'. [ 365.817033][T12297] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1870'. [ 366.095105][T12297] netlink: 'syz.2.1870': attribute type 2 has an invalid length. [ 366.111861][T12297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1870'. [ 366.607856][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.617541][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.666888][T12319] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 366.687657][T12320] netlink: 'syz.2.1880': attribute type 1 has an invalid length. [ 366.727308][T12320] vcan1: entered allmulticast mode [ 366.795536][ C1] bridge0: port 1(syz_tun) entered learning state [ 366.841920][T12318] lo speed is unknown, defaulting to 1000 [ 367.586545][T12335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1883'. [ 368.668636][T12334] lo speed is unknown, defaulting to 1000 [ 368.728836][T12363] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 368.817486][T12364] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1891'. [ 369.123395][T12355] siw: device registration error -23 [ 369.388606][T12353] lo speed is unknown, defaulting to 1000 [ 369.759261][T12344] lo speed is unknown, defaulting to 1000 [ 371.739764][T12398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1897'. [ 371.809024][T12398] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1897'. [ 372.143948][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 373.467191][T12416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1899'. [ 373.505582][T12419] sctp: [Deprecated]: syz.1.1901 (pid 12419) Use of int in max_burst socket option deprecated. [ 373.505582][T12419] Use struct sctp_assoc_value instead [ 373.713381][T12415] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1901'. [ 373.811230][T12428] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1899'. [ 373.853759][T12428] nbd: must specify at least one socket [ 374.209466][T12445] veth1_to_bridge: entered promiscuous mode [ 374.305906][T12447] dvmrp5: entered allmulticast mode [ 374.377027][T12446] dvmrp5: left allmulticast mode [ 374.419251][T12435] delete_channel: no stack [ 374.672644][T12456] netlink: 'syz.1.1911': attribute type 4 has an invalid length. [ 374.710833][T12456] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1911'. [ 375.115330][T12476] sctp: [Deprecated]: syz.2.1914 (pid 12476) Use of int in max_burst socket option deprecated. [ 375.115330][T12476] Use struct sctp_assoc_value instead [ 375.179516][T12473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1914'. [ 375.370233][T12456] lo speed is unknown, defaulting to 1000 [ 375.475419][T12491] netlink: 'syz.0.1919': attribute type 10 has an invalid length. [ 375.496454][ T29] audit: type=1107 audit(1738238253.665:4): pid=12486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='/u%ſ;/yLke2koUh.*d)Q$þ*m~a&g"$f_Af{ Z/CkSD' [ 375.577568][T12494] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1917'. [ 375.587677][T12494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1917'. [ 375.597837][T12494] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1917'. [ 375.975289][T12466] ipt_rpfilter: unknown options [ 376.141281][T12489] lo speed is unknown, defaulting to 1000 [ 376.913939][T12511] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 376.923626][T12511] bridge0: port 1(syz_tun) entered disabled state [ 376.943350][T12528] __nla_validate_parse: 3 callbacks suppressed [ 376.943372][T12528] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1924'. [ 376.980392][T12511] bond0 (unregistering): Released all slaves [ 377.118703][T12528] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1924'. [ 377.130576][T12537] x_tables: duplicate entry at hook 1 [ 377.136645][T12532] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1924'. [ 378.243885][T12565] sctp: [Deprecated]: syz.2.1928 (pid 12565) Use of int in max_burst socket option deprecated. [ 378.243885][T12565] Use struct sctp_assoc_value instead [ 378.454425][T12568] x_tables: duplicate underflow at hook 3 [ 378.810074][T12543] lo speed is unknown, defaulting to 1000 [ 378.946875][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.286644][T12555] lo speed is unknown, defaulting to 1000 [ 379.329372][T12585] netlink: 'syz.1.1930': attribute type 10 has an invalid length. [ 379.530515][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1932'. [ 379.667620][T12593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1931'. [ 380.133354][T12601] bond0 (unregistering): Error: No native XDP support for the current bonding mode [ 380.160695][T12601] ------------[ cut here ]------------ [ 380.166423][T12601] WARNING: CPU: 1 PID: 12601 at net/core/dev.c:9824 unregister_netdevice_many_notify+0x1a40/0x2030 [ 380.177402][T12601] Modules linked in: [ 380.181420][T12601] CPU: 1 UID: 0 PID: 12601 Comm: syz.1.1933 Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 380.191979][T12601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 380.202155][T12601] RIP: 0010:unregister_netdevice_many_notify+0x1a40/0x2030 [ 380.209682][T12601] Code: 02 f8 90 0f 0b 90 e9 5e ff ff ff e8 8a 30 02 f8 90 0f 0b 90 eb a8 e8 7f 30 02 f8 90 0f 0b 90 e9 2c f2 ff ff e8 71 30 02 f8 90 <0f> 0b 90 e9 9b f3 ff ff e8 63 30 02 f8 90 0f 0b 90 e9 0b f5 ff ff [ 380.229702][T12601] RSP: 0018:ffffc900039e6fa0 EFLAGS: 00010283 [ 380.235889][T12601] RAX: ffffffff899d2c6f RBX: 00000000ffffffa1 RCX: 0000000000080000 [ 380.243978][T12601] RDX: ffffc90010f35000 RSI: 00000000000031e4 RDI: 00000000000031e5 [ 380.252002][T12601] RBP: ffffc900039e7190 R08: ffffffff899d2006 R09: 1ffff9200073cd20 [ 380.260192][T12601] R10: dffffc0000000000 R11: fffff5200073cd21 R12: ffffc90004aa5000 [ 380.268436][T12601] R13: 1ffff1102896c986 R14: ffff888144b64c30 R15: ffff888144b64c28 [ 380.276534][T12601] FS: 00007f1c37f896c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 380.285570][T12601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 380.292296][T12601] CR2: 0000001b30318ff8 CR3: 000000004bc0e000 CR4: 00000000003526f0 [ 380.300431][T12601] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 380.308545][T12601] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 380.316624][T12601] Call Trace: [ 380.319933][T12601] [ 380.322914][T12601] ? __warn+0x165/0x4d0 [ 380.327187][T12601] ? unregister_netdevice_many_notify+0x1a40/0x2030 [ 380.333881][T12601] ? report_bug+0x2b3/0x500 [ 380.338439][T12601] ? unregister_netdevice_many_notify+0x1a40/0x2030 [ 380.345188][T12601] ? handle_bug+0x60/0x90 [ 380.349578][T12601] ? exc_invalid_op+0x1a/0x50 [ 380.354388][T12601] ? asm_exc_invalid_op+0x1a/0x20 [ 380.359482][T12601] ? unregister_netdevice_many_notify+0xdd6/0x2030 [ 380.366144][T12601] ? unregister_netdevice_many_notify+0x1a3f/0x2030 [ 380.372804][T12601] ? unregister_netdevice_many_notify+0x1a40/0x2030 [ 380.379566][T12601] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 380.386485][T12601] ? rtnl_dellink+0x394/0x8d0 [ 380.391217][T12601] ? unregister_netdevice_queue+0x26b/0x370 [ 380.397251][T12601] ? __nla_parse+0x40/0x60 [ 380.401713][T12601] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 380.408123][T12601] rtnl_dellink+0x52b/0x8d0 [ 380.412680][T12601] ? __pfx_rtnl_dellink+0x10/0x10 [ 380.417799][T12601] ? validate_chain+0x11e/0x5920 [ 380.422782][T12601] ? __pfx_lock_acquire+0x10/0x10 [ 380.427918][T12601] ? __pfx_lock_release+0x10/0x10 [ 380.433045][T12601] ? __pfx_rtnl_dellink+0x10/0x10 [ 380.438183][T12601] rtnetlink_rcv_msg+0x791/0xcf0 [ 380.443165][T12601] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 380.448430][T12601] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 380.454056][T12601] netlink_rcv_skb+0x1e3/0x430 [ 380.458875][T12601] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 380.464570][T12601] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 380.469920][T12601] ? netlink_deliver_tap+0x2e/0x1b0 [ 380.475479][T12601] netlink_unicast+0x7f6/0x990 [ 380.480364][T12601] ? __pfx_netlink_unicast+0x10/0x10 [ 380.485771][T12601] ? __virt_addr_valid+0x45f/0x530 [ 380.490921][T12601] ? __phys_addr_symbol+0x2f/0x70 [ 380.496047][T12601] ? __check_object_size+0x47a/0x730 [ 380.501383][T12601] netlink_sendmsg+0x8e4/0xcb0 [ 380.506415][T12601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.511764][T12601] ? aa_sock_msg_perm+0x91/0x160 [ 380.516835][T12601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.522196][T12601] __sock_sendmsg+0x221/0x270 [ 380.527052][T12601] ____sys_sendmsg+0x52a/0x7e0 [ 380.531879][T12601] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.537297][T12601] ? __fget_files+0x2a/0x410 [ 380.541952][T12601] ? __fget_files+0x2a/0x410 [ 380.546726][T12601] __sys_sendmsg+0x269/0x350 [ 380.551387][T12601] ? __pfx_futex_wake+0x10/0x10 [ 380.556400][T12601] ? __pfx___sys_sendmsg+0x10/0x10 [ 380.561617][T12601] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 380.568112][T12601] ? do_syscall_64+0x100/0x230 [ 380.572935][T12601] ? do_syscall_64+0xb6/0x230 [ 380.577743][T12601] do_syscall_64+0xf3/0x230 [ 380.582301][T12601] ? clear_bhb_loop+0x35/0x90 [ 380.587104][T12601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.593067][T12601] RIP: 0033:0x7f1c3718cda9 [ 380.597638][T12601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.619648][T12601] RSP: 002b:00007f1c37f89038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.628255][T12601] RAX: ffffffffffffffda RBX: 00007f1c373a6320 RCX: 00007f1c3718cda9 [ 380.636348][T12601] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000008 [ 380.644771][T12601] RBP: 00007f1c3720e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 380.652796][T12601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.660897][T12601] R13: 0000000000000000 R14: 00007f1c373a6320 R15: 00007ffef9e6c6c8 [ 380.669005][T12601] [ 380.672084][T12601] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 380.679418][T12601] CPU: 1 UID: 0 PID: 12601 Comm: syz.1.1933 Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 380.689879][T12601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 380.699964][T12601] Call Trace: [ 380.703252][T12601] [ 380.706194][T12601] dump_stack_lvl+0x241/0x360 [ 380.710897][T12601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.716116][T12601] ? __pfx__printk+0x10/0x10 [ 380.720722][T12601] ? _printk+0xd5/0x120 [ 380.724896][T12601] ? __init_begin+0x41000/0x41000 [ 380.729939][T12601] ? vscnprintf+0x5d/0x90 [ 380.734291][T12601] panic+0x349/0x880 [ 380.738204][T12601] ? __warn+0x174/0x4d0 [ 380.742375][T12601] ? __pfx_panic+0x10/0x10 [ 380.746821][T12601] __warn+0x344/0x4d0 [ 380.750813][T12601] ? unregister_netdevice_many_notify+0x1a40/0x2030 [ 380.757426][T12601] report_bug+0x2b3/0x500 [ 380.761790][T12601] ? unregister_netdevice_many_notify+0x1a40/0x2030 [ 380.768404][T12601] handle_bug+0x60/0x90 [ 380.772572][T12601] exc_invalid_op+0x1a/0x50 [ 380.777089][T12601] asm_exc_invalid_op+0x1a/0x20 [ 380.781953][T12601] RIP: 0010:unregister_netdevice_many_notify+0x1a40/0x2030 [ 380.789173][T12601] Code: 02 f8 90 0f 0b 90 e9 5e ff ff ff e8 8a 30 02 f8 90 0f 0b 90 eb a8 e8 7f 30 02 f8 90 0f 0b 90 e9 2c f2 ff ff e8 71 30 02 f8 90 <0f> 0b 90 e9 9b f3 ff ff e8 63 30 02 f8 90 0f 0b 90 e9 0b f5 ff ff [ 380.808815][T12601] RSP: 0018:ffffc900039e6fa0 EFLAGS: 00010283 [ 380.814896][T12601] RAX: ffffffff899d2c6f RBX: 00000000ffffffa1 RCX: 0000000000080000 [ 380.822883][T12601] RDX: ffffc90010f35000 RSI: 00000000000031e4 RDI: 00000000000031e5 [ 380.830865][T12601] RBP: ffffc900039e7190 R08: ffffffff899d2006 R09: 1ffff9200073cd20 [ 380.838848][T12601] R10: dffffc0000000000 R11: fffff5200073cd21 R12: ffffc90004aa5000 [ 380.846838][T12601] R13: 1ffff1102896c986 R14: ffff888144b64c30 R15: ffff888144b64c28 [ 380.854840][T12601] ? unregister_netdevice_many_notify+0xdd6/0x2030 [ 380.861379][T12601] ? unregister_netdevice_many_notify+0x1a3f/0x2030 [ 380.868019][T12601] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 380.874806][T12601] ? rtnl_dellink+0x394/0x8d0 [ 380.879928][T12601] ? unregister_netdevice_queue+0x26b/0x370 [ 380.885845][T12601] ? __nla_parse+0x40/0x60 [ 380.890269][T12601] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 380.896530][T12601] rtnl_dellink+0x52b/0x8d0 [ 380.901048][T12601] ? __pfx_rtnl_dellink+0x10/0x10 [ 380.906087][T12601] ? validate_chain+0x11e/0x5920 [ 380.911041][T12601] ? __pfx_lock_acquire+0x10/0x10 [ 380.916079][T12601] ? __pfx_lock_release+0x10/0x10 [ 380.921193][T12601] ? __pfx_rtnl_dellink+0x10/0x10 [ 380.926236][T12601] rtnetlink_rcv_msg+0x791/0xcf0 [ 380.931184][T12601] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 380.936309][T12601] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 380.941801][T12601] netlink_rcv_skb+0x1e3/0x430 [ 380.946616][T12601] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 380.952107][T12601] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 380.957445][T12601] ? netlink_deliver_tap+0x2e/0x1b0 [ 380.962678][T12601] netlink_unicast+0x7f6/0x990 [ 380.967482][T12601] ? __pfx_netlink_unicast+0x10/0x10 [ 380.972780][T12601] ? __virt_addr_valid+0x45f/0x530 [ 380.977910][T12601] ? __phys_addr_symbol+0x2f/0x70 [ 380.982950][T12601] ? __check_object_size+0x47a/0x730 [ 380.988255][T12601] netlink_sendmsg+0x8e4/0xcb0 [ 380.993048][T12601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.998354][T12601] ? aa_sock_msg_perm+0x91/0x160 [ 381.003317][T12601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.008619][T12601] __sock_sendmsg+0x221/0x270 [ 381.013306][T12601] ____sys_sendmsg+0x52a/0x7e0 [ 381.018105][T12601] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.023490][T12601] ? __fget_files+0x2a/0x410 [ 381.028198][T12601] ? __fget_files+0x2a/0x410 [ 381.032810][T12601] __sys_sendmsg+0x269/0x350 [ 381.037421][T12601] ? __pfx_futex_wake+0x10/0x10 [ 381.042291][T12601] ? __pfx___sys_sendmsg+0x10/0x10 [ 381.047461][T12601] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 381.053802][T12601] ? do_syscall_64+0x100/0x230 [ 381.058583][T12601] ? do_syscall_64+0xb6/0x230 [ 381.063273][T12601] do_syscall_64+0xf3/0x230 [ 381.067789][T12601] ? clear_bhb_loop+0x35/0x90 [ 381.072491][T12601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.078400][T12601] RIP: 0033:0x7f1c3718cda9 [ 381.082830][T12601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.102453][T12601] RSP: 002b:00007f1c37f89038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.110906][T12601] RAX: ffffffffffffffda RBX: 00007f1c373a6320 RCX: 00007f1c3718cda9 [ 381.118894][T12601] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000008 [ 381.126878][T12601] RBP: 00007f1c3720e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 381.134866][T12601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.142842][T12601] R13: 0000000000000000 R14: 00007f1c373a6320 R15: 00007ffef9e6c6c8 [ 381.150837][T12601] [ 381.154218][T12601] Kernel Offset: disabled [ 381.158551][T12601] Rebooting in 86400 seconds..