last executing test programs: 3m44.004065822s ago: executing program 3 (id=7633): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x11, &(0x7f0000000000), 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c45f57755f9cfd7749e8bd064000000", @ANYRES16=0x0, @ANYBLOB="240826bd7000fddbdf25020000000800020002000000080002000200000008000200020000000800010003000000080002000200000008000200020000000800020002000000080001000200000008000200020000000800020002000000"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000080)={'bridge_slave_0\x00', @random="0131be7839ff"}) 3m43.807388709s ago: executing program 3 (id=7635): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x16}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf20}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x16}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf20}, 0x94) (async) 3m43.649060283s ago: executing program 3 (id=7640): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x112}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x61, "b16f45ad5a85aa766a6d5fb68ede70f4c119abc938e49265189def126f8877480909be58f1da0fa2166ddafdf8772f95d0da4c12fd69c11e7eea9f4cfbf5b29a1be603013fafcf13eb82f82a974efa6ab5455dbb7965cd5a46e7412bac0c37e25d"}, &(0x7f00000001c0)=0x69) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r2, 0x80}, &(0x7f0000000280)=0x8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3m43.368066544s ago: executing program 3 (id=7644): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1b0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff2, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) (async) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000000c0), 0x4) (async) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000440)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000240)="270502001c0014000300002fb96db4f7babe05000700810005008100", 0x1c}, {&(0x7f0000000280)="991b0d9e9def56e4bbdf", 0xa}], 0x2}, 0x30040805) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x6, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3m43.100022438s ago: executing program 3 (id=7652): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x50) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r7) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@bloom_filter={0x1e, 0x0, 0x1f, 0x0, 0x1005}, 0x48) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) r10 = socket(0xa, 0x3, 0x87) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r12, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x4ffbbfeb}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xfffffffa}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x80}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xfffff474}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xfffffff9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000000)={@mcast2, 0x1, r13}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) 3m42.297012166s ago: executing program 3 (id=7660): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x26, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, 0x0, 0x5}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) socket$netlink(0x10, 0x3, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711093000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 3m27.25266892s ago: executing program 32 (id=7660): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x26, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, 0x0, 0x5}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) socket$netlink(0x10, 0x3, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711093000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m40.188944443s ago: executing program 2 (id=8137): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000800)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_FLOW={0x8, 0x18, 0x3}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x2c}}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) read$nci(r2, 0x0, 0xfe24) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000080095"], &(0x7f0000000040)='GPL\x00'}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32=r7, @ANYBLOB="110000b83a675700", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r7, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x5b, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000200), &(0x7f0000000300), 0x8, 0x8e, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x10, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, r6, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2m36.887888405s ago: executing program 2 (id=8151): r0 = socket(0x2a, 0x2, 0x0) syz_emit_ethernet(0x14, &(0x7f0000002e00)={@random="25f0504a4e97", @local, @void, {@llc={0x4, {@llc={0x0, 0xf4, "bf", "cd7015"}}}}}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000015c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_TCP_SRC={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f0000000000)) 2m36.695390656s ago: executing program 2 (id=8155): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r0, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 2m36.376724549s ago: executing program 2 (id=8161): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xe) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, 0x4) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00'}, 0x18) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0x5}, 0xc) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x1ff80, 0x6, 0x7, 0x10005, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbc3, 0x0, 0x0, 0x0, 0x14000}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @sk_reuseport=0x28, r1, 0x8, &(0x7f0000000100)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0xa, 0x6, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x6, &(0x7f0000000380)=[r2, r3, 0x1, r4, r5, 0xffffffffffffffff, r6], &(0x7f00000003c0)=[{0x2, 0x1, 0x4, 0x9}, {0x0, 0x1, 0xe, 0x7}, {0x5, 0x1, 0x8, 0x8}, {0x3, 0x1, 0x3, 0x2}, {0x3, 0x3, 0xb, 0x6}, {0x0, 0x5, 0xa, 0xa}], 0x10, 0x7fff}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x4, '\x00', 0x0, r1, 0x1, 0x5, 0x1}, 0x50) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r7, 0x40086e81, &(0x7f0000000580)=0x2) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x501c40, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000600)={'pimreg1\x00', @local}) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x781f, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50) r10 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000800)={r9, &(0x7f00000006c0)="bbb8d0788259f465806ae0101b0ecc234dd2bdc639a14542777e397be6bc4b6f1134a6c4b938ad10877a02ff160ef1f016d9379f1a1c63c58f04abd5b75899e46d5c438e8fd7ea8e734b39c61dd5edfd571b3c0965f133badd09e9344bddd48b7b0c592ba33c6520587c7784a453c05a78de5b6f2e050d8d486daae1f98e586ecf553c4f97375019fdd87abed1d25cb681770048d34cf8ad0d8759bf052fa8d82653b09e4d508be85d4b670367510a417aa41326220b7cf211a6c97d417565a9df358a99697633204f135aebf81bfc134151ccc267d2a0b91d712da2", &(0x7f00000007c0)=@udp=r10}, 0x20) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000000840)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r1) (async) ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x4) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x8010, r6, 0xb6cc9000) ioctl$int_in(r7, 0x5452, &(0x7f00000008c0)=0x4) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e20, 0x9b05, @loopback, 0x10000}}, 0x101, 0x973f}, &(0x7f00000009c0)=0x90) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000a00)={r11, 0x5, 0x7, 0x8, 0x6, 0x7}, 0x14) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000a40)=0x9) (async) close(r9) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={r2}, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b80)={r1, 0x20, &(0x7f0000000b40)={&(0x7f0000000ac0)=""/15, 0xf, 0x0, &(0x7f0000000b00)=""/60, 0x3c}}, 0x10) 2m36.113838051s ago: executing program 2 (id=8166): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x2, 0x4) listen(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000003c0)={0x6, 0x35, 0x8205, 0xc42a, 0xd, 0x9b45, 0x4, 0xfffffff8}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002100210107000000000000000a000000000000000000000008001a"], 0x24}}, 0x4004000) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0xffff, @any, 0x4, 0x1}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r9, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000104000000000000000d00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100697036746e6c00000400028008002000feffffff"], 0x3c}}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000000c0)=0x100) close(r8) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x8, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xe}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xf}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x6, 0x6, 0x9, 0x1, 0x54, 0x101, 0x4}}, {0xc, 0x2, [0x7f, 0x8792, 0x6, 0x62]}}]}]}, 0x60}}, 0x24000814) 2m35.582179404s ago: executing program 2 (id=8178): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000001914019e"], 0x10}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002600010004bdf000fddbdf2505000000e40f8bb0011cbbc1ba76511e2d20f98d044b439803c23d5053ba35146ca6f490fc300f7334181c1ace2fedc60ecc3ebb3fb970498cfa940f6d2464b2591199b2fb454260dfede085c6aabb5a8dfb941af16203f5abbc885e163024c3e0f29a5b25b3fb4e557f1f26b55b52840ada52a3cbefb50ff5c43ba8a0525c7e982bf0ab27c8a0c41ca5e244e6ff90ea724b02b39f"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async, rerun: 32) r3 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003340), 0xffffffffffffffff) (rerun: 64) recvmmsg(r3, &(0x7f0000009900)=[{{&(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000008c0)=""/185, 0xb9}, {&(0x7f0000000980)=""/199, 0xc7}, {&(0x7f0000000a80)=""/120, 0x78}], 0x3, &(0x7f0000000b40)}, 0x20c4}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/35, 0x23}], 0x2}, 0x9d7d}, {{&(0x7f0000003200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000003380)=[{&(0x7f0000003280)=""/153, 0x99}], 0x1}, 0x340}, {{&(0x7f00000033c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003540)=[{&(0x7f0000003440)=""/33, 0x21}, {&(0x7f0000003480)=""/166, 0xa6}], 0x2, &(0x7f0000003580)=""/169, 0xa9}, 0x4}, {{0x0, 0x0, &(0x7f0000004bc0)=[{&(0x7f0000003640)=""/37, 0x25}, {&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000004680)=""/252, 0xfc}, {&(0x7f0000004780)=""/112, 0x70}, {&(0x7f0000004800)=""/202, 0xca}, {&(0x7f0000004900)=""/136, 0x88}, {&(0x7f00000049c0)=""/220, 0xdc}, {&(0x7f0000004ac0)=""/108, 0x6c}, {&(0x7f0000004b40)=""/98, 0x62}], 0x9, &(0x7f0000004c80)=""/207, 0xcf}, 0x8}, {{&(0x7f0000004d80)=@x25, 0x80, &(0x7f0000006100)=[{&(0x7f0000004e00)=""/43, 0x2b}, {&(0x7f0000004e40)=""/127, 0x7f}, {&(0x7f0000004ec0)=""/119, 0x77}, {&(0x7f0000004f40)=""/4096, 0x1000}, {&(0x7f0000005f40)=""/245, 0xf5}, {&(0x7f0000006040)=""/133, 0x85}], 0x6, &(0x7f0000006180)=""/48, 0x30}, 0x3}, {{&(0x7f00000061c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000006480)=[{&(0x7f0000006240)=""/4, 0x4}, {&(0x7f0000006280)=""/199, 0xc7}, {&(0x7f0000006380)=""/228, 0xe4}], 0x3, &(0x7f00000064c0)}, 0xff}, {{&(0x7f0000006500)=@generic, 0x80, &(0x7f0000008880)=[{&(0x7f0000006580)=""/195, 0xc3}, {&(0x7f0000006680)=""/4096, 0x1000}, {&(0x7f0000007680)=""/4096, 0x1000}, {&(0x7f0000008680)=""/106, 0x6a}, {&(0x7f0000008700)=""/172, 0xac}, {&(0x7f00000087c0)=""/176, 0xb0}], 0x6, &(0x7f0000008900)=""/4096, 0x1000}, 0x24}], 0x8, 0x10023, &(0x7f0000009b00)={0x0, 0x989680}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x28, r4, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x404c095}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001fc0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)={0x20, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x80d4) (async) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c884881", @ANYRES16=r8, @ANYBLOB="080026bd7000fddbdf25070000000800050002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x48810) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f00000004c0)=ANY=[@ANYBLOB="78030000", @ANYRES16=r9, @ANYBLOB="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"], 0x378}, 0x1, 0x0, 0x0, 0x20c14c2c0534520}, 0x800) 2m20.515124887s ago: executing program 33 (id=8178): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000001914019e"], 0x10}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002600010004bdf000fddbdf2505000000e40f8bb0011cbbc1ba76511e2d20f98d044b439803c23d5053ba35146ca6f490fc300f7334181c1ace2fedc60ecc3ebb3fb970498cfa940f6d2464b2591199b2fb454260dfede085c6aabb5a8dfb941af16203f5abbc885e163024c3e0f29a5b25b3fb4e557f1f26b55b52840ada52a3cbefb50ff5c43ba8a0525c7e982bf0ab27c8a0c41ca5e244e6ff90ea724b02b39f"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async, rerun: 32) r3 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003340), 0xffffffffffffffff) (rerun: 64) recvmmsg(r3, &(0x7f0000009900)=[{{&(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000008c0)=""/185, 0xb9}, {&(0x7f0000000980)=""/199, 0xc7}, {&(0x7f0000000a80)=""/120, 0x78}], 0x3, &(0x7f0000000b40)}, 0x20c4}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/35, 0x23}], 0x2}, 0x9d7d}, {{&(0x7f0000003200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000003380)=[{&(0x7f0000003280)=""/153, 0x99}], 0x1}, 0x340}, {{&(0x7f00000033c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003540)=[{&(0x7f0000003440)=""/33, 0x21}, {&(0x7f0000003480)=""/166, 0xa6}], 0x2, &(0x7f0000003580)=""/169, 0xa9}, 0x4}, {{0x0, 0x0, &(0x7f0000004bc0)=[{&(0x7f0000003640)=""/37, 0x25}, {&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000004680)=""/252, 0xfc}, {&(0x7f0000004780)=""/112, 0x70}, {&(0x7f0000004800)=""/202, 0xca}, {&(0x7f0000004900)=""/136, 0x88}, {&(0x7f00000049c0)=""/220, 0xdc}, {&(0x7f0000004ac0)=""/108, 0x6c}, {&(0x7f0000004b40)=""/98, 0x62}], 0x9, &(0x7f0000004c80)=""/207, 0xcf}, 0x8}, {{&(0x7f0000004d80)=@x25, 0x80, &(0x7f0000006100)=[{&(0x7f0000004e00)=""/43, 0x2b}, {&(0x7f0000004e40)=""/127, 0x7f}, {&(0x7f0000004ec0)=""/119, 0x77}, {&(0x7f0000004f40)=""/4096, 0x1000}, {&(0x7f0000005f40)=""/245, 0xf5}, {&(0x7f0000006040)=""/133, 0x85}], 0x6, &(0x7f0000006180)=""/48, 0x30}, 0x3}, {{&(0x7f00000061c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000006480)=[{&(0x7f0000006240)=""/4, 0x4}, {&(0x7f0000006280)=""/199, 0xc7}, {&(0x7f0000006380)=""/228, 0xe4}], 0x3, &(0x7f00000064c0)}, 0xff}, {{&(0x7f0000006500)=@generic, 0x80, &(0x7f0000008880)=[{&(0x7f0000006580)=""/195, 0xc3}, {&(0x7f0000006680)=""/4096, 0x1000}, {&(0x7f0000007680)=""/4096, 0x1000}, {&(0x7f0000008680)=""/106, 0x6a}, {&(0x7f0000008700)=""/172, 0xac}, {&(0x7f00000087c0)=""/176, 0xb0}], 0x6, &(0x7f0000008900)=""/4096, 0x1000}, 0x24}], 0x8, 0x10023, &(0x7f0000009b00)={0x0, 0x989680}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x28, r4, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x404c095}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001fc0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)={0x20, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x80d4) (async) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c884881", @ANYRES16=r8, @ANYBLOB="080026bd7000fddbdf25070000000800050002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x48810) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f00000004c0)=ANY=[@ANYBLOB="78030000", @ANYRES16=r9, @ANYBLOB="000225bd7000ffdbdf25050000000800090004000000080009000c00000054030380800003803c0001801400020024265d2d3d7b5c2d3a5c2d275b32270004000300080001000ef6f3450400030004000300080001000008000008000100060000000c0001800800010008000000340001800c000200686173683a6970000c0002005d235e2a40262100080001000f060000080001000400000008000100825e937ce00003801c0001800c000200657468746f6f6c000c000200686173683a69700034000180040003000800010000000000040003000800010003000000040003000800010001000100090002004950565300000000180f01800400030008000100848a0000080001004c0b0000300001800800010003000000080001002000000008000100fcffffff0800010002000000080001000a000000040003004400018008000100010000000900020073797a300000000004000300080001000700000009000200766c616e0000000004000300050002000000000008000100040000003c00038004000180340001800400030004000300040003000900020049505653000000000400030008000100000000000a000200776c616e300000005c000380480001800400030008000100020000000a000200776c616e30000000040003000c000200686173683a697000080001000600000008000100000000000c000200657468746f6f6c00100001800400030008000100090000000800020001000000780003802c00018008000100070000000c0002006e6c383032313100080001000500000009000200766c616e000000001000018009000200766c616e0000000038000180080001000600000008000100000000000400030008000100060000000800010002000000080001000400000008000100040000005100040082770b37e124c7c6fef68e1dd1b91645a54ceb0df80862ec3b8c28aaa0401045d50ce7ac8300f246fb6fddd589d28ee3cbac7114d4abd019fe86998decf3d8c4fc994ae10db9da7793a2a77fda0000008100040016804fa6611716de404ace7bd250a1f6f14d3beea097ce1bc5c600d2c6233ba83204dbe32c0487a5354211a061ef4f8d88663b027965d94b5523fb9a2d0ef50949d1605f1dcd1081839a7f088de2c013ab4ae38fa18d600075d08ffc9148e6c9dc81b22900cbcabd1a4866c2d9dace609867be6cf0273ef1a2e208d957000000"], 0x378}, 0x1, 0x0, 0x0, 0x20c14c2c0534520}, 0x800) 32.225086924s ago: executing program 1 (id=9434): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0xd, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x50000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x5460, 0x96b5376b91506d81) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0xb8, 0x43, 0x107, 0xfffffffd, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x14a}, @nested={0xa0, 0x1, 0x0, 0x1, [@nested={0x9c, 0x129, 0x0, 0x1, [@generic="5a5d82cf", @nested={0x89, 0xa8, 0x0, 0x1, [@generic="61fef901a3223f8425eabb0fb47319b3a099cabd5b5bd36ca78d9715f905fe129e76517489717c4f7ded3ce5e8ddac662f6e4b0e9646050611e128daca7052bfcc7aa9b2eec25a6ac6dafe", @nested={0x4, 0x2e}, @generic="156be09d72c63c3fbf6146fd7d6ee7", @generic="bc080db12eb141ed8d6af59e15c733e5ae5fcebde94a75e5f78b94916a6e77", @typed={0x8, 0x63, 0x0, 0x0, @fd=r5}]}, @nested={0x8, 0x4f, 0x0, 0x1, [@typed={0x4, 0x116}]}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0xc000) 30.925077756s ago: executing program 1 (id=9448): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) recvmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000a40)=""/4072, 0xfe8}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) 30.560278551s ago: executing program 1 (id=9452): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4a, &(0x7f0000000ac0)={0xff00, 0x0}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000020000100d9a68d415c91acc68000000000000000000a000000000000000000000008000d00000000000500160008000000"], 0x2c}}, 0x0) 30.323757762s ago: executing program 1 (id=9456): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x24}}, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="a247625f4ff4b28244fd9ab11b8da2ced373890d1bbaf644971f59a24755b8edc522f72c4a48b57a0ff105e317480739aff90660b9f56259ed9bc44bff4d38346ba082ba08aaa539bee8bae6cfee8ae0e720af56a7", 0x55}], 0x1}}], 0x1, 0x24048084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000301010400000000000000000a00000004000180"], 0x18}}, 0x0) 30.220689611s ago: executing program 1 (id=9458): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000005, 0x42073, 0xffffffffffffffff, 0xd7775000) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf252100000009001f0070687930000000000500200001000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8080) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xe373b684d2526e78, 0x1000}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308000300", @ANYRES8=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 29.743855502s ago: executing program 1 (id=9463): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_vlan\x00', 0x1000}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@gettaction={0x114, 0x32, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20048014}, 0x80) (async) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000280), 0x4) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0)={0x0, 0x62, "e3d63abcd1776d91582605aeb92f1b64266798e19770fe53cc44e5ebd5350059903e51d7441087e155a69f2da5adf5877189b767903d87ff9045b1a30fd9cff6bd95db84ee76abb07396edb7a889620e8c8d9815be7a41981b87ac7682de44cafe8d"}, &(0x7f0000000340)=0x6a) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000400)={r2, 0x48, &(0x7f0000000380)=[@in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e21, 0x5, @private2, 0x9}, @in6={0xa, 0x4e20, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, &(0x7f0000000440)=0x10) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000600)={{r0, &(0x7f0000000480)='\\](!{4+&)%**\x00', 0x42900, &(0x7f00000004c0)={@_ha_fsid={[0x1, 0x800]}, {0x4, 0xa644, 0x101, 0x3}}, 0x0, &(0x7f0000000500)={@_ha_fsid}, &(0x7f0000000540)=0x5}, {[0x3, 0xfffff768, 0xff, 0x4]}, 0x4, 0x4f, &(0x7f0000000580)=""/79}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f00000008c0)=[0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x55, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0xf4, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b80), 0x4) (async) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000c80)=@generic={&(0x7f0000000c40)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)}, 0x20) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000dc0)=@o_path={&(0x7f0000000d80)='./file0\x00', 0x0, 0x4018, r0}, 0x18) (async) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e40)=@generic={&(0x7f0000000e00)='./file0\x00'}, 0x18) (async) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000f00), &(0x7f0000000f40)='%-5lx \x00'}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x9, 0x16, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffb2af, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000800)='GPL\x00', 0x7, 0x1e, &(0x7f0000000840)=""/30, 0x41100, 0x10, '\x00', r5, @cgroup_sock=0xe, r6, 0x8, &(0x7f0000000bc0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c00)={0x5, 0x6, 0x9, 0x7ff}, 0x10, 0xffffffffffffffff, r7, 0x5, &(0x7f0000000fc0)=[r8, r9, r10, r11, r12], &(0x7f0000001000)=[{0x2, 0x2, 0x7, 0x9}, {0x1, 0x3, 0x10, 0xb}, {0x0, 0x4, 0x8, 0xb}, {0x3, 0x1, 0x10, 0x1}, {0x2, 0x2, 0x2, 0x4}]}, 0x94) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000001140)=0xe, 0x4) (async) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000001180)={r2, @in6={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6155fc15}}}, 0x84) (async) ppoll(&(0x7f0000001240)=[{r11, 0x501}, {r13, 0x1308}, {r11, 0x601}, {r1}], 0x4, &(0x7f0000001280)={0x77359400}, &(0x7f00000012c0)={[0x4]}, 0x8) ioctl$XFS_IOC_FSCOUNTS(r11, 0x80205871, &(0x7f0000001300)) (async) r14 = socket(0x7, 0x5, 0x3) (async) r15 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r15, 0x28, 0x1, &(0x7f0000001340), 0x8) bind$inet6(r14, &(0x7f0000001380)={0xa, 0x4e23, 0x4, @local, 0x400}, 0x1c) (async) ioctl$TUNSETOWNER(r3, 0x400454cc, 0xee01) (async) r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x54, r16, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffa}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x48800) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000015c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r5, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) 7.331619546s ago: executing program 6 (id=9559): r0 = socket(0x40000000015, 0x56d86c87c6cfe6a0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@private=0xa010102, 0x0, 0x5, 0x0, 0x3, 0x2, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x2, 0xa04, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0xa, @in6=@local, 0x0, 0x0, 0x3, 0x8, 0x49, 0x4}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x409, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r4, &(0x7f00000040c0)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000000180)=""/143, 0x8f}, {&(0x7f0000000240)=""/6, 0x6}, {&(0x7f0000000280)=""/42, 0x2a}, {&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f00000005c0)=""/214, 0xd6}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/14, 0xe}, {&(0x7f0000003e40)=""/219, 0xdb}], 0x8, &(0x7f0000003fc0)=""/200, 0xc8}, 0x2000) socket$key(0xf, 0x3, 0x2) r5 = socket$kcm(0xa, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000001300)={'nat\x00', 0x0, [0x5, 0x88980000, 0x2, 0x7, 0xa]}, &(0x7f0000000140)=0x54) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0x1, 0x58, &(0x7f0000000380)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={r7, 0x8}, 0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000740)={0x0, 0x80, "136f6cd603e5741edab35230e66900bcb2119de20947e1c6a844d04736d7d15072490192501e9c87d70057b69bd8e629effd5d0ce4dedeeec498a70c146fc77a2fbae9a4391f669c94cf090b3ea2dd6e621f05f8f65802756445ac3231c89fffb793d150816639794bf9faae152f404d846a8d63bf78b32bc34d2605d55aee51"}, &(0x7f0000000800)=0x88) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000840)={r8, 0x3}, 0x8) sendmsg$rds(0xffffffffffffffff, &(0x7f0000005580)={&(0x7f0000000700)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000005500)=[{&(0x7f0000004100)=""/4096, 0x1000}, {&(0x7f0000005100)=""/55, 0x37}, {&(0x7f0000005140)=""/79, 0x4f}, {&(0x7f00000051c0)=""/80, 0x50}, {&(0x7f0000005240)=""/166, 0xa6}, {&(0x7f0000005300)=""/194, 0xc2}, {&(0x7f0000005400)=""/241, 0xf1}], 0x7, 0x0, 0x0, 0x20040090}, 0x0) sendmsg$kcm(r5, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x6, @local, 0x7}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x240280d1) 6.249652723s ago: executing program 6 (id=9567): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000006000000180900002020642500000000002320207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000069a0fcff0000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e16}, 0x94) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-7'], 0x9) 6.020407842s ago: executing program 6 (id=9569): recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$bt_l2cap(r0, &(0x7f0000000980)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) 5.788396569s ago: executing program 6 (id=9573): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x10) (async) r3 = socket$netlink(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in=@remote, @in=@local}}, {{@in6=@private2}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000440007012bbd7000fedbdf25037c00000400c2800c00018008008400", @ANYRES32=r5, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r6, @ANYBLOB="2fe29592f2dec87220e9d2663fe35a55c72f79d0d3"], 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e20, 0x2, 0xcd}}, 0x44) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={0x0}}, 0x4040000) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58020000", @ANYRES16=r1, @ANYBLOB="050407bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0x258}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'vlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'vlan1\x00'}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x800442d2, &(0x7f0000000340)={0x2, &(0x7f0000000100)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @broadcast}]}) 5.348909311s ago: executing program 6 (id=9577): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0xc, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000140)=0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000a030000000000000061"], 0x0, 0x5a}, 0x20) getsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) 5.167720961s ago: executing program 6 (id=9579): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYRESOCT], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000800)={{r0, &(0x7f0000000180)='\x00', 0x100, &(0x7f00000001c0)={@_ha_fsid={[0x3, 0x7]}, {0x9, 0x3ff, 0x2}}, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x9}, 0x4, &(0x7f0000000780)=[{0x3, 0xde, &(0x7f0000000280)='\x00', &(0x7f00000003c0)="451bbf499e223842c6387a4cd6216a87bdb688f93975bb3feeee60a250f233604c0f250a082b6b8a320e0a33c25a1e686c6ca6c97522bbf6115e78247c31f6a5fd027196f324b90777c894b7575d2a61b6368383686debddb65133b79aa6b0f887f0bd3b0548b3b5a8470cab52dc00421778b0f19d619069081f03b03ef3020d4ff38123e7ce797ebd606c9aa258e778b59828c589f159be0a36518add88d04886d8d461e0c5f514d25ffd5b3d30e6d1cf858086bca439a6e0eb8e437b4593e1f59c4135ab9476b74bb987a49fa2f198", 0xd0, 0x8}, {0x2, 0xa, &(0x7f00000004c0)='\x00', &(0x7f0000000500)="2e1b7636eb96c4b865dd6b8eae9bd7612d6bb6817a3af271c2f5ecee5e4f0829bbcc6f3456e692291aa45d73aa265e9eab5e6dda7951242d92eab61885a924adae2c55c8be9a229eea917ba796cf1c16a334b2d776ca986d7177f5e50c52382525b574fb9d0d77a2eb4d3413c8b9e09bc1f777dea5937129b1daec0f12ed563e393e044603b300dbf6f25d62145fea9834b0cc035b4093312a6d", 0x9a, 0x10}, {0x2, 0x0, &(0x7f00000005c0)='&@&\x00', &(0x7f0000000600), 0x0, 0x38}, {0x3, 0x2, &(0x7f0000000640)='\x00', &(0x7f0000000740)="05c7b626fed7ac97d7c45e80", 0xc, 0x30}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r4, @ANYBLOB="0100000000070000000009000000780003800800030004000000060007004e21000014000600fc010600000000010000000000000001060007004e20000008000100010000001400020076657468315f746f5f7465616d000000050008000100000008000500e0"], 0x8c}}, 0x0) socket$rds(0x15, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100000000000000000008"], 0x14}], 0x1}, 0x0) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x4}, 0x10) socket(0x10, 0x803, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000180)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) (async) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000180)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup=r2, 0x8, 0x1, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup=r2, 0x8, 0x1, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 2.124281349s ago: executing program 4 (id=9596): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000264c514c0000000000000085cd0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.084493112s ago: executing program 5 (id=9597): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="e500000000000000791048000000fbff790438008da3fbbeb3308a0095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc4, &(0x7f0000000440)=""/196, 0x0, 0x2, '\x00', 0x0, @sk_msg}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="e500000000000000791048000000fbff790438008da3fbbeb3308a0095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc4, &(0x7f0000000440)=""/196, 0x0, 0x2, '\x00', 0x0, @sk_msg}, 0x94) (async) 1.951283585s ago: executing program 4 (id=9598): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x5}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x13}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xa}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x80}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x4}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xfe}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x4}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0xd7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r2, &(0x7f0000000400)=[{{&(0x7f0000000280)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f00000002c0)="56cd276cdc73faff563336a8c24010f31aca741f5c04b0bd1e712c98440efc33938abcdd1ae265b7f91850e66ea87223bb69a9b09f7586600e2e29be65bda9dca02207e797ac0705abc837df5be8afd41ece12beeb5931f32f82ac4ee9e9e72341a1fca4bdbe9b6d5cc6c82b4d803c4a386bd2b14275b2b80b42684b07c871d69168c17e26780ee5e7f4349eba571d8324545714a2f5d8ecae9f6d9268f69d505916cea232", 0xa5}], 0x1, &(0x7f00000003c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x18}}], 0x1, 0x8800) ioctl$XFS_IOC_GETBMAPX(r2, 0xc0205838, &(0x7f0000000440)={0x7, 0x306d, 0xffffffff00000000, 0x2, 0x4, 0x3d}) r3 = socket$inet(0x2, 0x4be5445e9b6d27cc, 0x9) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000480)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000700)=[{&(0x7f00000004c0)="0ac02dc2913a792fae93737c77c14fc772078b34dd86ae9789167981b9848e45af8d4f877bda78f6230d872f2066080d78d7cacefbbfc65ef335d9a7a77ca1a1a7a684479e6b800079fd97d9ef90310724d4e5235d98179e2007fe2d0cb2fb399d023e02290493364e8c18a756bfd477d6470f9840ccaaa66b20cb67fbdf5f9499f3e82ce700ad051aae3bb7e5b11793d0395f0fbe0870ec3d889cfb143ddf56fd4bce9b57281ac9d0eb76626d35072624d0f487a9fec687fa44f571eee92d3a0e06079b020b9e5bb40fc19df19f69fdaf884efbfc2dedd029d78b561255a4e62b3ffee4e4448cf5cd1984", 0xeb}, {&(0x7f00000005c0)="3735e60a0776db871330359ea9b4f42d124e4aa2de56039082878000d480132e50bd67494fdbbafbd81f859b444e3df4e997f18268efec15ec4e10b9dbe6c136681599ec0c0099129fef017cc111c8ff5c79b2cbd450b04ae5885267d41a4ebb2a67fb0be2911a0e272656462503b5628a305d580a8de69ea80ab8eb7c1e8a1062b9580e2ed7463700c6c9d949f5c238258c71ef98f607e93ece62d5c97c067166bfa2c71da791a4aa89a63cb5224f91b91c3e99703e6aa6b7440a", 0xbb}, {&(0x7f0000000680)="e66e6ed3857ff71d8540103d0a72e71a202bd07583ea991fd4293a10c06616a7b3639be645506f53a2ca7d75ec1cd03fc369ad4fe4a3bcedb5534b71f57e2f9ff9072e9194caad904ddbe1dd4fe4e827289fa496589d6d507924e8", 0x5b}], 0x3, &(0x7f0000000740)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x18}}, {{&(0x7f0000000780)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000800)=[{&(0x7f00000007c0)}], 0x1, &(0x7f0000000840)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd41}}], 0x48}}, {{&(0x7f00000008c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000900)="a2521eca38abc37a8de699bfa6352829cd73cc943dd6b9cac39dc50529fd37e88ce81394353121326c35a318561246a896aab1bf2e24d350086a5cca469d643bbd93b5cd4832033b7c70f8a8130e66270fbb1212a423873d16a4b38098def124bcced68245d74c0939a70de2a70bd5c482202118775eca22193ddaf4a2a7bc9283daec7fd0a630", 0x87}], 0x1}}, {{&(0x7f0000000a00)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000a40)="2327d4b5f1dbfd7e8843b37bf5254088fa917943dcd85d2bdd636605b968a4b2c8c547555c2fc5c8674d24174f3fabe2088b34020c19e2874fd4c54f99a22133c7f5649f61858e3b168128807de0e820d87dc5c4aebc1bcd4da9c44017f1a1c1e4cce41bed659ef5363f1827a99ca84713c4402e667ab33d6dc5dea5e3a152b9ac97fba114ea7d0e7e7804876ea5b3c271fd190091ae9c", 0x97}, {&(0x7f0000000b00)="d879feffe346eafc192d6c0b2df0ff53a830bd51ae30a19561d06ab844f868388c6edd9a569a99d756ca2b230f0e1948b929ca3938fb6aac41cc063eb0f636fbb1a26c7e8dfdc3c927c3b76f9b001a049cc85822df40371417dc76ff81139654888ac32b4d337bf908d483edd29bfdf7d40ffbfdd976d4d94a2446aaf83c18f9811e22ac6a4a9495ec5fb24babe3abd480eb45c9a6af25afe067802da449b3", 0x9f}, {&(0x7f0000000bc0)="418a506c481e32e766a80027d8be28671916180e50973428090fd472ded36eded3c952dd9f071cbeccdd4eb098fb39111cf9cef0a6ccf30cbb91fcf792a48f924b92603d0a27e72cd6e0c28067b953e26b625986805a5a1632a078af3b02c8f79f66a5a5302457313634bc47fadb733d24f1ca2a347b2e47967a3765924a7531a7cec6c9bcdbcfc8365d822b800b8aab391645191527bef089d2583838e7bc85bd070ff2c62d4906d2303be8dfc2e4c537a2b0ae302ffecbdc0e82e2a8b0ae4e888747b2903f7e74a6bd9de54f53e83d580c5d516ef76a017c96fb38c20cb3e721a02161b3eb7dfda4df88e960d4c858a16784b654cd3cf941", 0xf9}, {&(0x7f0000000cc0)="a82df5a204bd2870d13fedba5c23d461db36da5979113080f81631b9fa5eddda5555157cb8e9ae3b35254d2603068d5db5924e640314514c6e184bf9962a082b13fe00f379c0ab96b5ee22503c81596344b7bbdfd2f77568c93f29f346b86711552c08ed858d96207ce4fabc9cc0db8f31648246d887867e22f6e906ed51020af0", 0x81}], 0x4}}, {{&(0x7f0000000dc0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000e00)="d98efd093543ea9aeff05fb16d4c8bd0f2b110c8d2db", 0x16}, {&(0x7f0000000e40)="b13d6f2b2b70ca81f0df2edbb56e4cba87b73ce2c41be99bab495d6bd60afe813550e06b9f36b7e848f210e82cebb6061edcc1c6d8aea6f729c5c296248ca515817b357d215a9c8b0ef4b7843c54d5bee5117734d72e65477f7c91f469dc5a718544f64ec5e4fd6084e91b63b9de376ab664c19e84c644ac7a01eab5a6ccfadad22964117991608314804993d0fb42a55637b171116e5ee6e15b77fd44420eb40094ea46bd1f6fd0469555a37de0ca0d64b1b1fc6a2263be87fb26909b46df3fd07d9422039d9be6b8b10c04cb7032ba62a042560f2a", 0xd6}, {&(0x7f0000000f40)="3fb4b6e33c019a052ad03784fdb65a7ceb2551aca92d0313343dbeb12e8e20017629e015056b01a944421dd0a612514d0c27fa7353b61cd979340e91d116fba64710641071b64695fbf560d48f461e16d990f4e60e6f91ccab82883a650074c317bb4745af163611a887fadd1dc8bb1ee7b64c687dc4defd3d01f285314c62b958fb89b577", 0x85}, {&(0x7f0000001000)="c9d7afd787dd95777e476d02ebbf022134937ed50c968ea0025dc22157c387be9ea219aae218b3a3e403674ba204bce6861186b29af3146e927eed7359e5a27a1e9052d99625b2b41e55b9579bc3b6e1f536ee03e590410f3350b2c75242a6433f0b2a0e9ba35cd4b8b520ef79213495e5f94c0cb2d9d10c05d7100a59cde84db1", 0x81}, {&(0x7f00000010c0)="6076d33ed0384be0ec671598061d49f82f946c499f3b61d2060d72bace1410b5269657602a696f987d16c02eb231c7aa66c78e3647c8c3ba4ee3e7815cbf0c96174f38f1904dfeb6127ba705b1862427883f3d37adf53d2a567d133c3eca50d8513f8f71cd4dfe31e09e", 0x6a}, {&(0x7f0000001140)="16d386ad1079cbe6ba91524a54751b6c682c634fb23c42e733b0f80132c46cbdab9ccac02288dfd5ea1d77016df45202a032b58df5df80b0eb8aadd75de26380657ac751d94179667b27f3f1b886381c0432e04e2601082517ba424817cab4f25367803edda52f4513bf96b10d49fbd744fbd20145142b2a970a90febcf80a04dd8ff153471d5dbf6d5cede953f35ef9f773de6c35ee525699a70c4dff2420fe2315b4c946582fb6cd7c8eeea068a9824cdb686700da029e42b8429d1372236ccb7e", 0xc2}, {&(0x7f0000001240)="1e5387bb05b578bde73ec2d43565464d7f3f424b9333ed094687c3b2ce36fb3dd477a546303bb8ac81d2d5e90a21dde2bb285cffa2e7585a90487afd7c7e667240059aad63039de2484bd8dfe67a98ff5d86f2e12de509672def4f7bf9fd794a5984534c4321ae48c7c0621e802b11df39626fc9d02ce79239a0d58adb98b601b8f73cf83039c30e6e8aea7b4297900df8292fb2e3a5b8cfb5c3390e8a632db1df5904afcc327ffd99948ca22bee5ed4552476b315aa55b32e7d8f561908698fe51789edb86154867b97ac1e88720907eb026126b9fff2a53a7a7080a90ed180a381d044", 0xe4}, {&(0x7f0000001340)="f07a43b050fcabda7cfb77846f251852a5815ee07150c0f8a9100d5251090a844357b12f96da19d676b8d708a8aa7ed7ad52cc380ee0e73e175984165356ed01d556f78c091d2fadce7ba5b0f1261ca3cd4587f01fe139b54a2b5b63bed2a9f5ca145f5c8ab2a215bdd26b6f0a46e01a5e10fa7c9f8a4c412735a44eb69c7cc8f1e889ae5c11114cb23ce9d15202569d564d79468645086b4e16e657adf427aafacf786a25632cd7457286443a2a11d8caa431a0be01f0a70ad8dee3c0052ef92deb222c6672d9166af4c68db4a7cd64446a573f286dec10e6b32b0e942a16184a06311dc10ba7fd49109602139a8fbe36", 0xf1}, {&(0x7f0000001440)="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", 0xfc}], 0x9, &(0x7f0000001600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}}], 0x5, 0x4004000) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000001780)={0xffffffffffffffff}) r5 = accept4(r4, 0x0, &(0x7f0000001800), 0x80000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001880), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000018c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x50, r6, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f3457dcb46cf"}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x48081}, 0x40000) bind$l2tp(r3, &(0x7f0000001a00)={0x2, 0x0, @multicast2, 0x3}, 0x10) shutdown(r2, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x74, r1, 0x4, 0x4, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x48800}, 0x4041) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000001b80)={{0x5e, @remote, 0x4e23, 0x1, 'none\x00', 0x0, 0xce, 0x13}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x10000, 0x725, 0x5, 0x3}}, 0x44) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001c40)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000001d40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x4c, r1, 0x600, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000002000)={{r3, &(0x7f0000001d80)='#\x00', 0x480c2, &(0x7f0000001dc0)={@_ha_fsid={[0x0, 0x6]}, {0x800, 0x1, 0x9, 0x7}}, 0x0, &(0x7f0000001e00)={@_ha_fsid}, &(0x7f0000001e40)}, 0x2, &(0x7f0000001fc0)=[{0x2, 0x81, &(0x7f0000001e80)=')-^&V-{^%-\\\x00', &(0x7f0000001ec0)="fbd638f50ba394c55d9ed14b252719a55749a16f4b800f8c58fec71fb6d9740b222fcb6e263851f8b2cb7c216ea3152997b999dd6353607fa668e0915745f1837edd47f56c985198a417e0df585a713beec84c25594eca691f85ce3df14c1f40ee9669c65e7034cf0d3febb41fa53c62d1da0cbc45d44315ef0e3f", 0x7b, 0x10}, {0x1, 0x1, &(0x7f0000001f40)=':\x00', &(0x7f0000001f80)="186dc75b91ffb7e899e13cd824e56d60547e8326d7bdc5caa0e449ce0a8fe02d7d465799e3aad8ab6713898d1aa4ac9fae40b4aedd792824dca4cd9194", 0x3d, 0x8}]}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000002080)={0x0, 0x8, 0x8, [0x0, 0x8, 0x3, 0x3, 0x0, 0x8, 0x55d8, 0x7]}, &(0x7f00000020c0)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000002100)={r10, @in={{0x2, 0x4e22, @private=0xa010100}}, 0xfff1, 0x8}, 0x90) connect$rxrpc(r4, &(0x7f00000021c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}, 0x24) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002240), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x80, r11, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:auditd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x80}, 0x1, 0x0, 0x0, 0x40001}, 0x4008014) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x3c, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x19}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x9}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x17}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048040}, 0x4082) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f0000002480)={0x6, 'macsec0\x00', {0xfffffffc}, 0x1}) setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002600)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) 1.606029234s ago: executing program 4 (id=9600): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x7ffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xb, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x31}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20004055) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 64) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r1, 0x8, 0x0, 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0]}, 0x40) 1.436692721s ago: executing program 0 (id=9601): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000190081154e81f782db4cb904021d0800fd02fe02e8fe50a10a000548258848000c600e41b0000900ac00080325000000040015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) 1.258456036s ago: executing program 5 (id=9602): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x40047452, &(0x7f00000000c0)={0x18, 0x0, {0x1, @empty, 'sit0\x00'}}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r1, 0x118, 0x4, 0x0, &(0x7f0000000040)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="84010000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054"], 0x184}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r4) 1.152578354s ago: executing program 0 (id=9603): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ipv4_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'netdevsim0\x00'}]}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0xc8, 0x1, &(0x7f0000000300)="225f4b2666755f2ed4c5eba131a31eff63ebe64137e730e01e167da78144f916512e6038f016596293c4ffcf9c813b19a0b25e2e455f3b97089fa4db2a39e279682fcf599c027bbf65bc64c09655d3e12ec28c32fcd958e5bb624a4e048f5987779ceeeb86d41c983f3f931407100486e9059be6b7c551f461cfdd0685c22eb633dcd24690bbe8e89b1b6846df57fc91b9de1b6554803283750e3d4132e14321f3d92b5d9f9dac11767f46c39f8b14c8e669f2db80ce68429905820965fe6f45fb2bbb3e954c3029", &(0x7f0000000400)=""/1, 0xd, 0x0, 0x9f, 0xa4, &(0x7f0000000440)="5ba052a30fbb1027814d09acd6cac8ddd8bb4a0d6b408f2b7920f507e7fd608c28a7f74249f8a3dadfa23b2cd8a2fcef4e7b7d08bff6c51a6293ad225c1687ab65e573f546d71cac1231cf733f86dcc64e7707ed9f13a0ff15a34d180ed19a8d164a916016aac7dadbed9991323e6912daa3a05f63bf1d05637c1a07d777d470d959e49bb069ccd50115ec7e2728be2a85e7ae0da49369fafdd2363db272ec", &(0x7f0000000500)="9c4b4804b604f6590c25b6501b25177a0bc4602bd2ff986c113a5a7a36695f4dab43a5b7bf9cf316aea48d57398cd48b94cb044e682a607cf3e89549b9785ebd66a7b55bf283c729c0df2a93e0aef3a0e5098852eaef9e6045c667841cb9f2bb158bafb5e02b9a4088685157af81a5465f0baf8edb3dcc4c448fe2cffa645348a8f0e54adaa84acda3142b375fcc4ff9b5e5af924b3a828067ff2fdf6c8bee723aa4238d", 0xa}, 0x50) 1.084684507s ago: executing program 4 (id=9604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x64, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x9}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0xb, 0x6, 0x2, 0x9, 0x6, 0x5, 0x1f3, 0x740, [{0x5, 0x4, 0x1, 0x6}, {0x10, 0xf, 0x3, 0x80}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000000b06050000000000000020000000000005000100070000000900020073797a3100000000040007"], 0x2c}}, 0x0) 956.366123ms ago: executing program 5 (id=9605): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl(r0, 0x7, &(0x7f0000000000)="0ee08cb4b9a154517c6bfb9c58915871acaaa783258c38c4524ab943824f8db04e89a026b2683c83a8ef28d1aad37dd2cc73f8adfadfa7d81e67510bd175e3d1dc32eb4cd7e1b65e58cf4d915cf0f54e1cde576a9a1b088ad851aaa1d33cbdfb75c965205bc563418cfe0d9f24276c16cd6518be49412a8946d306996fdf38a888efe3e7b3652c59047c854cb7821adc4e7d3bd008515987c78c9940bc80a65861c823ca63c59ef87eb8de55306a5e957eba1f67256c015772a33684dfce49601bf8") 831.119475ms ago: executing program 0 (id=9606): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200"], 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x5e}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x4, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000000b2020000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="8500000011000000350000000000020085000000230000009500073d000000003c8ea5932cf6fec5eade4bb02aa4f152b8bdfdf8ffffffffffeeff547930a8abf35fd3908aa4e150e020a1a45f8d6700ff00000000f669011b4504090bc057a5cdb706ceac9856bad67505a783d6f5d0542b83f636ab45c12311d14da9bf"], 0x0, 0x4}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r2, 0x58, &(0x7f0000000580)}, 0x10) 795.127807ms ago: executing program 5 (id=9607): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000003c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000080000000000000000018230000", @ANYRES32=r2, @ANYBLOB="000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x5}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="60000000031408002abd7000fbdbdf2509000e0073797a31000000000800410073696d001400330076657468305f746f5f68737200000000090091dcdcec7a300000000008004100736977001400330074756e6c3000000000000000000000007e757e5374a6f1d367821d688d131045143676caaaeedfc3200eedcca34f8cca1bda919b27b9402bc6423fd1fd124338b3a942e7778d891e09ed4fa3755788a3b56228806dd7476e1910bf4487"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x41081) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000004000070125bd700000000000017c0000040042801c00018006000600800a000008001500", @ANYRES32=0x0, @ANYBLOB="06005f06800a000004000280"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x54, r6, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) (async, rerun: 64) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x80, r6, 0x300, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000041}, 0x40) (async, rerun: 64) r7 = socket(0x10, 0x3, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r5, &(0x7f0000000640)=""/141, 0x8d, 0x100, &(0x7f0000000700)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @empty}, 0x1, 0x2, 0x4, 0x2}}, 0x80) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r8) (async) sendto$inet6(r7, &(0x7f0000000080)="7800000018002507b9409b14ffff00000200be040205fa056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160020000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000001000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x4) (async) setsockopt$inet_group_source_req(r7, 0x0, 0x2b, &(0x7f0000000280)={0x8, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e21, @private=0xa010100}}}, 0x108) (async) ioctl$XFS_IOC_GETBMAPX(r4, 0xc0205838, &(0x7f0000000240)={0x3, 0x4, 0xf7, 0xb12, 0x8, 0x8, 0x2}) 548.361926ms ago: executing program 0 (id=9608): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x3ff, 0x89, 0x10, 0x5c}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002000010000000000000000000a00000000000000000000001400110064596d7270310000000100000000000008000a00", @ANYRES32=r0], 0x38}}, 0x20000000) socket(0x1d, 0x1, 0x3) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0) 545.922397ms ago: executing program 5 (id=9609): openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000280)='io.pressure\x00', 0x2, 0x0) (async) r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000280)='io.pressure\x00', 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000140)=""/99, &(0x7f0000000200)=0x63) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newlink={0x178, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_VF_PORTS={0x144, 0x18, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_VF={0x8, 0x1, 0x8}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "921310a5562281a16b51adc901d6c236"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a3e82321d8d9c33d260834cf3b56936f"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "225318393f42253e8febb8c9b014dc53"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xa}, @IFLA_PORT_VF={0x8, 0x1, 0x401}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x9}]}, {0x4}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x1000}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e2359dc41e4126304c47c45f9e07f9ad"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xf9}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "50205454653359780bf025eaf8954f72"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ab54dffe2c5663b3941e77ad51e55846"}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b333158971f308452e0b9f824749eb5e"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3f4ded10ec1bc97e5a0b8e09587d05e3"}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "01e5ceddb85cfc4e45eae9ccc72d4863"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xd}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2f}]}]}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x178}}, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r3, &(0x7f0000003d40)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x752}, 0x1c, 0x0}}], 0x2, 0x0) (async) sendmmsg$inet6(r3, &(0x7f0000003d40)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x752}, 0x1c, 0x0}}], 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000240)={0x0, 'vxcan1\x00', 0x3}, 0x18) 543.167546ms ago: executing program 4 (id=9610): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000001c0), 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) 322.552498ms ago: executing program 5 (id=9611): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x47}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000180)="70288b0e5924b56b0746082b3dd320a1695a2120f35d8ff7c99c7c837d1e5fcbb2c9aeec169356bcc94a377483dd087a51c230b18775428618d14a41cbdc2904fc04ecd2cb48fc69064496b16250124b53e1f03af1389975131f6d9471c809eadf20c05e46a43adbb8d940dc0200511183b89009d1ec667c3bcf9901ddd2374827cdca028c80b4ac16abb81ecbd4911d37e582b1be5e7138e6f0649cf27a47105506449f11d0079b85ed140c94cc284ff42b660757c69fef83c912ff2c567eaad9f57d688b19ce39b6530f0bcfed6fc469e2f24b9fe41799f47c3aa8f71eccc299f2d1658e0bf7bb85cfc99e6807da83c7a2", 0xf2) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000280)=0x3, 0x2) r5 = accept4(r3, 0x0, &(0x7f00000002c0), 0x800) getsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x8) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000380)=""/70, &(0x7f0000000400)=0x46) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000440)={'HL\x00'}, &(0x7f0000000480)=0x1e) r6 = socket(0xa, 0x80000, 0x0) r7 = socket(0xa, 0x3, 0x8) ioctl$SIOCX25GSUBSCRIP(r7, 0x89e0, &(0x7f00000004c0)={'veth1_to_bond\x00'}) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000600), r5) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x80, r8, 0x8, 0x70bd28, 0x1, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x41}}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1b}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9d9}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000740)={0x0, 0xbc, "9eebe27bf875665eee3e994e9a7639ed2afebc19ce7ff0cdf35265f329db9bb88be292d8a0a6eb0dc31b853458564b44768c792d28ec80d3f5bae36e78a75a0f85f8c803aee82d84e34e42640a55c51d3860b8257f98a69dbacede541c83513934af15284ec8a7ee286e708086b073e388aa0e9f8ad01744e9c8eb6f9edb239fa65544c40be72ff6a6515b89ff13c4b5e444f6dc26b077b92f578e8eefd646f9a4573e56150d43bf59292c5eb533b24140845065758d511a8835662d"}, &(0x7f0000000840)=0xc4) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000880)={0x9, 0x4, 0x4003, 0x3, 0x45, 0x6, 0x7, 0x4, r9}, 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000008c0)={'wlan1\x00'}) bind$alg(r6, &(0x7f0000000900)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-arm\x00'}, 0x58) r11 = accept4$nfc_llcp(r3, &(0x7f0000000980), &(0x7f0000000a00)=0x60, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r7, 0x40046721, &(0x7f0000000a40)={r11}) getpeername$packet(r5, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000c40)=0x14) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000e40)={{r5, &(0x7f0000000c80)='[]:\x00', 0x40000, &(0x7f0000000cc0)={@align=0x1027, {0x6128, 0x4, 0x2}}, 0x4, &(0x7f0000000d00)={@_ha_fsid}, &(0x7f0000000d40)=0x4}, {[0x6, 0x0, 0x1, 0x8000]}, 0x8, 0x8b, &(0x7f0000000d80)=""/139}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001080)={0xffffffffffffffff, 0x20, &(0x7f0000001040)={&(0x7f0000000f40)=""/62, 0x3e, 0x0, &(0x7f0000000f80)=""/171, 0xab}}, 0x10) r15 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000010c0), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001100), &(0x7f0000001140)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x11, 0x3, &(0x7f0000000a80)=@raw=[@generic={0x10, 0x3, 0xd, 0x5, 0x2}, @call={0x85, 0x0, 0x0, 0xac}, @alu={0x7, 0x1, 0x3, 0x0, 0xd, 0x6, 0x8}], &(0x7f0000000ac0)='syzkaller\x00', 0x100, 0xf0, &(0x7f0000000b00)=""/240, 0x40f00, 0x60, '\x00', r12, @fallback=0x35, r13, 0x8, &(0x7f0000000ec0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000f00)={0x2, 0xf, 0x1, 0x9}, 0x10, r14, r15, 0x0, &(0x7f00000023c0)=[r16, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) 203.515575ms ago: executing program 0 (id=9612): socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x6230}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x6}, @IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x9}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x404c001}, 0x0) 486.323µs ago: executing program 4 (id=9613): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 0 (id=9614): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000024170380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000f01600800c00054000000000000000000c00054000000000000000000c00044000000000000000000c00044000000000000000000600064019d20000ac0201802800028008000340000000000900020073797a3100000000080003400000000008000180000000003800028008000340000000000800018000000000080003400000000008000340000000000900020073797a300000000008000340000000002c00028008000340000000000900020073797a31000000000900020073797a32000000000800034000000000d0000100b408b1e286b5c8f7a7321d1f80c982b3c96b4dac7dead86aceee30544dfdb289f2cae899fc3fe86ee3f122505d76d6b5878270ecb40c37908d60b9ed31d97a3e0ee856f3cf3c2fdfee967991f8d1ef7fdce37b30f8842735e543ac808675a64f66eb37009373328ddf992e92b3a5765bd5f765d73c578babbb08efd7b59dab641a88f3099e34bb7fbc04cb298bb0df6eb0dc4ca79864758aff38b7192698c89435c5699f4a9222ad4a2c68c9356b741f04ef667f7a169b8976632c7cb98f18ba558bc302c7b73401c42a76160c0002800800034000000000440002800900020073797a310000000008000340000000000900020073797a32000000000900020073797a320000000008000180000000000900020073797a3200000000fc0001"], 0x17d4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000000)=""/48, &(0x7f0000000080)=0x30) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) socket$alg(0x26, 0x5, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0xfffffffb, @local, 0x4, 0x3}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000"], 0x18}, 0x4004080) close(0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = accept4$unix(r4, 0x0, 0x0, 0x800) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001480)=ANY=[@ANYBLOB="380000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB="0b000080976b6408686030001400018099", @ANYBLOB="6401e8b279921be3c637378b8bb2d5"], 0x38}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f00000020c0)=ANY=[@ANYBLOB="18000000000000890000000000fff9d3f6de541e15dcefd372695d681900000071100100000002009500003b820000009e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x58, r8, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x58}}, 0x0) getpeername(r3, &(0x7f0000002240)=@caif=@rfm, &(0x7f00000022c0)=0x80) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x200000000000000, 0x100000, 0x1}}, 0x40) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r10, 0x6, 0x1b, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000022009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) recvmmsg(r6, &(0x7f0000001e80)=[{{&(0x7f00000003c0)=@phonet, 0x80, &(0x7f0000000680)=[{&(0x7f0000000440)=""/94, 0x5e}, {&(0x7f00000004c0)=""/160, 0xa0}, {&(0x7f0000000580)=""/207, 0xcf}], 0x1a, &(0x7f0000001940)=""/42, 0x2a}, 0x966a}, {{&(0x7f0000000700)=@tipc, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x2, &(0x7f00000018c0)=""/114, 0x72}, 0x7}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001940)}, {&(0x7f0000001980)=""/202, 0xca}, {&(0x7f0000001a80)=""/203, 0xcb}], 0x3, &(0x7f0000001d40)=""/53, 0x35}, 0x9}, {{&(0x7f0000001c00)=@nfc_llcp, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c80)=""/36, 0x24}, {&(0x7f0000001cc0)=""/50, 0x32}, {&(0x7f00000006c0)=""/2, 0x2}, {&(0x7f0000002100)=""/176, 0xb0}], 0x4, &(0x7f0000001e40)=""/57, 0x39}, 0x2}], 0x4, 0x2, &(0x7f0000001f80)) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000002080)={r5, &(0x7f0000001d00)='\x00', 0x90000, &(0x7f0000001fc0)={@_ha_fsid={[0xffffffff, 0xee]}, {0x3, 0x180, 0x56, 0x7ff}}, 0x800, &(0x7f0000002000)={@_ha_fsid}, &(0x7f0000002040)=0x7f}) kernel console output (not intermixed with test programs): invalid length. [ 892.262341][ T3678] netlink: 'syz.2.7713': attribute type 2 has an invalid length. [ 892.290982][ T3678] netlink: 'syz.2.7713': attribute type 1 has an invalid length. [ 892.308470][ T3678] netlink: 'syz.2.7713': attribute type 3 has an invalid length. [ 892.332465][ T3678] __nla_validate_parse: 36 callbacks suppressed [ 892.332486][ T3678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7713'. [ 892.619859][ T3691] netlink: 'syz.4.7718': attribute type 3 has an invalid length. [ 893.152494][ T3726] netlink: 'syz.2.7726': attribute type 1 has an invalid length. [ 893.245317][ T3735] bridge2: entered allmulticast mode [ 893.341818][ T3738] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7729'. [ 893.421984][ T3749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7731'. [ 893.444919][ T3750] IPVS: set_ctl: invalid protocol: 25965 114.121.46.101:30309 [ 893.488676][ T3740] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 893.667416][ T3758] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7735'. [ 893.709304][ T3754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7733'. [ 893.721331][ T3761] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7736'. [ 893.739973][ T3758] macvtap1: entered promiscuous mode [ 893.752542][ T3758] macvtap1: entered allmulticast mode [ 893.774114][ T3758] veth1_vlan: entered allmulticast mode [ 893.807597][ T3764] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 893.896471][ T3767] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7737'. [ 894.758888][ T3796] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 894.786874][ T3799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7748'. [ 894.840362][ T3802] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7748'. [ 894.880953][ T3792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7748'. [ 895.589917][ T3836] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 895.602104][ T3836] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 895.615687][ T3836] gretap2: entered promiscuous mode [ 895.634130][ T3836] gretap2: entered allmulticast mode [ 895.693334][ T3842] dummy0: entered promiscuous mode [ 895.718674][ T3842] dummy0: entered allmulticast mode [ 895.993732][ T3863] gtp1: entered allmulticast mode [ 896.009758][ T3863] team0: Device gtp1 is of different type [ 896.163100][ T3872] x_tables: duplicate underflow at hook 3 [ 896.182238][ T3871] veth1_macvtap: left promiscuous mode [ 896.380637][ T3879] netlink: 'syz.0.7775': attribute type 1 has an invalid length. [ 896.391768][ T3879] netlink: 'syz.0.7775': attribute type 2 has an invalid length. [ 896.401000][ T3879] netlink: 'syz.0.7775': attribute type 1 has an invalid length. [ 896.515250][ T3881] netlink: 'syz.1.7776': attribute type 8 has an invalid length. [ 897.411627][ T3933] openvswitch: netlink: IP tunnel dst address not specified [ 897.550446][ T3935] __nla_validate_parse: 15 callbacks suppressed [ 897.550473][ T3935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7793'. [ 897.743324][ T3943] blkio.reset_stats is deprecated [ 897.772284][ T3944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7796'. [ 897.941357][T23636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 897.955500][T23636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 898.018559][T23636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 898.037261][T23636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 898.049933][T23636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 898.088801][ T5639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 898.098724][ T5639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 898.106851][ T5639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 898.115035][ T5639] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 898.133315][ T5639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 898.183847][ T3961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7801'. [ 898.240192][ T3969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7800'. [ 898.248966][ T3971] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7801'. [ 898.264557][ T3969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7800'. [ 898.345204][ T3971] netlink: 92 bytes leftover after parsing attributes in process `syz.4.7801'. [ 898.349594][ T3973] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7803'. [ 898.724516][ T3986] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 899.016092][ T3979] bond8: option all_slaves_active: invalid value (222) [ 899.052924][ T3979] bond8 (unregistering): Released all slaves [ 899.450647][ T4011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7811'. [ 899.473800][ T4011] block nbd5: Unsupported socket: should be TCP or UNIX. [ 899.741197][ T4027] netlink: 'syz.2.7813': attribute type 2 has an invalid length. [ 899.895061][ T4038] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7818'. [ 900.014382][ T4031] bond7: (slave veth0_to_bond): Releasing backup interface [ 900.100529][ T4031] bond0: (slave bond_slave_0): Releasing backup interface [ 900.145107][ T4031] bond0: (slave bond_slave_1): Releasing backup interface [ 900.196249][ T4031] team0: Port device team_slave_0 removed [ 900.228422][ T4031] team0: Port device team_slave_1 removed [ 900.240168][T23636] Bluetooth: hci2: command tx timeout [ 900.261562][ T4031] bond2: (slave veth5): Releasing active interface [ 900.282824][ T4031] bond3: (slave geneve2): Releasing active interface [ 900.314976][ T6297] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 900.358385][ T6297] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 900.401382][ T6297] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 900.452184][ T6297] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 900.876344][ T4077] netlink: 'syz.2.7828': attribute type 1 has an invalid length. [ 900.968685][ T4077] 8021q: adding VLAN 0 to HW filter on device bond8 [ 901.098043][ T4077] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 901.710882][ T4102] netlink: 'syz.2.7833': attribute type 1 has an invalid length. [ 901.848393][ T4110] netlink: 'syz.4.7835': attribute type 11 has an invalid length. [ 901.865560][ T4102] 8021q: adding VLAN 0 to HW filter on device bond9 [ 901.959301][ T4108] mac80211_hwsim hwsim73 wlan0: entered promiscuous mode [ 901.969950][ T4108] batman_adv: batadv0: Adding interface: wlan0 [ 901.977001][ T4108] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.006945][ T4108] batman_adv: batadv0: Interface activated: wlan0 [ 902.067544][ T4112] bond9: (slave geneve3): making interface the new active one [ 902.086898][ T4112] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 902.105361][ T4115] netlink: 'syz.1.7834': attribute type 1 has an invalid length. [ 902.146716][ T4115] netlink: 'syz.1.7834': attribute type 2 has an invalid length. [ 902.318816][T23636] Bluetooth: hci2: command tx timeout [ 902.602512][ T3956] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.620621][ T3956] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.628766][ T3956] bridge_slave_0: entered allmulticast mode [ 902.638530][ T3956] bridge_slave_0: entered promiscuous mode [ 902.668519][ T3956] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.700693][ T3956] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.733278][ T3956] bridge_slave_1: entered allmulticast mode [ 902.757127][ T4155] sock: sock_timestamping_bind_phc: sock not bind to device [ 902.764492][ T3956] bridge_slave_1: entered promiscuous mode [ 902.851446][ T3956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.881229][ T3956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 902.930536][ T4159] __nla_validate_parse: 4 callbacks suppressed [ 902.930577][ T4159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7847'. [ 902.994019][ T4163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7848'. [ 903.015146][ T3956] team0: Port device team_slave_0 added [ 903.148011][ T3956] team0: Port device team_slave_1 added [ 903.267000][ T3956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 903.285929][ T3956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.318984][ T3956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 903.332435][ T3956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 903.341423][ T3956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.403592][ T3956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 903.558186][ T4159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7847'. [ 903.581762][ T3956] hsr_slave_0: entered promiscuous mode [ 903.603682][ T3956] hsr_slave_1: entered promiscuous mode [ 903.623272][ T3956] debugfs: 'hsr0' already exists in 'hsr' [ 903.636701][ T3956] Cannot create hsr debugfs directory [ 903.737412][ T4177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7851'. [ 903.842239][ T4175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7850'. [ 903.890612][ T4175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 903.934568][ T4175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 904.050811][ T4190] bond10: option resend_igmp: invalid value (32767) [ 904.059525][ T4190] bond10: option resend_igmp: allowed values 0 - 255 [ 904.091830][ T4190] bond10 (unregistering): Released all slaves [ 904.280359][ T4200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7856'. [ 904.405986][T23636] Bluetooth: hci2: command tx timeout [ 904.469782][ T4197] bond5: Unable to set up delay as MII monitoring is disabled [ 904.503050][ T4197] bond5 (unregistering): Released all slaves [ 904.822547][ T4220] netlink: 'syz.2.7860': attribute type 62 has an invalid length. [ 904.851824][ T4220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7860'. [ 904.908775][ T4224] nbd: must specify a device to reconfigure [ 905.189186][ T3956] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 905.223070][ T3956] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 905.250059][ T3956] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 905.275055][ T3956] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 905.352556][ T4248] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7868'. [ 905.365678][ T3956] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 905.402434][ T4251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7867'. [ 905.438435][ T3956] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 905.451296][ T3956] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 905.494291][ T3956] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 905.797896][ T4275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7872'. [ 905.828495][ T4275] netlink: 'syz.2.7872': attribute type 8 has an invalid length. [ 905.899191][ T3956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 905.968404][ T3956] 8021q: adding VLAN 0 to HW filter on device team0 [ 905.985545][T11443] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.992789][T11443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 906.034242][ T4283] netlink: ct family unspecified [ 906.061957][T11443] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.069223][T11443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 906.275453][ T4293] tipc: Started in network mode [ 906.287272][ T4293] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 906.334987][ T4293] tipc: Enabling of bearer rejected, failed to enable media [ 906.350180][ T4297] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 906.357552][ T4297] IPv6: NLM_F_CREATE should be set when creating new route [ 906.364848][ T4297] IPv6: NLM_F_CREATE should be set when creating new route [ 906.476194][T23636] Bluetooth: hci2: command tx timeout [ 906.500321][ T4297] netlink: 'syz.4.7878': attribute type 10 has an invalid length. [ 906.608436][ T4306] netlink: 'syz.2.7880': attribute type 1 has an invalid length. [ 906.774836][ T4306] 8021q: adding VLAN 0 to HW filter on device bond10 [ 906.885259][ T4313] bond10: (slave geneve4): making interface the new active one [ 906.897932][ T4313] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 907.434371][ T4341] batadv1: entered allmulticast mode [ 907.677664][ T3956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 907.772902][ T4356] syzkaller1: entered promiscuous mode [ 907.794008][ T4356] syzkaller1: entered allmulticast mode [ 907.936967][ T4371] __nla_validate_parse: 8 callbacks suppressed [ 907.936991][ T4371] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7893'. [ 908.348613][ T3956] veth0_vlan: entered promiscuous mode [ 908.379542][ T3956] veth1_vlan: entered promiscuous mode [ 908.557200][T23636] Bluetooth: hci2: command tx timeout [ 908.748728][ T3956] veth0_macvtap: entered promiscuous mode [ 908.757356][ T4400] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 908.904314][ T3956] veth1_macvtap: entered promiscuous mode [ 908.960468][ T3956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 909.041034][ T3956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 909.103260][ T3338] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.134015][ T4411] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7902'. [ 909.156231][ T3338] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.175473][ T4411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7902'. [ 909.189638][ T3338] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.252909][ T3338] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.348677][ T4417] netlink: 'syz.0.7903': attribute type 3 has an invalid length. [ 909.408545][ T4417] netlink: 244 bytes leftover after parsing attributes in process `syz.0.7903'. [ 909.594379][ T3338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.638396][ T3338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.709446][ T3338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.723783][ T3338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.896257][ T4442] netlink: 'syz.4.7908': attribute type 1 has an invalid length. [ 910.042791][ T4442] 8021q: adding VLAN 0 to HW filter on device bond7 [ 910.058371][ T4443] bond1: (slave lo): Releasing backup interface [ 910.069432][ T4443] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 910.090906][ T4443] bridge_slave_0: left allmulticast mode [ 910.097612][ T4443] bridge_slave_0: left promiscuous mode [ 910.103596][ T4443] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.125692][ T4443] bridge_slave_1: left promiscuous mode [ 910.132366][ T4443] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.160661][ T4443] bond0: (slave bond_slave_0): Releasing backup interface [ 910.172650][ T4443] bond_slave_0: left allmulticast mode [ 910.184073][ T4443] bond0: (slave bond_slave_1): Releasing backup interface [ 910.196850][ T4443] bond_slave_1: left allmulticast mode [ 910.215442][ T4443] team0: Port device team_slave_0 removed [ 910.230920][ T4443] team0: Port device team_slave_1 removed [ 910.239531][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 910.249559][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 910.263012][ T4443] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 910.308043][ T4444] ip6gre2: entered allmulticast mode [ 910.338343][ T4444] team0: Port device ip6gre2 added [ 910.578209][ T4450] tipc: Enabled bearer , priority 0 [ 910.732603][ T4450] syzkaller0: entered promiscuous mode [ 910.760843][ T4450] syzkaller0: entered allmulticast mode [ 910.781820][ T4450] tipc: Resetting bearer [ 910.826709][ T4449] tipc: Resetting bearer [ 914.748519][ T4449] tipc: Disabling bearer [ 915.053554][ T4491] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004 [ 915.111004][ T4491] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7919'. [ 915.145442][ T4492] syzkaller0: entered promiscuous mode [ 915.167683][ T4492] syzkaller0: entered allmulticast mode [ 915.485088][ T4506] syzkaller0: entered promiscuous mode [ 915.512749][ T4506] syzkaller0: entered allmulticast mode [ 915.532183][ T4522] Cannot find add_set index 65532 as target [ 915.553528][ T4522] netlink: 'syz.2.7929': attribute type 1 has an invalid length. [ 915.790454][ T4527] xt_hashlimit: size too large, truncated to 1048576 [ 915.838582][ T4532] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 916.323579][ T4556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7940'. [ 916.385354][ T4561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7939'. [ 916.680036][ T4547] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7936'. [ 917.106790][ T4588] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 917.121605][ T4588] bond8 (unregistering): Released all slaves [ 917.210603][ T4599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7949'. [ 917.243121][ T4595] syzkaller1: entered promiscuous mode [ 917.254313][ T4595] syzkaller1: entered allmulticast mode [ 917.583366][ T4616] openvswitch: netlink: Flow key attribute not present in set flow. [ 917.725414][ T4619] netlink: 364 bytes leftover after parsing attributes in process `syz.4.7956'. [ 917.850661][ T4622] x_tables: duplicate entry at hook 3 [ 918.303044][ T4646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7962'. [ 918.329729][ T4646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7962'. [ 918.486645][ T4657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7965'. [ 918.532124][T11437] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x7 [ 918.734866][ T4670] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7968'. [ 918.808657][ T4672] syzkaller0: entered promiscuous mode [ 918.829834][ T4672] syzkaller0: entered allmulticast mode [ 918.857102][ T4676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 918.868031][ T4676] openvswitch: netlink: IPv4 tun info is not correct [ 918.877279][T14915] wlan1: Trigger new scan to find an IBSS to join [ 918.952476][ T4683] netlink: 'syz.1.7972': attribute type 5 has an invalid length. [ 918.961776][ T4683] netlink: 'syz.1.7972': attribute type 6 has an invalid length. [ 919.057292][ T4686] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 919.064641][ T4686] IPv6: NLM_F_CREATE should be set when creating new route [ 919.072168][ T4686] IPv6: NLM_F_CREATE should be set when creating new route [ 919.402931][ T4699] netlink: 'syz.0.7977': attribute type 1 has an invalid length. [ 920.477078][ T4745] __nla_validate_parse: 10 callbacks suppressed [ 920.477099][ T4745] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7988'. [ 920.647355][ T4745] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7988'. [ 920.690966][ T4745] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7988'. [ 920.738903][ T4756] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7990'. [ 920.873622][ T5742] page_pool_release_retry() stalled pool shutdown: id 47, 1 inflight 724 sec [ 921.415233][ T4770] xt_TPROXY: Can be used only with -p tcp or -p udp [ 921.703838][ T4780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7997'. [ 921.764884][ T4784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7997'. [ 921.916832][ T3338] wlan1: Trigger new scan to find an IBSS to join [ 921.961973][ T4787] syzkaller1: entered promiscuous mode [ 922.004441][ T4787] syzkaller1: entered allmulticast mode [ 922.339618][ T4800] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8001'. [ 922.907461][ T4806] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8004'. [ 923.181885][ T4815] netlink: 'syz.2.8007': attribute type 83 has an invalid length. [ 923.857047][ T4839] tipc: Enabling of bearer rejected, failed to enable media [ 924.957327][ T3338] wlan1: Trigger new scan to find an IBSS to join [ 925.059416][ T4853] syzkaller1: entered promiscuous mode [ 925.074952][ T4853] syzkaller1: entered allmulticast mode [ 925.401712][ T4856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8017'. [ 925.588866][ T4860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 925.643880][ T4865] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.8020'. [ 925.883576][T14915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.219809][ T4883] netlink: 204 bytes leftover after parsing attributes in process `syz.4.8025'. [ 926.912907][ T4889] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8028'. [ 926.941123][ T4889] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 926.970024][ T4889] gretap1: entered promiscuous mode [ 926.999105][ T4889] gretap1: entered allmulticast mode [ 927.296899][ T4895] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8030'. [ 927.674822][ T4899] syzkaller0: entered promiscuous mode [ 927.703459][ T4899] syzkaller0: entered allmulticast mode [ 927.731898][ T4902] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 927.815499][ T4909] netlink: 'syz.5.8035': attribute type 4 has an invalid length. [ 928.033345][ T4912] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8036'. [ 928.112883][ T4914] netlink: 'syz.2.8036': attribute type 83 has an invalid length. [ 928.585510][ T4921] openvswitch: netlink: Message has -2 unknown bytes. [ 928.740338][ T4926] sctp: [Deprecated]: syz.2.8039 (pid 4926) Use of struct sctp_assoc_value in delayed_ack socket option. [ 928.740338][ T4926] Use struct sctp_sack_info instead [ 936.491800][ T4957] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 936.936432][ T4978] xt_policy: output policy not valid in PREROUTING and INPUT [ 937.272600][ T5003] ip6gre1: entered allmulticast mode [ 937.298559][ T5003] team0: Device ip6gre1 is of different type [ 937.391766][ T5010] netlink: 'syz.2.8062': attribute type 1 has an invalid length. [ 937.646171][ T5027] netlink: 'syz.5.8068': attribute type 1 has an invalid length. [ 937.733991][ T5029] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8066'. [ 937.911987][ T5025] syzkaller1: entered promiscuous mode [ 937.926762][ T5025] syzkaller1: entered allmulticast mode [ 938.153654][ T5056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8075'. [ 938.192451][ T5049] syzkaller0: entered promiscuous mode [ 938.230098][ T5049] syzkaller0: entered allmulticast mode [ 938.264702][ T5051] TC_ACT_REPEAT abuse ? [ 938.900118][ T5078] netlink: 'syz.4.8083': attribute type 1 has an invalid length. [ 938.922392][ T5081] netlink: 'syz.2.8082': attribute type 1 has an invalid length. [ 938.951494][ T5084] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 938.973695][ T5081] netlink: 'syz.2.8082': attribute type 2 has an invalid length. [ 939.016610][ T5081] netlink: 'syz.2.8082': attribute type 1 has an invalid length. [ 939.030700][ T5088] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 939.042714][ T5088] bond8: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 939.050853][ T5081] netlink: 'syz.2.8082': attribute type 3 has an invalid length. [ 939.060741][ T5081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8082'. [ 939.071488][ T5088] bond8: (slave vxcan3): making interface the new active one [ 939.080370][ T5088] bond8: (slave vxcan3): Enslaving as an active interface with an up link [ 939.115343][ T5093] IPVS: Error joining to the multicast group [ 939.368422][ T5106] netlink: 216 bytes leftover after parsing attributes in process `syz.0.8087'. [ 939.482571][ T5111] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8091'. [ 939.715129][ T5129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8095'. [ 939.991365][ T5147] geneve1: entered promiscuous mode [ 940.055585][ T5151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 940.494148][ T5173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8108'. [ 940.515188][ T5173] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8108'. [ 940.551303][ T5173] syzkaller0: entered promiscuous mode [ 940.560672][ T5173] syzkaller0: entered allmulticast mode [ 940.571429][ T5173] netlink: 666 bytes leftover after parsing attributes in process `syz.5.8108'. [ 940.598662][ T5173] tc action pedit offset must be on 32 bit boundaries [ 942.484876][ T5115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 942.750521][ T5189] netlink: 'syz.2.8113': attribute type 1 has an invalid length. [ 942.980645][ T5202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 943.004187][ T5204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 943.056760][ T5205] l2tp_ppp: sess 2/0: no socket in recv [ 943.073994][ T5205] netlink: 'syz.4.8118': attribute type 63 has an invalid length. [ 943.097327][ T5205] netlink: 'syz.4.8118': attribute type 63 has an invalid length. [ 943.175369][ T5211] syzkaller0: entered promiscuous mode [ 943.188031][ T5211] syzkaller0: entered allmulticast mode [ 943.865473][ T5237] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 943.892775][ T5239] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 944.104122][ T5251] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8129'. [ 944.124939][ T5251] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8129'. [ 944.269089][ T5258] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8130'. [ 944.296839][ T5258] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8130'. [ 944.348947][ T5258] gretap2: entered promiscuous mode [ 944.369736][ T5258] gretap2: entered allmulticast mode [ 944.615665][ T5270] netlink: 'syz.2.8134': attribute type 1 has an invalid length. [ 944.658087][ T5273] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8135'. [ 945.233437][ T5312] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 947.801938][ T5296] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 948.406807][ T5352] netlink: 'syz.2.8155': attribute type 1 has an invalid length. [ 948.454850][ T5359] bond1: (slave gre0): Device is not bonding slave [ 948.463819][ T5359] bond1: option active_slave: invalid value (gre0) [ 948.476411][ T5359] bond1 (unregistering): Released all slaves [ 948.682492][ T5364] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8156'. [ 948.770946][ T5390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8163'. [ 949.354571][ T5415] netlink: 'syz.5.8175': attribute type 4 has an invalid length. [ 949.393673][ T5415] netlink: 'syz.5.8175': attribute type 3 has an invalid length. [ 949.429168][ T5415] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8175'. [ 949.574814][ T5437] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 949.597343][ T5437] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8180'. [ 949.620216][ T5442] pim6reg527: entered allmulticast mode [ 949.813254][ T5454] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 950.034035][ T5468] netlink: 'syz.5.8189': attribute type 21 has an invalid length. [ 950.053040][ T5468] netlink: 'syz.5.8189': attribute type 6 has an invalid length. [ 950.064846][ T5468] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8189'. [ 950.141036][ T5477] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8191'. [ 950.215294][ T5480] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8193'. [ 950.464668][ T5490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8195'. [ 950.602446][ T5503] syzkaller0: entered promiscuous mode [ 950.618191][ T5503] syzkaller0: entered allmulticast mode [ 950.640879][ T5503] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8198'. [ 950.667941][ T5503] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8198'. [ 950.760854][ T5514] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8202'. [ 950.968812][ T5523] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8205'. [ 951.253129][ T5546] netlink: 'syz.5.8212': attribute type 30 has an invalid length. [ 951.420374][ T5552] netlink: 'syz.0.8216': attribute type 1 has an invalid length. [ 951.591253][ T5556] tipc: Started in network mode [ 951.597450][ T5556] tipc: Node identity 2007ff, cluster identity 4711 [ 951.604336][ T5556] tipc: Node number set to 2099199 [ 952.230515][T11443] dvmrp0: left allmulticast mode [ 952.239260][T11443] pimreg3: left allmulticast mode [ 952.498242][T11443] bond10 (unregistering): (slave ip6gretap2): Releasing active interface [ 952.801789][ T5587] openvswitch: netlink: Flow key attr not present in new flow. [ 953.285471][T11443] bond0 (unregistering): Released all slaves [ 953.313056][T11443] bond1 (unregistering): Released all slaves [ 953.334910][T11443] bond2 (unregistering): Released all slaves [ 953.362942][T11443] bond3 (unregistering): Released all slaves [ 953.381507][T11443] bond4 (unregistering): Released all slaves [ 953.407966][T11443] bond5 (unregistering): Released all slaves [ 953.425118][T11443] bond6 (unregistering): Released all slaves [ 953.444420][T11443] bond8 (unregistering): Released all slaves [ 953.463289][T11443] bond7 (unregistering): Released all slaves [ 953.482737][T11443] bond9 (unregistering): Released all slaves [ 953.503284][T11443] bond10 (unregistering): Released all slaves [ 953.729028][T11443] : left promiscuous mode [ 953.859574][ T5609] syzkaller1: entered promiscuous mode [ 953.883331][ T5609] syzkaller1: entered allmulticast mode [ 954.594401][ T5642] __nla_validate_parse: 7 callbacks suppressed [ 954.594422][ T5642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8242'. [ 955.578005][ T5678] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8251'. [ 955.622490][ T5679] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8251'. [ 955.915717][T11443] veth1_macvtap: left promiscuous mode [ 955.946873][T11443] veth0_macvtap: left promiscuous mode [ 955.967657][T11443] veth1_vlan: left promiscuous mode [ 955.973477][ T5690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8254'. [ 955.983176][ T5690] netlink: 'syz.0.8254': attribute type 30 has an invalid length. [ 955.984431][T11443] veth0_vlan: left promiscuous mode [ 956.143591][ T5703] Bluetooth: MGMT ver 1.23 [ 956.792246][ T5695] netlink: 256 bytes leftover after parsing attributes in process `syz.5.8255'. [ 956.908776][ T5723] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 957.010961][ T5728] openvswitch: netlink: IP tunnel dst address not specified [ 957.052813][ T5731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8263'. [ 957.250351][T11443] IPVS: stop unused estimator thread 0... [ 957.335681][ T5744] netlink: 'syz.5.8266': attribute type 1 has an invalid length. [ 957.417853][ T5738] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8265'. [ 957.527024][ T5750] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8267'. [ 957.571638][ T5750] openvswitch: netlink: IP tunnel dst address not specified [ 957.701351][ T5767] netlink: 164 bytes leftover after parsing attributes in process `syz.5.8270'. [ 957.727997][ T5767] netlink: 164 bytes leftover after parsing attributes in process `syz.5.8270'. [ 957.746824][ T5767] netlink: 'syz.5.8270': attribute type 1 has an invalid length. [ 958.238503][ T5639] Bluetooth: hci2: command 0x0401 tx timeout [ 958.244992][T23636] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 958.434102][ T5813] netlink: 'syz.5.8283': attribute type 1 has an invalid length. [ 958.477980][ T984] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 958.670815][ T5827] No such timeout policy "syz0" [ 958.953520][ T5802] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 959.253952][ T5856] sctp: [Deprecated]: syz.1.8292 (pid 5856) Use of int in maxseg socket option. [ 959.253952][ T5856] Use struct sctp_assoc_value instead [ 961.742353][ T5829] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 961.934025][ T5859] __nla_validate_parse: 12 callbacks suppressed [ 961.934049][ T5859] netlink: 244 bytes leftover after parsing attributes in process `syz.5.8295'. [ 962.078689][ T5876] tipc: New replicast peer: 255.255.255.255 [ 962.089691][ T5876] tipc: Enabled bearer , priority 10 [ 962.096637][ T5876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8298'. [ 962.856551][ T5917] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 963.982598][ T5945] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.8316'. [ 964.154277][ T5948] x_tables: duplicate underflow at hook 2 [ 964.419717][ T5963] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8325'. [ 964.756499][ T5639] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 964.769788][ T5639] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 964.779487][ T5639] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 964.804963][ T5639] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 964.814473][ T5639] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 965.204871][ T5999] : entered promiscuous mode [ 965.623693][ T6020] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8341'. [ 966.024920][ T4421] IPVS: starting estimator thread 0... [ 966.127344][ T6038] IPVS: using max 33 ests per chain, 79200 per kthread [ 966.520294][ T6060] pim6reg527: entered allmulticast mode [ 966.882421][ T5639] Bluetooth: hci6: command tx timeout [ 967.136084][ T6091] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8360'. [ 967.166329][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8359'. [ 967.207002][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8359'. [ 967.369538][ T6103] tipc: Started in network mode [ 967.382502][ T6103] tipc: Node identity 12c80accfd64, cluster identity 4711 [ 967.405525][ T6103] tipc: Enabled bearer , priority 0 [ 967.449014][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8363'. [ 967.556858][ T6103] syzkaller0: entered promiscuous mode [ 967.571814][ T6103] syzkaller0: entered allmulticast mode [ 967.588950][ T6103] tipc: Resetting bearer [ 967.690722][ T6297] tipc: Resetting bearer [ 968.966219][ T5639] Bluetooth: hci6: command tx timeout [ 971.038676][ T5639] Bluetooth: hci6: command tx timeout [ 971.507659][ T5742] tipc: Node number set to 4021029580 [ 971.610495][ T6101] tipc: Resetting bearer [ 971.650394][ T6101] tipc: Disabling bearer [ 971.697524][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.705008][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.714629][ T5979] bridge_slave_0: entered allmulticast mode [ 971.724141][ T5979] bridge_slave_0: entered promiscuous mode [ 971.752981][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.765319][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.774764][ T5979] bridge_slave_1: entered allmulticast mode [ 971.783568][ T5979] bridge_slave_1: entered promiscuous mode [ 971.928340][ T5979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 971.953859][ T5979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.964966][ T6147] netlink: 312 bytes leftover after parsing attributes in process `syz.4.8373'. [ 971.996823][ T6148] netlink: 312 bytes leftover after parsing attributes in process `syz.4.8373'. [ 972.030127][ T5979] team0: Port device team_slave_0 added [ 972.057505][ T5979] team0: Port device team_slave_1 added [ 972.152351][ T5979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 972.162286][ T5979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.194817][ T5979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 972.229999][ T6150] syzkaller0: entered promiscuous mode [ 972.235702][ T6150] syzkaller0: entered allmulticast mode [ 972.267755][ T5979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 972.287345][ T5979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.361934][ T5979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 972.544669][ T6170] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8378'. [ 972.581131][ T6170] netlink: 'syz.5.8378': attribute type 7 has an invalid length. [ 972.590733][ T6170] netlink: 'syz.5.8378': attribute type 8 has an invalid length. [ 972.614224][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8378'. [ 972.658354][ T5979] hsr_slave_0: entered promiscuous mode [ 972.687241][ T5979] hsr_slave_1: entered promiscuous mode [ 972.710252][ T5979] debugfs: 'hsr0' already exists in 'hsr' [ 972.744030][ T5979] Cannot create hsr debugfs directory [ 972.798718][ T6182] netlink: 'syz.4.8381': attribute type 1 has an invalid length. [ 972.917684][ T6186] openvswitch: netlink: Flow key attribute not present in set flow. [ 972.962228][ T6182] bond9: entered promiscuous mode [ 972.984454][ T6182] 8021q: adding VLAN 0 to HW filter on device bond9 [ 973.084317][ T6183] bond9: (slave bridge2): making interface the new active one [ 973.114420][ T6183] bridge2: entered promiscuous mode [ 973.127492][ T5639] Bluetooth: hci6: command tx timeout [ 973.145156][ T6183] bond9: (slave bridge2): Enslaving as an active interface with an up link [ 973.322566][ T6211] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 973.469807][ T6218] netlink: 72 bytes leftover after parsing attributes in process `syz.5.8391'. [ 973.899483][ T6234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 973.915446][ T5979] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 973.943338][ T5979] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 973.952568][ T5979] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 973.965581][ T5979] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 973.978629][ T5979] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 973.990675][ T5979] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 974.001520][ T5979] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 974.017879][ T5979] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 974.196708][ T6251] IPv6: NLM_F_CREATE should be specified when creating new route [ 974.204813][ T6251] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 974.212159][ T6251] IPv6: NLM_F_CREATE should be set when creating new route [ 974.392991][ T6258] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8404'. [ 974.567171][ T6268] netlink: 'syz.1.8407': attribute type 1 has an invalid length. [ 974.652092][ T6270] openvswitch: netlink: IP tunnel dst address not specified [ 974.663427][ T6270] netlink: zone id is out of range [ 974.669604][ T6270] netlink: zone id is out of range [ 974.674792][ T6270] netlink: zone id is out of range [ 974.680572][ T6270] netlink: zone id is out of range [ 974.685717][ T6270] netlink: zone id is out of range [ 974.691653][ T6270] netlink: zone id is out of range [ 974.697528][ T6270] netlink: zone id is out of range [ 974.715159][ T6270] SET target dimension over the limit! [ 974.715162][ T6271] SET target dimension over the limit! [ 976.859091][ T6236] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 977.051086][ T6294] netlink: 13 bytes leftover after parsing attributes in process `syz.0.8411'. [ 977.163341][ T6299] tipc: Enabled bearer , priority 0 [ 977.179997][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8412'. [ 977.197207][ T6299] syzkaller0: entered promiscuous mode [ 977.205472][ T6299] syzkaller0: entered allmulticast mode [ 977.233961][ T6299] tipc: Resetting bearer [ 977.261063][ T6296] tipc: Resetting bearer [ 977.267706][ T6309] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8412'. [ 977.334261][ T6296] tipc: Disabling bearer [ 977.370503][ T6314] netlink: 'syz.0.8416': attribute type 1 has an invalid length. [ 977.422153][ T6314] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 977.472894][ T5979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 977.576840][ T5979] 8021q: adding VLAN 0 to HW filter on device team0 [ 977.632189][ T6303] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.639479][ T6303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 977.708077][ T6303] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.715354][ T6303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 977.884071][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8423'. [ 978.097344][ T6347] netlink: 'syz.1.8426': attribute type 39 has an invalid length. [ 978.207498][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8427'. [ 978.259980][ T6350] macsec1: entered promiscuous mode [ 978.269973][ T6350] bridge0: entered promiscuous mode [ 978.286612][ T6350] macsec1: entered allmulticast mode [ 978.296175][ T6350] bridge0: entered allmulticast mode [ 978.335335][ T6350] bridge0: port 3(macsec1) entered blocking state [ 978.342759][ T6350] bridge0: port 3(macsec1) entered disabled state [ 978.411669][ T6350] bridge0: left allmulticast mode [ 978.480897][ T994] bridge0: left promiscuous mode [ 978.500727][ T6354] netlink: 'syz.4.8428': attribute type 29 has an invalid length. [ 978.510484][ T6357] netlink: 'syz.4.8428': attribute type 29 has an invalid length. [ 978.557280][ T6354] netlink: 264 bytes leftover after parsing attributes in process `syz.4.8428'. [ 978.825385][ T6373] IPv6: Can't replace route, no match found [ 979.021849][ T6387] net_ratelimit: 821 callbacks suppressed [ 979.021886][ T6387] openvswitch: netlink: IPv4 tun info is not correct [ 979.247485][ T5979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.638660][ T6418] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 980.004674][ T5979] veth0_vlan: entered promiscuous mode [ 980.033958][ T5979] veth1_vlan: entered promiscuous mode [ 980.050825][ T6443] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20003 [ 980.088179][ T6443] IPVS: set_ctl: invalid protocol: 60 172.30.1.5:20002 [ 980.185236][ T5979] veth0_macvtap: entered promiscuous mode [ 980.222541][ T5979] veth1_macvtap: entered promiscuous mode [ 980.283717][ T5979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 980.325184][ T5979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 980.364960][ T6459] netlink: 144 bytes leftover after parsing attributes in process `syz.5.8453'. [ 980.375271][ T3338] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.395242][ T3338] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.428463][ T3338] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.461124][ T3338] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.562903][ T6466] netlink: 108 bytes leftover after parsing attributes in process `syz.4.8454'. [ 980.785158][ T984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.821903][ T984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.962369][T11449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.988096][T11449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.022545][ T6482] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8459'. [ 981.111153][ T6484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8460'. [ 981.409327][ T6503] netlink: 'syz.6.8466': attribute type 4 has an invalid length. [ 981.638574][ T6510] ipvlan2: entered allmulticast mode [ 981.644810][ T6510] batadv_slave_1: entered allmulticast mode [ 981.657325][ T6510] batman_adv: batadv0: Adding interface: ipvlan2 [ 981.663826][ T6510] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 981.700032][ T42] page_pool_release_retry() stalled pool shutdown: id 47, 1 inflight 785 sec [ 981.712513][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.756688][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.793422][ T6510] batman_adv: batadv0: Interface activated: ipvlan2 [ 981.838717][ T6519] syzkaller0: entered promiscuous mode [ 981.858236][ T6519] syzkaller0: entered allmulticast mode [ 981.955162][ T6525] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.8471'. [ 982.156519][ T5639] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 982.414717][ T6541] bond10: entered promiscuous mode [ 982.432849][ T6541] macvlan3: entered promiscuous mode [ 982.439005][ T6541] macvlan3: entered allmulticast mode [ 982.611508][ T6546] tipc: Trying to set illegal importance in message [ 982.648911][ T6547] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8478'. [ 982.658521][ T6551] netlink: 'syz.5.8479': attribute type 1 has an invalid length. [ 982.658568][ T6551] netlink: 'syz.5.8479': attribute type 1 has an invalid length. [ 982.844312][ T6557] netlink: 'syz.6.8482': attribute type 8 has an invalid length. [ 982.960263][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8482'. [ 982.969574][ T6569] netlink: 'syz.6.8482': attribute type 8 has an invalid length. [ 983.000356][ T6561] bond9: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 983.055084][ T6561] bond9 (unregistering): Released all slaves [ 983.375548][ T6587] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8491'. [ 983.727639][ T6604] netlink: 'syz.0.8498': attribute type 2 has an invalid length. [ 983.742367][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8499'. [ 983.752872][ T6608] xt_hashlimit: size too large, truncated to 1048576 [ 983.759140][ T6604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8498'. [ 983.769414][ T6606] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8499'. [ 983.794865][ T6604] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8498'. [ 983.821962][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8499'. [ 983.831561][ T6606] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8499'. [ 983.909461][ T6615] netlink: 'syz.4.8501': attribute type 1 has an invalid length. [ 983.948952][ T6297] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 983.959459][ T6615] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8501'. [ 983.972332][ T6297] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 983.988876][ T6615] NCSI netlink: No device for ifindex 0 [ 984.017749][ T6297] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.028017][ T6297] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.443259][ T6639] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8507'. [ 984.490442][ T6639] netlink: 'syz.6.8507': attribute type 1 has an invalid length. [ 984.801553][ T6658] netlink: 'syz.1.8513': attribute type 1 has an invalid length. [ 984.974519][ T6665] netlink: 'syz.4.8514': attribute type 11 has an invalid length. [ 984.992757][ T6672] netlink: 'syz.0.8515': attribute type 21 has an invalid length. [ 985.027186][ T6672] IPv6: NLM_F_CREATE should be specified when creating new route [ 985.055330][ T6672] netlink: 'syz.0.8515': attribute type 1 has an invalid length. [ 985.141696][ T6679] veth0: entered promiscuous mode [ 985.213348][ T6684] netlink: 'syz.1.8519': attribute type 32 has an invalid length. [ 985.345385][ T6663] veth0: left promiscuous mode [ 985.499644][ T6700] netlink: 'syz.5.8523': attribute type 14 has an invalid length. [ 986.313171][ T6752] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 986.625686][ T6756] syzkaller0: entered promiscuous mode [ 986.634839][ T6756] syzkaller0: entered allmulticast mode [ 990.481076][ T6728] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 990.899433][ T6799] __nla_validate_parse: 7 callbacks suppressed [ 990.899454][ T6799] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8547'. [ 991.519286][ T6828] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8558'. [ 991.581776][ T6829] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 991.585677][ T6831] netlink: 116 bytes leftover after parsing attributes in process `syz.6.8560'. [ 991.633731][ T6831] IPv6: sit1: Disabled Multicast RS [ 991.650568][ T6829] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8559'. [ 991.662125][ T6831] sit1: entered allmulticast mode [ 991.683645][ T6836] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8560'. [ 991.728153][ T6829] bond2 (unregistering): Released all slaves [ 991.875547][ T6836] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8560'. [ 991.980236][ T6850] netlink: 'syz.4.8565': attribute type 2 has an invalid length. [ 992.015705][ T6850] netlink: 'syz.4.8565': attribute type 1 has an invalid length. [ 992.093512][ T6850] netlink: 810 bytes leftover after parsing attributes in process `syz.4.8565'. [ 992.284750][ T6867] netlink: 'syz.1.8572': attribute type 1 has an invalid length. [ 992.300002][ T6866] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8572'. [ 992.442762][ T6869] bond6: (slave bridge4): Enslaving as a backup interface with an up link [ 992.489592][ T6866] macvlan2: entered promiscuous mode [ 992.505724][ T6866] macvlan2: entered allmulticast mode [ 992.519826][ T6866] bond6: entered promiscuous mode [ 992.525227][ T6866] bridge4: entered promiscuous mode [ 992.532775][ T6866] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 992.589679][ T6866] bond6: left promiscuous mode [ 992.596906][ T6866] bridge4: left promiscuous mode [ 992.655249][ T6878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8575'. [ 993.212108][ T6901] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8580'. [ 993.684309][ T6919] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 993.761146][ T6919] bond9 (unregistering): Released all slaves [ 993.988294][ T6942] netlink: 'syz.4.8593': attribute type 1 has an invalid length. [ 993.998443][ T6942] netlink: 'syz.4.8593': attribute type 11 has an invalid length. [ 994.009787][ T6943] netlink: 'syz.4.8593': attribute type 1 has an invalid length. [ 994.027870][ T6943] netlink: 'syz.4.8593': attribute type 11 has an invalid length. [ 994.288980][ T6962] atomic_op ffff888026fe5198 conn xmit_atomic 0000000000000000 [ 994.429536][ T6968] netlink: 'syz.4.8600': attribute type 2 has an invalid length. [ 994.609044][ T6973] syzkaller0: entered promiscuous mode [ 994.614820][ T6973] syzkaller0: entered allmulticast mode [ 994.727152][ T6980] xt_TPROXY: Can be used only with -p tcp or -p udp [ 994.983003][ T6987] x_tables: duplicate underflow at hook 2 [ 995.317240][ T7004] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 995.843714][ T7039] netlink: 'syz.0.8620': attribute type 10 has an invalid length. [ 995.870092][ T7023] bridge5: port 1(veth0_to_bond) entered blocking state [ 995.878267][ T7023] bridge5: port 1(veth0_to_bond) entered disabled state [ 995.885658][ T7023] veth0_to_bond: entered allmulticast mode [ 995.897779][ T7023] veth0_to_bond: entered promiscuous mode [ 995.912667][ T7033] __nla_validate_parse: 44 callbacks suppressed [ 995.912686][ T7033] netlink: 76 bytes leftover after parsing attributes in process `syz.6.8619'. [ 996.199560][ T7059] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 996.318418][ T7064] bridge0: port 1(batadv1) entered blocking state [ 996.359863][ T7064] bridge0: port 1(batadv1) entered disabled state [ 996.414458][ T7064] batadv1: entered allmulticast mode [ 996.471024][ T7064] batadv1: entered promiscuous mode [ 996.500871][ T7068] netlink: 596 bytes leftover after parsing attributes in process `syz.0.8629'. [ 996.513382][ T7071] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8627'. [ 996.611967][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8627'. [ 996.796238][T14915] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 996.807934][T14915] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 996.994283][ T7097] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8635'. [ 997.072985][ T7103] syzkaller0: entered promiscuous mode [ 997.080524][ T7103] syzkaller0: entered allmulticast mode [ 997.602113][ T7125] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8646'. [ 997.680996][ T7128] netlink: 'syz.0.8648': attribute type 9 has an invalid length. [ 997.690389][ T7133] netlink: 'syz.1.8650': attribute type 9 has an invalid length. [ 997.879802][ T7140] netlink: 14 bytes leftover after parsing attributes in process `syz.5.8651'. [ 997.964007][ T29] audit: type=1804 audit(1779767810.484:99): pid=7143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.8653" name="/newroot/431/cgroup.controllers" dev="tmpfs" ino=2222 res=1 errno=0 [ 998.013829][ T29] audit: type=1800 audit(1779767810.484:100): pid=7143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8653" name="cgroup.controllers" dev="tmpfs" ino=2222 res=0 errno=0 [ 998.088699][ T7140] netlink: 116 bytes leftover after parsing attributes in process `syz.5.8651'. [ 998.338200][ T7157] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 998.365400][ T7162] netlink: 'syz.5.8661': attribute type 21 has an invalid length. [ 998.383244][ T7162] netlink: 168 bytes leftover after parsing attributes in process `syz.5.8661'. [ 998.467984][ T7166] veth0_to_bond: left allmulticast mode [ 998.486272][ T7166] veth0_to_bond: left promiscuous mode [ 998.513963][ T7166] bridge5: port 1(veth0_to_bond) entered disabled state [ 998.600817][ T7173] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8666'. [ 998.610930][ T7166] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 998.720719][ T7179] netlink: 'syz.4.8665': attribute type 3 has an invalid length. [ 998.909155][ T7190] syzkaller0: entered promiscuous mode [ 998.925636][ T7190] syzkaller0: entered allmulticast mode [ 999.197616][ T7205] syzkaller1: entered promiscuous mode [ 999.216260][ T7205] syzkaller1: entered allmulticast mode [ 999.263760][ T7212] IPv6: NLM_F_REPLACE set, but no existing node found! [ 999.388527][ T7220] xt_cgroup: invalid path, errno=-2 [ 999.472169][ T7227] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 999.540587][ T7228] bond9 (unregistering): Released all slaves [ 1000.067281][ T7256] bond1 (unregistering): Released all slaves [ 1001.864977][ T7189] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1002.051722][ T7279] netlink: 'syz.6.8691': attribute type 1 has an invalid length. [ 1002.098423][ T7282] netlink: 'syz.4.8690': attribute type 1 has an invalid length. [ 1002.168683][ T7279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1002.183630][ T7289] ip6t_rpfilter: unknown options [ 1002.190043][ T7284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1002.320977][ T7296] __nla_validate_parse: 3 callbacks suppressed [ 1002.320999][ T7296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8695'. [ 1002.345127][ T7286] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1002.350147][ T7296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8695'. [ 1002.386195][ T7282] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1002.431799][ T7279] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1002.478906][ T7279] bond1: (slave batadv1): making interface the new active one [ 1002.535208][ T7279] batadv1: entered promiscuous mode [ 1002.541701][ T7307] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8697'. [ 1002.565273][ T7279] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1002.594293][ T7296] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8695'. [ 1002.606603][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8696'. [ 1002.697511][ T7307] ip6erspan1: entered allmulticast mode [ 1002.728642][ T7305] syzkaller0: entered promiscuous mode [ 1002.741802][ T7305] syzkaller0: entered allmulticast mode [ 1002.799353][ T7317] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8699'. [ 1003.211227][ T7343] netlink: 'syz.6.8704': attribute type 83 has an invalid length. [ 1003.491820][ T7365] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 1003.795489][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8712'. [ 1004.073118][ T7390] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8719'. [ 1004.144788][ T7393] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 1004.193683][ T7393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1004.307280][T23636] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1004.325348][T23636] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1004.339848][T23636] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1004.358825][T23636] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1004.372248][T23636] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1004.445125][ T7395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8720'. [ 1004.588782][ T7401] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8720'. [ 1004.627255][ T7406] netlink: zone id is out of range [ 1004.646876][ T7406] netlink: del zone limit has 4 unknown bytes [ 1004.960141][ T7413] netlink: 'syz.5.8723': attribute type 1 has an invalid length. [ 1005.288604][ T7425] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1005.551544][ T6730] bond0: (slave bond_slave_0): interface is now down [ 1005.570799][ T6730] bond0: (slave bond_slave_1): interface is now down [ 1005.635136][ T6730] bond0: now running without any active interface! [ 1005.669386][ T7438] tipc: Trying to set illegal importance in message [ 1006.090980][ T7449] netlink: 'syz.1.8733': attribute type 4 has an invalid length. [ 1006.113454][ T7446] xt_hashlimit: size too large, truncated to 1048576 [ 1006.275263][ T7427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1006.478649][ T5639] Bluetooth: hci7: command tx timeout [ 1006.823815][ T7398] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.831969][ T7398] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.839861][ T7398] bridge_slave_0: entered allmulticast mode [ 1006.847751][ T7398] bridge_slave_0: entered promiscuous mode [ 1006.856976][ T7398] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.864512][ T7398] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.872258][ T7398] bridge_slave_1: entered allmulticast mode [ 1006.881087][ T7398] bridge_slave_1: entered promiscuous mode [ 1007.007539][ T7398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1007.019362][ T7488] netlink: 'syz.4.8741': attribute type 3 has an invalid length. [ 1007.051529][ T7398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1007.218457][ T7494] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1007.261258][ T7494] bond2 (unregistering): Released all slaves [ 1007.323045][ T7398] team0: Port device team_slave_0 added [ 1007.339892][ T7398] team0: Port device team_slave_1 added [ 1007.438277][ T7398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1007.447494][ T7398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.483026][ T7398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1007.498729][ T7398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1007.508141][ T7398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.550302][ T7398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1007.578627][ T7512] 8021q: VLANs not supported on gre0 [ 1007.672196][ T7507] netlink: 'syz.1.8747': attribute type 2 has an invalid length. [ 1007.683789][ T7398] hsr_slave_0: entered promiscuous mode [ 1007.698634][ T7398] hsr_slave_1: entered promiscuous mode [ 1007.715143][ T7398] debugfs: 'hsr0' already exists in 'hsr' [ 1007.721432][ T7398] Cannot create hsr debugfs directory [ 1007.863476][ T7525] __nla_validate_parse: 13 callbacks suppressed [ 1007.863500][ T7525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8752'. [ 1008.070393][ T7398] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1008.081928][ T7398] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1008.163235][ T7398] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1008.174942][ T7398] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1008.245609][ T7398] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1008.256390][ T7398] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1008.334875][ T7398] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1008.346196][ T7398] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1008.568717][ T5639] Bluetooth: hci7: command tx timeout [ 1010.547238][ T7511] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1010.598573][ T7398] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1010.643448][ T5639] Bluetooth: hci7: command tx timeout [ 1010.709388][ T7544] netlink: 'syz.5.8756': attribute type 2 has an invalid length. [ 1010.739869][ T7398] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1010.774086][ T7398] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1010.809158][ T7398] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1010.835147][ T7398] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1010.858623][ T7554] Bluetooth: MGMT ver 1.23 [ 1010.879455][ T7554] Bluetooth: hci1: too big key_count value 32778 [ 1010.891766][ T7398] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1010.929380][ T7398] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1010.951528][ T7398] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1011.444810][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8763'. [ 1011.480900][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8763'. [ 1011.612965][ T7398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1011.688284][ T7398] 8021q: adding VLAN 0 to HW filter on device team0 [ 1011.748771][ T6730] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.756098][ T6730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1011.797429][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8767'. [ 1011.818748][ T7599] netlink: 'syz.6.8768': attribute type 11 has an invalid length. [ 1011.845592][ T6731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.851712][ T7599] netlink: 199828 bytes leftover after parsing attributes in process `syz.6.8768'. [ 1011.853135][ T6731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1011.875638][ T7605] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8769'. [ 1011.940975][ T7599] netlink: 'syz.6.8768': attribute type 15 has an invalid length. [ 1012.184738][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8771'. [ 1012.217783][ T7613] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8771'. [ 1012.522816][ T7626] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.8775'. [ 1012.544569][ T7626] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.8775'. [ 1012.717012][ T5639] Bluetooth: hci7: command tx timeout [ 1012.834111][ T7639] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1013.354028][ T7669] __nla_validate_parse: 2 callbacks suppressed [ 1013.354050][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8785'. [ 1013.363653][ T7660] bond7 (unregistering): Released all slaves [ 1013.372767][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8785'. [ 1013.443021][ T7398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1013.598299][ T7674] netlink: 'syz.4.8786': attribute type 1 has an invalid length. [ 1013.653330][ T7676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8788'. [ 1013.699976][ T7674] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1013.712565][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8786'. [ 1013.731193][ T7681] bond12: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 1013.753729][ T7681] bond12: entered allmulticast mode [ 1013.857636][ T6731] batadv1: left promiscuous mode [ 1013.930788][ T7398] veth0_vlan: entered promiscuous mode [ 1013.977900][ T7398] veth1_vlan: entered promiscuous mode [ 1014.074114][ T7398] veth0_macvtap: entered promiscuous mode [ 1014.123521][ T7398] veth1_macvtap: entered promiscuous mode [ 1014.184232][ T7398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1014.243247][ T7398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1014.312735][ T6730] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.352214][ T7692] netlink: 'syz.1.8792': attribute type 27 has an invalid length. [ 1014.353634][ T6730] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.415330][ T6730] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.451648][ T6730] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.545926][ T7696] netlink: 'syz.4.8793': attribute type 1 has an invalid length. [ 1014.564967][ T7696] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8793'. [ 1014.662380][ T7696] netlink: 658 bytes leftover after parsing attributes in process `syz.4.8793'. [ 1014.719597][ T7696] netlink: 1 bytes leftover after parsing attributes in process `syz.4.8793'. [ 1014.904918][ T6731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.931870][ T6731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.013530][ T6730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1015.024774][ T6730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.445613][ T6729] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 1015.459283][ T7730] netlink: 'syz.1.8801': attribute type 1 has an invalid length. [ 1015.479631][ T7730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1015.795218][T23636] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1015.822123][T23636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1015.832139][T23636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1015.842437][T23636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1015.853675][T23636] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1016.101771][ T7721] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1016.182876][ T7723] netlink: 'syz.0.8716': attribute type 2 has an invalid length. [ 1016.210846][ T7723] netlink: 'syz.0.8716': attribute type 2 has an invalid length. [ 1017.100151][ T7780] netlink: 244 bytes leftover after parsing attributes in process `syz.6.8815'. [ 1017.379928][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8818'. [ 1017.407749][ T7786] netlink: 'syz.5.8818': attribute type 5 has an invalid length. [ 1017.431048][ T7786] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8818'. [ 1017.487107][ T7786] geneve2: entered promiscuous mode [ 1017.495221][ T7786] geneve2: entered allmulticast mode [ 1017.511361][ T6726] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1017.538747][ T6726] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1017.562132][ T6726] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1017.581958][ T6726] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1017.714109][ T7796] geneve1: left promiscuous mode [ 1017.917000][T23636] Bluetooth: hci4: command tx timeout [ 1017.993868][ T7809] netlink: 'syz.0.8823': attribute type 1 has an invalid length. [ 1018.730003][ T7833] __nla_validate_parse: 1 callbacks suppressed [ 1018.730028][ T7833] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8831'. [ 1018.797406][ T7833] netlink: 'syz.5.8831': attribute type 2 has an invalid length. [ 1019.090435][ T7849] netlink: 'syz.5.8835': attribute type 10 has an invalid length. [ 1019.122004][ T7849] netlink: 228 bytes leftover after parsing attributes in process `syz.5.8835'. [ 1019.149718][ T7850] netlink: 'syz.6.8836': attribute type 1 has an invalid length. [ 1019.167611][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8835'. [ 1019.196999][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8835'. [ 1019.271757][ T7856] netlink: 'syz.0.8837': attribute type 1 has an invalid length. [ 1019.296191][ T7856] netlink: 228 bytes leftover after parsing attributes in process `syz.0.8837'. [ 1019.395651][ T7856] netlink: 'syz.0.8837': attribute type 1 has an invalid length. [ 1019.503846][ T7739] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.523451][ T7739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.540733][ T7739] bridge_slave_0: entered allmulticast mode [ 1019.555463][ T7739] bridge_slave_0: entered promiscuous mode [ 1019.577879][ T7739] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.592549][ T7739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.604349][ T7739] bridge_slave_1: entered allmulticast mode [ 1019.621505][ T7739] bridge_slave_1: entered promiscuous mode [ 1019.721270][ T7739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1019.759328][ T7739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1019.874126][ T7739] team0: Port device team_slave_0 added [ 1019.919385][ T7739] team0: Port device team_slave_1 added [ 1019.955053][ T7871] netlink: 'syz.5.8842': attribute type 1 has an invalid length. [ 1020.001720][T23636] Bluetooth: hci4: command tx timeout [ 1020.136489][ T7871] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1020.292968][ T7881] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1020.307036][ T7881] bond4 (unregistering): Released all slaves [ 1020.345171][ T7739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.353233][ T7739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1020.383028][ T7739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.438206][ T7739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.454260][ T7739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1020.488680][ T7739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.758322][ T7739] hsr_slave_0: entered promiscuous mode [ 1020.769597][ T7739] hsr_slave_1: entered promiscuous mode [ 1020.790227][ T7739] debugfs: 'hsr0' already exists in 'hsr' [ 1020.803199][ T7739] Cannot create hsr debugfs directory [ 1020.848325][ T7914] netlink: 6024 bytes leftover after parsing attributes in process `syz.6.8851'. [ 1020.881507][ T7913] syz_tun: entered allmulticast mode [ 1020.951465][ T7912] syz_tun: left allmulticast mode [ 1021.069407][ T7919] syzkaller0: entered promiscuous mode [ 1021.084527][ T7919] syzkaller0: entered allmulticast mode [ 1021.540028][ T7936] validate_nla: 1 callbacks suppressed [ 1021.540052][ T7936] netlink: 'syz.0.8859': attribute type 21 has an invalid length. [ 1021.565202][ T7939] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8860'. [ 1021.588919][ T7936] netlink: 'syz.0.8859': attribute type 22 has an invalid length. [ 1021.621777][ T7936] netlink: 'syz.0.8859': attribute type 23 has an invalid length. [ 1021.643906][ T7942] mac80211_hwsim hwsim97 syzkaller0: entered promiscuous mode [ 1021.652443][ T7936] netlink: 'syz.0.8859': attribute type 25 has an invalid length. [ 1021.652470][ T7936] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8859'. [ 1021.676783][ T7942] mac80211_hwsim hwsim97 syzkaller0: entered allmulticast mode [ 1021.904874][ T7739] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1021.919137][ T7739] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.930170][ T7739] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1022.076810][T23636] Bluetooth: hci4: command tx timeout [ 1022.129070][ T7739] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1022.150579][ T7739] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.162838][ T7739] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1022.480695][ T6730] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1022.511687][ T7739] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1022.541928][ T7739] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.566561][ T7739] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1022.757455][ T7739] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1022.769523][ T7739] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.782633][ T7739] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1022.831581][ T7979] batman_adv: batadv0: Adding interface: dummy0 [ 1022.838062][ T7979] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1022.865475][ T7979] batman_adv: batadv0: Interface activated: dummy0 [ 1022.878590][ T7980] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1022.899952][ T7974] batadv0: mtu less than device minimum [ 1022.909830][ T7974] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1022.923888][ T7974] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1022.935287][ T7974] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1022.947044][ T7974] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1022.958897][ T7974] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1022.970768][ T7974] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1022.982402][ T7974] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1022.993831][ T7974] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1023.005718][ T7974] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1023.085700][ T5762] IPVS: starting estimator thread 0... [ 1023.187302][ T7983] IPVS: using max 38 ests per chain, 91200 per kthread [ 1023.655879][ T7739] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1023.683376][ T7739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1023.703424][ T7739] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1023.734754][ T7739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1023.770313][ T7739] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1023.865294][ T7739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1023.877364][ T8019] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8885'. [ 1023.907277][ T7739] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1023.936264][ T7739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1024.005008][ T8025] syzkaller1: entered promiscuous mode [ 1024.024583][ T8025] syzkaller1: entered allmulticast mode [ 1024.103464][ T8035] netem: change failed [ 1024.113165][ T8035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8888'. [ 1024.123979][ T8035] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8888'. [ 1024.134586][ T8035] netlink: 'syz.1.8888': attribute type 5 has an invalid length. [ 1024.155996][ T3958] Bluetooth: hci4: command tx timeout [ 1024.297797][ T7739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1024.333263][ T8040] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8889'. [ 1024.344713][ T8040] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8889'. [ 1024.354404][ T8040] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8889'. [ 1024.364077][ T8040] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8889'. [ 1024.373818][ T8040] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8889'. [ 1024.388320][ T8040] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8889'. [ 1024.401036][ T8040] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8889'. [ 1024.447858][ T7739] 8021q: adding VLAN 0 to HW filter on device team0 [ 1024.493128][ T6726] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.500447][ T6726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.550003][ T6726] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.557387][ T6726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.802054][ T8058] mac80211_hwsim hwsim82 wlan0: entered promiscuous mode [ 1024.821450][ T8058] mac80211_hwsim hwsim82 wlan0: entered allmulticast mode [ 1025.072867][ T8066] syz_tun: entered allmulticast mode [ 1025.136967][ T8072] netlink: 'syz.0.8900': attribute type 11 has an invalid length. [ 1025.194912][ T8070] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1025.238296][ T8070] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1025.487238][ T8081] netlink: 'syz.5.8902': attribute type 5 has an invalid length. [ 1025.588055][ T8086] ±ÿ: renamed from syz_tun (while UP) [ 1025.836041][ T3958] Bluetooth: hci2: command 0x0401 tx timeout [ 1025.849033][ T8098] syzkaller0: entered promiscuous mode [ 1025.862405][ T8098] syzkaller0: entered allmulticast mode [ 1026.086743][ T8100] can: request_module (can-proto-0) failed. [ 1026.104637][ T8108] netlink: 'syz.6.8911': attribute type 1 has an invalid length. [ 1026.173072][ T7739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1027.008548][ T7739] veth0_vlan: entered promiscuous mode [ 1027.055002][ T7739] veth1_vlan: entered promiscuous mode [ 1027.091306][ T8158] netlink: 'syz.6.8925': attribute type 5 has an invalid length. [ 1027.195149][ T7739] veth0_macvtap: entered promiscuous mode [ 1027.235393][ T7739] veth1_macvtap: entered promiscuous mode [ 1027.315065][ T7739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.365383][ T8167] netlink: 'syz.6.8928': attribute type 29 has an invalid length. [ 1027.389420][ T8163] netlink: 'syz.0.8927': attribute type 9 has an invalid length. [ 1027.420822][ T7739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1027.503402][ T6729] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.543747][ T6729] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.570287][ T6729] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.603228][ T6729] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.024015][ T8193] netlink: 'syz.6.8932': attribute type 1 has an invalid length. [ 1028.157135][ T8193] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1028.196963][ T8203] netlink: 'syz.1.8936': attribute type 2 has an invalid length. [ 1028.206355][ T6726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.229295][ T6726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.253600][ T8203] netlink: 'syz.1.8936': attribute type 2 has an invalid length. [ 1028.378781][ T6731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.391970][ T6731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.764001][ T8227] netlink: 'syz.0.8942': attribute type 142 has an invalid length. [ 1028.869529][ T8234] netlink: 'syz.1.8943': attribute type 33 has an invalid length. [ 1028.957472][ T8234] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1028.972219][ T8234] bond8 (unregistering): Released all slaves [ 1029.234842][ T8244] __nla_validate_parse: 79 callbacks suppressed [ 1029.234866][ T8244] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8947'. [ 1029.300212][ T8250] netlink: 232 bytes leftover after parsing attributes in process `syz.1.8950'. [ 1029.329456][ T8253] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.8951'. [ 1029.357763][ T8253] net_ratelimit: 13 callbacks suppressed [ 1029.357784][ T8253] netlink: Conntrack attr has 4 unknown bytes [ 1029.406839][ T8258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8951'. [ 1029.472149][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8951'. [ 1029.531164][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8951'. [ 1030.158149][ T8295] IPVS: set_ctl: invalid protocol: 29463 100.1.1.0:20001 [ 1030.500043][ T8310] netlink: 244 bytes leftover after parsing attributes in process `syz.6.8964'. [ 1030.545409][ T8310] netlink: 'syz.6.8964': attribute type 2 has an invalid length. [ 1030.565352][ T8310] netlink: 'syz.6.8964': attribute type 2 has an invalid length. [ 1030.789828][ T8321] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 1031.229270][ T8336] syzkaller0: entered promiscuous mode [ 1031.244004][ T8336] syzkaller0: entered allmulticast mode [ 1031.545351][ T8362] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8979'. [ 1033.164409][ T8376] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8982'. [ 1033.339334][ T8379] netlink: 112 bytes leftover after parsing attributes in process `syz.4.8983'. [ 1035.931350][ T8390] syz_tun: entered allmulticast mode [ 1035.949402][ T8386] syz_tun: left allmulticast mode [ 1036.137591][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8987'. [ 1036.370022][ T8409] syzkaller0: entered promiscuous mode [ 1036.375551][ T8409] syzkaller0: entered allmulticast mode [ 1036.568092][ T8423] bridge3: entered promiscuous mode [ 1036.573607][ T8423] bridge3: entered allmulticast mode [ 1036.599387][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8995'. [ 1036.617721][ T8428] netlink: 294 bytes leftover after parsing attributes in process `syz.4.8995'. [ 1036.629864][ T8427] netlink: 294 bytes leftover after parsing attributes in process `syz.4.8995'. [ 1036.641755][ T8427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1036.653200][ T8428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1036.839290][ T8432] syzkaller0: entered promiscuous mode [ 1036.898538][ T8433] validate_nla: 2 callbacks suppressed [ 1036.898560][ T8433] netlink: 'syz.0.8997': attribute type 11 has an invalid length. [ 1036.949094][ T8432] syzkaller0: entered allmulticast mode [ 1037.000064][ T8447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8999'. [ 1037.094453][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9001'. [ 1038.879721][ T6731] wlan1: Trigger new scan to find an IBSS to join [ 1040.913814][ T8451] team1: entered promiscuous mode [ 1040.946240][ T8451] team1: entered allmulticast mode [ 1041.212061][ T8469] netlink: 'syz.6.9005': attribute type 5 has an invalid length. [ 1041.384316][ T8477] netlink: 'syz.5.9008': attribute type 1 has an invalid length. [ 1041.397861][ T8477] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9008'. [ 1041.471939][ T8492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9006'. [ 1041.535047][ T8492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9006'. [ 1041.725534][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9012'. [ 1041.751067][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9014'. [ 1041.751729][ T8506] netlink: 'syz.1.9013': attribute type 2 has an invalid length. [ 1041.774671][ T8502] veth1_macvtap: left promiscuous mode [ 1042.076889][ T994] page_pool_release_retry() stalled pool shutdown: id 47, 1 inflight 845 sec [ 1042.929994][ T8573] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9030'. [ 1042.939308][ T8573] netlink: 43 bytes leftover after parsing attributes in process `syz.6.9030'. [ 1042.948881][ T8573] netlink: 'syz.6.9030': attribute type 5 has an invalid length. [ 1042.960967][ T8573] netlink: 43 bytes leftover after parsing attributes in process `syz.6.9030'. [ 1042.972102][ T8573] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20000 [ 1043.155609][ T8581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9033'. [ 1043.370806][ T8589] netlink: 'syz.6.9036': attribute type 21 has an invalid length. [ 1043.391029][ T8589] netlink: 'syz.6.9036': attribute type 6 has an invalid length. [ 1043.410311][ T8589] netlink: 132 bytes leftover after parsing attributes in process `syz.6.9036'. [ 1043.441435][ T8589] netlink: 'syz.6.9036': attribute type 1 has an invalid length. [ 1043.504778][ T8590] veth3: entered allmulticast mode [ 1043.712252][ T8600] syzkaller0: entered promiscuous mode [ 1043.718251][ T8600] syzkaller0: entered allmulticast mode [ 1043.731028][ T8609] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1043.916673][T14915] wlan1: Trigger new scan to find an IBSS to join [ 1044.582404][ T8646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1044.870434][ T6731] wlan1: Creating new IBSS network, BSSID d2:f4:75:e8:9d:cc [ 1045.419045][ T8688] netlink: 'syz.4.9068': attribute type 1 has an invalid length. [ 1045.431151][ T8688] netlink: 'syz.4.9068': attribute type 1 has an invalid length. [ 1045.442402][ T8688] netlink: 'syz.4.9068': attribute type 8 has an invalid length. [ 1045.777238][ T8666] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 1045.913211][ T8701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1046.623635][ T8739] openvswitch: netlink: IP tunnel dst address not specified [ 1046.909739][ T8753] __nla_validate_parse: 12 callbacks suppressed [ 1046.909765][ T8753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9086'. [ 1046.955476][ T8753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9086'. [ 1046.992740][ T8755] bond1: option all_slaves_active: invalid value (8) [ 1047.030949][ T8755] bond1 (unregistering): Released all slaves [ 1047.046453][T23636] Bluetooth: hci4: command 0x0401 tx timeout [ 1047.853025][ T8787] netlink: 'syz.5.9090': attribute type 11 has an invalid length. [ 1047.863694][ T8787] netlink: 'syz.5.9090': attribute type 5 has an invalid length. [ 1047.877536][ T8787] netlink: 6548 bytes leftover after parsing attributes in process `syz.5.9090'. [ 1048.066185][ T8796] xt_recent: Unsupported userspace flags (000000b1) [ 1048.190737][ T8801] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9094'. [ 1048.202833][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9094'. [ 1048.213071][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9094'. [ 1048.360282][ T8811] netlink: 1 bytes leftover after parsing attributes in process `syz.6.9096'. [ 1048.387322][ T8810] netlink: 1 bytes leftover after parsing attributes in process `syz.6.9096'. [ 1048.464515][ T8814] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9098'. [ 1048.498189][ T8814] IPVS: Unknown mcast interface: vcan0 [ 1048.553910][ T8819] netlink: 'syz.6.9100': attribute type 2 has an invalid length. [ 1048.867429][ T8835] netlink: 'syz.1.9105': attribute type 20 has an invalid length. [ 1048.879401][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9105'. [ 1048.904217][ T8835] netlink: 'syz.1.9105': attribute type 20 has an invalid length. [ 1049.064688][ T8852] netlink: 'syz.5.9109': attribute type 1 has an invalid length. [ 1049.255171][ T8861] sock: sock_timestamping_bind_phc: sock not bind to device [ 1049.335444][ T8861] IPv6: sit1: Disabled Multicast RS [ 1049.384019][ T8867] netlink: 'syz.0.9114': attribute type 1 has an invalid length. [ 1049.438485][ T8867] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1049.577944][ T8880] netlink: 'syz.1.9119': attribute type 1 has an invalid length. [ 1049.890164][ T8892] tipc: Started in network mode [ 1049.925839][ T8892] tipc: Node identity 080211000001, cluster identity 4711 [ 1049.938607][ T8894] netlink: 'syz.1.9124': attribute type 1 has an invalid length. [ 1049.957630][ T8892] tipc: Enabled bearer , priority 0 [ 1050.001261][ T8898] netlink: 'syz.5.9125': attribute type 7 has an invalid length. [ 1050.065185][ T8894] bond8: entered promiscuous mode [ 1050.073714][ T8894] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1050.114930][ T8894] bond8: (slave bridge8): making interface the new active one [ 1050.123174][ T8894] bridge8: entered promiscuous mode [ 1050.139629][ T8894] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 1050.178008][ T8895] syzkaller0: mtu less than device minimum [ 1050.184226][ T8898] netlink: 'syz.5.9125': attribute type 7 has an invalid length. [ 1050.263216][ T6729] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1050.297414][ T6729] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1050.385189][ T6729] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1050.437585][ T6729] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1051.185294][ T8935] team0 (unregistering): Port device team_slave_0 removed [ 1051.214868][ T8935] team0 (unregistering): Port device team_slave_1 removed [ 1051.275960][ T5734] tipc: Node number set to 134418688 [ 1051.288377][ T8938] tipc: Started in network mode [ 1051.298504][ T8938] tipc: Node identity ac14140f, cluster identity 4711 [ 1051.319190][ T8938] tipc: New replicast peer: 255.255.255.255 [ 1051.328632][ T8938] tipc: Enabled bearer , priority 10 [ 1051.338852][ T8932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1051.991068][ T8970] netlink: 'syz.6.9144': attribute type 15 has an invalid length. [ 1052.460312][ T8975] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1052.512298][ T8975] bond4 (unregistering): Released all slaves [ 1052.554572][ T5734] tipc: Node number set to 2886997007 [ 1052.569752][ T8979] __nla_validate_parse: 11 callbacks suppressed [ 1052.569788][ T8979] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9146'. [ 1053.030347][ T9001] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.081455][ T9007] netlink: 260 bytes leftover after parsing attributes in process `syz.1.9154'. [ 1053.214235][ T6726] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.313493][ T9010] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9155'. [ 1053.714660][ T9026] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9159'. [ 1053.820522][ T9031] syzkaller1: entered promiscuous mode [ 1053.852160][ T9031] syzkaller1: entered allmulticast mode [ 1054.072286][ T9047] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9165'. [ 1054.341501][ T9057] IPv4: Oversized IP packet from 127.202.26.0 [ 1054.365236][ T9061] validate_nla: 1 callbacks suppressed [ 1054.365258][ T9061] netlink: 'syz.1.9168': attribute type 4 has an invalid length. [ 1054.402418][ T9061] netlink: 240 bytes leftover after parsing attributes in process `syz.1.9168'. [ 1054.489616][ T6731] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1054.982008][ T5293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1055.029710][ T9080] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1055.054556][ T9083] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9176'. [ 1055.552725][ T9112] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9184'. [ 1055.591917][ T9113] netlink: 80 bytes leftover after parsing attributes in process `syz.6.9184'. [ 1055.608526][ T9113] netlink: 80 bytes leftover after parsing attributes in process `syz.6.9184'. [ 1055.782407][ T9123] veth1_to_bond: entered allmulticast mode [ 1055.845164][ T9120] veth1_to_bond: left allmulticast mode [ 1056.394268][ T9150] veth1_macvtap: entered promiscuous mode [ 1056.404197][ T9150] macsec0: entered promiscuous mode [ 1056.414780][ T9150] veth1_macvtap: left promiscuous mode [ 1056.459561][ T9153] veth0: entered promiscuous mode [ 1056.587915][ T9156] netlink: 'syz.6.9199': attribute type 5 has an invalid length. [ 1056.833240][ T9166] veth1_macvtap: left promiscuous mode [ 1057.473796][ T9207] x_tables: duplicate entry at hook 1 [ 1057.593195][ T9210] __nla_validate_parse: 9 callbacks suppressed [ 1057.593216][ T9210] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9218'. [ 1057.633281][ T9212] netlink: 'syz.4.9215': attribute type 8 has an invalid length. [ 1057.735199][ T9217] IPv6: addrconf: prefix option has invalid lifetime [ 1057.858793][ T9222] netlink: 180 bytes leftover after parsing attributes in process `syz.6.9220'. [ 1058.108656][ T9234] ip6gre1: entered allmulticast mode [ 1058.184738][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9226'. [ 1058.256463][ T9249] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9226'. [ 1058.499735][ T9258] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9232'. [ 1058.572364][ T9258] netlink: 120 bytes leftover after parsing attributes in process `syz.4.9232'. [ 1058.602128][ T9265] netlink: 'syz.1.9235': attribute type 3 has an invalid length. [ 1058.640465][ T9265] netlink: 'syz.1.9235': attribute type 1 has an invalid length. [ 1058.684919][ T9265] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9235'. [ 1058.809914][ T9275] vlan2: entered allmulticast mode [ 1058.815218][ T9275] bond0: entered allmulticast mode [ 1058.821251][ T9275] bond_slave_0: entered allmulticast mode [ 1058.863252][ T9275] bond_slave_1: entered allmulticast mode [ 1058.940894][ T9275] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9238'. [ 1059.082882][ T9275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1059.098154][ T9275] bond_slave_0: left allmulticast mode [ 1059.126766][ T9275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1059.142466][ T9275] bond_slave_1: left allmulticast mode [ 1059.164281][ T9275] bond0 (unregistering): Released all slaves [ 1059.313742][ T9308] netlink: 'syz.0.9246': attribute type 1 has an invalid length. [ 1059.322952][ T9308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1059.789441][ T9332] nbd: must specify at least one socket [ 1059.874943][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9253'. [ 1060.052509][ T9346] netlink: 7 bytes leftover after parsing attributes in process `syz.1.9257'. [ 1060.099222][ T6731] bond0: (slave netdevsim1): interface is now down [ 1060.194043][ T6731] bond0: now running without any active interface! [ 1060.581026][ T9363] sctp: [Deprecated]: syz.1.9263 (pid 9363) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1060.581026][ T9363] Use struct sctp_sack_info instead [ 1060.883131][ T9381] netlink: 'syz.1.9268': attribute type 11 has an invalid length. [ 1060.945682][ T9381] vlan4: entered promiscuous mode [ 1060.951365][ T9381] hsr0: entered promiscuous mode [ 1060.968802][ T9381] vlan4: entered allmulticast mode [ 1060.974134][ T9381] hsr0: entered allmulticast mode [ 1060.980525][ T9381] hsr_slave_0: entered allmulticast mode [ 1060.993038][ T9381] hsr_slave_1: entered allmulticast mode [ 1061.322000][ T9397] xt_bpf: check failed: parse error [ 1061.412924][ T9403] x_tables: duplicate underflow at hook 1 [ 1061.810419][ T9423] netlink: 'syz.4.9283': attribute type 21 has an invalid length. [ 1061.989333][ T9429] netlink: 'syz.1.9285': attribute type 29 has an invalid length. [ 1062.026873][ T9429] netlink: 'syz.1.9285': attribute type 29 has an invalid length. [ 1062.028797][ T9431] sctp: [Deprecated]: syz.6.9284 (pid 9431) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1062.028797][ T9431] Use struct sctp_sack_info instead [ 1062.093121][ T9431] netlink: Unknown conntrack attr (0) [ 1062.131615][ T9440] sock: sock_timestamping_bind_phc: sock not bind to device [ 1063.133513][ T9470] __nla_validate_parse: 8 callbacks suppressed [ 1063.133538][ T9470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9297'. [ 1063.616866][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9302'. [ 1063.695873][ T9486] syzkaller0: entered promiscuous mode [ 1063.705961][ T9486] syzkaller0: entered allmulticast mode [ 1063.803470][ T9492] netlink: 'syz.5.9305': attribute type 5 has an invalid length. [ 1063.835271][ T9492] netlink: 140 bytes leftover after parsing attributes in process `syz.5.9305'. [ 1063.855007][ T9494] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 1063.922904][ T9495] netlink: 'syz.5.9305': attribute type 5 has an invalid length. [ 1063.939693][ T9495] netlink: 140 bytes leftover after parsing attributes in process `syz.5.9305'. [ 1063.984041][ T9497] syzkaller0: entered promiscuous mode [ 1064.014988][ T9497] syzkaller0: entered allmulticast mode [ 1064.059692][ T9503] vlan2: entered allmulticast mode [ 1064.092204][ T9506] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9308'. [ 1064.314729][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9313'. [ 1064.351527][ T9517] netlink: 'syz.4.9314': attribute type 21 has an invalid length. [ 1064.360040][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9313'. [ 1064.372880][ T9515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9313'. [ 1064.411696][ T9517] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9314'. [ 1064.413423][ T9514] netlink: 'syz.0.9312': attribute type 7 has an invalid length. [ 1064.432579][ T9518] netlink: 'syz.0.9312': attribute type 7 has an invalid length. [ 1064.478044][ T9524] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9316'. [ 1064.528360][ T9514] veth7: entered allmulticast mode [ 1064.619325][ T9518] veth9: entered allmulticast mode [ 1065.089070][ T9553] netlink: 'syz.4.9325': attribute type 24 has an invalid length. [ 1065.158786][ T9555] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1065.893552][ T9605] vlan2: entered allmulticast mode [ 1066.122447][ T9615] netlink: 'syz.4.9344': attribute type 1 has an invalid length. [ 1066.170912][ T9612] Unknown options in mask b7f2 [ 1066.199912][ T9613] Unknown options in mask b7f2 [ 1066.815020][ T9645] syzkaller0: entered promiscuous mode [ 1066.842522][ T9650] validate_nla: 2 callbacks suppressed [ 1066.842544][ T9650] netlink: 'syz.5.9356': attribute type 8 has an invalid length. [ 1066.851931][ T9645] syzkaller0: entered allmulticast mode [ 1066.917949][ T9650] netlink: 'syz.5.9356': attribute type 1 has an invalid length. [ 1067.028912][ T9662] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1067.080657][ T9650] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1067.501080][ T9674] syzkaller0: entered promiscuous mode [ 1067.534322][ T9674] syzkaller0: entered allmulticast mode [ 1068.192726][ T6729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.222089][ T6729] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.313519][ T9700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1068.360416][ T9712] __nla_validate_parse: 9 callbacks suppressed [ 1068.360439][ T9712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9375'. [ 1068.439264][ T9715] netlink: 'syz.6.9376': attribute type 11 has an invalid length. [ 1068.456864][ T9719] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1069.204295][ T9749] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9388'. [ 1069.304897][ T9754] netlink: 'syz.0.9390': attribute type 19 has an invalid length. [ 1070.001000][ T9792] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.9400'. [ 1070.281448][ T9803] netem: change failed [ 1070.837547][ T9828] veth0: entered promiscuous mode [ 1070.872484][ T9835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9414'. [ 1070.893810][ T9827] veth0: left promiscuous mode [ 1071.088791][ T9843] netlink: 'syz.5.9415': attribute type 1 has an invalid length. [ 1071.125557][ T9846] netlink: 'syz.4.9416': attribute type 29 has an invalid length. [ 1071.152586][ T9846] netlink: 'syz.4.9416': attribute type 29 has an invalid length. [ 1071.177566][ T9847] netlink: 500 bytes leftover after parsing attributes in process `syz.4.9416'. [ 1071.470777][ T9858] siw: device registration error -23 [ 1071.583058][ T9864] netlink: 'syz.1.9419': attribute type 1 has an invalid length. [ 1072.026581][ T9883] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1072.039081][ T9883] team0: Port device batadv1 added [ 1072.048388][ T5742] IPVS: starting estimator thread 0... [ 1072.068576][ T9880] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20002 [ 1072.166209][ T9892] IPVS: using max 25 ests per chain, 60000 per kthread [ 1072.441328][ T9910] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1072.469280][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9429'. [ 1072.515424][ T9914] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1072.527844][ T9916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9429'. [ 1072.588317][ T9919] netlink: 'syz.6.9431': attribute type 3 has an invalid length. [ 1072.614649][ T9919] netlink: 3 bytes leftover after parsing attributes in process `syz.6.9431'. [ 1072.634998][ T9919] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9431'. [ 1072.676185][ T9919] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.683922][ T9919] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.751596][ T9916] team0: Cannot enslave team device to itself [ 1072.770512][ T9928] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9432'. [ 1072.840477][ T9928] nbd: must specify at least one socket [ 1073.001227][ T9931] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 1073.459735][ T9960] __nla_validate_parse: 1 callbacks suppressed [ 1073.459759][ T9960] netlink: 108 bytes leftover after parsing attributes in process `syz.4.9440'. [ 1073.489823][ T9958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9439'. [ 1073.563602][ T9931] netlink: zone id is out of range [ 1073.579540][ T9931] netlink: zone id is out of range [ 1073.600703][ T9931] netlink: zone id is out of range [ 1073.623576][ T9931] netlink: zone id is out of range [ 1073.637891][ T9931] netlink: zone id is out of range [ 1073.651604][ T9931] netlink: zone id is out of range [ 1073.669101][ T9931] netlink: zone id is out of range [ 1073.691638][ T9931] netlink: zone id is out of range [ 1073.730478][ T9968] netlink: set zone limit has 4 unknown bytes [ 1073.738306][ T9973] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1074.331882][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9450'. [ 1074.410164][ T9994] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9450'. [ 1074.853891][T10012] syzkaller0: entered promiscuous mode [ 1074.862163][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9458'. [ 1074.871350][T10012] syzkaller0: entered allmulticast mode [ 1074.909097][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9458'. [ 1074.928401][T11452] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1075.053573][T10028] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.9461'. [ 1075.074549][T10028] netlink: 260 bytes leftover after parsing attributes in process `syz.4.9461'. [ 1075.088586][T10029] netlink: 212328 bytes leftover after parsing attributes in process `syz.6.9462'. [ 1075.559933][ T3958] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1075.603061][ T3958] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1075.616340][ T3958] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1075.649883][ T3958] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1075.661267][ T3958] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1077.763529][T23636] Bluetooth: hci5: command tx timeout [ 1079.838988][T23636] Bluetooth: hci5: command tx timeout [ 1080.867447][T14915] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1080.890540][T14915] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.042169][T10065] syzkaller0: entered promiscuous mode [ 1081.052293][T10065] syzkaller0: entered allmulticast mode [ 1081.354994][T14915] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1081.378813][T14915] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.513812][T10102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1081.554240][T10105] ÿÿÿÿÿÿ: renamed from virt_wifi0 (while UP) [ 1081.729112][T14915] bond0: (slave netdevsim1): Releasing backup interface [ 1081.762167][T14915] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 1081.805316][T14915] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1081.838230][T14915] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.916103][T23636] Bluetooth: hci5: command tx timeout [ 1082.070782][T14915] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1082.111281][T14915] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.255086][T10125] net_ratelimit: 6 callbacks suppressed [ 1082.255111][T10125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1082.844812][T11449] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.936840][T10150] netlink: 164 bytes leftover after parsing attributes in process `syz.5.9489'. [ 1082.977120][T10150] netlink: 'syz.5.9489': attribute type 1 has an invalid length. [ 1083.083432][T10155] netlink: 'syz.0.9490': attribute type 21 has an invalid length. [ 1083.108363][T10155] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9490'. [ 1083.147546][T10150] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1083.370991][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9495'. [ 1083.390743][ T6729] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.576279][ T3338] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.595554][T10179] netlink: 4112 bytes leftover after parsing attributes in process `syz.6.9496'. [ 1083.682684][ T3338] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.834776][T10200] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9500'. [ 1083.988949][T14915] batadv1: left allmulticast mode [ 1083.998039][T23636] Bluetooth: hci5: command tx timeout [ 1084.026644][T14915] batadv1: left promiscuous mode [ 1084.050834][T14915] bridge0: port 1(batadv1) entered disabled state [ 1084.484000][T14915] bond4 (unregistering): (slave ip6erspan0): Releasing active interface [ 1084.508890][T14915] team0: Port device ip6gre2 removed [ 1084.752902][T14915] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1084.825335][T14915] bond3 (unregistering): (slave geneve2): Releasing active interface [ 1085.114310][T14915] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 1085.302354][T14915] bond8 (unregistering): (slave bridge8): Releasing backup interface [ 1085.311231][T14915] bridge8 (unregistering): left promiscuous mode [ 1085.368009][T14915] bond0 (unregistering): Released all slaves [ 1085.381624][T14915] bond1 (unregistering): Released all slaves [ 1085.399186][T14915] bond2 (unregistering): Released all slaves [ 1085.431034][T14915] bond3 (unregistering): Released all slaves [ 1085.448452][T14915] bond4 (unregistering): Released all slaves [ 1085.466862][T14915] bond5 (unregistering): Released all slaves [ 1085.484941][T14915] bond6 (unregistering): Released all slaves [ 1085.511832][T14915] bond7 (unregistering): Released all slaves [ 1085.530688][T14915] bond8 (unregistering): Released all slaves [ 1085.578017][T10200] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1085.610853][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1085.902484][T14915] tipc: Left network mode [ 1086.031553][T10254] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9509'. [ 1086.274520][T10267] netlink: 'syz.4.9510': attribute type 1 has an invalid length. [ 1086.306797][T10265] netlink: 'syz.6.9512': attribute type 7 has an invalid length. [ 1086.449054][T10270] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1086.504176][ T6731] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1087.006571][T10287] netlink: 88 bytes leftover after parsing attributes in process `syz.4.9518'. [ 1087.206772][T10287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1087.240389][T10296] netlink: 'syz.0.9520': attribute type 9 has an invalid length. [ 1087.288472][T10297] netlink: 'syz.5.9519': attribute type 12 has an invalid length. [ 1087.365691][T10293] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1087.389287][T10293] bond2 (unregistering): Released all slaves [ 1087.887327][T10042] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.896649][T10314] netlink: 'syz.4.9523': attribute type 1 has an invalid length. [ 1087.913638][T10042] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.951336][T10042] bridge_slave_0: entered allmulticast mode [ 1087.982866][T10042] bridge_slave_0: entered promiscuous mode [ 1088.024502][ T5293] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1088.162662][T10327] netlink: 'syz.6.9526': attribute type 39 has an invalid length. [ 1088.194592][T10319] ip6gretap1: entered promiscuous mode [ 1088.200335][T10319] ip6gretap1: entered allmulticast mode [ 1088.219223][T10319] bond2: (slave ip6gretap1): making interface the new active one [ 1088.233557][T10319] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1088.244811][T10319] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1088.259259][T10319] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1088.286850][T10042] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.328509][T10042] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.337978][T10042] bridge_slave_1: entered allmulticast mode [ 1088.369953][T10042] bridge_slave_1: entered promiscuous mode [ 1088.821832][T10343] syzkaller0: entered promiscuous mode [ 1088.830382][T10343] syzkaller0: entered allmulticast mode [ 1088.862926][T10042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.910376][T10344] netlink: 'syz.4.9528': attribute type 2 has an invalid length. [ 1088.966621][T10042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.966844][T10355] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1090.028739][T10369] netlink: 'syz.6.9535': attribute type 10 has an invalid length. [ 1092.396820][ T3958] Bluetooth: hci6: command 0x0406 tx timeout [ 1093.672286][T10042] team0: Port device team_slave_0 added [ 1093.776588][T14915] hsr_slave_0: left promiscuous mode [ 1093.787827][T14915] hsr_slave_1: left promiscuous mode [ 1093.794092][T14915] batman_adv: batadv0: Interface deactivated: dummy0 [ 1093.816306][T14915] batman_adv: batadv0: Removing interface: dummy0 [ 1093.837612][T14915] veth1_macvtap: left promiscuous mode [ 1093.845465][T14915] veth0_macvtap: left promiscuous mode [ 1093.853272][T14915] veth1_vlan: left promiscuous mode [ 1093.859793][T14915] veth0_vlan: left promiscuous mode [ 1094.128671][T14915] pim6reg527 (unregistering): left allmulticast mode [ 1094.642179][T10042] team0: Port device team_slave_1 added [ 1094.932124][T10042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1094.969733][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9540'. [ 1094.981322][T10042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.052908][T10405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9540'. [ 1095.089473][T10042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1095.107221][T10405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9540'. [ 1095.138891][T10042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1095.161113][T10042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.237551][T10042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1095.306181][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9540'. [ 1095.366860][T10405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9540'. [ 1095.409841][T10405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9540'. [ 1095.568626][T10042] hsr_slave_0: entered promiscuous mode [ 1095.584557][T10042] hsr_slave_1: entered promiscuous mode [ 1095.592494][T10042] debugfs: 'hsr0' already exists in 'hsr' [ 1095.599414][T10042] Cannot create hsr debugfs directory [ 1095.704552][T10418] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9542'. [ 1095.774967][T10403] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.951369][T10436] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9547'. [ 1095.962566][T14915] IPVS: stop unused estimator thread 0... [ 1096.210770][T10403] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.525166][T10403] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.856878][T10403] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.947072][ T5293] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1097.260061][T10042] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.399535][T10491] can: request_module (can-proto-0) failed. [ 1097.442847][T10484] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1097.594993][ T14] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.820493][T10042] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.950812][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9562'. [ 1098.009876][T10515] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9562'. [ 1098.034793][ T14] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.164078][T10042] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.242092][T14915] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.365164][T14915] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.471997][T10042] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.500495][T10535] IPVS: set_ctl: invalid protocol: 60 172.20.20.54:20003 [ 1099.231743][T10568] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:512 [ 1099.450933][T10578] netlink: 'syz.0.9574': attribute type 142 has an invalid length. [ 1099.663216][T10042] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1099.708868][T10042] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1099.730888][T10042] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1099.772340][T10042] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1099.800708][T10042] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1099.845414][T10042] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1099.865180][T10042] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1099.893337][T10042] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1099.971790][T10602] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 1100.070848][T10614] __nla_validate_parse: 2 callbacks suppressed [ 1100.070869][T10614] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9580'. [ 1100.122307][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9581'. [ 1100.143011][T10618] netlink: 'syz.0.9581': attribute type 6 has an invalid length. [ 1100.165158][T10618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9581'. [ 1100.607319][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9581'. [ 1100.627353][T10618] netlink: 'syz.0.9581': attribute type 6 has an invalid length. [ 1100.654017][T10618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9581'. [ 1100.898962][T10042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1100.977362][T10639] bridge4: entered promiscuous mode [ 1101.016236][T10639] bridge4: entered allmulticast mode [ 1101.135615][T10042] 8021q: adding VLAN 0 to HW filter on device team0 [ 1101.218925][T11449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.226209][T11449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1101.302872][T11449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.310149][T11449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1101.909937][T10678] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9588'. [ 1101.977914][T10678] nbd: must specify at least one socket [ 1102.396988][ T5734] page_pool_release_retry() stalled pool shutdown: id 47, 1 inflight 906 sec [ 1102.531578][T10697] netlink: 'syz.0.9592': attribute type 2 has an invalid length. [ 1102.850864][T10708] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9595'. [ 1102.884717][T10708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9595'. [ 1103.004622][T10715] netlink: 'syz.5.9597': attribute type 13 has an invalid length. [ 1103.423988][T10732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9600'. [ 1103.598903][T10732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9600'. [ 1103.616398][ T6726] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1103.653974][ T6726] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1103.704801][ T6726] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1103.770051][T10042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1104.025631][T10042] veth0_vlan: entered promiscuous mode [ 1104.057136][T10749] syzkaller0: entered promiscuous mode [ 1104.077225][T10749] syzkaller0: entered allmulticast mode [ 1104.245977][T10042] veth1_vlan: entered promiscuous mode [ 1104.454747][T10042] veth0_macvtap: entered promiscuous mode [ 1104.514145][T10769] IPVS: Unknown mcast interface: vxcan1 [ 1104.523033][T10042] veth1_macvtap: entered promiscuous mode [ 1104.618688][T10764] can: request_module (can-proto-3) failed. [ 1104.661865][T10042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1104.689413][T14915] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1104.738629][T17565] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1104.742451][T14915] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1104.813320][T10042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1104.900860][T14915] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.929525][ T6726] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.985289][ T6726] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.021346][ T6726] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.036760][ T30] INFO: task syz.2.8178:5428 blocked for more than 143 seconds. [ 1105.059677][ T30] Not tainted syzkaller #0 [ 1105.075824][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1105.095183][ T30] task:syz.2.8178 state:D stack:27168 pid:5428 tgid:5427 ppid:30812 task_flags:0x400140 flags:0x00080002 [ 1105.109253][ T30] Call Trace: [ 1105.112704][ T30] [ 1105.116804][ T42] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1105.134710][ T30] __schedule+0x1821/0x5740 [ 1105.145670][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1105.161378][ T30] ? __pfx_clockevents_program_event+0x10/0x10 [ 1105.168484][ T30] ? __pfx___schedule+0x10/0x10 [ 1105.173663][ T30] ? schedule+0x90/0x360 [ 1105.178554][ T30] schedule+0x164/0x360 [ 1105.178661][T10790] netlink: 'syz.0.9614': attribute type 1 has an invalid length. [ 1105.182957][ T30] schedule_preempt_disabled+0x13/0x30 [ 1105.199132][ T30] __mutex_lock+0x7f7/0x1550 [ 1105.203923][ T30] ? __mutex_lock+0x608/0x1550 [ 1105.219705][ T30] ? nfsd_nl_version_get_doit+0x17c/0xc40 [ 1105.232937][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1105.239335][T10790] netlink: 'syz.0.9614': attribute type 2 has an invalid length. [ 1105.253435][T10790] netlink: 'syz.0.9614': attribute type 1 has an invalid length. [ 1105.265837][ T30] ? __nlmsg_put+0xef/0x1b0 [ 1105.271354][ T30] ? genlmsg_put+0x137/0x2e0 [ 1105.277853][T10790] __nla_validate_parse: 4 callbacks suppressed [ 1105.277889][T10790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9614'. [ 1105.293651][ T30] nfsd_nl_version_get_doit+0x17c/0xc40 [ 1105.299908][ T30] ? __nla_parse+0x40/0x60 [ 1105.304638][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1105.312584][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1105.320445][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1105.334201][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 1105.350911][ T30] ? __asan_memcpy+0x40/0x70 [ 1105.362073][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1105.379564][ T30] genl_rcv_msg+0x61c/0x7a0 [ 1105.391643][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1105.402642][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1105.419130][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 1105.431479][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1105.445575][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1105.457511][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1105.469955][ T30] ? down_read+0x270/0x2e0 [ 1105.480653][ T30] ? genl_rcv+0xd/0x40 [ 1105.489445][ T30] genl_rcv+0x28/0x40 [ 1105.498574][ T30] netlink_unicast+0x75c/0x8e0 [ 1105.509755][ T30] netlink_sendmsg+0x813/0xb40 [ 1105.520442][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1105.535899][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1105.547407][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1105.559578][ T30] ____sys_sendmsg+0x972/0x9f0 [ 1105.570063][ T30] ? __might_fault+0xaf/0x130 [ 1105.580587][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1105.592868][ T30] ? import_iovec+0x73/0xa0 [ 1105.598024][ T5762] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1105.605272][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1105.615573][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1105.627563][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1105.638572][ T30] ? futex_wait+0x2a2/0x390 [ 1105.649890][ T30] ? __fget_files+0x2a/0x420 [ 1105.660318][ T30] ? __fget_files+0x3a0/0x420 [ 1105.670496][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1105.685942][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1105.706936][ T30] ? rcu_is_watching+0x15/0xb0 [ 1105.711789][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.725869][ T30] do_syscall_64+0x15f/0xf80 [ 1105.732100][ T30] ? trace_irq_disable+0x3b/0x140 [ 1105.745869][ T30] ? clear_bhb_loop+0x40/0x90 [ 1105.755780][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.772319][ T30] RIP: 0033:0x7f046579ce59 [ 1105.785827][ T30] RSP: 002b:00007f0466654028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1105.805911][ T30] RAX: ffffffffffffffda RBX: 00007f0465a15fa0 RCX: 00007f046579ce59 [ 1105.815373][ T30] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 1105.833788][ T30] RBP: 00007f0465832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1105.843664][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1105.853368][ T30] R13: 00007f0465a16038 R14: 00007f0465a15fa0 R15: 00007ffd7f513378 [ 1105.861607][ T30] [ 1105.893616][ T30] [ 1105.893616][ T30] Showing all locks held in the system: [ 1105.948055][ T30] 1 lock held by khungtaskd/30: [ 1105.955101][ T14] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1105.982240][ T30] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1106.006697][ T30] 2 locks held by getty/5384: [ 1106.011578][ T30] #0: ffff8880367af0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1106.021590][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1106.045655][ T30] 3 locks held by kworker/1:4/5734: [ 1106.063112][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1106.074778][ T30] #1: ffffc90003e7fc40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1106.089988][ T30] #2: ffff888045e8e250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x202/0x3d0 [ 1106.101878][ T30] 3 locks held by kworker/0:4/5762: [ 1106.109107][ T30] 2 locks held by syz.3.7660/3489: [ 1106.114384][ T30] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1106.123178][ T30] #1: ffffffff8ec8b220 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1106.139711][ T30] 2 locks held by syz.2.8178/5428: [ 1106.145393][ T30] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1106.154978][ T30] #1: ffffffff8ec8b220 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 1106.169876][ T30] 3 locks held by kworker/u8:5/6726: [ 1106.182664][ T30] #0: ffff888031f0e940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1106.195145][ T30] #1: ffffc90006e9fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1106.213855][ T30] #2: ffffffff8fdd13c0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 1106.225130][ T30] 3 locks held by syz-executor/10042: [ 1106.231314][ T30] #0: ffffffff8fdd13c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1106.242178][ T30] #1: ffff88808e5fd590 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_open+0x227/0x420 [ 1106.253125][ T30] #2: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1106.285090][ T30] [ 1106.294557][T10042] ieee80211 phy111: Selected rate control algorithm 'minstrel_ht' [ 1106.308668][ T30] ============================================= [ 1106.308668][ T30] [ 1106.336350][ T30] NMI backtrace for cpu 1 [ 1106.336374][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1106.336398][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1106.336412][ T30] Call Trace: [ 1106.336421][ T30] [ 1106.336433][ T30] dump_stack_lvl+0xe8/0x150 [ 1106.336465][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1106.336494][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1106.336520][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1106.336550][ T30] sys_info+0x135/0x170 [ 1106.336572][ T30] watchdog+0xfd3/0x1030 [ 1106.336612][ T30] ? watchdog+0x1c9/0x1030 [ 1106.336651][ T30] kthread+0x389/0x470 [ 1106.336679][ T30] ? __pfx_watchdog+0x10/0x10 [ 1106.336708][ T30] ? __pfx_kthread+0x10/0x10 [ 1106.336738][ T30] ret_from_fork+0x514/0xb70 [ 1106.336764][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1106.336787][ T30] ? __switch_to+0xc79/0x1410 [ 1106.336823][ T30] ? __pfx_kthread+0x10/0x10 [ 1106.336853][ T30] ret_from_fork_asm+0x1a/0x30 [ 1106.336895][ T30] [ 1106.336903][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1106.452410][ C0] NMI backtrace for cpu 0 [ 1106.452430][ C0] CPU: 0 UID: 0 PID: 10042 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1106.452452][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1106.452465][ C0] RIP: 0010:wiphy_all_share_dfs_chan_state+0x375/0x670 [ 1106.452494][ C0] Code: 41 21 d1 f6 49 89 df 48 8b 1c 24 4c 8b 6c 24 10 48 8b 44 24 40 42 0f b6 04 38 84 c0 0f 85 ca 00 00 00 48 8b 44 24 08 48 63 00 <48> 39 c5 0f 8d 93 01 00 00 e8 0d 21 d1 f6 48 ff c5 49 83 c6 50 e9 [ 1106.452511][ C0] RSP: 0018:ffffc90004e3edc8 EFLAGS: 00000246 [ 1106.452529][ C0] RAX: 000000000000003b RBX: ffff88804c503320 RCX: ffff8880547b3d80 [ 1106.452543][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1106.452555][ C0] RBP: 0000000000000004 R08: ffffffff8af3dad5 R09: ffffffff8e95cca0 [ 1106.452568][ C0] R10: dffffc0000000000 R11: fffffbfff1fba26d R12: ffff88804c504538 [ 1106.452583][ C0] R13: ffff8880a87a4cc4 R14: 0000000000000120 R15: dffffc0000000000 [ 1106.452597][ C0] FS: 0000555566a24500(0000) GS:ffff888125287000(0000) knlGS:0000000000000000 [ 1106.452614][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1106.452628][ C0] CR2: 0000563cb3e47078 CR3: 0000000056a28000 CR4: 00000000003526f0 [ 1106.452645][ C0] Call Trace: [ 1106.452652][ C0] [ 1106.452670][ C0] wiphy_regulatory_register+0x185/0x240 [ 1106.452695][ C0] wiphy_register+0x210f/0x2dc0 [ 1106.452722][ C0] ? __pfx_wiphy_register+0x10/0x10 [ 1106.452752][ C0] ? __pfx_netdev_run_todo+0x10/0x10 [ 1106.452772][ C0] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1106.452805][ C0] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1106.452839][ C0] ieee80211_register_hw+0x3d82/0x4a70 [ 1106.452868][ C0] ? ieee80211_register_hw+0x1971/0x4a70 [ 1106.452902][ C0] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1106.452925][ C0] ? __asan_memset+0x22/0x50 [ 1106.452949][ C0] ? __hrtimer_setup+0x1b7/0x260 [ 1106.452973][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1106.453002][ C0] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 1106.453034][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1106.453071][ C0] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1106.453102][ C0] hwsim_new_radio_nl+0xf6a/0x1c00 [ 1106.453138][ C0] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1106.453167][ C0] ? rcu_is_watching+0x15/0xb0 [ 1106.453190][ C0] ? trace_kmalloc+0x2a/0xf0 [ 1106.453220][ C0] ? __nla_parse+0x40/0x60 [ 1106.453252][ C0] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1106.453276][ C0] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1106.453305][ C0] genl_family_rcv_msg_doit+0x22a/0x330 [ 1106.453331][ C0] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1106.453361][ C0] ? bpf_lsm_capable+0x9/0x20 [ 1106.453380][ C0] ? security_capable+0x7e/0x2c0 [ 1106.453408][ C0] genl_rcv_msg+0x61c/0x7a0 [ 1106.453432][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1106.453453][ C0] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1106.453476][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 1106.453510][ C0] netlink_rcv_skb+0x232/0x4b0 [ 1106.453537][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1106.453559][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1106.453595][ C0] ? down_read+0x270/0x2e0 [ 1106.453614][ C0] ? genl_rcv+0xd/0x40 [ 1106.453635][ C0] genl_rcv+0x28/0x40 [ 1106.453653][ C0] netlink_unicast+0x75c/0x8e0 [ 1106.453684][ C0] netlink_sendmsg+0x813/0xb40 [ 1106.453717][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1106.453747][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1106.453774][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1106.453806][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1106.453835][ C0] __sys_sendto+0x672/0x710 [ 1106.453862][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1106.453906][ C0] ? rcu_is_watching+0x15/0xb0 [ 1106.453933][ C0] __x64_sys_sendto+0xde/0x100 [ 1106.453959][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.453979][ C0] do_syscall_64+0x15f/0xf80 [ 1106.453997][ C0] ? clear_bhb_loop+0x40/0x90 [ 1106.454020][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.454038][ C0] RIP: 0033:0x7f11c4b5d68e [ 1106.454055][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1106.454072][ C0] RSP: 002b:00007ffd25c66558 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1106.454090][ C0] RAX: ffffffffffffffda RBX: 0000555566a24500 RCX: 00007f11c4b5d68e [ 1106.454105][ C0] RDX: 0000000000000024 RSI: 00007f11c5944670 RDI: 0000000000000003 [ 1106.454117][ C0] RBP: 0000000000000001 R08: 00007ffd25c665d4 R09: 000000000000000c [ 1106.454130][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1106.454141][ C0] R13: 0000000000000000 R14: 00007f11c5944670 R15: 0000000000000000 [ 1106.454164][ C0] [ 1106.938900][T11449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1106.942084][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1106.942146][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1106.942209][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1106.942259][ T30] Call Trace: [ 1106.942288][ T30] [ 1106.942311][ T30] vpanic+0x56c/0xa60 [ 1106.942397][ T30] ? __pfx___schedule+0x10/0x10 [ 1106.942505][ T30] ? __pfx_vpanic+0x10/0x10 [ 1106.942571][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1106.942666][ T30] panic+0xc5/0xd0 [ 1106.942729][ T30] ? __pfx_panic+0x10/0x10 [ 1106.942790][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1106.942906][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1106.942993][ T30] watchdog+0x102c/0x1030 [ 1106.943098][ T30] ? watchdog+0x1c9/0x1030 [ 1106.943211][ T30] kthread+0x389/0x470 [ 1106.943333][ T30] ? __pfx_watchdog+0x10/0x10 [ 1106.943404][ T30] ? __pfx_kthread+0x10/0x10 [ 1106.943490][ T30] ret_from_fork+0x514/0xb70 [ 1106.943570][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1106.943634][ T30] ? __switch_to+0xc79/0x1410 [ 1106.943729][ T30] ? __pfx_kthread+0x10/0x10 [ 1106.943809][ T30] ret_from_fork_asm+0x1a/0x30 [ 1106.943926][ T30] [ 1106.947659][ T30] Kernel Offset: disabled