last executing test programs: 6m14.312260194s ago: executing program 4 (id=3891): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={0x0, 0x2}, 0x8) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="4954b2c746df9f1365e1b8c39527d801797fd8458c5d0d55f0e68f82", 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)={r2, 0x62a6, 0x6, [0x455f, 0x6, 0x2, 0x6, 0x7, 0x3]}, 0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x4, 0xfffc}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x400}}, 0x7, 0xb38a, 0x8, 0xae, 0x2}, &(0x7f0000000240)=0x98) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, r5, 0x700, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x33, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0xa, 0x6, @device_b, 0x80, @value, 0x7, 0x7}}, @supported_rates={0x1, 0x6, [{0x48, 0x1}, {0x24}, {0x36}, {0x6c, 0x1}, {0x30, 0x1}, {0x3}]}]}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x3}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000400)={r3, 0x5}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0xc, 0x0, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x8000, 0x7, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x3, 0x7, 0x1, @empty, @rand_addr=' \x01\x00', 0x700, 0x1, 0x1ff, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000700)={'tunl0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x700, 0x10, 0x1, 0x245, {{0x24, 0x4, 0x1, 0x2, 0x90, 0x68, 0x0, 0xfd, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @noop, @ssrr={0x89, 0x1f, 0x22, [@multicast2, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x22}, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x2c}, @broadcast]}, @rr={0x7, 0x7, 0x62, [@private=0xa010101]}, @timestamp_addr={0x44, 0x1c, 0xea, 0x1, 0x8, [{@multicast1}, {@broadcast, 0x1}, {@multicast1, 0x689e}]}, @end, @generic={0x86, 0x2}, @ssrr={0x89, 0x1f, 0x57, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @remote, @remote, @multicast2]}, @rr={0x7, 0x7, 0x59, [@multicast2]}, @generic={0x44, 0xc, "78ca0646041af24017ec"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x7, 0x7, 0x7ff, 0xb, {{0x3a, 0x4, 0x0, 0x3a, 0xe8, 0x64, 0x0, 0x5, 0x0, 0x0, @loopback, @multicast2, {[@timestamp_prespec={0x44, 0x2c, 0xe0, 0x3, 0x0, [{@multicast2, 0x100}, {@multicast1, 0x31622eb8}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x2}, {@local, 0x100}, {@remote, 0x400}]}, @ssrr={0x89, 0x13, 0xf2, [@dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010100, @remote, @multicast1]}, @lsrr={0x83, 0xb, 0x32, [@dev={0xac, 0x14, 0x14, 0x33}, @broadcast]}, @ssrr={0x89, 0x1b, 0xef, [@local, @dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x64010102, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @cipso={0x86, 0x33, 0x3, [{0x0, 0xb, "7e04cecf4b3762527a"}, {0x7, 0xc, "972be995ed4517bb7b36"}, {0x7, 0x2}, {0x5, 0x4, "5410"}, {0x6, 0x8, "7810134b35ad"}, {0x6, 0x8, "229d63bbfc9a"}]}, @lsrr={0x83, 0x23, 0x95, [@private=0xa010101, @empty, @private=0xa010102, @multicast2, @broadcast, @local, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x82, 0x7, "6b9358e382"}, @generic={0x83, 0x10, "7171dcdba0dda99b5b6235984ebb"}]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xc4, r7, 0x401, 0x3, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3ff}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f0000000a40)={'syztnl2\x00', r8, 0x4, 0x9, 0x0, 0x10001, 0x4d, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x8006, 0xfffffffa, 0x9}}) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000b00), 0x8) sendmsg$FOU_CMD_ADD(r13, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100080}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x4c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x3f}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x4c}}, 0x20004000) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r13, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x30, 0x140e, 0x200, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$xdp(r13, &(0x7f0000000d80)={0x2c, 0x1, r9, 0x13, r13}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r14, &(0x7f0000001040)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000e00)={0x1cc, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f63c232}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x44f}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @loopback}}, {0x14, 0x2, @in={0x2, 0x4, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x421}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x559a}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @empty, 0x6}}}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x38}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}}}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000001080)=""/216, &(0x7f0000001180)=0xd8) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001200), r14) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001600)={&(0x7f00000013c0)={0x210, r15, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x210}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) 6m13.896739235s ago: executing program 4 (id=3899): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x15, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x15, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) 6m13.70839318s ago: executing program 4 (id=3902): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x14, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 6m12.534587081s ago: executing program 4 (id=3905): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r5, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000100)={@local, 0x0, 0x0, 0x80, 0x0, [{@remote}, {@multicast1}, {@broadcast}, {@initdev}, {@multicast2}, {@private}, {@dev}, {@local}]}}) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r5, r6, 0x0, 0xffffffff000) recvmmsg(r5, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x40000030, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x3) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x38}}, 0x0) 6m11.459304412s ago: executing program 4 (id=3917): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x52}, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000280), 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x3e}, 0x1c) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$int_in(r7, 0x0, &(0x7f0000000100)=0xfff) sendmsg$kcm(r7, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x408c1) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) socket$nl_generic(0x10, 0x3, 0x10) 6m11.132271088s ago: executing program 4 (id=3920): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) (async) r3 = openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='c ', @ANYRESDEC], 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000001000000006c000000fc0200000000000000000000000000000200000000010000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002dbd700000000000020000000000000000000000480103006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040003004e204e2200002001000000000000000000000000000204c9341c52e88a4d3634960549ed3bb04ca981a284952641365b3419f5d88281ceca2346cd5fe97bd265afa132e44f4b5e1df17ec9e3375860c5c8b51c4811c308b9400aa21263dab9d550ee5d860f8ad09309b5f608cef067d6e5618bf69447817a2c35fd3067247f0f81f72e923a"], 0x154}}, 0x0) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000001000000006c000000fc0200000000000000000000000000000200000000010000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002dbd700000000000020000000000000000000000480103006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040003004e204e2200002001000000000000000000000000000204c9341c52e88a4d3634960549ed3bb04ca981a284952641365b3419f5d88281ceca2346cd5fe97bd265afa132e44f4b5e1df17ec9e3375860c5c8b51c4811c308b9400aa21263dab9d550ee5d860f8ad09309b5f608cef067d6e5618bf69447817a2c35fd3067247f0f81f72e923a"], 0x154}}, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r5, 0x80049363, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0xfed2, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="3000000010000b0529bd3356c281c6977000fddb4d46ad4aef71b4af5b438afb15177dce12931932c1183443b3bea804b087ebf6b972d815c26e403c541a27e4735ff7713c3146044e7218d196af5f5b4dabbdd5679f1b539d2ac14dcd5ee07f8502a11a96ccd33369840e82a2b7bef3a4a794c80813a67bee80567014c6b8a06cbd485955a2675ac5a231d1d061598d1d9e76713162f45e6824843c2eba00"/180, @ANYRES8, @ANYRESOCT=r3], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) r8 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmsg$unix(r9, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r10, 0x0) write$cgroup_pid(r8, &(0x7f0000000100)=r10, 0x12) 5m56.059028814s ago: executing program 32 (id=3920): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) (async) r3 = openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='c ', @ANYRESDEC], 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000001000000006c000000fc0200000000000000000000000000000200000000010000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002dbd700000000000020000000000000000000000480103006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040003004e204e2200002001000000000000000000000000000204c9341c52e88a4d3634960549ed3bb04ca981a284952641365b3419f5d88281ceca2346cd5fe97bd265afa132e44f4b5e1df17ec9e3375860c5c8b51c4811c308b9400aa21263dab9d550ee5d860f8ad09309b5f608cef067d6e5618bf69447817a2c35fd3067247f0f81f72e923a"], 0x154}}, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r5, 0x80049363, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0xfed2, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="3000000010000b0529bd3356c281c6977000fddb4d46ad4aef71b4af5b438afb15177dce12931932c1183443b3bea804b087ebf6b972d815c26e403c541a27e4735ff7713c3146044e7218d196af5f5b4dabbdd5679f1b539d2ac14dcd5ee07f8502a11a96ccd33369840e82a2b7bef3a4a794c80813a67bee80567014c6b8a06cbd485955a2675ac5a231d1d061598d1d9e76713162f45e6824843c2eba00"/180, @ANYRES8, @ANYRESOCT=r3], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) r8 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmsg$unix(r9, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r10, 0x0) write$cgroup_pid(r8, &(0x7f0000000100)=r10, 0x12) 2.322359996s ago: executing program 0 (id=6657): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xfffe, 0x2}, 0x6) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x4, 0x10003}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8=r0], &(0x7f0000003ff6)='GPL\x00', 0xfffffff8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x19, &(0x7f0000000140)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x7ffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = socket(0x2, 0x80805, 0x0) r5 = socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a090400000000000000000200000038000480340001800a0001006c696d6974000000240002800c000140000000000000000908000540000000000c00024000000005000000000900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x4085}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000180)='vegas', 0x5) getsockopt$inet_tcp_buf(r8, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) listen(r7, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r9, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r9, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0), &(0x7f0000000240)=[0x0], 0x0, 0xea, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x1b, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000540)=@assoc_value, &(0x7f0000000580)=0xffffffffffffff28) 2.189994445s ago: executing program 1 (id=6659): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_netdev_private(r1, 0x89f3, &(0x7f0000000080)="4a9cac732c22a79444f79cc5ba47efbf") bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7967, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x6d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 2.105193896s ago: executing program 2 (id=6660): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x1ff}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x1, 0xd, 0xe5df, 0x0, r1}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r3, 0x40106e80, &(0x7f0000000200)={0x6}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r2, @in={{0x2, 0x4e22, @private=0xa010101}}, 0x3, 0x108, 0x3, 0x1, 0x20, 0x5, 0x81}, 0x9c) r4 = socket(0x25, 0x2, 0x5) getpeername$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x100, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3e}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x40881) r7 = accept$packet(r4, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000005c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000600)={r1, 0xd0, 0xe457}, 0x8) bind$netlink(r4, &(0x7f0000000640)={0x10, 0x0, 0x25dfdbfe}, 0xc) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000680)) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000006c0), &(0x7f0000000700)=0x4) sendto$inet6(r0, &(0x7f0000000740)="634299c8e3d8a848e4e8abe5eee564a0f924d1c9bd473bb4d9a740c8846eb09dbe69a0f9f9c2822744aecf36d02ef67a8c25c114616c4741dc1bb370ceb17a2f08cc1c5fa17d8ccd28c3c109ab32536b402eca2463b3b829653afaa1", 0x5c, 0x804, &(0x7f00000007c0)={0xa, 0x4e21, 0x36, @mcast1, 0x101}, 0x1c) r8 = socket$key(0xf, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000800)={r8}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000940)={r7, &(0x7f0000000840)='\x00', 0x408600, &(0x7f0000000880)={@align=0x3, {0x0, 0xfffc, 0x0, 0x1}}, 0x2, &(0x7f00000008c0)={@_ha_fsid}, &(0x7f0000000900)=0x4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r9, 0x0, 0xca, 0xb6, &(0x7f0000000980)="ffe06389260b6b3bcfe7ea8cf51b670f03985a32d9345e2d968d8624b976edb3f7e1be14a2c459cb191db04714db67d6707cc262a7c11e0206a1075166db2807ea7a0909969051afe56b881787580709a3dbeb1aba6456bc48105f716ca7ba9128d52572d20be7ab371eb7bda60daaf709c1fa5e3f97c2fc421dfb7b0d28451695bf0b29d5f7c59ce8ad02488fd84abf2c68a518309dd1d49199d20a72bc00773cb3332d9dba249c3a6e71134bc65f5e35d8af33199bba44c807f1d853bf920ad0760b0216f494fbabdc", &(0x7f0000000a80)=""/182, 0x0, 0x0, 0xa, 0x25, &(0x7f0000000b40)="f908611ffb85f00c2e4a", &(0x7f0000000b80)="697714498e1b34923f6b0f25ee2af15cee3d7c628f22602c634267e2f81217884807f2774a", 0xb, 0x0, 0x1}, 0x50) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000c40)) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r7, 0xf501, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000cc0), r9) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x120}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r10, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) getsockname$inet(r9, &(0x7f0000000dc0)={0x2, 0x0, @loopback}, &(0x7f0000000e00)=0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000e40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 2.021047727s ago: executing program 0 (id=6661): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000080)={@local}, &(0x7f00000001c0)=0x14) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r2, 0x504c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TOS={0x5, 0x9, 0xb5}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) 1.782003907s ago: executing program 0 (id=6663): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r3, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x15, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xf}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='GPL\x00', 0x9, 0x9e, &(0x7f0000000780)=""/158, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x5, 0x9, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000880)=[r0, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x1, 0x1, 0xc}, {0x1, 0x2}, {0x0, 0x4, 0x2, 0x4}], 0x10, 0x1}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0xa7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x0, 0x3}, 0x50) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000a40), 0x8) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b40)=@o_path={&(0x7f0000000b00)='./file0\x00', 0x0, 0x8, r0}, 0x18) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r9, &(0x7f0000000040), 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x19, 0x14, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd542, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x2, 0x7c, &(0x7f00000004c0)=""/124, 0x40f00, 0x13, '\x00', 0x0, @cgroup_sockopt=0x16, r1, 0x8, &(0x7f0000000580)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0xe, 0x10, 0x40}, 0x10, r3, r4, 0x3, &(0x7f0000000bc0)=[r5, r6, r0, 0xffffffffffffffff, r7, r8, r9, r10], &(0x7f0000000c00)=[{0x2, 0x5, 0xa, 0xc}, {0x1, 0x4, 0xd, 0xb}, {0x1, 0x1, 0xf, 0x1}], 0x10, 0xf0}, 0x94) r11 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=@newtaction={0x14, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x4008800) recvmmsg$unix(r11, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r12, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r12, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r12, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r12, &(0x7f00000003c0)={0x2c, 0x0, r14}, 0x10) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000004d40)=@newtfilter={0xa30, 0x2c, 0x2, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0x5}, {0x1, 0xffe0}, {0xfff1, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x1000}, @TCA_CHAIN={0x8, 0xb, 0x503}, @filter_kind_options=@f_flow={{0x9}, {0x84c, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x3d}, @TCA_FLOW_POLICE={0x840, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0xc, 0x401, 0x8, 0x1ff, 0x9, 0xee, 0x100, 0x5, 0x5, 0x8, 0x5, 0xffff, 0x6, 0x400, 0x0, 0x1000, 0xfffffffb, 0x8, 0x647, 0x3, 0x80000001, 0x3fc5, 0x5, 0x9, 0x800, 0xe28, 0x0, 0x4, 0x8, 0xffffff48, 0xc8c5, 0x0, 0x7, 0x8001, 0x0, 0x6, 0x7, 0x1, 0x3, 0x2, 0x2, 0x42d, 0x8, 0xca9, 0x1a3, 0x0, 0x5, 0x1, 0x3, 0x9, 0x6, 0xa9, 0xde000000, 0x1000, 0x4, 0x31c, 0x0, 0xfb6e, 0x5, 0x6b, 0xe, 0x3, 0x7ff, 0xa, 0x1, 0xfc000000, 0x40, 0x3, 0x2, 0xb9, 0x9e6, 0x8, 0x4, 0x1, 0x2, 0x1, 0xffffffa2, 0x8, 0x6, 0xffffffff, 0x1, 0xfffffff1, 0xffff, 0x8, 0xf5e, 0x6e, 0x6, 0x0, 0xffffff01, 0x4, 0x1, 0xffff, 0x80000000, 0x4c, 0x9, 0xcf, 0x6b41, 0xe, 0x0, 0x2571, 0x8, 0xe52, 0x1000, 0x40, 0x91f, 0xe, 0x4, 0xfffffffa, 0x0, 0x101, 0xfffffffb, 0x8, 0x9, 0x0, 0xf8, 0x8, 0x54e, 0x2, 0x80000000, 0x4938, 0x7fff, 0x9, 0x1cdb, 0x8, 0x5, 0x8, 0x800000, 0x101, 0x2, 0x40, 0x85a, 0x1, 0x3, 0x4, 0x401, 0x1, 0x5, 0x6, 0xffffffff, 0x8001, 0x1, 0xfffffffd, 0x4, 0x7, 0x8, 0x2f, 0xa39, 0x6, 0xf0, 0x80, 0x4, 0x8000, 0x7c07, 0x0, 0x2, 0x5, 0x8, 0x80000000, 0x7, 0x8, 0x7, 0x6, 0x7fff, 0x7, 0xf6, 0x7, 0xff, 0x96, 0x5, 0x88, 0x8, 0x9, 0x49, 0x2, 0x0, 0x4, 0x8, 0x10, 0x3, 0xffff, 0x7fff, 0x80, 0x6, 0x7, 0xb4d5, 0x3, 0x5815, 0x3, 0xe, 0x5dab, 0xc, 0x8, 0xc, 0x5, 0x28, 0xffffffff, 0x6, 0x6, 0x6, 0x100, 0x9, 0x3, 0xe, 0x6, 0x5, 0x35bd, 0xc254, 0x2, 0x0, 0x1, 0x2, 0x8, 0x7, 0x6, 0x1, 0x3, 0x3, 0x8, 0x0, 0x1, 0x2a62, 0xffffff81, 0xfffffff8, 0x1, 0xb3d, 0x81, 0x18000000, 0xe, 0xb, 0x6, 0x8, 0x6, 0x6, 0x8, 0x40, 0x8, 0x2, 0x8, 0xf, 0xfff, 0x8, 0x0, 0x4, 0x65, 0x1000, 0x3, 0x5, 0x6, 0xfffffffd, 0x5, 0x4, 0x870, 0xd, 0x0, 0x4, 0x3ff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x800, 0x3, 0x8001, 0x6, 0x7, 0xffffff00, 0x9, 0x1000, 0x8, 0xb, 0x80000000, 0x40, 0x3, 0x39, 0x5c1, 0x7, 0x100, 0x0, 0x9, 0x8000, 0x6c, 0x6, 0x9, 0x1ff8000, 0xfffffff9, 0x0, 0x7fffffff, 0x1e4, 0x6, 0x5, 0xd8e, 0x7, 0xc21a, 0x5d4a, 0x6, 0x8000, 0x9, 0x10001, 0x35, 0xff, 0xff, 0x4, 0x8, 0x80000000, 0x4, 0xfffffffe, 0x1ff, 0x6, 0x1, 0x1, 0x40, 0xfffff000, 0x6, 0xffffffff, 0xe, 0x6, 0x4e, 0x6, 0x9, 0x9, 0x8, 0x0, 0x1, 0x2, 0x4, 0x6, 0xea, 0x80, 0xffffff77, 0xff, 0x7f, 0xbe, 0x9, 0xb, 0x80, 0xffc2, 0x80, 0xe3, 0x6, 0x81, 0x8, 0xd, 0xffffff2c, 0xc, 0x80000000, 0x9, 0x1, 0x15d1, 0x7fff, 0x8000, 0x10001, 0x7ff, 0x1, 0x8, 0x4807, 0x4, 0xfffffffd, 0x0, 0x7, 0x800, 0x3, 0x1, 0x0, 0xfffffff7, 0x6, 0x4, 0x9, 0x1, 0x1, 0xffff, 0xffffffff, 0xb7b0, 0x380000, 0x10001, 0x702, 0x1ff, 0x4, 0x0, 0x6, 0x5b, 0x7, 0xd9e, 0x9, 0x5, 0x5, 0x0, 0xfff, 0xffffffff, 0x4, 0x1, 0xa, 0x11, 0x40, 0x10000, 0xffff4010, 0xe9800000, 0x2, 0x1, 0x410e, 0x77f, 0xfffffbbf, 0x88, 0xd, 0xd1, 0xff, 0x7f, 0x3, 0x8, 0x7f, 0x4, 0x2, 0x6, 0x5, 0x8, 0x4, 0xcd9a, 0x800, 0x1d, 0xc, 0xa9, 0x2, 0xd9a, 0x4, 0x4, 0x4, 0x9, 0x0, 0xdfcd, 0x101, 0x0, 0x0, 0x5, 0x8001, 0x80, 0xfffffff7, 0xc, 0x3, 0x9, 0x8f2, 0x0, 0x10, 0x6, 0x5, 0xa8, 0x9, 0x2, 0x65d, 0xfff, 0x58d, 0x0, 0x5, 0x1, 0x7b0f0eac, 0x100, 0xffffffff, 0x4, 0x2e7, 0x5, 0x1, 0xe2, 0x4, 0x7f, 0x2, 0x7, 0x1, 0x400, 0x9d, 0x2, 0x4, 0x8001, 0x9, 0x82, 0xe, 0x9, 0x1ff, 0x8, 0x6, 0x4, 0x4, 0x7, 0x7, 0x0, 0x1, 0x9, 0x78, 0x2ffe, 0xff, 0x9, 0x4, 0x5f, 0x5, 0x800, 0x7f, 0x9, 0x6, 0x7, 0x8000, 0x0, 0xfffffff7, 0x3, 0x8, 0x2, 0x3, 0x40, 0x0, 0x81, 0x7fffffff, 0x800, 0x3e7, 0x1, 0xe, 0x2, 0x8, 0x1, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x78f}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x10000}, @TCA_CHAIN={0x8, 0xb, 0xd}, @filter_kind_options=@f_cgroup={{0xb}, {0x188, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa9e}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xdfa6}}]}, @TCA_CGROUP_ACT={0x164, 0x1, [@m_xt={0xb0, 0xa, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0x75, 0x6, "43eb6a0e24ae2bbd9901cd66e0580f00845152f705235b931248ab301559502bd2478b01d9fd33d9d354979ccaa926b16d7f88d069e21077719ee929b7b8c3fe4b46007c5843c4267a0b89453d0451337081caeeb757d8633f5bd71fa0ee20460f6babb289f68026be65039a63807887fd"}, {0xc, 0x7, {0x5ad198ef153aa5b4, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xb0, 0x12, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "f62059b82fe894327c865b1017a963b7"}]}, {0x71, 0x6, "c3101d392209915c931bfe7a7e67864e99926e5ed6fbc1a92239badd7c0615c4cebe757215ab741e14dc8edceebd6c50d9d268f0ee1e5a00ff56760f2328727139cbfafab9e5826c02db4c1678c52966659a61245aff6f9f33249b07f2888ba05748bd11b119b4a3632338ab3e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_CGROUP_POLICE={0x4}]}}]}, 0xa30}, 0x1, 0x0, 0x0, 0x4000800}, 0x4002) 1.712330903s ago: executing program 1 (id=6664): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000003700)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001340)="ec3d788a47e83bd160b8ac738a70c71c3374c77c0fa13efcb33d8d3935b120aaf287d6286e491141a63ef97905e5184382e568f8dbb6693047e25fb50a08e563df1c598b872e95bf3a986b66daab6c167e70762d5ade17bef91a2e7960fe6d75361f88e1feaf471bd5a95e88b6555e1738c1d59373334afcea7ffc0d8d12b93ce4de82b8c77c4f6810093c1cdc16edaae94ef46ca3768cce1a8a9101bad6f157f7d1b2e27004aa9cda743d69db42a293d0f66b533cf42508e663fa14706af4bb230ff60ecee0b5785871dfc9b7d565dcf17504e32575e0e4148bc825564f9ac41d18aea0efb43d5999b7f7fde614686532692d469a05263b9389d115f06c0a0785a02fdaf30c0f21e58639ad2bf658b5a985bfa11cff87e5f8d4323ceae815dc8f00d2e207d7f37c1ee0c05bc2c531ad6e522609308600b0b72a786f6bf22deb88067406b48b0e79587e9077d4f2608f6d0eb131cc08d138e914177fa9676c53c28f388dc3bc88aa9c3d74674cdc343d53ec2b46edf8d0d1c8a8722e97c56d99b998d8e0d7da1ceb5ac240bb4f6d16c651fb92c9e9faf4c269bc07ab89f83500a492786d85ba35f6ee01d0d75270075aa266ab158a6d41b1cd3f4e54b8b5432b36a40b097b2a0d05824e6f1834ae20d3832484f39db39878af737cec27d63783f047cc0f60aa50eef300a4adb18966f9ecb1d14b17ef4ede259a9ac740b4015e", 0x200}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20044881) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x4c, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x75d}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x4) 1.592278627s ago: executing program 1 (id=6666): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x7d, 0x0, &(0x7f0000000300)=0x9b) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) (async) write(r2, &(0x7f0000000340), 0x11000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800733268000100030010000000008000000000000000000c00020002000000150000000c000c800800030007"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e20ac1414bb000000000000000002000100000000000000070c00000000030005000000000002004e20ac1e01010000000000000000010014"], 0x70}, 0x1, 0x7}, 0x0) (async) sendmsg$nl_route_sched_retired(r2, &(0x7f0000006600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000065c0)={&(0x7f0000006640)=@newtaction={0x51bc, 0x30, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{0x29b0}, {0x2b8, 0x1, [@m_ipt={0xa0, 0x9, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x4, 0x6, "e6d22eb06193361fbe2eeccfbd05694856488a32b5c059522e4de237e01a50758422c480e47e072f4a1b0f7259377a8ee7ee094bb21b5da3024f70ffed2ac742adbe611d7d6c69a520d6ed8d9b508d6325049b0cd47b5f1e2c513b8e1cd23b7cf44509c3eb8903e642a94adcd40159837b465bf8a1472241f053b00efa4fb92747d2c5dc8dfcb89627cc19d7524a840ecd68f29c2062ed4c21b4dd5fa593955ee991f06fad96dbe015b7c960afa176e169fe9a8f4f8794ad1bb688a72cd52ff5ba3cd1222d765ee3c3904fdce72bf767edbf86a3881732cfb016135cf198dc8ba8edd7f422b872ac98dfdb122299475d870d17"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x8c, 0xf, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x10001}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x10000}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x2b, 0x6, "329d15c48daae08ee45479405dc484f7a72de2a48ace56a0084b2a868636e4bd2a59204acfbeeb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x188, 0x19, 0x0, 0x0, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf6, 0x6, {0xffff, 'nat\x00', 0xfd, 0xfffa, "83bba2c21669c94b21e38f89dc28fc70980565800876c4ab92f6e7f0929be654b4464bdfc9340f1cd39dd7465a3e19ada684f6b80b0b12fe3464b95981c2193941d41e89791d9ba5c9f86fdc0d33e1b88a301a5c6691b86e3a31ea2de5347f6ae50d71fa1ca23b6c0aff61fa9d679ba830091cb37854b68115765cade9144bf784db29ca82aa8699c02fe9d1061e5401bcd8bbd55a69f6021698cacc13c1dad755267869e0a40db48d3d0104da2f96d40ec1869d49a41d022bfc9867e91193dfbd116be77d04e623a4d4dc37"}}]}, {0x67, 0x6, "e625cd3fa69e8482c3e4e430e1c72459c58dbc117677705308f012612713af199b386c802b312f06360559ed20d8b414c073bdf61c579d90f54ed5df3944d6761ec41cc391e140b997c75b28ac0901c4dfe58203f6c10822d607876845b99ddec7494b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, {0x129c, 0x1, [@m_ipt={0x230, 0xd, 0x0, 0x0, {{0x8}, {0x114, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xee, 0x6, {0xf001, 'mangle\x00', 0x8, 0x43, "107e81f8858f7cfb13983e7336ecd05391e91a7a30a17ed16de801ac1ffa0fb0775776a7cbb7f97f53f82dd1f789fea0ad9a81bbd55256149d1a3613bfc79a4778412873cfadcd8bf3fdc220a8692788f507fd505b13b17fc39ad98f27f61f516ccf646af65748a2281067425a0630e6186ab961978964c54ac7e882a874c226ea8d07b8c2d188417bdf9ccf3748b1d942acc6b8fee4b3178ff577e74a0dd12e0caa5e15ce87471de6015fb97c1e51514ca5c4a6225abe4fcf6cb7851c37e9946377b38e"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8}]}, {0xf8, 0x6, "48de3e6aa69d880aed2d51d2077b8d2a0d0d96117e9fc0d4e629764dc485cab9f141678e2abeb25930e63e9a53030e74492077103966c0c16728f9ccbdde1bf9424dad8b56e63ba0dfcb0b4f9d554f032b64efab2c28e02e552d3c0c79c97c65276b2f45075596813fe6a3388b147b9f561dd3aa1e76e546975707be9df8fd909ff1d5ac0b04e851b3839dc96f6335b8a5eeb674816d2254e10a1121fb2118179bce966fa0853b5d40fce0ea97f5bd4fee89d0b3d5f869700cc33ec381ff1810d632073a83c9755c236b97e5894871208047a8e2cb95f9b877241c06b9a79df605650c19829c3fb15bdfc4bb8d64567cbf0a823c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ipt={0x1068, 0xa, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x0, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x3, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xa}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x12a4, 0x1, [@m_ipt={0x12a0, 0x6, 0x0, 0x0, {{0x8}, {0x1188, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x0, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0xbf, 0x6, {0xecc1, 'mangle\x00', 0x6, 0x4, "583d0eb6d10473e7966acc8f532d4db8f078e24101f4ada342e3ab42f0c0883ce581bbdb4942767a098d487810139b0f4f2674650d24dcec745bbd1dc2107b6d8740b215680eb2f93a17ac9f490335a8267e3b885614f59b7520cd9b80d324a0505b474325ea3e75ac585fa1644f98a4f3b772ee77ab47afcd7fa76375ffe6f8f63e77651bab2f3bc0d6bbf115b3957188e4379511"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0xf3, 0x6, "2c015c5d4fb63b79ed3d3db0cbb524bcecfa47d7a9e342041ad5f8baa38e422ae4ae7c114ba22f9e094a194193fc53e7d09cd379c57253f1b331b10d47c725af89e46c5cddc4f9aa1df504a65ceff4ebc4dc11c2da0c375cd8fe576624d24d577c41cb228be70c6ec42278f7d5f71a380dd66bc28bd334868c7f553bc3e6872efbc5463b8a1853eb14f43b788d41735863b9425f2b9ba2107b792d391d6d9a7b433dd4d0caeb736bae7b4c143d3562456934ca304df8a3072865e03ffba60ccc16a47737864a89f70c41dc4de5569fcdc4020cfdbacce24dfaee883efcd7f0ea4ad6779bd91583e76ce3c6770604cf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x51bc}, 0x1, 0x0, 0x0, 0x840}, 0x4000800) vmsplice(r1, &(0x7f00000013c0)=[{&(0x7f00000001c0)="adba69b8faf1fafbc15e7fee388d121381cf70f5f5cea82140b46a3b8d7234cde6eb75f3b89d275bd9ed38ec804a94c3c637ed69c4c04b7ad6ea2908ac095e0f", 0x40}], 0x1, 0xf) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306800c00010000b424d7d58bc8453e"], 0x13a0}, 0x1, 0x0, 0x0, 0x20000044}, 0xc000) 1.420547537s ago: executing program 0 (id=6669): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) (async) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) (async) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) (async) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r2}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) (async) 1.192206324s ago: executing program 5 (id=6671): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000040000100fcff0700fedbdf250100000004004780080001800400df0008000200", @ANYRES32=0x0, @ANYBLOB="cf51e657b1030df67f5bf4a9f6fb56b4ab816a6ea865b0b962e753d9de4e5dc832a701d9419600af03d4b04f739720dd5dac44eec4fd0c239022800b926544b0cc3f066b9c8edef660936ae83ff88712439bd6b4fabda9c1817d6e636df6d50737d5a89ceb89cd83c8fbe92b19ebd3933ac9ad25f640baecdfce75c1579356e52fd47c000000006f3ed3f12ad1527827c4f4b19c8557efbbc9e9eca5c3c373cdbf57b510e6a0d92d0e4a97f0f4041a9692ef210a"], 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffe3e, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRESOCT=r1, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="216232c3caf3148e2738592877bbdb522a0dcbc3c8017d869ba496719c00ad7db6bc7bf3452a95a8bb23bcf22f1019de29b2b5fe6c79aaaf1a1771541e2f623b6467456ec7911ba4abdafb0e1b6fe2895bb0d03f4b6e5f757fa8df4d1047f9bfdff636aa021a33f5080f911939199dc0144304400f79cbec037074d3f1b96712a0b8dbca02731effd04dff40", @ANYRES8=r0], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) socket(0x28, 0x80000, 0x1) (async) r2 = socket(0x10, 0x803, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async, rerun: 32) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64) r4 = accept$alg(r3, 0x0, 0x0) (rerun: 64) sendmmsg$alg(r4, &(0x7f0000001140)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="2321fd251640680e0722dcaec284fae45fd5c283cf1e6d3b3b46f5a735d1f8a711b14865707257c1", 0x28}, {0x0}], 0x2, 0x0, 0x0, 0x400c080}], 0x1, 0x8080) (async, rerun: 32) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfd3fd, 0x400}, 0xc) (rerun: 32) r5 = socket$inet6(0xa, 0x1, 0x6) getsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000840), &(0x7f0000000880)=0x4) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async) sendmsg$nl_route(r2, 0x0, 0x8000) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_VENDOR(r7, 0x0, 0x0) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0xfffff000) (async) getsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000040), &(0x7f00000000c0)=0x8) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000004000070127bd7000f6dbdf25037c00000400c2800c00018008000300", @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 1.190350179s ago: executing program 0 (id=6672): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'ip6_vti0\x00', @local}) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x4000, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x0, r3, 0x3, r1}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'team0\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa5, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x32, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = accept$alg(r0, 0x0, 0x0) write(r7, &(0x7f0000000b00)="6dfc1faf45b5f14932dd8f5f62d3811765867c23d40353b4c7c38b2c9fa9243b5585f027bfaf068fbbd2329a2de58f41f070ba91823aa3fd9d1a43ec617d97ab60bc497fab80c4517ef8f49952ead338a9a35537b2c0c0b5486c3f6c8c30ef54f9d66c3d3999ad786e09923f00228ffa847cf063ccefcee97858cdbbfeb1420b42811a97822aa93e76a35d11f63094b9cec685d90304940fb5bdb50f523c683d6b9614453e936cd22ee5fa0f16864d75269e92a0ab450ed7c3e4c25e7be74fa7d8a0fb5bbd48f9b09e023c33bb53a7dd372c945601e63d44b88ce8fbc94c7066", 0xe0) recvmmsg(r7, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)=""/232, 0xe8}], 0x1}, 0x3}], 0x1, 0x2100, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="38010000100013070000040000000000ac1414bb000000000000000000000000ac1e000100000000000000000000000000000000000000000c000000000000518e7f11e529e1f9022d8e26c6ca48fc1e9b4b6debc9aded00"/97, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0100000000000000000000000000010000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000a00020b0000000000000000480002006563622d73657270656e742d61767800"/240], 0x138}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) 1.121343398s ago: executing program 2 (id=6674): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000007300)={0xa, 0x4e21, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x304}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x10, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4400000000010104000000000000000002000000240001801400018008000100e000000108000200e000001e0c00028005000100000000000c00058005001f0000000000"], 0x44}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r5, 0x0, 0xd1, &(0x7f0000000140)=0xfffffffb, 0x4) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x90}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={r8, 0x2d}, &(0x7f0000000200)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x51}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 1.003294925s ago: executing program 5 (id=6675): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0xa, 0x0, 0xfe00, 0x41}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x38, r6, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8050) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x58, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x76}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x240000d4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000003c0)="060000004d9070", 0x7) r9 = accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x700, 0x7800, 0x5, 0x9, {{0xc, 0x4, 0x3, 0x1, 0x30, 0x67, 0x0, 0xf, 0x29, 0x0, @broadcast, @empty, {[@lsrr={0x83, 0x1b, 0x20, [@remote, @loopback, @multicast2, @multicast2, @empty, @multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'gre0\x00', &(0x7f00000006c0)={'syztnl0\x00', r10, 0x80, 0x8000, 0x7, 0x4, {{0x22, 0x4, 0x1, 0x11, 0x88, 0x65, 0x0, 0x3, 0x2f, 0x0, @remote, @local, {[@noop, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0xa5, [@multicast2, @private=0xa010100, @broadcast, @rand_addr=0x64010100]}, @ra={0x94, 0x4}, @cipso={0x86, 0x56, 0x2, [{0x6, 0x11, "440be865959e8d0e535b9cc5c56f87"}, {0x5, 0x2}, {0x5, 0x11, "bb79e69ce59f09d6f1bb860e86f53f"}, {0x7, 0xe, "b4daad3f074b0eabd1059e2e"}, {0x3, 0x6, "b4fac33c"}, {0x6, 0x5, "44b29a"}, {0x7, 0xb, "78cd1122aa63184a24"}, {0x2, 0x8, "0fd0db317cc6"}]}]}}}}}) sendmsg$nl_route(r7, &(0x7f0000000840)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getaddrlabel={0x24, 0x4a, 0x2, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x1, 0x0, r11, 0x80000000}, [@IFAL_LABEL={0x8, 0x2, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x8084) connect$packet(r9, &(0x7f0000000440)={0x11, 0xf5, r10, 0x1, 0x94, 0x6, @broadcast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r13, 0x400454ce, 0x6) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x80502, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r12], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x24, r1, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x24}}, 0x0) 979.02602ms ago: executing program 3 (id=6676): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@bridge_newvlan={0x18, 0x70, 0x239, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x44014) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000500)={0x3, 'hsr0\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1b", 0x23}, {&(0x7f0000000900)}], 0x4}}], 0x1, 0x20000044) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000680)="bd5e8ea1cf0e3386f86e7e3559941d7ff5874fd8631fe30b606145cfa76cd157d03fd7446c96a37e6b43a61605ab6d0cd2a1c9b75d22d7ae2e230683446c50c256a253328aa4cf0d731325e8c465c18bf4ca6162586647547fd98ef8dee22e4dfd0711e44e1aad396f266de9c5817ccc41dd3c07f7db27ab67d24efb30998004419b6bc2ab6bbbe1db14ab208c303978f8d3d2be1389bad4d2c749b3", 0x9c}, {&(0x7f0000000740)="377b0611f760702662b5007025e523b1f97df529fce40ef234e23f", 0x1b}, {&(0x7f0000000840)="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", 0xfd}, {&(0x7f0000000a00)="ed644956479f49c01594d5d58bd9884274fa4f72359a48ae4bd2e078d559881cfbf0639400b8d0dbae4aee676e1514e369efe346f573e611fa31ba4e519dabe72268a1d580ca7054d7ec53a22a09818093fbdb978b597f2b1212adec531d0b009a3f4cc4bc42ef0d9698c79808b21d48727f883969ceac46bffc419b9cb3bcb6635811555f0d4b6e281274e213428ab7606460f4a2d8aba84bd6c32d", 0x9c}], 0x4, &(0x7f0000000b00)=[@ip_retopts={{0x9c, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0xa7, 0x0, 0x3, [0x7, 0x2062, 0x8, 0x400, 0xb, 0xe, 0xe]}, @cipso={0x86, 0x16, 0x0, [{0x1, 0xa, "b0f3190ac216a70a"}, {0x7, 0x6, "1e30f5ae"}]}, @rr={0x7, 0x27, 0xd5, [@rand_addr=0x64010100, @private=0xa010101, @rand_addr=0x64010101, @empty, @multicast1, @loopback, @loopback, @broadcast, @private=0xa010101]}, @timestamp_addr={0x44, 0x2c, 0xf9, 0x1, 0x8, [{@empty, 0x81}, {@remote, 0x3a000000}, {@empty, 0x5}, {@local, 0x5}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x3}]}, @noop, @noop]}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@end, @cipso={0x86, 0x38, 0x2, [{0x1, 0x2}, {0x0, 0xc, "a4e5844aa34842274a4c"}, {0x2, 0xf, "63faaeb9cd25ad65b1af8e2361"}, {0x1, 0x10, "dee241892be83af69b988f8f3464"}, {0x5, 0x5, "a7dc60"}]}, @generic={0x88, 0xe, "9ca036eb8c6148f12fa34b6a"}]}}}], 0xf8}, 0x14000081) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 942.175016ms ago: executing program 2 (id=6677): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@o_path={&(0x7f0000000700)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480)={0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000540)=r3}, 0x20) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000dc0)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x401}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb94}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000880)="4cc1", 0x2}], 0x1}}], 0x2, 0x20000800) shutdown(r5, 0x1) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000680)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xffff, 0xffc0}, 0x90) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="14010000360001000000000000000000010145800c0004000700000000"], 0x114}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000000000008000700", @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000000080005000000000008000100", @ANYRES64=r6, @ANYBLOB="0800020000000000060006"], 0x50}}, 0x4044) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@deltaction={0x94, 0x31, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0xfffffffffffffe7e, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf52}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x511}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x94}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) getsockopt$bt_hci(r7, 0x0, 0x1, &(0x7f00000005c0)=""/60, &(0x7f0000000640)=0x3c) 768.218198ms ago: executing program 3 (id=6678): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) clock_gettime(0x2, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x1a, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001003500000008000a00", @ANYRES32, @ANYBLOB="2ba15d1b7c34d198714f4cc4f34d52fc2aefa6b385bf060defe3d70ba7020000005e47ae4f09f13ef8d490ceb2ea044288c82b4f99c8b7"], 0x24}}, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x39b3) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="18320800d2807225184de9c7238a7f1b5bcd12c1f16086819b95f60d5f59d1298bd42d00024c442e69556ccae97d0ee6ac481d51c1a09eac0a6556eb81eb7ba2b66b58476e6eab9115a012b7cfa2b5fbe55a1f2954de7fcd7a09ace241215535e1d6fb0cfc8395280fadcf9dfdea658613fc883d12e50dbe27f13d2514e69467b0ae", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000200000000085100000fbff9affffa520f4ff00000001181100b018c2dc86351e3e36c5df0807b0070b40e6c2f2eb414e7833d422e3536cae4e086569f9dc2b098224c781ba61b3f72a28ae9a411255e80decd008120768f712ed91a1", @ANYRESHEX=r0, @ANYRES64=r5], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bind$inet(r6, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r6, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000000}, 0x1c) listen(r6, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r2}, 0x20) (async) close(r4) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="a821000000000000140003006e657464657673696d3000000000000034001680300001802c000c801400010007000000440b0000f9ffffff88a800001400010001010000660700001a0b000088a80000"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x105f02, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r10 = socket(0x400000000010, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) r13 = socket(0x400000000010, 0x6, 0x8) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) 767.438722ms ago: executing program 2 (id=6679): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r2, 0x58, &(0x7f0000000140)}, 0x10) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000200)={@empty, @initdev, 0x0}, &(0x7f00000002c0)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_emit_ethernet(0x82, &(0x7f0000000000)={@multicast, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x8, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x1, 0x0, 0xf407}, 0xfffffffb, 0x0, 0x0, 0x4, 0x7, 0x0, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x130, r3, 0x8, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x130}}, 0x40000c1) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd4}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 729.650621ms ago: executing program 3 (id=6680): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, 0x0, &(0x7f0000000140)=0x38) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 676.618558ms ago: executing program 1 (id=6681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000002580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002540)={&(0x7f0000000380)={0x21a8, 0xa, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_EXPR={0x2194, 0x11, 0x0, 0x1, @range={{0xa}, @val={0x2184, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RANGE_FROM_DATA={0x10e0, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xb7, 0x1, "38bce46a23d6aabcc682a7e3110a65916f670bcd934fdca4d566540ad90a1f5c0eb82742c80606b1fcfbaf5acb90cfd991e75c5ab9d2153ad0140635bb3087ff55657f5243c713eb2524b86ea4e7221e260f9cfb61624d6a1875add3d380331c8b90461bac51e5326eb10a875f0b2ffe6fe5a7696defb129247068ee91b4fe6e0c299dee1f05f7f1f64e43c9c4f51df49276156e717c091de44c2573c124424f9659a21b12c7e1e070efa75d3cb34763dfee6c"}, @NFTA_DATA_VALUE={0x1004, 0x1, "b353e24a85b5be042ec79e29f4695b10945096dd5fd4723d0d28b964b96da5a299a731b32b81832ad72c1a6b93ec9442ce94161b6836f12117f94834e70b7b656dcea6bf7dbff64d3fb07219750d9a84738ede9431ecb1b76bacaf8fdc5810c42b3a9fae0142e1f8b2a02fe2ac3b612315ec4b658c04fbf98ab3caf0d05d48a5561c34ab72935bfc4a45c20bc8f6e9306a5b392db87f30b4471d7c89babeb896a854856051a80e67540a6e63d825e4c7830fc190437080c34c254fe28e51a8eee339c1ce2887af8ef6920af4c86752de6666285707e3705c8a37a7141e030ca54e6be7787f2d8112996d590d8c433435cc610941e784502a55fd208ad01e45fe1ffcf304fab3c48341f0e6a019ab77c606c446f84ecce7a40323dfd4b0677d847e522662429abe84c426deab00c7adea23e43adaa6062812f2000a70b13de2694ba84c0d1fdad60554ac3061f7d22310403670dc3f7b8d7e2ea032f3e3637e16fcb0382ca02c80ae797a03c601ea6ac0ceb600c4516124d11c340e1225427033ce2ada09f6a4b5e572540a977c14838ebdc846fb01d7aa06afa94fe778f02e34b501b39f1a6cb8ec99b140533476853a3e8b6590c6e2177673219ebd3f7cfa4a1c8ee8cbafa07f38eb8eee55e9404da39e3d05529e011896ea504bdc09023866e49b2259de0638d6dbdd7b6f280928315ebc0fcf9a9e5391af94cebb5bf65ba9e2a0358a750310e07171a97170038df609a65cff34f823aa2aab5ed55142d0e72ff555faf6bcd81141f243e5cca25eccc847161b80362c359933975ab41dabfa0f96a65f1df69d81b50e13d15292add110a8e5ff5583bac4728e1ad16e34dfd7632281f591fd7fbb46cdca275d3f741367928e970113698dd632debc33a78c036800692b45d58bfcfe36a0a1ffba843ec8e4464340e7c6cddfba89f2a3f879f05c6487c3bbf825eab621c2c5f41275a2c29395e58ccc23239848411dac453bb175dd3967d2a7dac917a3034bf8a0a0103667f475d0ab990aebb57fbfb331e6a4c0d2e978e6fafd63dcad5b13d3f333a2c21dc9dad90ebb80f35867352de0a0d185e31d6177a905a79c1df8a7e13fbddfb9a43078faf5c75c06c05338c318f17030ca758487e487193c349f263da421374e584c5cdd67196348e80761e8d948ac37b0bf96490149c6a2f240249de852785c18d88de46d21f27fd599e3f09791ccce04ade0b21906fcb4592e337de5fae69baa1ad0c279a283df25a17b8edbc4f2658ef5d032bf972eb4b5dddf83e191afe8a2da10326ee87efd09a651dee123d0e714f1651e16ed1b7a101c80c4c708b927cd40c73f4876538be815a62973297153fbbf36110c7a9c9e9c0f430716060a6775a28bc9f779f7fe25b5298d68d46e3b1171ea1985900b5ef64dfbd336bfa36d06cdea4f9100ac0c2c94d4040228e8a475bde44791fb543134ac9cacb31bdf5ceb73e3438f2078c83adb3724dc8ada6da26fdf187a2db2ebf4163c7811bc8fae351d14869f7a716a8811a929760a05d370b12b62163df540c3582f6b110aa668477f5a349c92f85b71ad9c1af991351891a34d91f44d9263294709e67e8e9a722a04e1d9d5c331a7132f80764dcc2adbf0a4118c9a8ae375220b6e1deca88d3a7caa75065ff431614b1091fd2fdba1468e01f707cfef9e8d10dbf9e48cb23478cc1347e9d8db60a994e18ab4a39e6cdca9c3d1c5be03bd20551073e69d869003e193c14a7a9a51cf7d5842ea931a6e0ad1a0e76155f4782d9ec7b5e412a79d538254b2d1e05370c6e7e9f0f44c271c07f4ca88e2757bb6cecff189e679a4eb7b3a5a49b06ab5949d735158e1e76490bc9652468b1e59371bcc86d4d7c4ecc1416117408bb28419676ab4c96e5fb57c6297ad030e8403571fc69ce49c5c19cd239c4b8a3a1e96314da7f986100ce2908a86a8f60339442e1653188fdbd8d84bd9490a9e4358515452b7610b22d8efbe65e8af8bc560ef006647396d2497851b82274c8278a6fed3cc7c84f3476698e03dfa12f37650269723a270ad7a50a737ba1e1be56428c26f7327f4cc907558813925adc660f0d490bad8c85e6faf893916f679854b6741e2e2c2d09f4fab90eb1ef8b1c580e1a94e06ad5ddc237c430210e4e2d3564ad3f182d4f0a69607e28eb144e872c9bffbcd80e268adb7fc064ee947bc09d159c8069fe4761bfc10eaf7e63b716c562b065330acb6596fe8f1cc065e221b3e0415575cd1f6133cac3228d2b24b31c61cbde20fb46687002e0222832f82fd940e311083b39aa0e6c445bd43e180921c3572c866f943a5392beb3f7cfe69ec8524b20d69f18a3c6b66b245ed49292318700a3c4969f4da1cde679df382fc352b40d25a8977f063e42f9d588c3452af98b69b3e9724acf005520d0128bc54468f09488108d13e8aa60c85c0c95d6cacdab2ba2698bb30da4a1e0fcbab3d07869c24217ca3e9583eac3cd9652abb080620d54bb705ed30ee8bf738cb67c96db82475130a9a163f5a0bff1d899011dce9a345e861015dcdd432493c5a5bc58cd14ba420a461616c1d515668e2f7ad1981c8d416e95bb0575db982a0edd879fdbbe6f17cd6d189eea1ec8956fc9ea7468371327c43f62486da26e44985aa27651d11198c84caf8a55ad4274a0a174db865720fc5ffe0753d81198aafc1f89d2b31fdd1ca103bb752258d9dbca8d6ce45f40adf5bced9f0c562005827f3a6048ab4d59c8a72a7fd326239d25aca35a1850aba2e98f220255b8cc0fdfcc1f4d7bf8dcd2fe7e8e690aabcfce8e39887d0b3587fd4385fd521601a627f575f09d3fbaf052b060dddf9c652b339dc74b35ac9cde78c2587c3dd577dd631575b8c773e80ac1ea918338ae1775424d876c579bce4084b0d36ad0ac4b9abb336d8a8acf7411265b45c88f5295d498aca7680088becc11f35da7c2ac0dcccdb8f7fd9713264e90ab7f9ab2b4fa7094a6ebfe68a3f7d9c904083832f65121e308c67e1807a9ccd4424fe17e6ca1de20872fbca92992edd0ce60c6632a65c57da763452d35789bf3b1564e457913991038296fc6909825c0425fabcf211c10d7f6ac207f8ea83f92036b89fcf04020f3380f9a6f23550d0937f9a270e8432903cf5def9b89e1918eb3e1ba5bbc5415106bb3fa2756adbc340f74de22936e4e7e8285f96f1bd397c32e1a2515f5dcc8015c444a933f613200f684f76d2d4e3311bd7d0f6af90f40ebae6aefeb3413bad7489e390df27d636475c403de07ae6ca622500331ac04cee51cc1608eb956bc53173ff351559d1f3cc8b4d17b9d0747c585676b4878f2811e39cd9c3d5696c18a540ba3ae177533a35c1bde7dc19da9f4115d688544263f3b09bdb9ac28971113cba1d79bd6a1de2b6a6255ce5bafd671e63cec15664e4d2fdb1486dd350f8b2c0bd6de26b55205ed62471143cb44abc32f15b0ff924f073d9daf683ab93fd4a647b08694d7c5bb676632cdc26a92ae658b82b210b0f46695c174993cc68595adb460c2cb21e1129ddeb1f91e33ddfcc00c7b3ddcea667ac8d503205344fc482a390fe2edbe6c818d800ba9216c25e24a8096b4834e7cbafab82104da9350db58ce50d717bba4a22a6ac07d35a400238a9357ebb4f6cf5061e3042d1e89c77cfadfaadd1e6733f2026b0a1376906f8ea1c917dd331c45efcfada6946de0c83ad59cc09d17d5476b4366a5fb71b533f9e7001cd3178622371e34df547c9546efe77b8db5045394aae01e648e65e7b3524481462c970ff7c8297122e1b864303873294e3d64d43250408d72e722eb01cd3423f97df14d03f2a16cfd09d63e3bd942af2d8e54e77c180b45c5d26e9beb12ed6cb5d89e3ea4aa0da757b13a7448c33595483beba3aed5350697e7c3929c034d01099e0833cdd4c3e42cf76221ccfe34e97c41de750036bd1870d2516f55c43ec6697f7195fdfe84f90a08a9619d191a5a2b05d7d84b85e2e45a91ed2dcc54aaa6adfc50f95d23661c252c2999c9108f4e9d8f3252b2f35fd6b126c08cc845ff70c909e8e1ff07201c801019535870daf613ab0c944e56e654a503b1bc13d9e8529c2b9617162319ae56912f85600b4285392ac584f986bce248ad5c2b01ed02478ebf61091279b7b17ef347bc94166974749772242f2490ee42ae7ecfabf5cdea8486b66755509a0e29b03db9ac8c214fd7a7956680a74ecd3b7acb73e82ffaa017b2c27b26b711b8ff620b05acfeee8f3451af400cd014600d160cda4abaa962715da229f0dea0498d751cc32dc80f13ef20436a49bb371b0570b2a6dd902d5a9a6bd41d8c4dc45c80bb8b81440c1bff5cfe5747415554c7c6dc634c0002a4ad1c3bc6dc4ee157678d876862b36a191b79691e320beb02180533500796892cfa8c7a69a8cd7bd86307147bbcc4e28f0f53b6c845737c972bc5a18c3f35a2f161aa96e9895f490f07597f9702877ca84929a3e74ac9409dda1b9c453fb8fa9eaa60fe1194d56b69b11f672723a7fcccad249d16950b24d4b1d4e593a73b45ef7151a7a3c813eed23782b09f470a81828e879c6c0dd298c74ff99b6561b3939c4e12ff3db7ad9eec2e21b8001253dfab78551c16672616c586475559ce57e17024abdb61a70836513751b58a3d12cde3f7afe621d48a415c1320b0501e9051fbf891d07d475ceb183414dbbefe80103f5ad8ff53503597839a3eef5766a42178d1c7fb2d0bf15efcbc78f140bc0f35a7ece8f7ef65a173e7ef4f5129f465f06b12a981acec16dfdf3f1f67651cf5cb72993c5aff79df8a9459455873d18103b8e87ed54cb643f87591247f0319585ffd1c77827f351f423d699936ad6367321346358aad346e2f5cb2f645360e4038493c39a340c49835322ae7efe3ef69976d95b70d8f15ac2b3164d1ee38ec28163bf31c6e4bf22efa43873b446ca310f2d42eba2db37220ec471dd12920d56d0618d568e884274e6a8134cb7de311ff66272a37b61528d0edd844798f01fdd4b165f4cc2e0f80db992493e5d0853632d0a8688e665d7725144f75c36e7a0caab191c3a02736fdfeabb853aee04f971e8ac0470dab7a8a174750730c39e4f46592a0bd23773b39dc05cef9d285cb9b76b8a8294a8b21d03441bd75646c1447cc75144a32ecebe6974dead4afd21e32bd23161d0510787bb7a3e72504d0e9b7dd9cf315d6c61c9e1ba8c03c6d97bb132c0cfd19583e6ebe1666a9cae0f1a950cd804d9cbf43ccb92f703761e6465ccc976d22c5a6a34c1e4060a8493f63acb8d1e896c14c7f52f292334707065e2d7e9f1987e68a05f7ab4b3df19d06d256f41fb93c0dd2a1687cb2beb662aa2668d9d00ba089c37a7d5992a82ba09be2a18b0ecc134bc74e5b104da5afad3a0d364d43c422c7ac7ff6137fadd0a75475178fb7c55f2004ea64201ffc64491138d03d9036ffb4c2dddee49cdac9da0bbef2a376c9f3156324029090eccd97d855f83ce5e5b75c88951e43702d4d20bf5cb2ee595ab0581f6c6fbc219064ee35b47ab499b86da62aa03448d1af820fb05ec09e52ec7dff0c5870ae033b3e16146c479de9466ebb0103c21ded0855392dbe43ca58c3e9d601379410220e55e91c0af61f512892f71e6c3fd398feaf56c94b6352880a066f10961d1b98e4b9eda1b3352dbc8ad115a68935a6fb07d47b76197785ce9c35ff69094b06ed78978ad3a435be26330f61888fd5d6ac1f61acb7d024a9021947da2d044f059ec4d303808fd20b227c51ca595654074b8f1a719b62f95e537fb74f25f"}]}, @NFTA_RANGE_FROM_DATA={0x1070, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, 0x21a8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x68, 0xc, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0xc4051}, 0x45) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@RTM_DELMDB={0x11, 0x55, 0x1}, 0x18}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72dc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294aa5047", 0x31}], 0x1}, 0x4840) 600.309894ms ago: executing program 5 (id=6682): r0 = socket$kcm(0xa, 0x2, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000080)={0x1a, 0x33a, 0x1c, 0x0, 0xe, 0x0, @local}, 0x10) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) (async, rerun: 64) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async, rerun: 64) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x84, 0x30, 0x51b, 0x0, 0x0, {}, [{0x70, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="d94c8f9e9390"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x84}}, 0x0) (async) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) 508.110016ms ago: executing program 3 (id=6683): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x2e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x70) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f00000000c0)=@default_ibss_ssid, 0x6, 0x1) (async) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f00000000c0)=@default_ibss_ssid, 0x6, 0x1) 426.0488ms ago: executing program 5 (id=6684): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x95}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x8000, 0x50}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x6}, 0x48) 376.063106ms ago: executing program 1 (id=6685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000)) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000)) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@typedef={0x0, 0x0, 0x0, 0x7}, @restrict]}}, 0x0, 0x32}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) ioctl$OCFS2_IOC_GROUP_ADD64(r1, 0x40186f03, &(0x7f00000003c0)={0xe4, 0x2, 0x5, 0x8}) (async) ioctl$OCFS2_IOC_GROUP_ADD64(r1, 0x40186f03, &(0x7f00000003c0)={0xe4, 0x2, 0x5, 0x8}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r1, 0x20, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x0, 0x0}}, 0x10) ioctl$OCFS2_IOC_RESVSP64(r1, 0x4030582a, &(0x7f0000000380)={0x0, 0x0, 0x7, 0x3, 0x1, 0x1}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff0100000003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x855}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) pipe(&(0x7f0000000300)) (async) pipe(&(0x7f0000000300)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) 375.102608ms ago: executing program 2 (id=6686): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r1, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000018002902295a9800fbb728b955b02fdc000000000000000002000000080000000000000004000980"], 0x20}}, 0x0) (async) close(0x4) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000bc0)=@newqdisc={0x24, 0x25, 0x400, 0x20, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xe, 0xffff}, {0xe, 0x8}}}, 0x24}}, 0x20000800) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, r2, 0x215eb000) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) (async) syz_emit_ethernet(0x2cd, &(0x7f0000000dc0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x297, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x73, 0x0, @local, @empty, [@fragment={0x2e, 0x0, 0x5, 0x1, 0x0, 0x3, 0x68}, @hopopts={0x0, 0x2f, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0x33, "8b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639f9f6c3b379fe"}, @pad1, @jumbo]}], "983864eee1fe71e030673c5d9f2a0d512afd8bcdc98b342beaeeac01407508381ddf452b0ecc470ae144882e0766e2bd2f73bedf534a13a74fff0d3a25edba25839e625378c87c580477b49fec358dfbbe727df3ee057de73dfd2e630b6a77ed16966ffef0d2db48b687d8bf0da168016b8daab690da059e1680f10d96f3023c92a86c9a164a16d9acbfd029d24d824bf3ea09887510f8618d7c9ddd8747cd4aca00597422b4c96adec5755f5f49ff44c10ee5396c7d05149f8e01e1b07adab463ed9eb188af60497998153bbca8a38e5862c785898230d71850c4dbcae034"}}}}}}}, 0x0) (async) r7 = socket(0x8, 0x3, 0x3) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400000002000000000000000000000d0000000000005f0001575ed7a7c8826377f4647db974ffc9cda3583300bd0e810f98089ac28fd4ad1b89c27449dce3e5747704d9cf0879a981f4d2fdb49be322d53e206e4ba90e36122090076e5ca3294f3ba62acb54063ba39a9c1bf687abf3ac205c843958e678e3be3f2a8b1e4a60b6a5cf860ebeca9df23b97c071a6a0a7ffa1d33d8bfc7468da1a26febad8f9f0bf19b7a882e806e0e395c624f7d023b0cfd2918d0939f8f4164ce069f78105"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff8001}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0xc, &(0x7f0000001200)={0x0, 0x1}, 0x8}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_rdma(0x10, 0x3, 0x14) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r9) sendmsg$NL802154_CMD_NEW_INTERFACE(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01012dbd7000f90f002507000000080001000120000008000300", @ANYRES32=r9], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0xa8c4) (async) ioctl$sock_qrtr_TIOCOUTQ(r7, 0x5411, 0x0) (async) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x82000080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="057f8c97", @ANYRES16=0x0, @ANYBLOB="00082dbd7000fddbdf250300000005000400010000001400020064756d6d79300000000000000000000005000400020000000900030073797a32000000000900010073797a30000000000900030073797a3200000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000044}, 0x801) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, 0x0, 0x10000000) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000040)) 335.434562ms ago: executing program 3 (id=6687): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x20) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x4000050) socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (rerun: 64) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000007000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x3}]}}}]}, 0x3c}}, 0x0) 278.827522ms ago: executing program 5 (id=6688): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) (async) r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) (async) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r2, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r2, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') read(r3, &(0x7f0000000200)=""/196, 0xc4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x301, 0x0, 0x0, {0x3}}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) 172.336863ms ago: executing program 1 (id=6689): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback, 0x4}, 0x1c) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f0000000200)=0xd, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f00000004c0)={&(0x7f0000000100)={0x1d, r3}, 0x10, &(0x7f00000001c0)={&(0x7f0000000680)=@canfd={{0x4}, 0x25, 0x2, 0x0, 0x0, "d9d2a7ae9dcf4d69beb15eec7d344087db3bf1d23ce4e5320ed7e06f51a642a2ffe41cecf2ed670bd1a9c6363fd3c9440abf43540285588003fd7e950b08d518"}, 0x48}, 0x1, 0x0, 0x0, 0x84844}, 0x400c890) (async) sendto$inet6(r1, 0x0, 0x0, 0x20000088, &(0x7f0000000380)={0xa, 0x4e20, 0xfffffffc, @empty, 0xfffffffe}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) (async) sendto$inet6(r1, &(0x7f0000000000)='\x00', 0x1, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40032043, 0x0) (async) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000002000010000000000000000000a8010000000000118000100050015000200000014000100ff020000000000007d8d77fd000000010500130001000000140002"], 0x90}}, 0x4000800) 169.225996ms ago: executing program 0 (id=6690): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x7fff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000001c00)="b702", 0x2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r3, 0x10e, 0x8, 0x0, &(0x7f0000000000)) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000007d00000000000000", @ANYRES32=r0, @ANYBLOB="040000001600003900"/20, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="04000000030000000100"/28], 0x50) r8 = socket$inet6(0xa, 0x3, 0x2f) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e21, 0x7dd5, @loopback, 0xc}, 0x1c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r4, 0x20, &(0x7f0000000680)={&(0x7f0000000400)=""/255, 0xff, 0x0, &(0x7f00000005c0)=""/184, 0xb8}}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x68, 0x10, 0xffffff1f, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x17, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 151.255845ms ago: executing program 2 (id=6691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x54, &(0x7f0000000100), 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="30000000c53b0cce69e4cbd6c60ab81c487c4ebfa9bba8a88b859080f8d89b3b8a2f66fccf34e6154f290429ce9d8bb73798379c6a6f199f0e32ad064c510f16e43ce1259b3c3ca1957d19a1cdb7d0e02e879a042e605c5320e82c46ca66a337aedd7fe38bc9c765129be67e18e76035e6cb70f9a1f3fa3974f684e33febf73c8eb4e019287a41ad918137f95479dc0a7c383a58dbad88ee5339090b50c3fbe67915b3715e346e346a2f1b0ab28183f133efae6be5fdf4c84eed0568dc006cce7d", @ANYRES16=r6, @ANYBLOB="0100000000000000000007000000140008000000000000000000000000000000000005001400ff000000"], 0x30}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) (async) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x6e6bb6}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3504, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100000}}, 0xe8) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, 0x0, 0x4000004) (async) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="89e7f22c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000001040)="4d5e945c3ce0b5e3810b382d4c4e5b4c26a85ffee3e1324e617a0d6e763fc62d9e9e94", 0x23}, {&(0x7f0000000300)="d313fcc3b3", 0x5}], 0x3) (async) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f00000001c0)={0x9f54, 0x8000}, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) (async) r12 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r12, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) (async) sendmmsg$inet(r12, &(0x7f0000004cc0)=[{{&(0x7f0000000800)={0x2, 0x6e1e, @private=0xa010101}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195918c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8dfe21a31a73a4d908795b98c62b6551b0c3ed6af358e15446e3b497e599e062848ec62e3b3ea300bd921830434f1561243737f27a2bf98d708c1bf4fd2c2e3f8ea2617d0c69dc73c597a12ba4be2bb9439d7a518eac95b7b8776223bfefeed41d09154ce0983f0450acd463a6e3f8285a144a20dec45b607a1720ceb95883a14ea680f7f00d86053bec5d49bc08e692bd70ccaf51386", 0xe5}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a104ada4362c43d54fce970e", 0xb1}, {&(0x7f0000000e00)="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", 0x179}, {&(0x7f0000000280)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf8d255d83d865664321b849eb7790480dc0fb0e8b3bbdf8d45987e6302f1ac521b8e43d5135865c441efb1377fa4b4c9876f8ba2f5999ff4070213fdf5716b9c7992cc57adb3691cbedd46c70c120e4aeb0a2c0e28a8e806f43cb43fd522a35874f4503d56d44c71c7", 0x69}, {&(0x7f0000000880)="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"/371, 0x173}, {&(0x7f0000000400)="ac6aed94fbb8c7fecccf1fbe0f823f4711e4d4e5831b1172b79994156deeb8f47a21f6bd119ffeb486267bd8dbaa3b868deca95efc3fea013ea88ddd3222ff7cc0a3448434dca51f5bc1972720dc071c5c5e2358a62bb3d9ccb581431764476f92bc0dd581a715f7ff8cef23b35dceb96809ab4bfbc85cd9eed4820e2a821913e94ed62ce3b44103e31a82b7c14ea5dae6b42906b14cc21e24fcb7b255b5fd8b3d9eda621defc3f398cc545fb03d6549353921bb4a52b3230008f967ddc1ad8635d58667b82a58ec030a57d199f14b1714330e476a95", 0xd6}], 0x6}}], 0x62, 0x2404c044) (async) writev(r12, &(0x7f0000001580)=[{&(0x7f0000000f80)="94ecf32a56f69ed7a392eed45ecbbf33b3432020a42e656f5be0b2bec03f3df8442095fbeb7fff058b0acae17b8c2f27449d4376d8654e1d193eb59a0d67d712f19e9bcfa06b82e73796d9dff25a85c9131a3d69c73b0fcd121f2e77552e5082b29ce0885896f46619199994bd3671f5dda81c10e5360df6c9a3bd8899c920b08a342252a8bcfbd0fed6ae361c86153b8a73d1bbd18d0b9f56ebadaa119529", 0x9f}], 0x1) 127.837596ms ago: executing program 3 (id=6692): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bond0\x00'}) getpid() sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0xea0a, 0x40a38}}, 0x20}}, 0x8000002) 0s ago: executing program 5 (id=6693): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) socket$inet(0x2, 0x2, 0x1) close(0x4) sendmsg$nl_route(r0, 0x0, 0x4008840) syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @random="8fa2608d7a99", @void, {@ipv4={0x88a2, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast}}}}}, 0x0) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x10086}, [@IFLA_NET_NS_FD={0x8, 0x1c, r3}]}, 0x28}}, 0x0) ppoll(0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bd2a, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x4}]}}}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe94, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5, 0x8}, {}, {0x0, 0x1}, {}, {}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x3, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x80000000, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'team_slave_1\x00', @random="01320136b1ff"}) write(0xffffffffffffffff, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a) kernel console output (not intermixed with test programs): underflow at hook 1 [ 700.062017][T25430] sctp: [Deprecated]: syz.3.5057 (pid 25430) Use of struct sctp_assoc_value in delayed_ack socket option. [ 700.062017][T25430] Use struct sctp_sack_info instead [ 700.543649][T25457] __nla_validate_parse: 8 callbacks suppressed [ 700.543672][T25457] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5065'. [ 700.725061][T25471] netlink: 'syz.3.5070': attribute type 1 has an invalid length. [ 700.756891][T25471] netlink: 'syz.3.5070': attribute type 4 has an invalid length. [ 700.780658][T25471] netlink: 9491 bytes leftover after parsing attributes in process `syz.3.5070'. [ 700.860465][T25478] x_tables: duplicate entry at hook 2 [ 701.292395][T25500] netlink: 'syz.3.5080': attribute type 1 has an invalid length. [ 701.460269][T25509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5083'. [ 701.623535][T25521] netlink: 'syz.3.5086': attribute type 1 has an invalid length. [ 701.649135][T25521] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5086'. [ 702.073895][T25543] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 702.872855][T25590] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5108'. [ 703.078629][T25600] IPv4: Oversized IP packet from 127.202.26.0 [ 703.119733][T25604] netlink: 'syz.1.5114': attribute type 4 has an invalid length. [ 703.135515][T25604] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5114'. [ 703.189020][T25604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5114'. [ 703.324569][T25614] netlink: 'syz.2.5117': attribute type 1 has an invalid length. [ 703.346633][T25617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5119'. [ 703.364691][T25619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5118'. [ 703.388111][T25614] 8021q: adding VLAN 0 to HW filter on device bond4 [ 703.425009][T25621] bond4: (slave geneve2): making interface the new active one [ 703.440731][T25621] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 703.453699][ T5928] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 703.467464][ T5928] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 703.480755][ T5928] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 703.494438][ T5928] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 703.757667][T25637] netlink: 'syz.0.5124': attribute type 1 has an invalid length. [ 703.801277][T25637] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5124'. [ 703.889367][T25637] veth0_to_bond: default FDB implementation only supports local addresses [ 703.980194][ T30] audit: type=1804 audit(1778010530.532:12): pid=25652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5130" name="/newroot/319/cgroup.controllers" dev="tmpfs" ino=1649 res=1 errno=0 [ 704.017235][ T30] audit: type=1800 audit(1778010530.532:13): pid=25652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5130" name="cgroup.controllers" dev="tmpfs" ino=1649 res=0 errno=0 [ 704.239593][T25661] netlink: 'syz.0.5132': attribute type 2 has an invalid length. [ 704.333308][T25665] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 704.365907][T25669] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 704.480744][T25672] nbd: must specify at least one socket [ 708.578889][T25683] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 708.764094][T25703] syzkaller1: entered promiscuous mode [ 708.825583][T25703] syzkaller1: entered allmulticast mode [ 708.833178][T25713] __nla_validate_parse: 5 callbacks suppressed [ 708.833220][T25713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5146'. [ 709.321561][T25742] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5155'. [ 709.337177][T25741] netlink: 'syz.0.5156': attribute type 10 has an invalid length. [ 709.358532][T25741] veth0_vlan: left promiscuous mode [ 709.391261][T25741] veth0_vlan: entered promiscuous mode [ 709.432313][T25741] team0: Port device vlan0 added [ 709.468701][T25745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5157'. [ 709.656835][T25752] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5161'. [ 709.680806][T25752] netlink: 'syz.0.5161': attribute type 4 has an invalid length. [ 709.703402][T25757] x_tables: ip_tables: REJECT target: only valid in filter table, not ºilter [ 709.838448][T25764] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5164'. [ 709.867106][T25764] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5164'. [ 709.881112][T25764] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5164'. [ 709.945199][T25773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5167'. [ 710.118322][T25778] netlink: 'syz.5.5168': attribute type 33 has an invalid length. [ 710.408062][T25795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5173'. [ 710.454020][T25792] nftables ruleset with unbound set [ 710.775363][T25816] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5179'. [ 710.813171][T25816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 710.928398][T25823] netlink: 'syz.2.5180': attribute type 21 has an invalid length. [ 711.651419][T25869] syzkaller0: entered promiscuous mode [ 711.681096][T25869] syzkaller0: entered allmulticast mode [ 711.781502][ T5631] Bluetooth: hci2: link tx timeout [ 711.792745][ T5631] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 711.838547][T11924] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xca [ 711.882427][T25885] bridge0: port 3(gretap0) entered blocking state [ 711.900501][T25885] bridge0: port 3(gretap0) entered disabled state [ 711.926731][T25885] gretap0: entered allmulticast mode [ 711.948638][T25885] gretap0: left allmulticast mode [ 712.063223][T25889] syzkaller0: entered promiscuous mode [ 712.080554][T25893] "syz.2.5202" (25893) uses obsolete ecb(arc4) skcipher [ 713.820125][T20817] Bluetooth: hci2: command 0x0405 tx timeout [ 714.557580][T25869] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 716.188041][T25907] bond2: entered allmulticast mode [ 716.193625][T25907] ip6gre1: entered allmulticast mode [ 716.248535][T25911] syzkaller0: entered promiscuous mode [ 716.254118][T25911] syzkaller0: entered allmulticast mode [ 716.310214][T25910] __nla_validate_parse: 7 callbacks suppressed [ 716.310236][T25910] netlink: 580 bytes leftover after parsing attributes in process `syz.5.5206'. [ 716.668120][T25938] netlink: 198232 bytes leftover after parsing attributes in process `syz.1.5213'. [ 716.919653][T25956] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5219'. [ 716.962828][T25956] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.5219'. [ 717.083706][T25963] netlink: 'syz.1.5221': attribute type 26 has an invalid length. [ 717.211459][T25967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5223'. [ 717.551613][T25994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5231'. [ 717.565884][T25994] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5231'. [ 717.584343][T25994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5231'. [ 717.615403][T25994] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5231'. [ 717.708199][T25998] lo speed is unknown, defaulting to 1000 [ 717.862224][T26011] netlink: 'syz.3.5236': attribute type 1 has an invalid length. [ 717.893700][T26009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.007324][T26015] IPv6: NLM_F_CREATE should be specified when creating new route [ 718.025637][T26015] netlink: 'syz.5.5238': attribute type 1 has an invalid length. [ 718.309969][T26029] netlink: 220 bytes leftover after parsing attributes in process `syz.5.5242'. [ 718.581534][T26044] IPVS: set_ctl: invalid protocol: 60 100.1.1.2:20002 [ 718.624278][T26044] IPVS: set_ctl: invalid protocol: 60 100.1.1.2:20002 [ 718.653591][T26044] IPVS: set_ctl: invalid protocol: 60 100.1.1.2:20002 [ 718.877053][T26056] 8021q: VLANs not supported on ip6gre0 [ 718.936703][T25992] wireguard0: entered promiscuous mode [ 718.942530][T25992] wireguard0: entered allmulticast mode [ 719.089087][T26071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 719.264958][T26075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.713035][T26094] tipc: Enabling of bearer rejected, failed to enable media [ 720.091138][T26114] netlink: 'syz.0.5265': attribute type 1 has an invalid length. [ 720.136544][T26114] netlink: 'syz.0.5265': attribute type 2 has an invalid length. [ 720.175420][T26114] netlink: 'syz.0.5265': attribute type 2 has an invalid length. [ 720.202479][T26114] netlink: 'syz.0.5265': attribute type 2 has an invalid length. [ 720.410030][T26125] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 720.434106][T26125] macvlan2: entered promiscuous mode [ 720.440381][T26125] macvlan2: entered allmulticast mode [ 720.447502][T26125] bond7: entered promiscuous mode [ 720.452726][T26125] bridge5: entered promiscuous mode [ 720.464086][T26125] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 720.483534][T26125] bond7: left promiscuous mode [ 720.488661][T26125] bridge5: left promiscuous mode [ 721.477069][T26178] netlink: 'syz.5.5279': attribute type 1 has an invalid length. [ 721.489072][T26185] netlink: 'syz.0.5283': attribute type 4 has an invalid length. [ 721.506956][T26185] __nla_validate_parse: 13 callbacks suppressed [ 721.506978][T26185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5283'. [ 721.533763][T26187] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5284'. [ 721.585273][T26190] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5285'. [ 721.972378][T26207] openvswitch: netlink: IP tunnel dst address not specified [ 721.982519][T26213] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5293'. [ 722.073709][T26207] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 722.210180][T26228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5296'. [ 722.437170][T26239] netlink: 'syz.1.5300': attribute type 4 has an invalid length. [ 722.610262][T26248] netlink: 'syz.2.5303': attribute type 1 has an invalid length. [ 722.663598][T26249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5303'. [ 722.733190][T26255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 722.793100][T26248] 8021q: adding VLAN 0 to HW filter on device bond5 [ 722.984182][T26271] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5308'. [ 722.999532][T26273] netlink: 'syz.2.5309': attribute type 21 has an invalid length. [ 723.023090][T26271] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5308'. [ 723.108512][T26273] tipc: Enabled bearer , priority 0 [ 723.117094][T26273] mac80211_hwsim hwsim67 syzkaller0: entered promiscuous mode [ 723.125195][T26273] mac80211_hwsim hwsim67 syzkaller0: entered allmulticast mode [ 723.137381][T26273] tipc: Resetting bearer [ 723.139707][T26278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5310'. [ 723.164263][T26278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5310'. [ 723.576173][T12350] tipc: Resetting bearer [ 723.630866][T26307] team0: No ports can be present during mode change [ 724.203395][T26317] bridge_slave_0: left allmulticast mode [ 724.219437][T26317] bridge_slave_0: left promiscuous mode [ 724.246648][T26317] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.291102][T26317] bridge_slave_1: left allmulticast mode [ 724.306402][T26317] bridge_slave_1: left promiscuous mode [ 724.319222][T26317] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.354070][T26317] bond0: (slave bond_slave_0): Releasing backup interface [ 724.388799][T26317] bond0: (slave bond_slave_1): Releasing backup interface [ 724.465597][T26317] team0: Port device team_slave_0 removed [ 724.496040][T26317] team0: Port device team_slave_1 removed [ 724.518888][T26317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.548373][T26317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.555898][T26317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.589913][T26317] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 725.108765][T26368] netlink: 'syz.5.5330': attribute type 21 has an invalid length. [ 725.483515][T26381] netlink: 'syz.3.5336': attribute type 12 has an invalid length. [ 726.292623][T26387] SET target dimension over the limit! [ 727.837774][T26347] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 728.149736][T26407] syzkaller0: entered promiscuous mode [ 728.163727][T26407] syzkaller0: entered allmulticast mode [ 728.253979][T26414] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 728.425761][T26424] __nla_validate_parse: 5 callbacks suppressed [ 728.425782][T26424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5348'. [ 728.425813][T26425] netlink: 'syz.2.5348': attribute type 13 has an invalid length. [ 728.463406][T26422] netlink: 'syz.1.5347': attribute type 2 has an invalid length. [ 728.474844][T26425] gretap0: refused to change device tx_queue_len [ 728.489618][T26422] openvswitch: netlink: IP tunnel dst address not specified [ 728.500835][T26425] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 728.778968][T26441] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5354'. [ 728.974827][T26449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5357'. [ 729.039787][T26449] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 729.056999][T26449] bond4 (unregistering): Released all slaves [ 729.533595][T26462] A link change request failed with some changes committed already. Interface netdevsim1 may have been left with an inconsistent configuration, please check. [ 730.045619][T26501] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5369'. [ 730.151821][T26508] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5372'. [ 730.424290][T26523] hsr0 speed is unknown, defaulting to 1000 [ 730.438027][T26523] hsr0 speed is unknown, defaulting to 1000 [ 730.494696][T26523] hsr0 speed is unknown, defaulting to 1000 [ 730.528928][T26523] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 730.573293][T26523] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 730.597128][T26523] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 730.621057][T26523] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 730.646023][T26523] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 730.708101][T26523] hsr0 speed is unknown, defaulting to 1000 [ 730.718609][T26523] hsr0 speed is unknown, defaulting to 1000 [ 730.727520][T26523] hsr0 speed is unknown, defaulting to 1000 [ 730.735340][T26523] hsr0 speed is unknown, defaulting to 1000 [ 730.745050][T26523] hsr0 speed is unknown, defaulting to 1000 [ 730.753570][T26523] hsr0 speed is unknown, defaulting to 1000 [ 730.761632][T26523] hsr0 speed is unknown, defaulting to 1000 [ 730.776062][T26523] hsr0 speed is unknown, defaulting to 1000 [ 730.960115][T26551] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5384'. [ 730.990123][T26551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5384'. [ 731.097918][T26552] bridge6: port 1(veth3) entered blocking state [ 731.115519][T26547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5383'. [ 731.125282][T26552] bridge6: port 1(veth3) entered disabled state [ 731.133653][T26552] veth3: entered allmulticast mode [ 731.142371][T26552] veth3: entered promiscuous mode [ 731.165251][T26551] bridge6: port 2(veth5) entered blocking state [ 731.172113][T26551] bridge6: port 2(veth5) entered disabled state [ 731.179649][T26551] veth5: entered allmulticast mode [ 731.186801][T26551] veth5: entered promiscuous mode [ 731.214322][T26547] veth5: entered allmulticast mode [ 731.253997][T26563] IPVS: length: 64 != 8 [ 731.261324][T26563] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5387'. [ 731.274565][T26563] xt_TPROXY: Can be used only with -p tcp or -p udp [ 733.571553][T26532] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 733.834240][T26590] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5394'. [ 734.386778][T26627] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5402'. [ 734.404203][T26628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5403'. [ 734.419074][T26627] xt_HMARK: spi-set and port-set can't be combined [ 734.440603][T26628] vlan0: entered allmulticast mode [ 734.445968][T26628] mac80211_hwsim hwsim48 wlan0: entered allmulticast mode [ 734.600907][T26634] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5405'. [ 734.611752][T26637] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.5406'. [ 734.770133][T26648] netlink: 'syz.1.5407': attribute type 10 has an invalid length. [ 734.812671][T26651] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.5409'. [ 735.011757][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.048068][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.087291][T26657] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 735.099421][T26666] bond0: entered promiscuous mode [ 735.104578][T26666] bond_slave_0: entered promiscuous mode [ 735.111377][T26656] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 735.124207][T26672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 735.136890][T26666] bond_slave_1: entered promiscuous mode [ 735.168811][T26668] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5413'. [ 735.427239][T26682] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5417'. [ 735.438432][T26681] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5416'. [ 735.451016][T26682] netlink: Unknown conntrack attr (0) [ 735.680421][T26693] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5422'. [ 735.768649][T26700] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 735.835285][T26703] netlink: 'syz.5.5426': attribute type 1 has an invalid length. [ 735.871804][T26703] netlink: 'syz.5.5426': attribute type 11 has an invalid length. [ 735.892904][T26706] openvswitch: netlink: IPv4 tun info is not correct [ 735.936737][T26707] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 736.049151][ T470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.064172][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.080244][T13053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.095305][T26717] x_tables: unsorted underflow at hook 4 [ 736.108416][T25066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.176696][T12336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.900655][T26826] bridge7: port 1(vlan1) entered blocking state [ 737.926749][T26826] bridge7: port 1(vlan1) entered disabled state [ 737.949406][T26826] vlan1: entered allmulticast mode [ 737.983771][T26826] bridge7: entered allmulticast mode [ 738.032018][T26826] vlan1: left allmulticast mode [ 738.053171][T26826] bridge7: left allmulticast mode [ 738.319264][T26854] netlink: 'syz.0.5471': attribute type 4 has an invalid length. [ 738.973199][T26888] syzkaller0: entered promiscuous mode [ 738.979536][T26888] syzkaller0: entered allmulticast mode [ 739.090833][T26905] Bluetooth: MGMT ver 1.23 [ 739.139412][T26907] __nla_validate_parse: 13 callbacks suppressed [ 739.139433][T26907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5478'. [ 740.313782][T25069] net_ratelimit: 15 callbacks suppressed [ 740.313807][T25069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.628109][T12350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.636848][T12350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.327863][T25069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.766946][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.775623][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.815270][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.839771][T25069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.915648][T25069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.449005][T12341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.373905][T26907] team0 (unregistering): Port device team_slave_0 removed [ 743.396063][T26907] team0 (unregistering): Port device 26±ÿ removed [ 743.471114][T26889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 743.484948][T26921] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5485'. [ 743.698093][T26931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5490'. [ 743.700950][T26930] netlink: 'syz.3.5491': attribute type 1 has an invalid length. [ 743.755048][T26930] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5491'. [ 743.785724][T26930] netlink: 'syz.3.5491': attribute type 1 has an invalid length. [ 743.798159][T26930] netlink: 'syz.3.5491': attribute type 8 has an invalid length. [ 743.810591][T26930] netlink: 582 bytes leftover after parsing attributes in process `syz.3.5491'. [ 744.010244][T26945] pimreg6: entered allmulticast mode [ 744.055479][T26952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5497'. [ 744.091472][T26952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5497'. [ 744.118616][T26952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5497'. [ 744.159696][T26960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5497'. [ 744.415120][T26968] netlink: 'syz.0.5500': attribute type 4 has an invalid length. [ 744.677618][T26979] netlink: 58 bytes leftover after parsing attributes in process `syz.5.5503'. [ 744.720557][T26979] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5503'. [ 744.755778][T26979] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5503'. [ 744.821103][T26981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.985265][T26997] netlink: 'syz.2.5510': attribute type 2 has an invalid length. [ 745.109635][T27007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5513'. [ 745.126363][T27007] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5513'. [ 745.152998][T27006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5511'. [ 745.202987][T27012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5515'. [ 745.239266][T27009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5514'. [ 745.259073][T27018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5515'. [ 745.412502][T27027] Cannot find set identified by id 1 to match [ 745.469878][T27029] netlink: 'syz.0.5519': attribute type 23 has an invalid length. [ 745.983012][T27015] tipc: Resetting bearer [ 746.126625][T25069] net_ratelimit: 12 callbacks suppressed [ 746.126650][T25069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.338022][T12350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.372276][T12350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.848522][ T5631] Bluetooth: hci2: command 0x0405 tx timeout [ 746.861974][T27093] bond8: Unable to set down delay as MII monitoring is disabled [ 746.899373][T27093] bond8 (unregistering): Released all slaves [ 747.026194][T27099] bond9: (slave ip_vti0): Device is not bonding slave [ 747.036460][T27099] bond9: option active_slave: invalid value (ip_vti0) [ 747.059484][T27099] bond9 (unregistering): Released all slaves [ 747.176684][T25069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.498479][T12341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.521234][T12341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.668401][T27141] xt_hashlimit: size too large, truncated to 1048576 [ 748.213185][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.223087][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.231303][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.241154][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.341825][T25066] net_ratelimit: 10 callbacks suppressed [ 751.341845][T25066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.728588][T27123] __nla_validate_parse: 6 callbacks suppressed [ 751.728605][T27123] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5543'. [ 751.777671][T27163] syzkaller1: entered promiscuous mode [ 751.806558][T27163] syzkaller1: entered allmulticast mode [ 751.841147][T27165] kthread_run failed with err -4 [ 751.974756][T27173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5553'. [ 752.005429][T27176] netlink: 300 bytes leftover after parsing attributes in process `syz.5.5554'. [ 752.036701][T12350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.063399][T12350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.368677][T25066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.842896][T27225] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5566'. [ 753.197642][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.226533][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.307638][T27252] sch_fq: defrate 0 ignored. [ 753.327676][T11924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.336130][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.417819][T25066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.454131][T27266] vlan1: entered allmulticast mode [ 753.462471][T27266] bond0: entered allmulticast mode [ 753.470508][T27266] bond_slave_0: entered allmulticast mode [ 753.476702][T27266] bond_slave_1: entered allmulticast mode [ 753.592770][T27273] netlink: 'syz.5.5579': attribute type 1 has an invalid length. [ 753.624107][T27273] 8021q: adding VLAN 0 to HW filter on device bond4 [ 753.692362][T27273] bond4: (slave geneve2): making interface the new active one [ 753.703802][T27273] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 753.829260][T27278] netlink: 212328 bytes leftover after parsing attributes in process `syz.5.5580'. [ 754.337021][T12336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.818848][T27228] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 755.831785][T27277] netlink: 'syz.5.5580': attribute type 1 has an invalid length. [ 756.024193][T27282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5583'. [ 756.107782][T27286] vlan3: entered promiscuous mode [ 756.113202][T27286] bridge0: entered promiscuous mode [ 756.121198][T27286] vlan3: entered allmulticast mode [ 756.129287][T27286] bridge0: entered allmulticast mode [ 756.257446][T27296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5586'. [ 756.531116][T25069] net_ratelimit: 8 callbacks suppressed [ 756.531139][T25069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.549191][T12350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.584326][T12350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.594625][T27314] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5593'. [ 756.744730][T27319] tipc: Enabling of bearer rejected, failed to enable media [ 756.910099][T27328] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5596'. [ 756.942124][T27327] netlink: 'syz.1.5597': attribute type 1 has an invalid length. [ 757.125219][T27338] netdevsim netdevsim5 : renamed from netdevsim0 [ 757.168530][T27342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5601'. [ 757.528424][T27363] smc: net device team0 applied user defined pnetid SYZ2 [ 757.563073][T27363] smc: net device team0 erased user defined pnetid SYZ2 [ 757.572710][T25069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.592443][T27367] tipc: Enabling of bearer rejected, failed to enable media [ 757.728155][T12341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.749457][T12341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.129201][T27392] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 758.425619][T27405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5616'. [ 758.606830][T25069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.887383][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.919419][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.991818][T27428] netlink: 'syz.0.5625': attribute type 8 has an invalid length. [ 759.088068][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.237212][T27434] bond6: Removing last arp target with arp_interval on [ 759.278085][T27445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5630'. [ 759.311926][T27444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.330114][T27444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.348669][T27444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.373636][T27444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.469618][T27458] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5636'. [ 759.840314][T27477] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5641'. [ 759.867669][T27477] veth0_macvtap: left promiscuous mode [ 760.195887][T27495] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5647'. [ 760.504371][T27511] sock: sock_timestamping_bind_phc: sock not bind to device [ 760.547981][T27511] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5651'. [ 760.754496][T27525] IPv6: NLM_F_REPLACE set, but no existing node found! [ 760.775735][T27525] bridge0: port 1(syz_tun) entered blocking state [ 760.783483][T27525] bridge0: port 1(syz_tun) entered disabled state [ 760.790579][T27525] syz_tun: entered allmulticast mode [ 760.798648][T27525] syz_tun: entered promiscuous mode [ 760.804764][T27525] bridge0: port 1(syz_tun) entered blocking state [ 760.811435][T27525] bridge0: port 1(syz_tun) entered forwarding state [ 761.032014][T27535] veth0_vlan: left promiscuous mode [ 761.078907][T27535] team0: Port device vlan0 removed [ 761.255484][T27555] netlink: 'syz.2.5663': attribute type 61 has an invalid length. [ 761.276839][T27555] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5663'. [ 761.306887][T27555] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20000 [ 761.562151][T27565] syzkaller0: entered promiscuous mode [ 761.569586][T27565] syzkaller0: entered allmulticast mode [ 761.690135][T27569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5667'. [ 761.728707][T25066] net_ratelimit: 11 callbacks suppressed [ 761.728732][T25066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.829121][T27575] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 762.318835][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.351500][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.666166][T27615] netlink: 'syz.2.5681': attribute type 9 has an invalid length. [ 762.723275][T27617] __nla_validate_parse: 1 callbacks suppressed [ 762.723297][T27617] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5680'. [ 762.770094][T25063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.085422][T27635] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 763.178919][T27635] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 763.214739][T27641] netlink: 'syz.0.5688': attribute type 1 has an invalid length. [ 763.479059][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.519665][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.621037][T27659] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5693'. [ 763.636983][T27659] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5693'. [ 763.674042][T27659] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5693'. [ 763.816767][T25066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.260421][T27697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5703'. [ 764.273461][T27697] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5703'. [ 764.292763][T27697] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5703'. [ 764.388715][T27701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5700'. [ 764.540517][T27709] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5706'. [ 764.561314][T27709] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5706'. [ 764.646629][T12341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.405856][T27749] netlink: 'syz.2.5717': attribute type 39 has an invalid length. [ 765.767181][T27771] sctp: [Deprecated]: syz.3.5722 (pid 27771) Use of struct sctp_assoc_value in delayed_ack socket option. [ 765.767181][T27771] Use struct sctp_sack_info instead [ 765.848868][T27775] sctp: [Deprecated]: syz.3.5722 (pid 27775) Use of struct sctp_assoc_value in delayed_ack socket option. [ 765.848868][T27775] Use struct sctp_sack_info instead [ 766.378643][T27806] IPVS: length: 8 != 1152 [ 766.905662][T11924] net_ratelimit: 18 callbacks suppressed [ 766.905696][T11924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.921575][T11924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.929909][T25063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.972186][T25066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.060929][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.072378][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.014579][T25069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.196546][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.205397][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.048590][T25069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.287058][T27806] __nla_validate_parse: 5 callbacks suppressed [ 770.287079][T27806] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5731'. [ 770.307387][T27806] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5731'. [ 770.316600][T27806] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5731'. [ 770.326116][T27805] netem: unknown loss type 8 [ 770.347913][T27805] netem: change failed [ 770.522836][T27825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5737'. [ 770.602578][T27830] netlink: 'syz.1.5737': attribute type 5 has an invalid length. [ 770.646437][T27830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5737'. [ 770.712095][T27834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5738'. [ 770.765718][T27838] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5738'. [ 770.993975][T27845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5742'. [ 771.063547][T27847] netlink: 'syz.2.5744': attribute type 1 has an invalid length. [ 771.114292][T27850] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5744'. [ 771.138748][T27847] 8021q: adding VLAN 0 to HW filter on device bond7 [ 771.681654][T27887] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 771.700986][T27887] bond8 (unregistering): Released all slaves [ 771.710259][T27896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5755'. [ 771.724112][T27894] netlink: 'syz.2.5758': attribute type 2 has an invalid length. [ 771.981664][T27905] syzkaller0: entered promiscuous mode [ 771.995084][T27905] syzkaller0: entered allmulticast mode [ 772.065569][T27913] netlink: 'syz.5.5763': attribute type 1 has an invalid length. [ 772.128139][T25063] net_ratelimit: 10 callbacks suppressed [ 772.128161][T25063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.353194][T27921] netlink: 'syz.1.5767': attribute type 21 has an invalid length. [ 772.469097][T27927] netlink: 'syz.1.5767': attribute type 20 has an invalid length. [ 772.542945][T27933] netlink: 'syz.2.5769': attribute type 4 has an invalid length. [ 772.557777][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.589414][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.663930][T25063] hsr0 speed is unknown, defaulting to 1000 [ 772.679024][T27933] .`¹: renamed from bond0 [ 772.701723][T27926] xt_CT: No such helper "snmp_trap" [ 772.872947][T27945] netlink: 'syz.0.5775': attribute type 17 has an invalid length. [ 773.167603][T25063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.718590][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.748162][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.933769][T28008] xt_cgroup: xt_cgroup: no path or classid specified [ 774.206622][T25066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.428811][T28031] ip6gre0: Master is either lo or non-ether device [ 774.583486][T28033] veth9: entered allmulticast mode [ 774.692578][T28040] lo: entered promiscuous mode [ 774.769926][T28040] tunl0: entered promiscuous mode [ 774.839836][T28040] gre0: entered promiscuous mode [ 774.933556][T28040] gretap0: entered promiscuous mode [ 775.184511][T28040] erspan0: entered promiscuous mode [ 775.216957][T28040] ip_vti0: entered promiscuous mode [ 775.266692][T28040] ip6_vti0: entered promiscuous mode [ 775.281517][T28040] sit0: entered promiscuous mode [ 775.310269][T28040] ip6tnl0: entered promiscuous mode [ 775.411619][T28063] netlink: 'syz.5.5810': attribute type 1 has an invalid length. [ 775.435443][T28040] ip6gre0: entered promiscuous mode [ 775.510689][T28040] bridge0: port 1(syz_tun) entered disabled state [ 775.551573][T28040] bond0: entered promiscuous mode [ 775.566641][T28040] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 775.598063][T28040] team0: entered promiscuous mode [ 775.637259][T28040] dummy0: entered promiscuous mode [ 775.671597][T28040] nlmon0: entered promiscuous mode [ 775.688855][T28040] vxcan0: entered promiscuous mode [ 775.715989][T28040] vxcan1: entered promiscuous mode [ 775.733263][T28040] veth0: entered promiscuous mode [ 775.759161][T28040] veth1: entered promiscuous mode [ 775.794880][T28040] wg0: entered promiscuous mode [ 775.836699][T28040] wg1: entered promiscuous mode [ 775.868780][T28040] wg2: entered promiscuous mode [ 775.896680][T28040] veth0_to_bridge: entered promiscuous mode [ 775.924655][T28040] bridge_slave_0: entered promiscuous mode [ 775.959685][T28040] veth1_to_bridge: entered promiscuous mode [ 775.987119][T28040] bridge_slave_1: entered promiscuous mode [ 776.024517][T28040] veth0_to_bond: entered promiscuous mode [ 776.046555][T28040] bond_slave_0: entered promiscuous mode [ 776.052826][T28040] veth1_to_bond: entered promiscuous mode [ 776.077134][T28040] bond_slave_1: entered promiscuous mode [ 776.088323][T28040] veth0_to_team: entered promiscuous mode [ 776.106052][T28040] team_slave_0: entered promiscuous mode [ 776.127721][T28040] veth1_to_team: entered promiscuous mode [ 776.140999][T28040] team_slave_1: entered promiscuous mode [ 776.175745][T28040] veth0_to_batadv: entered promiscuous mode [ 776.194705][T28040] veth1_to_batadv: entered promiscuous mode [ 776.229814][T28040] batadv_slave_1: entered promiscuous mode [ 776.266739][T28040] xfrm0: entered promiscuous mode [ 776.307676][T28040] veth0_to_hsr: entered promiscuous mode [ 776.373286][T28040] veth1_to_hsr: entered promiscuous mode [ 776.431084][T28040] hsr0: entered promiscuous mode [ 776.456658][T28040] veth1_virt_wifi: entered promiscuous mode [ 776.494838][T28040] veth0_virt_wifi: entered promiscuous mode [ 776.529839][T28040] virt_wifi0: entered promiscuous mode [ 776.660551][T28040] vlan0: entered promiscuous mode [ 776.666014][T28040] vlan1: entered promiscuous mode [ 776.687859][T28040] macvlan0: entered promiscuous mode [ 776.698539][T28040] veth1_vlan: left allmulticast mode [ 776.716705][T28040] ipvlan0: entered promiscuous mode [ 776.726636][T28040] ipvlan1: entered promiscuous mode [ 776.738794][T28040] veth1_macvtap: entered promiscuous mode [ 776.806584][T28040] macvtap0: entered promiscuous mode [ 776.831854][T28040] geneve0: entered promiscuous mode [ 776.863978][T28040] geneve1: entered promiscuous mode [ 776.931456][T28040] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 776.952532][T28040] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 776.987139][T28040] mac80211_hwsim hwsim53 wlan1: entered promiscuous mode [ 777.006859][T28040] gtp0: entered promiscuous mode [ 777.012969][T28040] syztnl2: entered promiscuous mode [ 777.022918][T28040] vxlan0: entered promiscuous mode [ 777.032703][T28040] bond1: entered promiscuous mode [ 777.046610][T28040] sit1: entered promiscuous mode [ 777.056004][T28040] bond2: entered promiscuous mode [ 777.077283][T28040] macsec1: entered promiscuous mode [ 777.084125][T28040] bridge1: entered promiscuous mode [ 777.102202][T28040] bond3: entered promiscuous mode [ 777.124947][T28040] ipvlan2: entered promiscuous mode [ 777.139362][T28040] macvlan2: entered promiscuous mode [ 777.149130][T28040] bond4: entered promiscuous mode [ 777.180595][T28040] bond6: entered promiscuous mode [ 777.195436][T28040] geneve2: entered promiscuous mode [ 777.205644][T28040] vlan2: entered promiscuous mode [ 777.232244][T28040] bond7: entered promiscuous mode [ 777.247098][T28040] bridge3: entered promiscuous mode [ 777.257388][T28040] ip6tnl1: entered promiscuous mode [ 777.272251][T28040] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 777.288601][T28040] vxlan1: entered promiscuous mode [ 777.300060][T28040] bond8: entered promiscuous mode [ 777.317136][T28040] erspan1: entered promiscuous mode [ 777.328600][T28040] : entered promiscuous mode [ 777.358427][T28040] bridge4: entered promiscuous mode [ 777.392973][T28063] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 777.502830][ T48] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 777.536839][ T48] netdevsim netdevsim1 netdevsim0: unset [0, 1] type 1 family 0 port 256 - 0 [ 777.546080][ T48] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.569256][ T48] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 777.600420][ T48] netdevsim netdevsim1 netdevsim1: unset [0, 1] type 1 family 0 port 256 - 0 [ 777.619791][ T48] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.648444][T28072] netlink: 'syz.0.5812': attribute type 11 has an invalid length. [ 777.656859][ T48] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 777.679132][T28072] __nla_validate_parse: 15 callbacks suppressed [ 777.679154][T28072] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5812'. [ 777.698377][ T48] netdevsim netdevsim1 netdevsim2: unset [0, 1] type 1 family 0 port 256 - 0 [ 777.717858][ T48] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.745960][ T48] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 777.785483][ T48] netdevsim netdevsim1 netdevsim3: unset [0, 1] type 1 family 0 port 256 - 0 [ 777.830186][ T48] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.863361][T28077] netlink: 'syz.5.5814': attribute type 2 has an invalid length. [ 777.868781][T28081] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5816'. [ 777.953583][T28085] netlink: 'syz.0.5817': attribute type 4 has an invalid length. [ 778.041206][T28088] sctp: [Deprecated]: syz.2.5819 (pid 28088) Use of int in maxseg socket option. [ 778.041206][T28088] Use struct sctp_assoc_value instead [ 778.113051][T28093] netlink: 'syz.5.5820': attribute type 2 has an invalid length. [ 778.401419][T28104] xt_TCPMSS: Only works on TCP SYN packets [ 778.546075][T28113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5828'. [ 778.556612][T28113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5828'. [ 778.565902][T28113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5828'. [ 778.593994][ T48] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.603376][T28113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5828'. [ 778.613205][ T48] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.624753][T28113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5828'. [ 778.638301][ T48] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.650345][T28113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5828'. [ 778.660257][ T48] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.963422][T28125] netlink: 'syz.1.5832': attribute type 21 has an invalid length. [ 779.215353][T28125] bond9: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 779.265682][T28125] bond9 (unregistering): Released all slaves [ 779.418275][T28138] netlink: 304 bytes leftover after parsing attributes in process `syz.5.5835'. [ 779.581846][T28143] netlink: 'syz.2.5837': attribute type 1 has an invalid length. [ 779.772703][T28152] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5841'. [ 780.990462][T28203] x_tables: duplicate underflow at hook 1 [ 781.082708][T28215] netlink: 'syz.1.5860': attribute type 1 has an invalid length. [ 781.110360][T28209] syzkaller0: entered promiscuous mode [ 781.136840][T28209] syzkaller0: entered allmulticast mode [ 781.226107][T28206] macvlan3: entered allmulticast mode [ 781.247468][T28206] dummy0: entered allmulticast mode [ 781.269112][T28206] dummy0: entered promiscuous mode [ 781.401988][T28223] erspan0: entered promiscuous mode [ 781.413458][T28230] sctp: [Deprecated]: syz.0.5864 (pid 28230) Use of int in maxseg socket option. [ 781.413458][T28230] Use struct sctp_assoc_value instead [ 781.439846][T28223] gretap0: entered promiscuous mode [ 781.454769][T28223] debugfs: 'hsr1' already exists in 'hsr' [ 781.483050][T28223] Cannot create hsr debugfs directory [ 781.933155][T28248] syzkaller0: entered promiscuous mode [ 781.955511][T28248] syzkaller0: entered allmulticast mode [ 782.225228][T28261] netlink: 'syz.1.5872': attribute type 3 has an invalid length. [ 782.246559][T28261] netlink: 'syz.1.5872': attribute type 1 has an invalid length. [ 782.710293][T28272] ipt_REJECT: TCP_RESET invalid for non-tcp [ 782.738337][T28272] ipt_REJECT: TCP_RESET invalid for non-tcp [ 782.794519][T28272] ipt_REJECT: TCP_RESET invalid for non-tcp [ 782.857396][T28289] x_tables: unsorted underflow at hook 3 [ 783.109688][T28300] __nla_validate_parse: 12 callbacks suppressed [ 783.109710][T28300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5881'. [ 783.209160][T28305] netlink: 'syz.5.5883': attribute type 1 has an invalid length. [ 783.237166][T28305] nbd: error processing sock list [ 783.344868][T28311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5886'. [ 783.361914][T28312] x_tables: unsorted entry at hook 3 [ 783.538232][T28317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5888'. [ 783.604519][T28326] netlink: 'syz.1.5892': attribute type 1 has an invalid length. [ 783.852290][T28336] bond9: (slave gretap1): making interface the new active one [ 783.902758][T28336] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 784.090508][T28339] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5893'. [ 784.619015][T28357] syzkaller0: entered promiscuous mode [ 784.638527][T28357] syzkaller0: entered allmulticast mode [ 784.644808][T28322] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 784.681146][T28362] netlink: 'syz.5.5899': attribute type 11 has an invalid length. [ 784.689832][T28322] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.5891'. [ 784.720001][T28362] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5899'. [ 785.243137][T28373] nbd: nbd2 already in use [ 785.315802][T28373] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5903'. [ 785.814147][T28401] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 786.646057][T28432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 786.668854][T28433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5920'. [ 786.696802][T28433] netlink: 'syz.0.5920': attribute type 30 has an invalid length. [ 786.808056][T28438] netlink: 'syz.1.5923': attribute type 1 has an invalid length. [ 786.952101][T28448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5926'. [ 787.011153][T28438] bond10: entered promiscuous mode [ 787.019777][T28438] 8021q: adding VLAN 0 to HW filter on device bond10 [ 787.148975][T28451] 8021q: adding VLAN 0 to HW filter on device bond10 [ 787.159891][T28451] bond10: (slave vcan0): The slave device specified does not support setting the MAC address [ 787.215753][T28451] bond10: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 787.308444][T28451] bond10: (slave vcan0): making interface the new active one [ 787.342380][T28460] netlink: get zone limit has 4 unknown bytes [ 787.353997][T28451] vcan0: entered promiscuous mode [ 787.388031][T28451] bond10: (slave vcan0): Enslaving as an active interface with an up link [ 787.639396][T28466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5931'. [ 787.957276][T28478] netlink: 'syz.2.5936': attribute type 3 has an invalid length. [ 788.213162][T28487] __nla_validate_parse: 3 callbacks suppressed [ 788.213183][T28487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5937'. [ 788.553569][T28496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5940'. [ 788.585135][T28496] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5940'. [ 788.617535][T28496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5940'. [ 788.827732][T28504] netlink: 'syz.2.5943': attribute type 1 has an invalid length. [ 788.842273][T28504] netlink: 'syz.2.5943': attribute type 4 has an invalid length. [ 788.866162][T28504] netlink: 9422 bytes leftover after parsing attributes in process `syz.2.5943'. [ 789.080216][T28515] netlink: 'syz.1.5946': attribute type 3 has an invalid length. [ 789.933012][T28550] netlink: 'syz.3.5956': attribute type 1 has an invalid length. [ 789.959751][T28550] netlink: 'syz.3.5956': attribute type 29 has an invalid length. [ 789.999037][T28550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5956'. [ 790.040616][T28554] netlink: 596 bytes leftover after parsing attributes in process `syz.0.5958'. [ 790.063564][T28555] set match dimension is over the limit! [ 790.109438][T28554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 790.203376][T28557] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5959'. [ 791.379181][T28610] netlink: 'syz.3.5971': attribute type 29 has an invalid length. [ 791.910062][T28620] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20004 [ 791.933030][T28622] xt_TPROXY: Can be used only with -p tcp or -p udp [ 793.510527][T28576] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 793.725989][T28629] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5976'. [ 793.748939][T28633] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20004 [ 793.931707][T28647] x_tables: duplicate underflow at hook 2 [ 794.035089][T28649] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5982'. [ 794.071592][T28649] syzkaller0: entered promiscuous mode [ 794.083943][T28649] syzkaller0: entered allmulticast mode [ 794.203106][T28653] lo: left promiscuous mode [ 794.212623][T28653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 794.379834][T28663] netlink: 'syz.5.5986': attribute type 1 has an invalid length. [ 794.505069][T28673] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.5990'. [ 794.792057][T28687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5997'. [ 794.803457][T28687] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5997'. [ 794.822397][T28685] syzkaller0: entered promiscuous mode [ 794.841210][T28685] syzkaller0: entered allmulticast mode [ 794.951531][T28701] xt_hashlimit: size too large, truncated to 1048576 [ 795.076871][T28695] block nbd3: server does not support multiple connections per device. [ 795.095250][T28695] block nbd3: shutting down sockets [ 795.347555][T28714] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6004'. [ 795.630303][T28733] netlink: 'syz.5.6008': attribute type 3 has an invalid length. [ 795.819034][T28748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 795.863541][T28749] netlink: 'syz.3.6011': attribute type 1 has an invalid length. [ 795.882325][T28749] NCSI netlink: No device for ifindex 0 [ 795.902405][T28754] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6015'. [ 796.029059][T28763] netlink: 'syz.2.6016': attribute type 1 has an invalid length. [ 796.188070][T28761] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6016'. [ 796.213091][T28769] netlink: zone id is out of range [ 796.227318][T28769] netlink: zone id is out of range [ 796.240180][T28769] netlink: zone id is out of range [ 796.264742][T28769] netlink: zone id is out of range [ 796.278411][T28769] netlink: zone id is out of range [ 796.302483][T28766] vxcan0: entered promiscuous mode [ 796.315346][T28769] netlink: zone id is out of range [ 796.324459][T28769] netlink: zone id is out of range [ 796.330262][T28766] vxcan0: entered allmulticast mode [ 796.335950][T28769] netlink: set zone limit has 4 unknown bytes [ 796.417274][T28767] bond0: (slave geneve3): making interface the new active one [ 796.445398][T28767] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 796.494861][T28761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.545808][T12336] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 796.576508][T12336] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 796.625014][T12336] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 796.642532][T12336] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 796.674584][T28790] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6024'. [ 796.814732][T28799] netlink: 'syz.2.6028': attribute type 1 has an invalid length. [ 796.858530][T28799] 8021q: adding VLAN 0 to HW filter on device bond8 [ 796.871129][T28799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6028'. [ 797.054203][T28809] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.106355][T28809] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 54347 - 0 [ 797.245586][T28809] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.260737][T28809] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 54347 - 0 [ 797.320425][T20817] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 797.347481][T20817] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 797.357288][T20817] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 797.371589][T20817] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 797.397967][T20817] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 797.548523][T28809] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.595607][T28809] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 54347 - 0 [ 797.730315][T28809] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.758413][T28809] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 54347 - 0 [ 797.878955][T28834] x_tables: duplicate underflow at hook 3 [ 797.917866][T28836] x_tables: duplicate underflow at hook 1 [ 798.202587][ T1157] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.224064][ T1157] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 54347 - 0 [ 798.367710][ T1157] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.390592][ T1157] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 54347 - 0 [ 798.456065][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.470954][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 54347 - 0 [ 798.570478][ T48] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.581150][T28871] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 798.590225][ T48] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 54347 - 0 [ 798.715843][T28813] lo speed is unknown, defaulting to 1000 [ 798.953256][T28886] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 799.003949][T28890] __nla_validate_parse: 4 callbacks suppressed [ 799.003975][T28890] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6054'. [ 799.204628][T28896] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6057'. [ 799.219845][T28895] netlink: 'syz.2.6056': attribute type 39 has an invalid length. [ 799.287239][T28813] hsr0 speed is unknown, defaulting to 1000 [ 799.482298][T28908] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6060'. [ 799.491511][ T5631] Bluetooth: hci6: command tx timeout [ 799.501447][T28908] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6060'. [ 799.963705][T28813] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.971944][T28813] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.981105][T28813] bridge_slave_0: entered allmulticast mode [ 799.990987][T28813] bridge_slave_0: entered promiscuous mode [ 800.004363][T28937] syzkaller0: entered promiscuous mode [ 800.010697][T28937] syzkaller0: entered allmulticast mode [ 800.023717][T28813] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.032307][T28813] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.040275][T28813] bridge_slave_1: entered allmulticast mode [ 800.050474][T28813] bridge_slave_1: entered promiscuous mode [ 800.164346][T28939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6067'. [ 800.308816][T28813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.368066][T28813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.467247][T28941] tipc: Started in network mode [ 800.474132][T28941] tipc: Node identity 9e29458e9e09, cluster identity 4711 [ 800.483651][T28941] tipc: Enabled bearer , priority 0 [ 800.493467][T28945] syzkaller0: entered promiscuous mode [ 800.501385][T28945] syzkaller0: entered allmulticast mode [ 800.545741][T28941] tipc: Resetting bearer [ 800.572159][T28813] team0: Port device team_slave_0 added [ 800.579749][T28940] tipc: Resetting bearer [ 800.651628][T28940] tipc: Disabling bearer [ 800.724992][T28813] team0: Port device team_slave_1 added [ 800.837800][T28956] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6071'. [ 800.887611][T28813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.915055][T28813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.974157][T28813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.010753][T28813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.012595][T28974] sock: sock_timestamping_bind_phc: sock not bind to device [ 801.036435][T28813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.064334][T28978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6073'. [ 801.074165][T28813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.222682][T28813] hsr_slave_0: entered promiscuous mode [ 801.230184][T28813] hsr_slave_1: entered promiscuous mode [ 801.238071][T28813] debugfs: 'hsr0' already exists in 'hsr' [ 801.245554][T28813] Cannot create hsr debugfs directory [ 801.368094][T28983] IPVS: Unknown mcast interface: vcan0 [ 801.430144][T28986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6075'. [ 801.522725][ T5852] IPVS: starting estimator thread 0... [ 801.544315][T28986] 8021q: adding VLAN 0 to HW filter on device bond11 [ 801.566441][ T5631] Bluetooth: hci6: command tx timeout [ 801.616374][T28993] IPVS: using max 38 ests per chain, 91200 per kthread [ 801.673434][T28990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6076'. [ 801.781788][T28990] bond5: option xmit_hash_policy: invalid value (64) [ 801.791198][T29006] xt_HMARK: spi-set and port-set can't be combined [ 801.810458][T28990] bond5 (unregistering): Released all slaves [ 802.099680][T28813] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.113774][T28813] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.125648][T28813] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 802.314868][T29026] netlink: 'syz.2.6087': attribute type 19 has an invalid length. [ 802.337694][T29024] : entered promiscuous mode [ 802.364649][T29029] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6088'. [ 802.439967][T28813] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.451492][T28813] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.462978][T28813] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 802.610624][T28813] bond0: (slave netdevsim1): Releasing backup interface [ 802.633696][T28813] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.648718][T28813] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.668688][T28813] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 802.876485][T28813] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.900826][T28813] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.923050][T28813] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 802.985511][T29055] macsec0: entered promiscuous mode [ 802.998718][T29049] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 803.001194][T29055] macsec0: entered allmulticast mode [ 803.032128][T29056] veth1_macvtap: entered allmulticast mode [ 803.062116][T29056] macsec0: left promiscuous mode [ 803.080604][T29056] macsec0: left allmulticast mode [ 803.091007][T29056] veth1_macvtap: left allmulticast mode [ 803.389173][T29071] bond10: entered allmulticast mode [ 803.414917][T29071] vcan0: entered allmulticast mode [ 803.472412][T29071] pimreg: entered allmulticast mode [ 803.650005][ T5631] Bluetooth: hci6: command tx timeout [ 803.695989][T29084] nbd: socks must be embedded in a SOCK_ITEM attr [ 803.769541][T29069] bond10: left allmulticast mode [ 803.776608][T29084] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 803.778417][T29069] vcan0: left allmulticast mode [ 803.878773][T28813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 803.955021][T28813] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 803.985351][T28813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 804.012976][T28813] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 804.022863][T29093] __nla_validate_parse: 6 callbacks suppressed [ 804.022886][T29093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6104'. [ 804.039470][T28813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 804.047105][T29093] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6104'. [ 804.060392][T28813] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 804.087954][T29093] gtp2: entered promiscuous mode [ 804.098494][T29093] gtp2: entered allmulticast mode [ 804.113856][T29095] netlink: 'syz.1.6105': attribute type 58 has an invalid length. [ 804.130154][T28813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 804.155303][T29095] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6105'. [ 804.171568][T28813] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 804.403248][T28813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.492856][T28813] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.550768][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.558217][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.625210][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.632506][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.702149][T29127] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6113'. [ 804.742693][T29130] netlink: 'syz.5.6112': attribute type 58 has an invalid length. [ 804.804432][T29130] netlink: 'syz.5.6112': attribute type 16 has an invalid length. [ 805.190447][T29146] : entered promiscuous mode [ 805.345693][T29154] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6119'. [ 805.353452][T29157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6120'. [ 805.374514][T29157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6120'. [ 805.397088][T29157] netlink: 'syz.2.6120': attribute type 12 has an invalid length. [ 805.419089][T29157] netlink: 'syz.2.6120': attribute type 11 has an invalid length. [ 805.428334][T29161] netlink: 'syz.2.6120': attribute type 39 has an invalid length. [ 805.735334][ T5631] Bluetooth: hci6: command tx timeout [ 805.824051][T29180] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.6126'. [ 806.093323][T28813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.108128][T29193] syzkaller0: entered promiscuous mode [ 806.128881][T29193] syzkaller0: entered allmulticast mode [ 806.359263][T28813] veth0_vlan: entered promiscuous mode [ 806.413417][T28813] veth1_vlan: entered promiscuous mode [ 806.463926][T29208] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 806.502831][T29215] openvswitch: netlink: Key 11 has unexpected len 107 expected 2 [ 806.546107][T28813] veth0_macvtap: entered promiscuous mode [ 806.578909][T28813] veth1_macvtap: entered promiscuous mode [ 806.662915][T28813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 806.683632][T28813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 806.748645][T12350] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.782217][T12350] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.794603][T12350] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.834295][T12350] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.021208][T29234] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6143'. [ 807.048052][T29235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 807.190937][T29238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 807.312543][T12350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.342833][T12350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.385815][T29246] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6145'. [ 807.500167][ T470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.531799][ T470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.580924][ T5852] IPVS: starting estimator thread 0... [ 807.689262][T29254] IPVS: using max 27 ests per chain, 64800 per kthread [ 808.099955][T25063] IPVS: starting estimator thread 0... [ 808.237750][T29288] IPVS: using max 25 ests per chain, 60000 per kthread [ 808.373738][T29297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 808.485847][T29303] netlink: 'syz.3.6157': attribute type 15 has an invalid length. [ 808.608243][T12336] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 808.648096][T13059] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 808.659242][T12336] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 808.808194][T13059] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 809.330027][T29334] netlink: 'syz.2.6164': attribute type 11 has an invalid length. [ 809.420810][ T5751] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 812.538250][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 813.662884][T29350] netlink: 'syz.0.6168': attribute type 13 has an invalid length. [ 813.672480][T29357] bond0: entered promiscuous mode [ 813.680404][T29357] bond_slave_0: entered promiscuous mode [ 813.687041][T29357] bond_slave_1: entered promiscuous mode [ 813.704992][T29357] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 814.028990][T29376] __nla_validate_parse: 5 callbacks suppressed [ 814.029016][T29376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6176'. [ 814.194041][T29382] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6177'. [ 814.391988][T29376] 8021q: adding VLAN 0 to HW filter on device bond9 [ 814.420438][T29385] netlink: 212 bytes leftover after parsing attributes in process `syz.5.6178'. [ 814.551798][T29391] syzkaller1: entered promiscuous mode [ 814.561564][T29391] syzkaller1: entered allmulticast mode [ 814.686455][T29399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6181'. [ 814.714588][T29399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6181'. [ 814.766033][T29396] bond13: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 814.851743][T29396] bond13 (unregistering): Released all slaves [ 814.951455][T29410] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6184'. [ 815.002951][T29410] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6184'. [ 815.187676][T29391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6179'. [ 815.199960][T29421] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6186'. [ 815.559436][T29439] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6192'. [ 815.795799][T29449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 816.396012][T29484] syzkaller0: entered promiscuous mode [ 816.419074][T29484] syzkaller0: entered allmulticast mode [ 816.541635][T20817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 816.565091][T20817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 816.575694][T20817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 816.593735][T20817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 816.601885][T20817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 816.836955][T29504] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20000 [ 816.891320][T29508] xfrm1: entered promiscuous mode [ 816.903862][T29513] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 816.927568][T29508] xfrm1: entered allmulticast mode [ 817.224378][T18278] syz_tun (unregistering): left allmulticast mode [ 817.257057][T18278] bridge0: port 1(syz_tun) entered disabled state [ 817.301097][T29530] smc: net device team0 applied user defined pnetid SYZ2 [ 817.461692][T29538] netlink: 'syz.1.6218': attribute type 10 has an invalid length. [ 817.484704][T29538] bridge0: port 2(dummy0) entered blocking state [ 817.491784][T29538] bridge0: port 2(dummy0) entered disabled state [ 817.499335][T29538] dummy0: entered allmulticast mode [ 817.708902][T29491] lo speed is unknown, defaulting to 1000 [ 817.804166][T29555] netlink: 'syz.2.6221': attribute type 12 has an invalid length. [ 817.828050][T29555] netlink: 'syz.2.6221': attribute type 29 has an invalid length. [ 818.019723][T29562] xt_l2tp: v2 doesn't support IP mode [ 818.044410][T29566] Bluetooth: MGMT ver 1.23 [ 818.191467][T29572] vlan1: Caught tx_queue_len zero misconfig [ 818.265169][T29491] hsr0 speed is unknown, defaulting to 1000 [ 818.288160][T29578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 818.655068][T29596] netlink: 'syz.0.6233': attribute type 1 has an invalid length. [ 818.668151][T29597] netlink: 'syz.0.6233': attribute type 1 has an invalid length. [ 818.687230][ T5631] Bluetooth: hci5: command tx timeout [ 818.699642][T29588] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 818.717985][T29588] bond9 (unregistering): Released all slaves [ 818.781151][T29587] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 819.199171][T29635] __nla_validate_parse: 13 callbacks suppressed [ 819.199195][T29635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6240'. [ 819.224929][T29635] netlink: 'syz.2.6240': attribute type 7 has an invalid length. [ 819.234341][T29635] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6240'. [ 819.290025][T12350] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 819.480033][T29634] pim6reg1: entered promiscuous mode [ 819.485618][T29634] pim6reg1: entered allmulticast mode [ 819.510173][T29491] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.517942][T29491] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.525363][T29491] bridge_slave_0: entered allmulticast mode [ 819.534411][T29491] bridge_slave_0: entered promiscuous mode [ 819.543465][T29491] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.551542][T29491] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.560609][T29491] bridge_slave_1: entered allmulticast mode [ 819.569038][T29491] bridge_slave_1: entered promiscuous mode [ 819.584947][T29648] xt_hashlimit: size too large, truncated to 1048576 [ 819.702268][T29491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 819.722294][T29491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.779632][T29491] team0: Port device team_slave_0 added [ 819.795881][T29491] team0: Port device team_slave_1 added [ 819.848887][T29491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.857788][T29491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.885007][T29491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.904984][T29491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.913460][T29491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.939937][T29491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.972192][T29656] bridge0: port 3(veth0_to_bridge) entered blocking state [ 819.981423][T29656] bridge0: port 3(veth0_to_bridge) entered disabled state [ 819.989268][T29656] veth0_to_bridge: entered allmulticast mode [ 820.044069][T29491] hsr_slave_0: entered promiscuous mode [ 820.054893][T29491] hsr_slave_1: entered promiscuous mode [ 820.077571][T29491] debugfs: 'hsr0' already exists in 'hsr' [ 820.084189][T29491] Cannot create hsr debugfs directory [ 820.250434][T29491] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 820.262498][T29491] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 54347 - 0 [ 820.306619][T29491] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 820.316877][T29491] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 54347 - 0 [ 820.387641][T29491] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 820.398131][T29491] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 54347 - 0 [ 820.454919][T29491] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 820.465340][T29491] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 54347 - 0 [ 820.536902][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 820.766613][ T5631] Bluetooth: hci5: command tx timeout [ 822.073086][T29621] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 822.135932][T29491] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 822.171686][T29491] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 822.194745][T29491] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 822.251724][T29491] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 822.272857][T29491] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 822.282646][T29668] netlink: 'syz.2.6248': attribute type 1 has an invalid length. [ 822.288506][T29491] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 822.384074][T29668] 8021q: adding VLAN 0 to HW filter on device bond9 [ 822.392631][T29491] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 822.405357][T29491] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 822.492920][T29684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6252'. [ 822.502259][T29684] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6252'. [ 822.517763][T29680] bond9: (slave ip6gretap1): making interface the new active one [ 822.534736][T29680] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 822.574067][T29684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6252'. [ 822.596736][T29684] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6252'. [ 822.632763][T12336] netdevsim netdevsim5 : set [0, 0] type 1 family 0 port 8472 - 0 [ 822.643498][T29692] Cannot find set identified by id 2 to match [ 822.661099][T29692] –: renamed from vxcan1 (while UP) [ 822.685491][T12336] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.719696][T12336] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.791763][T12336] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.849081][ T5631] Bluetooth: hci5: command tx timeout [ 822.915221][T29698] netlink: 'syz.1.6255': attribute type 1 has an invalid length. [ 823.052045][T29708] x_tables: duplicate underflow at hook 1 [ 823.100820][T29491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.168633][T29491] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.206796][T12350] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.214119][T12350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.253311][T29721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6262'. [ 823.273787][T12336] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.281084][T12336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.310023][T29721] openvswitch: netlink: Duplicate key (type 2). [ 823.604342][T29736] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6265'. [ 823.709299][T29732] syzkaller1: entered promiscuous mode [ 823.725156][T29732] syzkaller1: entered allmulticast mode [ 823.767872][T29736] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6265'. [ 823.891198][T29746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6266'. [ 823.945941][T29749] netlink: 'syz.5.6268': attribute type 1 has an invalid length. [ 823.958448][T29749] netlink: 'syz.5.6268': attribute type 1 has an invalid length. [ 823.968806][T29749] netlink: 'syz.5.6268': attribute type 8 has an invalid length. [ 823.988877][T29749] netlink: 'syz.5.6268': attribute type 3 has an invalid length. [ 824.926830][ T5631] Bluetooth: hci5: command tx timeout [ 825.057047][T29767] IPVS: ip_vs_add_dest(): server weight less than zero [ 825.350657][T29491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 825.471485][T29793] __nla_validate_parse: 6 callbacks suppressed [ 825.471507][T29793] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6277'. [ 825.519636][T29792] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6279'. [ 825.551780][T29491] veth0_vlan: entered promiscuous mode [ 825.568158][T29491] veth1_vlan: entered promiscuous mode [ 825.575996][T29785] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 825.604698][T29792] syzkaller0: entered promiscuous mode [ 825.628580][T29792] syzkaller0: entered allmulticast mode [ 825.668398][T29491] veth0_macvtap: entered promiscuous mode [ 825.670016][T29792] tcf_pedit_act: 7 callbacks suppressed [ 825.670077][T29792] tc action pedit offset must be on 32 bit boundaries [ 825.690857][T29792] tc action pedit offset must be on 32 bit boundaries [ 825.692508][T29491] veth1_macvtap: entered promiscuous mode [ 825.697764][T29792] tc action pedit offset must be on 32 bit boundaries [ 825.697788][T29792] tc action pedit offset must be on 32 bit boundaries [ 825.697802][T29792] tc action pedit offset must be on 32 bit boundaries [ 825.724037][T29792] tc action pedit offset must be on 32 bit boundaries [ 825.730951][T29792] tc action pedit offset must be on 32 bit boundaries [ 825.737824][T29792] tc action pedit offset must be on 32 bit boundaries [ 825.744653][T29792] tc action pedit offset must be on 32 bit boundaries [ 825.751624][T29792] tc action pedit offset must be on 32 bit boundaries [ 825.758491][T29792] 0: reclassify loop, rule prio 0, protocol 800 [ 825.769153][T29801] nbd: must specify at least one socket [ 825.831598][T29803] netlink: 'syz.0.6280': attribute type 58 has an invalid length. [ 825.856384][T29803] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6280'. [ 825.961544][T29491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.991563][T29491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 826.024924][T12350] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.066853][T12350] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.103436][T12350] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.136004][T29811] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6284'. [ 826.152327][T12334] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.189700][T29816] netlink: 'syz.0.6286': attribute type 1 has an invalid length. [ 826.248895][T29816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 826.333127][T29831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6288'. [ 826.345702][T29816] vlan2: entered promiscuous mode [ 826.365406][T29816] bond1: entered promiscuous mode [ 826.396494][T29816] vlan2: entered allmulticast mode [ 826.414002][T29816] bond1: entered allmulticast mode [ 826.524804][T29836] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6286'. [ 826.718342][T29836] bond1: (slave bridge1): making interface the new active one [ 826.738104][T29836] bridge1: entered promiscuous mode [ 826.745737][T29841] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6291'. [ 826.755336][T29836] bridge1: entered allmulticast mode [ 826.765694][T29836] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 826.861538][T29843] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6292'. [ 826.959579][T29845] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6293'. [ 826.992950][T12334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.022537][T12334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.044161][T29847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6294'. [ 827.163416][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.208084][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.210245][T29849] tap0: tun_chr_ioctl cmd 1074025676 [ 827.234412][T29849] tap0: owner set to 0 [ 827.644557][T29879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 827.857212][T29888] --map-set only usable from mangle table [ 827.965789][T29890] xt_l2tp: v2 doesn't support IP mode [ 828.083240][T29895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 828.275905][T20817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 828.289813][T20817] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 828.299304][T20817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 828.313075][T20817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 828.321427][T20817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 828.528931][T29909] netlink: 'syz.3.6313': attribute type 1 has an invalid length. [ 828.565429][T29909] netlink: 'syz.3.6313': attribute type 2 has an invalid length. [ 828.631066][T29909] netlink: 'syz.3.6313': attribute type 1 has an invalid length. [ 828.892490][T29919] lo speed is unknown, defaulting to 1000 [ 829.348608][T11924] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 829.363294][T11924] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.376706][T11924] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 829.388032][T11924] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 829.665501][T29955] netlink: 'syz.3.6324': attribute type 1 has an invalid length. [ 829.720523][T11924] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 829.776620][T11924] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.801150][T11924] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 829.831427][T11924] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 829.882612][T29966] netlink: 'syz.5.6328': attribute type 1 has an invalid length. [ 829.896097][T29964] netlink: 'syz.1.6327': attribute type 2 has an invalid length. [ 829.905201][T29919] hsr0 speed is unknown, defaulting to 1000 [ 829.915835][T29964] xt_hashlimit: size too large, truncated to 1048576 [ 829.966525][T29966] 8021q: adding VLAN 0 to HW filter on device bond5 [ 830.072932][T29968] vlan3: entered promiscuous mode [ 830.090931][T29968] bond5: entered promiscuous mode [ 830.107348][T29968] vlan3: entered allmulticast mode [ 830.117971][T29968] bond5: entered allmulticast mode [ 830.245769][T11924] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 830.277389][T11924] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.298305][T11924] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 830.309414][T11924] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 830.380835][T29901] lo speed is unknown, defaulting to 1000 [ 830.469902][ T5631] Bluetooth: hci4: command tx timeout [ 830.478257][T29979] __nla_validate_parse: 6 callbacks suppressed [ 830.478277][T29979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6331'. [ 830.573732][T11924] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 830.575561][T29983] netlink: 'syz.5.6333': attribute type 4 has an invalid length. [ 830.587281][T11924] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.603901][T11924] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 830.616858][T11924] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 830.723766][T29984] syz_tun: left allmulticast mode [ 830.745907][T29984] bridge0: port 1(syz_tun) entered disabled state [ 830.765192][T29984] dummy0: left allmulticast mode [ 830.773280][T29984] bridge0: port 2(dummy0) entered disabled state [ 830.792274][T29984] veth0_to_bridge: left allmulticast mode [ 830.807529][T29984] bridge0: port 3(veth0_to_bridge) entered disabled state [ 830.833333][T29984] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 830.964812][T29901] hsr0 speed is unknown, defaulting to 1000 [ 831.308777][T30002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6338'. [ 831.340706][T30002] xt_CT: You must specify a L4 protocol and not use inversions on it [ 831.539506][T30010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6341'. [ 831.789534][T30016] h: entered promiscuous mode [ 831.963051][T11924] bridge_slave_1: left promiscuous mode [ 831.981741][T11924] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.017415][T11924] bridge_slave_0: left allmulticast mode [ 832.026067][T11924] bridge_slave_0: left promiscuous mode [ 832.033012][T11924] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.229864][T30042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6347'. [ 832.451947][T11924] bond9 (unregistering): (slave ip6gretap1): Releasing active interface [ 832.537095][ T5631] Bluetooth: hci4: command tx timeout [ 832.603924][T11924] erspan0 (unregistering): left promiscuous mode [ 832.638489][T11924] gretap0 (unregistering): left promiscuous mode [ 832.704517][T11924] bond0 (unregistering): (slave geneve3): Releasing active interface [ 832.735904][T11924] bond4 (unregistering): (slave geneve2): Releasing active interface [ 832.843359][T11924] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 833.046390][T11924] .`¹ (unregistering): (slave bond_slave_0): Releasing backup interface [ 833.055385][T11924] bond_slave_0: left promiscuous mode [ 833.062210][T11924] bond_slave_0: left allmulticast mode [ 833.070305][T11924] .`¹ (unregistering): (slave bond_slave_1): Releasing backup interface [ 833.081162][T11924] bond_slave_1: left promiscuous mode [ 833.087412][T11924] bond_slave_1: left allmulticast mode [ 833.094592][T11924] .`¹ (unregistering): Released all slaves [ 833.106681][T11924] bond1 (unregistering): Released all slaves [ 833.133977][T11924] bond2 (unregistering): Released all slaves [ 833.155184][T11924] bond3 (unregistering): Released all slaves [ 833.173206][T11924] bond4 (unregistering): Released all slaves [ 833.191566][T11924] bond5 (unregistering): Released all slaves [ 833.213140][T11924] bond6 (unregistering): Released all slaves [ 833.230793][T11924] bond7 (unregistering): Released all slaves [ 833.247994][T11924] bond0 (unregistering): Released all slaves [ 833.269113][T11924] bond8 (unregistering): Released all slaves [ 833.292699][T11924] bond9 (unregistering): Released all slaves [ 833.315578][T11924] bond10 (unregistering): Released all slaves [ 833.382189][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 833.651057][T30056] openvswitch: netlink: VLAN attribute unexpected. [ 833.663697][T11924] : left promiscuous mode [ 833.942420][T30065] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 834.100030][T11924] tipc: Disabling bearer [ 834.119675][T11924] tipc: Left network mode [ 834.591872][T30095] netlink: 'syz.3.6356': attribute type 12 has an invalid length. [ 834.613199][ T5631] Bluetooth: hci4: command tx timeout [ 834.634679][T30095] netlink: 'syz.3.6356': attribute type 29 has an invalid length. [ 834.675772][T30095] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6356'. [ 834.690868][T30108] netlink: 'syz.5.6359': attribute type 1 has an invalid length. [ 834.715546][T30095] netlink: 'syz.3.6356': attribute type 1 has an invalid length. [ 834.732687][T30095] netlink: 'syz.3.6356': attribute type 2 has an invalid length. [ 834.740789][T30095] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6356'. [ 834.828181][T30113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6361'. [ 834.900832][T29901] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.935948][T29901] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.955217][T29901] bridge_slave_0: entered allmulticast mode [ 834.978691][T29901] bridge_slave_0: entered promiscuous mode [ 835.003190][T29901] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.013042][T29901] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.020582][T29901] bridge_slave_1: entered allmulticast mode [ 835.041789][T29901] bridge_slave_1: entered promiscuous mode [ 835.122103][T30129] netlink: 'syz.5.6364': attribute type 1 has an invalid length. [ 835.246860][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 835.295408][T30123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6363'. [ 835.320167][T30123] lo: Caught tx_queue_len zero misconfig [ 835.497571][T29901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.514236][T30143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6366'. [ 835.545071][T30137] syzkaller0: entered promiscuous mode [ 835.562648][T30137] syzkaller0: entered allmulticast mode [ 835.576702][T30143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6366'. [ 835.638186][T29901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.714978][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 835.820102][T29901] team0: Port device team_slave_0 added [ 835.908923][T29901] team0: Port device team_slave_1 added [ 836.008077][T29901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.038312][T29901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.134393][T29901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.178358][T29901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.195637][T29901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.241119][T30167] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6371'. [ 836.269730][T29901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.341135][T30164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6372'. [ 836.407083][T30171] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6373'. [ 836.429677][T30171] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6373'. [ 836.687207][ T5631] Bluetooth: hci4: command tx timeout [ 836.709259][T30176] netlink: 'syz.5.6374': attribute type 12 has an invalid length. [ 836.746521][T30176] netlink: 'syz.5.6374': attribute type 29 has an invalid length. [ 836.781745][T30185] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6374'. [ 836.813341][T30176] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6374'. [ 836.835370][T30176] netlink: 59 bytes leftover after parsing attributes in process `syz.5.6374'. [ 836.892871][T11924] hsr_slave_0: left promiscuous mode [ 836.902773][T11924] hsr_slave_1: left promiscuous mode [ 836.940888][T11924] veth1_macvtap: left promiscuous mode [ 837.693249][T30223] netlink: 'syz.5.6382': attribute type 7 has an invalid length. [ 837.854064][T30225] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6382'. [ 837.888151][T29901] hsr_slave_0: entered promiscuous mode [ 837.895105][T29901] hsr_slave_1: entered promiscuous mode [ 837.902569][T29901] debugfs: 'hsr0' already exists in 'hsr' [ 837.908504][T29901] Cannot create hsr debugfs directory [ 837.914146][T30188] wg1: left promiscuous mode [ 837.981270][T30222] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 838.014092][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 838.277947][T30240] openvswitch: netlink: Port 1699262737 exceeds max allowable 65535 [ 838.508643][T11924] IPVS: stop unused estimator thread 0... [ 839.125571][T30265] bond0: Caught tx_queue_len zero misconfig [ 839.482855][T30294] veth1_virt_wifi: entered promiscuous mode [ 839.737561][T30301] syzkaller0: entered promiscuous mode [ 839.755078][T30301] syzkaller0: entered allmulticast mode [ 840.532783][T30346] netlink: 'syz.3.6411': attribute type 62 has an invalid length. [ 840.594775][T30349] __nla_validate_parse: 10 callbacks suppressed [ 840.594796][T30349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6412'. [ 840.624955][T30350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6412'. [ 840.725129][T30346] netlink: 'syz.3.6411': attribute type 62 has an invalid length. [ 840.809336][T30346] netlink: 'syz.3.6411': attribute type 62 has an invalid length. [ 840.836947][T30346] netlink: 'syz.3.6411': attribute type 62 has an invalid length. [ 840.915339][T30360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6415'. [ 840.973831][T30363] netlink: 'syz.1.6415': attribute type 1 has an invalid length. [ 841.020105][T30346] netlink: 'syz.3.6411': attribute type 62 has an invalid length. [ 841.043660][T30346] netlink: 'syz.3.6411': attribute type 62 has an invalid length. [ 841.172130][T30346] netlink: 'syz.3.6411': attribute type 62 has an invalid length. [ 841.182478][T29901] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 841.239480][T29901] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 841.472619][T29901] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 841.573162][T29901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 841.601091][T30378] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6419'. [ 841.770393][T30385] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6420'. [ 841.791677][T29901] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 841.824773][T29901] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 841.845839][T29901] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 841.883285][T29901] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 842.389875][T29901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.465756][T29901] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.503435][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.510764][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.555320][ T470] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.562746][ T470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.055211][T30446] netlink: 'syz.1.6433': attribute type 20 has an invalid length. [ 843.085969][T30446] IPv6: NLM_F_CREATE should be specified when creating new route [ 843.273711][T30456] x_tables: duplicate underflow at hook 1 [ 843.315551][T30458] netlink: 'syz.1.6436': attribute type 10 has an invalid length. [ 843.344504][T30460] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6435'. [ 843.460843][T30458] dummy0: left promiscuous mode [ 843.544337][T30458] dummy0: entered promiscuous mode [ 843.565801][T30458] bond0: (slave dummy0): Enslaving as an active interface with a down link [ 843.711865][T30473] s5ÿÿø: renamed from vlan1 (while UP) [ 844.182378][T30497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6442'. [ 844.384463][T30502] netem: unknown loss type 8 [ 844.389371][T30502] netem: change failed [ 844.413386][T30501] xt_TCPMSS: Only works on TCP SYN packets [ 844.502096][T30514] openvswitch: netlink: Invalid VLAN frame [ 844.628569][T29901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 844.880880][T29901] veth0_vlan: entered promiscuous mode [ 844.930327][T29901] veth1_vlan: entered promiscuous mode [ 844.943413][T30531] xt_hashlimit: size too large, truncated to 1048576 [ 844.991485][T30535] sch_fq: defrate 0 ignored. [ 845.075157][T29901] veth0_macvtap: entered promiscuous mode [ 845.125626][T29901] veth1_macvtap: entered promiscuous mode [ 845.218809][T29901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 845.259700][T29901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 845.319627][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.359614][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.438694][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.479665][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.805122][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 845.846825][T30564] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6458'. [ 845.855992][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 845.978711][T30565] sch_tbf: burst 12 is lower than device bridge8 mtu (1514) ! [ 846.021573][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.050618][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.195436][T30578] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.6462'. [ 847.048004][T30615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6467'. [ 847.303896][T30627] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6469'. [ 847.330739][T30625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6470'. [ 847.372491][T30628] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6469'. [ 847.620142][T30639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 847.640921][T30639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 847.652568][T30639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 847.664421][T30632] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6469'. [ 847.682448][T30639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 847.697078][T30639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 848.059866][T30644] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 848.424282][T30667] netlink: 'syz.0.6478': attribute type 4 has an invalid length. [ 848.447994][T30671] tipc: Started in network mode [ 848.480944][T30671] tipc: Node identity 0001000070000000002e00000000407f, cluster identity 4711 [ 848.522110][T30670] mac80211_hwsim hwsim74 wlan1: Caught tx_queue_len zero misconfig [ 848.751271][T30685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6481'. [ 848.770127][ T470] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 848.820139][T30685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6481'. [ 848.853917][T30685] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6481'. [ 848.879045][T30685] veth1_to_bridge: entered allmulticast mode [ 849.249063][ T470] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 849.366927][T30710] lo speed is unknown, defaulting to 1000 [ 849.526989][ T470] bond0: (slave netdevsim1): Releasing backup interface [ 849.620424][ T470] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 849.788881][T30725] netlink: 'syz.0.6487': attribute type 10 has an invalid length. [ 849.808375][ T5631] Bluetooth: hci0: command tx timeout [ 849.842616][ T470] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 849.909903][T30725] syz_tun: entered promiscuous mode [ 849.924932][T30725] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 849.961205][T30637] lo speed is unknown, defaulting to 1000 [ 850.002557][T30733] bond0: entered promiscuous mode [ 850.008870][T30733] bond_slave_0: entered promiscuous mode [ 850.014917][T30733] bond_slave_1: entered promiscuous mode [ 850.600008][ T470] pimreg: left allmulticast mode [ 850.806835][T30769] x_tables: duplicate underflow at hook 1 [ 850.924128][T30773] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 851.059083][ T470] bond9 (unregistering): (slave gretap1): Releasing active interface [ 851.138705][ T470] bond6 (unregistering): (slave geneve2): Releasing active interface [ 851.156768][ T470] geneve2 (unregistering): left allmulticast mode [ 851.503493][T30797] xt_TPROXY: Can be used only with -p tcp or -p udp [ 851.524501][ T470] bond5 (unregistering): (slave bridge2): Releasing backup interface [ 851.538809][T30797] x_tables: duplicate underflow at hook 2 [ 851.604214][T30799] __nla_validate_parse: 7 callbacks suppressed [ 851.604232][T30799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6505'. [ 851.606844][T30800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6505'. [ 851.611427][T30799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6505'. [ 851.640895][T30800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6505'. [ 851.796686][ T470] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 851.806073][ T470] dummy0: left promiscuous mode [ 851.818889][ T470] bond0 (unregistering): Released all slaves [ 851.834352][ T470] bond1 (unregistering): Released all slaves [ 851.851362][ T470] bond2 (unregistering): Released all slaves [ 851.882980][ T470] bond3 (unregistering): Released all slaves [ 851.889122][ T5631] Bluetooth: hci0: command tx timeout [ 851.907042][ T470] bond4 (unregistering): Released all slaves [ 851.923526][ T470] bond5 (unregistering): Released all slaves [ 851.952604][ T470] bond6 (unregistering): Released all slaves [ 851.972806][ T470] bond7 (unregistering): Released all slaves [ 851.991052][ T470] bond8 (unregistering): Released all slaves [ 852.011409][ T470] bond9 (unregistering): Released all slaves [ 852.033882][ T470] bond10 (unregistering): (slave vcan0): Releasing backup interface [ 852.042100][ T470] vcan0: left promiscuous mode [ 852.049383][ T470] bond10 (unregistering): Released all slaves [ 852.065847][ T470] bond11 (unregistering): Released all slaves [ 852.085740][ T470] bond12 (unregistering): Released all slaves [ 852.109026][ T470] bond13 (unregistering): Released all slaves [ 852.124775][T30637] hsr0 speed is unknown, defaulting to 1000 [ 852.181240][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 852.400452][T30806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6507'. [ 852.561415][T30806] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 852.593093][T30816] netlink: 'syz.5.6509': attribute type 1 has an invalid length. [ 852.629469][T30806] bridge3: entered promiscuous mode [ 852.634874][T30816] netlink: 'syz.5.6509': attribute type 1 has an invalid length. [ 852.760097][ T470] tipc: Left network mode [ 852.766963][T30818] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6511'. [ 853.976412][ T5631] Bluetooth: hci0: command tx timeout [ 854.140591][T30637] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.148615][T30637] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.157389][T30637] bridge_slave_0: entered allmulticast mode [ 854.165728][T30637] bridge_slave_0: entered promiscuous mode [ 854.177432][T30637] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.185058][T30637] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.200146][T30637] bridge_slave_1: entered allmulticast mode [ 854.227754][T30637] bridge_slave_1: entered promiscuous mode [ 854.458596][T30637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 854.560225][T30637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 854.730087][T30902] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6525'. [ 854.943005][T30637] team0: Port device team_slave_0 added [ 854.967754][T30909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6527'. [ 855.001235][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 855.057673][T30637] team0: Port device team_slave_1 added [ 855.244858][T30922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6531'. [ 855.340601][T30921] netem: change failed [ 855.500521][T30940] netlink: 207924 bytes leftover after parsing attributes in process `syz.0.6531'. [ 855.537251][T30637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 855.568267][T30637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 855.613370][T30637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 855.625913][T30921] veth0_to_bridge: entered promiscuous mode [ 855.733241][T30920] veth0_to_bridge: left promiscuous mode [ 855.882467][T30949] netlink: 'syz.0.6537': attribute type 1 has an invalid length. [ 856.023465][ T470] team0 (unregistering): Port device macvlan1 removed [ 856.048787][ T5631] Bluetooth: hci0: command tx timeout [ 856.385635][ T470] smc: removing net device team0 with user defined pnetid SYZ2 [ 856.432044][T30637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.439471][T30637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.471003][T30637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.487782][T30949] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 856.533433][T30964] bridge1: entered promiscuous mode [ 856.555694][T30964] bridge1: entered allmulticast mode [ 856.749896][T30976] netlink: 'syz.0.6543': attribute type 21 has an invalid length. [ 856.799706][T30637] hsr_slave_0: entered promiscuous mode [ 856.802592][T30975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6543'. [ 856.842142][T30637] hsr_slave_1: entered promiscuous mode [ 856.869297][T30637] debugfs: 'hsr0' already exists in 'hsr' [ 856.887311][T30637] Cannot create hsr debugfs directory [ 856.905017][T30976] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6543'. [ 857.412355][ T470] IPVS: stop unused estimator thread 0... [ 857.510946][T31009] Bluetooth: MGMT ver 1.23 [ 857.538304][T31006] Bluetooth: MGMT ver 1.23 [ 857.634393][T31002] syzkaller0: entered promiscuous mode [ 857.644866][T31017] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6552'. [ 857.653941][T31018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6550'. [ 857.671677][T31002] syzkaller0: entered allmulticast mode [ 857.779062][T31018] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6550'. [ 858.098417][T31033] netlink: 'syz.2.6554': attribute type 11 has an invalid length. [ 858.111698][T31033] netlink: 'syz.2.6554': attribute type 11 has an invalid length. [ 858.120135][T31033] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6554'. [ 858.130156][T31033] netlink: 'syz.2.6554': attribute type 11 has an invalid length. [ 858.140909][T31033] netlink: 'syz.2.6554': attribute type 11 has an invalid length. [ 858.162393][T31033] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6554'. [ 858.174045][T31033] netlink: 'syz.2.6554': attribute type 11 has an invalid length. [ 858.182709][T31033] netlink: 'syz.2.6554': attribute type 11 has an invalid length. [ 858.201884][T31033] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6554'. [ 858.212468][T31033] netlink: 'syz.2.6554': attribute type 11 has an invalid length. [ 858.220820][T31033] netlink: 'syz.2.6554': attribute type 11 has an invalid length. [ 858.229173][T31033] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6554'. [ 858.239026][T31033] netlink: 'syz.2.6554': attribute type 11 has an invalid length. [ 858.248460][T31033] netlink: 'syz.2.6554': attribute type 11 has an invalid length. [ 858.257715][T31033] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6554'. [ 858.394605][T31036] xt_hashlimit: max too large, truncated to 1048576 [ 859.568702][ T5631] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 859.578501][T20817] Bluetooth: hci2: command 0x0405 tx timeout [ 859.647317][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 859.657379][T30639] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 862.622999][ T5852] dummy0: entered promiscuous mode [ 862.635905][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 862.863287][T31065] Cannot find add_set index 0 as target [ 862.965129][T31069] netlink: 'syz.2.6565': attribute type 2 has an invalid length. [ 863.201291][T31086] __nla_validate_parse: 29 callbacks suppressed [ 863.201323][T31086] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.6567'. [ 863.604540][T31101] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6570'. [ 863.980914][T31118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6573'. [ 864.383460][T31132] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6579'. [ 864.557475][T31140] IPVS: Error connecting to the multicast addr [ 864.687820][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 865.054628][T31160] xt_HMARK: proto mask must be zero with L3 mode [ 865.063778][T31176] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6585'. [ 865.076721][T30637] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 865.111809][T30637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 865.132865][T30637] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 865.191546][T30637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 865.210472][T31176] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6585'. [ 865.223989][T30637] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 865.271612][T30637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 865.316712][T30637] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 865.364106][T30637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 865.714511][T30637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.761908][T31210] netlink: 830 bytes leftover after parsing attributes in process `syz.5.6592'. [ 865.811560][T30637] 8021q: adding VLAN 0 to HW filter on device team0 [ 865.942195][T30373] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.951648][T30373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 865.999266][T12350] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.006664][T12350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 866.250814][T31221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6594'. [ 866.291052][T31221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6594'. [ 866.316457][T31227] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6596'. [ 866.798585][T31248] netlink: 'syz.5.6600': attribute type 3 has an invalid length. [ 866.951292][T31257] x_tables: unsorted entry at hook 3 [ 866.986945][T31259] netlink: 'syz.2.6604': attribute type 1 has an invalid length. [ 867.189312][T31259] 8021q: adding VLAN 0 to HW filter on device bond1 [ 867.223327][T31267] bond1: (slave gretap1): making interface the new active one [ 867.258426][T31267] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 868.092493][T30637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.276557][T30637] veth0_vlan: entered promiscuous mode [ 868.344797][T30637] veth1_vlan: entered promiscuous mode [ 868.532457][T30637] veth0_macvtap: entered promiscuous mode [ 868.615512][T30637] veth1_macvtap: entered promiscuous mode [ 868.725634][T30637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 868.804423][T31342] __nla_validate_parse: 3 callbacks suppressed [ 868.804444][T31342] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6624'. [ 868.834349][T30637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 868.889777][ T5928] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.928812][ T5928] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.042192][T31349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6625'. [ 869.061013][ T5928] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.085991][ T5928] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.521238][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.552280][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.740545][T31376] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6629'. [ 869.762362][T30374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.793122][T30374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.802383][T31377] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6629'. [ 869.954135][T31376] bond6: entered promiscuous mode [ 869.959759][T31376] bond6: entered allmulticast mode [ 870.209533][T31391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6631'. [ 870.236408][T31391] netlink: 'syz.5.6631': attribute type 3 has an invalid length. [ 870.635357][T31413] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6636'. [ 870.932171][T31440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6643'. [ 870.998851][T31440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6643'. [ 913.489799][T30639] Bluetooth: hci2: command 0x0405 tx timeout [ 916.539362][ T48] gretap0: left allmulticast mode [ 916.546892][ T48] bridge0: port 3(gretap0) entered disabled state [ 916.558207][ T48] bridge_slave_1: left allmulticast mode [ 916.564182][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.584763][ T48] dvmrp0: left allmulticast mode [ 916.590413][ T48] pimreg6: left allmulticast mode [ 917.053988][ T48] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 917.120453][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 917.130455][ T48] bond_slave_0: left allmulticast mode [ 917.143081][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 917.153446][ T48] bond_slave_1: left allmulticast mode [ 917.162028][ T48] bond0 (unregistering): Released all slaves [ 917.174992][ T48] bond1 (unregistering): Released all slaves [ 917.191246][ T48] bond2 (unregistering): Released all slaves [ 917.207190][ T48] bond3 (unregistering): Released all slaves [ 917.222931][ T48] bond4 (unregistering): Released all slaves [ 917.249276][ T48] bond5 (unregistering): Released all slaves [ 917.265778][ T48] bond6 (unregistering): Released all slaves [ 917.283395][ T48] bond7 (unregistering): Released all slaves [ 917.300145][ T48] bond8 (unregistering): Released all slaves [ 917.323591][ T48] bond9 (unregistering): Released all slaves [ 917.568376][ T48] tipc: Disabling bearer [ 917.574286][ T48] tipc: Left network mode [ 918.443977][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 918.472308][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 918.530028][ T48] pim6reg527 (unregistering): left allmulticast mode [ 918.685438][ T48] team0 (unregistering): Port device team_slave_1 removed [ 918.704487][ T48] team0 (unregistering): Port device team_slave_0 removed [ 919.045477][T31539] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6650'. [ 919.062949][T31539] vlan0: entered promiscuous mode [ 919.069226][T31545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6647'. [ 919.164456][T30374] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 919.183907][T30374] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 919.192279][ T5751] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 919.333268][ T48] IPVS: stop unused estimator thread 0... [ 919.349197][T31549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6652'. [ 919.424332][ T5631] block nbd3: Receive control failed (result -1) [ 919.570999][T13061] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 919.648717][T13061] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 920.338574][T31606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 920.415378][T31608] syzkaller1: entered promiscuous mode [ 920.436569][T31608] syzkaller1: entered allmulticast mode [ 920.561691][T31614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6669'. [ 920.576982][T31614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6669'. [ 920.732242][T31622] openvswitch: netlink: Key type 223 is out of range max 32 [ 920.783314][T31628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 920.835451][T31623] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6672'. [ 920.859904][T31630] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6674'. [ 920.901691][T31631] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6672'. [ 920.985774][T31639] netlink: 'syz.2.6677': attribute type 4 has an invalid length. [ 920.994174][T31639] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6677'. [ 921.004861][T31639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6677'. [ 921.168676][T31648] netlink: 'syz.2.6679': attribute type 39 has an invalid length. [ 921.274525][T31652] netlink: 'syz.1.6681': attribute type 10 has an invalid length. [ 921.298836][T31652] ipvlan0: entered allmulticast mode [ 921.307131][T31655] IPVS: sed: FWM 3 0x00000003 - no destination available [ 921.318545][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 921.318587][T31652] veth0_vlan: entered allmulticast mode [ 921.366672][T31652] team0: Device ipvlan0 failed to register rx_handler [ 921.877367][T31696] netlink: 'syz.3.6692': attribute type 1 has an invalid length. [ 921.893131][T31694] [ 921.895544][T31694] ====================================================== [ 921.902599][T31694] WARNING: possible circular locking dependency detected [ 921.909684][T31694] syzkaller #0 Not tainted [ 921.914137][T31694] ------------------------------------------------------ [ 921.921191][T31694] syz.1.6689/31694 is trying to acquire lock: [ 921.927292][T31694] ffffffff8ea854e0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 921.937282][T31694] [ 921.937282][T31694] but task is already holding lock: [ 921.944721][T31694] ffff888057c83860 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 921.953501][T31694] [ 921.953501][T31694] which lock already depends on the new lock. [ 921.953501][T31694] [ 921.963955][T31694] [ 921.963955][T31694] the existing dependency chain (in reverse order) is: [ 921.973011][T31694] [ 921.973011][T31694] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 921.980829][T31694] lock_sock_nested+0x41/0x100 [ 921.986176][T31694] inet_shutdown+0x6a/0x390 [ 921.991257][T31694] nbd_mark_nsock_dead+0x2e9/0x560 [ 921.996952][T31694] recv_work+0x1c2e/0x1d40 [ 922.002024][T31694] process_scheduled_works+0xb5d/0x1860 [ 922.008145][T31694] worker_thread+0xa53/0xfc0 [ 922.013320][T31694] kthread+0x388/0x470 [ 922.018044][T31694] ret_from_fork+0x514/0xb70 [ 922.023199][T31694] ret_from_fork_asm+0x1a/0x30 [ 922.028539][T31694] [ 922.028539][T31694] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 922.036245][T31694] __mutex_lock+0x1a3/0x1550 [ 922.041513][T31694] nbd_queue_rq+0x37b/0x1100 [ 922.046684][T31694] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 922.052825][T31694] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 922.059735][T31694] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 922.060959][T31696] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 922.066371][T31694] blk_mq_run_hw_queue+0x348/0x4f0 [ 922.066405][T31694] blk_mq_dispatch_list+0xd16/0xe10 [ 922.086072][T31694] blk_mq_flush_plug_list+0x48d/0x570 [ 922.092029][T31694] __blk_flush_plug+0x3ed/0x4d0 [ 922.097813][T31694] __submit_bio+0x28d/0x580 [ 922.102890][T31694] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 922.109105][T31694] block_read_full_folio+0x599/0x830 [ 922.114970][T31694] filemap_read_folio+0x137/0x3b0 [ 922.120566][T31694] do_read_cache_folio+0x358/0x590 [ 922.126235][T31694] read_part_sector+0xb6/0x2b0 [ 922.131557][T31694] adfspart_check_ICS+0xb1/0x960 [ 922.137044][T31694] bdev_disk_changed+0x817/0x1770 [ 922.142622][T31694] blkdev_get_whole+0x380/0x510 [ 922.148035][T31694] bdev_open+0x31e/0xd30 [ 922.152855][T31694] blkdev_open+0x470/0x610 [ 922.157838][T31694] do_dentry_open+0x785/0x14e0 [ 922.163176][T31694] vfs_open+0x3b/0x340 [ 922.167812][T31694] path_openat+0x2e08/0x3860 [ 922.172972][T31694] do_file_open+0x23e/0x4a0 [ 922.178028][T31694] do_sys_openat2+0x113/0x200 [ 922.183251][T31694] __x64_sys_openat+0x138/0x170 [ 922.188657][T31694] do_syscall_64+0x15f/0xf80 [ 922.193894][T31694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.200426][T31694] [ 922.200426][T31694] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 922.207668][T31694] __mutex_lock+0x1a3/0x1550 [ 922.212805][T31694] nbd_queue_rq+0xc6/0x1100 [ 922.217853][T31694] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 922.223948][T31694] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 922.230831][T31694] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 922.237461][T31694] blk_mq_run_hw_queue+0x348/0x4f0 [ 922.243125][T31694] blk_mq_dispatch_list+0xd16/0xe10 [ 922.248897][T31694] blk_mq_flush_plug_list+0x48d/0x570 [ 922.254925][T31694] __blk_flush_plug+0x3ed/0x4d0 [ 922.260342][T31694] __submit_bio+0x28d/0x580 [ 922.265506][T31694] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 922.271685][T31694] block_read_full_folio+0x599/0x830 [ 922.277521][T31694] filemap_read_folio+0x137/0x3b0 [ 922.283107][T31694] do_read_cache_folio+0x358/0x590 [ 922.288774][T31694] read_part_sector+0xb6/0x2b0 [ 922.294087][T31694] adfspart_check_ICS+0xb1/0x960 [ 922.299582][T31694] bdev_disk_changed+0x817/0x1770 [ 922.305159][T31694] blkdev_get_whole+0x380/0x510 [ 922.310565][T31694] bdev_open+0x31e/0xd30 [ 922.315360][T31694] blkdev_open+0x470/0x610 [ 922.320328][T31694] do_dentry_open+0x785/0x14e0 [ 922.325641][T31694] vfs_open+0x3b/0x340 [ 922.330256][T31694] path_openat+0x2e08/0x3860 [ 922.335403][T31694] do_file_open+0x23e/0x4a0 [ 922.340456][T31694] do_sys_openat2+0x113/0x200 [ 922.345688][T31694] __x64_sys_openat+0x138/0x170 [ 922.351081][T31694] do_syscall_64+0x15f/0xf80 [ 922.356230][T31694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.362827][T31694] [ 922.362827][T31694] -> #3 (set->srcu){.+.+}-{0:0}: [ 922.369990][T31694] __synchronize_srcu+0xca/0x300 [ 922.375559][T31694] elevator_switch+0x1e8/0x7a0 [ 922.380873][T31694] elevator_change+0x2cc/0x450 [ 922.386202][T31694] elevator_set_default+0x36c/0x430 [ 922.392037][T31694] blk_register_queue+0x3e9/0x4e0 [ 922.397616][T31694] __add_disk+0x677/0xd50 [ 922.402495][T31694] add_disk_fwnode+0xfb/0x480 [ 922.407714][T31694] nbd_dev_add+0x72c/0xb50 [ 922.412676][T31694] nbd_init+0x168/0x1f0 [ 922.417391][T31694] do_one_initcall+0x250/0x870 [ 922.422700][T31694] do_initcall_level+0x104/0x190 [ 922.428188][T31694] do_initcalls+0x59/0xa0 [ 922.433061][T31694] kernel_init_freeable+0x2a6/0x3e0 [ 922.438813][T31694] kernel_init+0x1d/0x1d0 [ 922.443696][T31694] ret_from_fork+0x514/0xb70 [ 922.448830][T31694] ret_from_fork_asm+0x1a/0x30 [ 922.454151][T31694] [ 922.454151][T31694] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 922.461997][T31694] __mutex_lock+0x1a3/0x1550 [ 922.467148][T31694] elevator_change+0x1b3/0x450 [ 922.472464][T31694] elevator_set_none+0xb5/0x140 [ 922.477921][T31694] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 922.484275][T31694] nbd_start_device+0x17f/0xb10 [ 922.489669][T31694] nbd_genl_connect+0x165b/0x1cf0 [ 922.495235][T31694] genl_family_rcv_msg_doit+0x22a/0x330 [ 922.501332][T31694] genl_rcv_msg+0x61c/0x7a0 [ 922.506414][T31694] netlink_rcv_skb+0x232/0x4b0 [ 922.511719][T31694] genl_rcv+0x28/0x40 [ 922.516262][T31694] netlink_unicast+0x75c/0x8e0 [ 922.521561][T31694] netlink_sendmsg+0x813/0xb40 [ 922.526866][T31694] ____sys_sendmsg+0x972/0x9f0 [ 922.532174][T31694] ___sys_sendmsg+0x2a5/0x360 [ 922.537415][T31694] __x64_sys_sendmsg+0x1bd/0x2a0 [ 922.542896][T31694] do_syscall_64+0x15f/0xf80 [ 922.548044][T31694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.554491][T31694] [ 922.554491][T31694] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 922.563195][T31694] blk_alloc_queue+0x546/0x680 [ 922.568512][T31694] __blk_mq_alloc_disk+0x197/0x390 [ 922.574179][T31694] nbd_dev_add+0x499/0xb50 [ 922.579141][T31694] nbd_init+0x168/0x1f0 [ 922.583839][T31694] do_one_initcall+0x250/0x870 [ 922.589147][T31694] do_initcall_level+0x104/0x190 [ 922.594633][T31694] do_initcalls+0x59/0xa0 [ 922.599519][T31694] kernel_init_freeable+0x2a6/0x3e0 [ 922.605272][T31694] kernel_init+0x1d/0x1d0 [ 922.610147][T31694] ret_from_fork+0x514/0xb70 [ 922.615283][T31694] ret_from_fork_asm+0x1a/0x30 [ 922.620596][T31694] [ 922.620596][T31694] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 922.627837][T31694] __lock_acquire+0x15a5/0x2cf0 [ 922.633231][T31694] lock_acquire+0x106/0x350 [ 922.638287][T31694] fs_reclaim_acquire+0x71/0x100 [ 922.643781][T31694] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 922.650139][T31694] __alloc_skb+0x27d/0x7d0 [ 922.655124][T31694] tcp_send_active_reset+0x8a/0x5a0 [ 922.661046][T31694] __tcp_close+0x4c5/0xfe0 [ 922.666020][T31694] tcp_close+0x28/0x110 [ 922.670739][T31694] inet_release+0x143/0x190 [ 922.675795][T31694] sock_close+0xc3/0x240 [ 922.680589][T31694] __fput+0x44f/0xa60 [ 922.685129][T31694] task_work_run+0x1d9/0x270 [ 922.690265][T31694] do_exit+0x70f/0x22c0 [ 922.694969][T31694] do_group_exit+0x21b/0x2d0 [ 922.700119][T31694] get_signal+0x1284/0x1330 [ 922.705353][T31694] arch_do_signal_or_restart+0xbc/0x830 [ 922.711491][T31694] exit_to_user_mode_loop+0x86/0x480 [ 922.717320][T31694] ret_from_fork+0x593/0xb70 [ 922.722460][T31694] ret_from_fork_asm+0x1a/0x30 [ 922.727774][T31694] [ 922.727774][T31694] other info that might help us debug this: [ 922.727774][T31694] [ 922.738624][T31694] Chain exists of: [ 922.738624][T31694] fs_reclaim --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 922.738624][T31694] [ 922.751341][T31694] Possible unsafe locking scenario: [ 922.751341][T31694] [ 922.758820][T31694] CPU0 CPU1 [ 922.764211][T31694] ---- ---- [ 922.769611][T31694] lock(sk_lock-AF_INET6); [ 922.774146][T31694] lock(&nsock->tx_lock); [ 922.781107][T31694] lock(sk_lock-AF_INET6); [ 922.788154][T31694] lock(fs_reclaim); [ 922.792155][T31694] [ 922.792155][T31694] *** DEADLOCK *** [ 922.792155][T31694] [ 922.800408][T31694] 2 locks held by syz.1.6689/31694: [ 922.805631][T31694] #0: ffff88805aa58e40 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 922.815872][T31694] #1: ffff888057c83860 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 922.825045][T31694] [ 922.825045][T31694] stack backtrace: [ 922.830957][T31694] CPU: 0 UID: 0 PID: 31694 Comm: syz.1.6689 Not tainted syzkaller #0 PREEMPT(full) [ 922.830985][T31694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 922.831000][T31694] Call Trace: [ 922.831009][T31694] [ 922.831018][T31694] dump_stack_lvl+0xe8/0x150 [ 922.831040][T31694] print_circular_bug+0x2e1/0x300 [ 922.831066][T31694] check_noncircular+0x12e/0x150 [ 922.831092][T31694] __lock_acquire+0x15a5/0x2cf0 [ 922.831113][T31694] ? get_signal+0x1284/0x1330 [ 922.831129][T31694] ? arch_do_signal_or_restart+0xbc/0x830 [ 922.831155][T31694] ? exit_to_user_mode_loop+0x86/0x480 [ 922.831181][T31694] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 922.831205][T31694] lock_acquire+0x106/0x350 [ 922.831222][T31694] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 922.831253][T31694] fs_reclaim_acquire+0x71/0x100 [ 922.831279][T31694] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 922.831301][T31694] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 922.831326][T31694] ? __alloc_skb+0x27d/0x7d0 [ 922.831345][T31694] ? __alloc_skb+0x186/0x7d0 [ 922.831370][T31694] __alloc_skb+0x27d/0x7d0 [ 922.831390][T31694] ? __pfx_skb_attempt_defer_free+0x10/0x10 [ 922.831414][T31694] tcp_send_active_reset+0x8a/0x5a0 [ 922.831440][T31694] ? __sk_mem_reduce_allocated+0x270/0x3f0 [ 922.831469][T31694] __tcp_close+0x4c5/0xfe0 [ 922.831492][T31694] tcp_close+0x28/0x110 [ 922.831510][T31694] inet_release+0x143/0x190 [ 922.831537][T31694] sock_close+0xc3/0x240 [ 922.831564][T31694] ? __pfx_sock_close+0x10/0x10 [ 922.831589][T31694] __fput+0x44f/0xa60 [ 922.831616][T31694] task_work_run+0x1d9/0x270 [ 922.831642][T31694] ? __pfx_task_work_run+0x10/0x10 [ 922.831666][T31694] ? do_raw_spin_unlock+0xf5/0x210 [ 922.831695][T31694] do_exit+0x70f/0x22c0 [ 922.831723][T31694] ? __pfx_do_exit+0x10/0x10 [ 922.831746][T31694] ? cgroup1_freezing+0x20/0x350 [ 922.831768][T31694] ? cgroup1_freezing+0x20/0x350 [ 922.831793][T31694] do_group_exit+0x21b/0x2d0 [ 922.831816][T31694] ? _raw_spin_unlock_irq+0x23/0x50 [ 922.831838][T31694] get_signal+0x1284/0x1330 [ 922.831863][T31694] arch_do_signal_or_restart+0xbc/0x830 [ 922.831890][T31694] ? __pfx_clockevents_program_event+0x10/0x10 [ 922.831913][T31694] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 922.831944][T31694] ? do_raw_spin_lock+0x12b/0x2f0 [ 922.831974][T31694] exit_to_user_mode_loop+0x86/0x480 [ 922.831991][T31694] ? rcu_is_watching+0x15/0xb0 [ 922.832013][T31694] ret_from_fork+0x593/0xb70 [ 922.832034][T31694] ? __pfx_ret_from_fork+0x10/0x10 [ 922.832052][T31694] ? __switch_to+0xc79/0x1410 [ 922.832079][T31694] ret_from_fork_asm+0x1a/0x30 [ 922.832108][T31694] [ 922.896902][T11924] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 923.118929][T31705] netlink: 'syz.0.6695': attribute type 12 has an invalid length. [ 923.146388][T11924] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 923.158809][T11924] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 923.189685][T11924] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 923.566378][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 928.847294][T30639] Bluetooth: hci6: command 0x0406 tx timeout